If you are still holding onto an older iPhone and haven’t hit that “update” button in a while, your personal information might be hanging by a thread. Apple has issued a high-alert warning regarding a pair of dangerous digital attack tools known as Coruna and DarkSword. These aren’t just minor glitches; they are full-scale exploit kits designed to break into your phone through the web, and they are currently being used to hunt down users who are running outdated software.

The Invisible Trap on Your Browser

The way these attacks work is both simple and terrifying. You don’t have to download a suspicious file or shady app to get infected. Instead, hackers are using “watering hole” attacks. This means they infect normal, everyday websites that you might visit for news or shopping. When you land on one of these compromised pages using an old version of iOS, the website automatically triggers a hidden chain of events. Without you ever knowing, the exploit kit digs into your phone’s security flaws and starts pulling out your private data.

Apple has been very clear about the stakes here. In their latest security guidance, they explained that simply clicking a bad link or landing on the wrong site is enough to put everything on your device at risk. This includes your photos, your messages, and even your login credentials. While Apple has already patched these holes for their newest systems, millions of people using older hardware remain sitting ducks for these digital predators.

A High-Tech Weapon for Every Criminal

What makes this situation even more urgent is how these “spyware” tools are changing hands. In the past, high-end hacking tools like these were only used by governments to track specific people. Now, experts at the security firm iVerify are seeing a shift. These powerful exploits are being sold on the secondary market, which means they are now in the hands of all kinds of hackers, not just government agents.

Because these tools are now cheaper and easier to use, they are being deployed on a mass scale. We are moving away from targeted attacks and toward a world where anyone with an unpatched phone is a target. Spencer Parker from iVerify pointed out that these tools are incredibly easy to tweak and reuse, meaning that even as you read this, hackers are likely launching new, modified versions of these attacks to catch people off guard.

How to Lock Down Your Device Today

The good news is that you aren’t helpless, but you do need to act immediately. Apple’s main message is simple: Update your software. This is the single most effective wall you can build between your data and a hacker. If you are running iOS 15 through iOS 26, you are already protected against these specific kits. However, if your phone is older, you need to check for specific versions.

For those using older devices that can’t run the newest software, Apple has released special security patches. You should look for iOS 15.8.7 or iOS 16.7.15 depending on your model. If you are still on iOS 13 or 14, Apple says you must move to at least iOS 15 right away to get a “Critical Security Update” that is arriving in the next few days.

If for some reason your phone is so old it cannot be updated at all, your best bet is to turn on Lockdown Mode. This is a “nuclear option” for security that shuts down certain web features to make it much harder for hackers to get in. At the end of the day, the hackers are counting on your laziness. By taking five minutes to run an update, you can ensure your private life stays private.