Apple warns millions of iPhones are exposed to attack

The Apple iPhone is the astir fashionable smartphone successful the United States and 1 of the astir wide utilized devices successful the world. An estimated 1.6 cardinal radical trust connected iPhones each day. That monolithic idiosyncratic basal besides makes the level a premier target. 

Over the past fewer weeks, Apple has been sending retired warnings astir a superior information flaw. New information suggests the hazard could impact astir fractional of each iPhone users.

That puts hundreds of millions of devices successful imaginable information close now.

Sign up for my FREE CyberGuy Report
Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox. Plus, you'll get instant entree to my Ultimate Scam Survival Guide – escaped erstwhile you articulation my CYBERGUY.COM newsletter.

WHATSAPP WEB MALWARE SPREADS BANKING TROJAN AUTOMATICALLY

Apple is informing iPhone users astir a superior Safari information flaw that could permission hundreds of millions of devices susceptible if updates are delayed. (Thomas Trutschel/Photothek via Getty Images)

What Apple discovered successful Safari and WebKit

Late past month, Apple confirmed 2 captious vulnerabilities successful WebKit. WebKit powers Safari and each browser that runs connected iOS. According to Apple, the flaws were utilized successful an highly blase onslaught that targeted circumstantial individuals. The occupation allowed malicious websites to instrumentality iPhones and iPads into moving harmful code. Once that happens, attackers could summation power of the device, bargain passwords oregon entree outgo information. In elemental terms, visiting the incorrect website could person been enough.

Why millions of iPhones are inactive exposed

Apple moved rapidly to merchandise a fix. The spot is included successful the latest bundle update. The occupation is that galore radical person not installed it yet. Estimates suggest that astir 50 percent of eligible users person not upgraded from iOS 18 to iOS 26. That would permission astir 800 cardinal devices susceptible worldwide. Data from StatCounter paints an adjacent worse picture. It estimates that lone 20 percent of users person updated truthful far. Once information details go public, the hazard grows fast. Attackers cognize precisely what to exploit.

iPhone and iPad models astatine the highest risk

Apple says the pursuing devices are affected if they are not updated:

• iPhone 11 and later
• iPad Pro 12.9-inch 3rd procreation and later
• iPad Pro 11-inch 1st procreation and later
• iPad Air 3rd procreation and later
• iPad 8th procreation and later
• iPad mini 5th procreation and later

If your instrumentality appears connected this database and you person not updated it, it is vulnerable.

INSTAGRAM PASSWORD RESET SURGE: PROTECT YOUR ACCOUNT

New information suggests astir fractional of each iPhone users worldwide whitethorn inactive beryllium exposed to a captious WebKit exploit Apple says was actively utilized successful attacks. (Jakub Porzycki/NurPhoto via Getty Images)

Why upgrading is the lone existent protection

There is nary mounting to flip and nary harmless browsing wont that fixes this issue. The vulnerability lives heavy wrong the browser engine. Security experts accidental determination is nary workaround oregon idiosyncratic behaviour that meaningfully reduces the risk. Installing the latest bundle is the lone effectual defense. Apple is nary longer offering a security-only update for users who privation to enactment connected iOS 18. Unless your instrumentality cannot tally iOS 26, the hole is lone disposable done iOS 26.2 and iPadOS 26.2.

Steps to update your iPhone oregon iPad now

Updating is speedy and usually painless. If automatic updates are enabled, the hole whitethorn already beryllium installed.

If not, travel these steps:

• Open the Settings app on iPhone
• Tap General
• Select Software Update
• Download and install iOS 26.2 oregon iPadOS 26.2 oregon later 

Make definite your instrumentality is connected to Wi-Fi and has capable artillery beingness oregon is plugged in.

Pro tip: Use beardown antivirus software

Keeping your iPhone updated is critical, but it should not beryllium your lone enactment of defense. Strong antivirus bundle adds different furniture of extortion by scanning malicious links, blocking risky websites and alerting you to suspicious enactment earlier harm is done.

This matters adjacent much erstwhile attacks trust connected compromised websites oregon hidden browser exploits. Security bundle tin assistance drawback threats that gaffe done and springiness you other visibility into what is happening connected your device.

Think of it arsenic backup protection. Software updates adjacent known holes, portion beardown antivirus tools assistance defender against the adjacent one.

Get my picks for the champion 2026 antivirus extortion winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

 FAKE ERROR POPUPS ARE SPREADING MALWARE FAST

Apple says malicious websites could exploit a Safari flaw to bargain passwords oregon outgo accusation from unpatched iPhones and iPads. (David Paul Morris/Bloomberg via Getty Images)

Kurt's cardinal takeaways

Apple seldom uses connection similar "extremely sophisticated" unless the menace is serious. This flaw shows however adjacent trusted browsers tin go onslaught paths erstwhile updates are delayed. Waiting weeks oregon months to update present carries existent consequences. If you usage your iPhone for banking, buying oregon work, this update should beryllium treated arsenic urgent.

How agelong bash you usually hold earlier installing large iPhone updates, and is that hold worthy the hazard anymore? Let america cognize by penning to america at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report
Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox. Plus, you’ll get instant entree to my Ultimate Scam Survival Guide – escaped erstwhile you articulation my CYBERGUY.COM newsletter.

Copyright 2026 CyberGuy.com.  All rights reserved.