Apple has released one of the most explicit security warnings in recent years. The latest attacks using commercial spyware are once again successfully bypassing iPhone security, and worse still – for a large number of users, there is no longer any fix available, unless they decide to upgrade their system.
Just before the holidays, Apple patched two critical security vulnerabilities exploited in real attacks. However, data published a few weeks later shows that most iPhones remain vulnerable, as users have not upgraded to iOS 26. And Apple is no longer offering an alternative.
Update or Lack of Protection
According to data cited as early as December, even 50% of eligible iPhone users have not updated from iOS 18 to iOS 26. This trend is not only continuing, but it is beginning to raise increasing concern in the industry.
Cult of Mac states outright that “iOS 26 has an adoption problem”
PhoneArena notes that “more users than ever are ignoring the latest iOS update”
9to5Mac is even sharper: “iOS 26 has been available for nearly four months, and its adoption is clearly lagging behind previous versions”
According to StatCounter, less than 20% of iPhones are running iOS 26, although TelemetryDeck suggests a more optimistic 60%. Even in this best-case scenario, we are talking about hundreds of millions of devices without up-to-date security. In comparison: at the same time last year, over 60% of users were already on the latest version, iOS 18, and iOS 17 reached a similar result even faster.
Apple changes the rules in the middle of the game
The problem has been exacerbated by Apple's decision regarding support for older versions of the system. Many users assumed that – as before – critical security patches would also be available for iOS 18. However, this did not happen. The update iOS 18.7.3 has been made available exclusively for iPhones that do not support iOS 26. For the others, the choice is simple: update to the new system or lack protection.
“There is no workaround or user behaviour that realistically reduces this risk” – warns Darren Guccione, CEO of Keeper Security.
“Updating the system is the only effective line of defence. Once patches become public, the vulnerability window quickly expands.”
Why Aren't Users Updating?
This question arises in almost every analysis. TechRadar points out that one of the biggest advantages of iOS has always been its rapid adoption, unlike the fragmented Android ecosystem. However, this advantage seems to be diminishing this time. An increasing number of reports suggest that the new Liquid Glass interface could be a potential reason:
worse readability of the interface
small and hard-to-notice UI elements
chaos in the menus and navigation bars
Examples? In Safari, the Bookmarks button has become difficult to find, and in macOS, there is an excess of small icons without clear functions. However, not everyone is ready to declare it a failure. Viruss notes that resistance to change is common among Apple users, and a single wave of data isn't enough to dismiss the new design. Apple is certainly monitoring the situation and may respond.
Not an Image Problem, but a Security One
Regardless of the reasons, the consequences are serious. Analytics Insight warns that delaying updates is exactly what cybercriminals are counting on. Attacks are targeted at users who postpone installing patches. Apple is trying to counter this phenomenon, among other things, through new Background Security Improvements mechanisms. However, their effectiveness depends solely on one factor – whether users actually update their systems. Meanwhile, Reddit is full of threads like:
“I never update to iOS 26”
“Why is this update so hated?”
“Am I the only one happy with iOS 26.2?”
Experts have no doubts
James Maude from BeyondTrust leaves no illusions:
“Users must update their systems and install patches. These vulnerabilities will quickly become a standard tool for various attacking groups.”
And that is the crux of the problem. It is not a question of aesthetics, marketing or Apple’s ambitions. It is a question of real risk, which grows with each day of delay. Updating is no longer an option. It has become a necessity.
