Apple is asking iPhone users to update their software after security researchers found new hacking campaigns that took advantage of older iOS versions to steal personal data like messages, photos, passwords, and browsing history.
This warning comes after new reports about a spyware toolkit called Darksword, which researchers say was used in attacks against Ukrainians and others through hacked websites.
Researchers say older iPhones remain exposed
NBC News reported that Apple is urging users to update their iPhones after new research found that older versions of the iPhone operating system have vulnerabilities that can be used in real attacks.
The report said these hacking campaigns affected devices running iOS 18.4 to 18.6.2, which were released between March and August 2025. Researchers from Lookout, iVerify, and Google said the spyware could target people who have not installed the latest software protections.
The possible number of affected devices is large.
Reuters reported that Darksword as spyware capable of penetrating hundreds of millions of Apple devices, making this campaign notable for both its complexity and its wide reach.
Apple says updates are the key protection
Apple has already released patches for these flaws and is now stressing that users should update to the latest software.
Apple said it reduced the threat by blocking harmful websites in Safari and emphasized how important it is to keep devices updated for protection.
NBC-owned local outlets also summarized Apple’s message as a push to get people to update their iPhones after research found problems in older software.
Tools could break into phones running older iOS versions and led Apple to urge users to update to newer software for better protection.
Spyware was built to steal personal and financial data
The campaign is especially serious because of the kind of information the malware can steal. Researchers found Darksword could take data from iPhones.
Researchers also said these attacks happened in more than one region. The spyware was used in campaigns in Ukraine, Saudi Arabia, Turkey, and Malaysia.
Some attacks were linked to systems previously tied to Russian hacking groups. This wide geographic spread makes Apple’s call to update even more urgent, since the toolkit has been used in several campaigns, not just once.
Threat highlights the cost of delayed updates
The latest warning underscores a familiar but often ignored cybersecurity problem: attackers frequently target devices that remain on older software even after fixes are available. In this case, the difference between being exposed and being protected may come down to whether users installed patches Apple had already released.
Apple’s latest software, including iOS 26, protects against the campaigns described by researchers, while older vulnerable versions remain a target.
For iPhone users, the message is clear. The threat is real, and the attack tools are being used right now. Researchers have described active campaigns using advanced spyware against real people, and Apple’s advice is simple: update your device now.
