Apple Warns: Unpatched iPhones Vulnerable to Hackers

Apple has alerted iPhone users to the severe threat of 'mercenary spyware attacks' capable of stealing data without requiring any user action. These highly targeted campaigns exploit vulnerabilities in older iPhone software versions, particularly in the WebKit component used for web browsing. The company stressed that these 'zero-click' attacks do not depend on users opening suspicious emails or clicking malicious links.

The tech giant confirmed that these sophisticated attacks have been leveraged against journalists, activists, and politicians. Apple warned that these mercenary attacks are 'global and ongoing,' affecting the roughly one billion iPhone users who have not yet updated to iOS 26. This latest operating system, along with its update iOS 26.2, includes crucial security upgrades that address these vulnerabilities.

Apple has urged all users to download the iOS 26 or iOS 26.2 updates and restart their iPhones to clear any potential hidden malware. Leaving iPhones on older software means missing out on essential security fixes, as Apple has ceased providing updates for those versions on newer devices. The company noted that only about 16 percent of iPhone users had downloaded any version of iOS 26 as of January 2026.

These advanced cyber threats are described by Apple as 'exceptionally well-funded.' Hackers exploit zero-day vulnerabilities, which are flaws unknown to Apple until they are leveraged. The spyware can install itself silently, granting remote control to steal text messages, emails, photos, videos, record calls, keystrokes, passwords, and track location data in real-time. iPhones older than the iPhone 11 series are not compatible with iOS 26.