Apple has started sending Lock Screen alerts to iPhones and iPads running older iOS and iPadOS versions, warning users about active web-based attacks targeting outdated software. These notifications appear as a “Critical Software” alert from the Settings app and clearly state that attackers are exploiting older iOS versions, including the one currently installed on the device, which means users need to act quickly to secure their data.
The alerts are showing up on devices running a wide range of older versions, including iOS 17.0, even though earlier reports focused on much older systems like iOS 13 and iOS 14. Apple says attackers are using exploit kits such as Coruna and DarkSword, which take advantage of known vulnerabilities across multiple iOS versions up to iOS 17.2.1. When users click a malicious link or visit a compromised website, attackers can steal sensitive data without any visible warning signs.
Don’t miss the best of The Mac Observer
Set us as a preferred source and our Apple reporting ranks higher in your Google Search results and Discover feed — one tap, no account changes.
Why Apple is warning users now
Apple has been patching these vulnerabilities over the past few months, and the company recently released iOS 15.8.7 and iOS 16.7.15 to address security issues linked to these exploit kits. Devices running updated versions from iOS 15 through iOS 26 already include these fixes, which means users on supported versions stay protected as long as they keep their devices updated.
At the same time, Apple has strengthened Safari protections through built-in Safe Browsing, which blocks known malicious domains by default and reduces the risk of accidental exposure to harmful links during regular browsing.
Users should open Settings, go to General, and tap Software Update to install the latest available version, since this remains the most effective way to protect personal data from ongoing attacks. Devices that cannot update to the latest version should enable Lockdown Mode if available, as it limits risky web features and reduces exposure to targeted attacks.
Apple’s message stays clear throughout these alerts, since keeping your iPhone updated directly protects your data from active threats that continue to evolve across older iOS versions.
Discussion