Apple has issued an urgent warning to iPhone users regarding a critical security flaw in Safari and WebKit that could expose millions of devices to malicious attacks. This flaw, which could potentially affect hundreds of millions of iPhones worldwide, allows malicious websites to execute harmful code on unpatched devices. Apple has moved swiftly to release a fix, but many users have yet to update their devices, leaving them vulnerable to data breaches.
What is the iPhone Security Flaw?
The issue, discovered in late 2025, involves two critical vulnerabilities in WebKit, the engine powering Safari and all iOS-based browsers. Attackers can exploit these flaws by tricking iPhones into visiting compromised websites, allowing them to take control of the device. Once compromised, attackers could steal passwords, access payment information, or manipulate other sensitive data.
Why Millions of iPhones Are Still Exposed
Despite Apple’s quick release of a security patch, data suggests that nearly 50% of eligible iPhone users have not updated their devices. This leaves around 800 million devices vulnerable to exploitation. Estimates from StatCounter indicate that only 20% of users have installed the update, and as security details become public, the risk grows quickly. Attackers are now aware of the exact vulnerability to exploit, making it imperative for users to act fast.
Which iPhone Models Are at Risk?
The following iPhone and iPad models are most at risk if not updated:
- iPhone 11 and later
- iPad Pro 12.9-inch (3rd generation) and later
- iPad Pro 11-inch (1st generation) and later
- iPad Air (3rd generation) and later
- iPad 8th generation and later
- iPad mini (5th generation) and later
If you own any of these devices and haven’t updated to iOS 26.2 or iPadOS 26.2, your device remains vulnerable to attacks.
How to Protect Your iPhone
The only effective defense against this security flaw is to install the latest software update. Apple no longer offers security-only updates for devices running older iOS versions, making the upgrade to iOS 26.2 or later essential. Follow these simple steps to update your device:
- Open the Settings app on your iPhone.
- Tap General.
- Select Software Update.
- Download and install iOS 26.2 or iPadOS 26.2 or later.
- Ensure your device is connected to Wi-Fi and has sufficient battery or is plugged in.
Why Updating Is Crucial
Security experts warn that there is no workaround or safe browsing behavior that can mitigate the risk associated with this flaw. The vulnerability resides deep within the browser engine, making it impossible to fix without updating the software. As the security threat grows, delaying updates could have severe consequences, especially for users who rely on their iPhones for sensitive tasks like banking and shopping.
Extra Layer of Protection with Antivirus Software
While keeping your device updated is essential, using strong antivirus software can provide an extra layer of protection. Antivirus tools can help detect malicious links, block risky websites, and alert you to suspicious activities before harm is done. This added protection is especially important as cyber threats evolve, providing you with greater visibility into your device’s security.
Apple’s warning about the iPhone security flaw highlights the importance of timely software updates. With millions of devices still vulnerable, it’s crucial that all iPhone and iPad users update to the latest version to secure their devices from potential data breaches. Don’t wait—protect your iPhone now by updating to iOS 26.2 and stay ahead of the threats.
