Apple is sounding the alarm for users with older versions of iOS. The tech giant urges everyone to update their iPhones to protect against web-based attacks from powerful exploit kits like Coruna and DarkSword.
These exploit kits use harmful web content to target outdated iOS versions. If vulnerable users click on a malicious link or visit a compromised site, their sensitive data could be at risk.
“For those still on older iOS versions, it’s crucial to update,” Apple explained. They investigated these issues and quickly released software updates to fix vulnerabilities and disrupt these attacks.
If your iPhone is updated to the latest version, you’re safe. This includes iOS versions 15 through 26, which have addressed the security flaws used by these kits. Here’s what Apple recommends for others:
- Update to iOS 15.8.7 or iPadOS 15.8.7 if you can’t get the latest versions.
- For devices running iOS 13 or 14, update to iOS 15 to receive the latest protections.
- If an update isn’t an option, consider enabling Lockdown Mode to reduce threats from malicious content.
“Keeping your software updated is the best way to secure your Apple devices,” Apple added. Devices with the latest software are not vulnerable to these attacks.
This warning comes after reports of two iOS exploits being used by various groups to steal sensitive data. These exploits are delivered through watering hole attacks on compromised websites.
According to iVerify, this trend shows that iOS vulnerabilities, once mostly targeted for state-sponsored attacks, are now widely exploited by numerous threat actors. Spencer Parker from iVerify noted, “The simplicity of deploying these exploits, along with their quick adoption by many actors, indicates they are now available on the secondary market for less-skilled users.”
This shift means that widespread mobile attacks are now a significant concern for everyone. The evidence suggests that these exploits can be easily repurposed, making it likely that infected users remain vulnerable without timely updates.
Staying informed about mobile security is more important than ever. Regular updates not only protect your data but also keep your devices running smoothly in a landscape filled with constant digital threats.
