Apple just rolled out a critical fix for older iPhones and iPads to stop a widespread security threat known as the Coruna exploit. If you are still using a device like the iPhone 6s, iPhone 7, or the first-generation iPhone SE, you need to update to iOS 15.8.7 or iOS 16.7.15 immediately. Apple released these updates to directly patch vulnerabilities that bad actors are currently trading on the black market.
The Coruna exploit is a serious threat. It originated from a highly sophisticated toolset likely developed by a state actor, but the code leaked and is now being modified by criminals to drain cryptocurrency accounts and compromise personal data. What this really means is that your older device is an easy target if it remains unpatched.
How the exploit targets your iPhone
Coruna primarily attacks weaknesses in Apple’s WebKit engine. That is the underlying technology powering Safari and practically every other web browser on your iPhone. The exploit is dangerously simple to trigger from the user’s perspective. Simply clicking a compromised link or opening a malicious email is enough to let attackers bypass your security and execute code with kernel privileges.
Apple originally patched these specific flaws for newer devices back in late 2023 and early 2024 with updates like iOS 17.2 and iOS 17.3. However, millions of people still rely on older hardware that cannot run iOS 17. This left a massive pool of users exposed to memory corruption issues and vulnerabilities.
Apple is patching the gaps on older devices
Apple is intentionally going backward to ensure devices dating as far back as 2015 are safe. The iOS 15.8.7 update tackles multiple vulnerabilities tied to the Coruna exploit, including a major kernel flaw and several WebKit bugs. Meanwhile, the iOS 16.7.15 update specifically fixes a WebKit vulnerability that was leaving devices like the iPhone 8 and iPhone X exposed.
iPad users are also covered, with iPadOS 15.8.7 and iPadOS 16.7.15 rolling out for models like the iPad Air 2 and the fourth-generation iPad mini.
While everyday users are not usually the primary targets of state-sponsored spyware, the fact that Coruna is circulating among common criminals changes the equation. Keeping your operating system current is the only practical way to block these attacks.\
If you have an older iPhone or iPad acting as a daily driver, go to your settings and download the update today.
