Apple has issued an urgent warning to all iPhone users, urging them to update to iOS 26 immediately to protect against sophisticated mercenary spyware attacks that can steal data without any user interaction. The tech giant revealed that the vast majority of users are running older software versions, leaving them vulnerable to zero-click exploits that target the WebKit engine used by Safari and other apps.
These attacks, described as 'global and ongoing,' have been used in highly targeted campaigns against journalists, activists, and politicians. Hackers exploit hidden flaws in older iOS versions to run malicious code simply by tricking the device into loading corrupted web content. Apple confirmed that these vulnerabilities have been actively exploited in real-world spyware operations.
Apple stated that the remedy is to download iOS 26 or iOS 26.2 and restart the iPhone immediately to clear any hidden malware. The company noted that it has stopped providing security updates for older versions like iOS 18, meaning users on those systems remain exposed. Less than 20% of iPhone users have updated to iOS 26, according to reports.
The spyware, once installed, gives hackers full remote control to steal messages, emails, photos, and even record calls and keystrokes. Apple warned that attackers are exceptionally well-funded and may trick victims with fake Apple alerts asking for their iOS version. The company emphasised that legitimate threat notifications never ask users to click links or provide passwords.
