Apple confirms attacks on iPhones. No fixes available for most users!

Calendar 1/12/2026

Apple warns of new attacks on iPhones. Failing to update to iOS 26 means no security patches for millions of users and a real risk of spyware infection.

Apple has issued one of the most unequivocal security warnings of recent years. The latest attacks using commercial spyware are once again effectively bypassing the security of iPhones, and worse still – for a large portion of users, there is no longer any fix unless they choose to update their system.

Just before the holidays, Apple patched two critical security flaws that were being exploited in real attacks. However, data released a few weeks later shows that the majority of iPhones remain vulnerable as users have not upgraded to iOS 26. And Apple is no longer offering an alternative.

Update or Lack of Protection

According to data cited as early as December, even 50% of eligible iPhone users have not updated from iOS 18 to iOS 26. This trend is not only continuing but is starting to raise increasing concern within the industry.

  • Cult of Mac states outright that “iOS 26 has an adoption problem”

  • PhoneArena notes that “more users than ever are ignoring the latest iOS update”

  • 9to5Mac is even harsher: “iOS 26 has been available for nearly four months, and its adoption is clearly lagging behind previous versions”

According to StatCounter, less than 20% of iPhones are running iOS 26, although TelemetryDeck suggests a more optimistic 60%. Even in this best-case scenario, we are talking about hundreds of millions of devices without current security. For comparison: at the same time last year, over 60% of users were already using the latest version, iOS 18, and iOS 17 reached a similar result even faster.

Apple Changes the Rules Mid-Game

The problem was exacerbated by Apple's decision regarding support for older versions of the system. Many users assumed that – as before – critical security updates would also apply to iOS 18. However, this was not the case. The iOS 18.7.3 update was made available exclusively for iPhones that do not support iOS 26. For the others, the choice is simple: upgrade to the new system or lack protection.

“There is no workaround or user behaviour that realistically reduces this risk” – warns Darren Guccione, CEO of Keeper Security.

“Updating the system is the only effective line of defence. Once the fixes become public, the vulnerability window quickly widens.”

Why are users not updating?

This question comes up in nearly every analysis. TechRadar reminds us that one of the greatest advantages of iOS has always been rapid adoption, in contrast to the fragmented ecosystem of Android. However, this advantage seems to be fading this time. Increasingly, the new Liquid Glass interface is cited as a potential reason:

  • worse readability of the interface

  • small and hard-to-notice UI elements

  • chaos in menus and navigation bars

Examples? In Safari, the Bookmarks button has become hard to find, and on macOS, there is an excess of small icons without a clear function. However, not everyone is ready to declare failure. Viruss notes that resistance to change is typical of Apple users, and a single wave of data is not enough to dismiss the new design. Apple is certainly monitoring the situation and may respond.

Not a branding problem, but a security issue

Regardless of the reasons, the consequences are serious. Analytics Insight warns that delaying updates is exactly what cybercriminals are counting on. Attacks are aimed at users who postpone installing patches. Apple is attempting to counter this trend, among other things, through new Background Security Improvements mechanisms. However, their effectiveness depends solely on one factor – whether users actually update the system. Meanwhile, Reddit is full of threads like:

  • “I never update to iOS 26”

  • “Why is this update so hated?”

  • “Am I the only one happy with iOS 26.2?”

Experts have no doubts

James Maude from BeyondTrust leaves no illusions:

“Users must update their systems and install patches. These vulnerabilities will quickly become standard tools for various attacking groups.”

And that is the crux of the matter. It is not a question of aesthetics, marketing, or Apple's ambitions. It is a matter of real risk, which grows with each passing day of delay. Updating is no longer an option. It has become a necessity.