technology

Apple flashes ‘critical software’ on lock screens—old iphones now hacker bait

Your iPhone’s lock screen is screaming. A blood-red banner labeled Critical Software slides in, shoving aside calendar invites and coffee-shop loyalty cards. It is not marketing. It is Cupertino’s polite panic attack: every iPhone stuck on iOS 15 through 17.2.1 is now a soft target for exploit kits already trading on the grey market for six-figure bounties.

Why antivirus apps miss the point

Third-party scanners live inside the sandbox—they can’t peel back the OS kernel the way a weaponized WebKit chain can. When Coruna and DarkSword land via a poisoned link, they don’t ask for permission; they trampoline from Safari’s renderer straight into kernel memory, bypassing any icon you dutifully paid $4.99 for. The only wall left is the patch level.

Apple’s own documentation quietly moved iOS 17.3 to the minimum-safe tier last week. Translation: 17.2.1 and every point release before it are now engraved on attacker cheat sheets. The company’s telemetry shows one in four active devices still reporting sub-17.3 builds. That is roughly 400 million phones and iPads drifting without a lifeboat.

The phantom update problem

The phantom update problem

Phones brick in pockets. Users travel, roam, run out of battery. A deferred alert becomes a permanent gap. Meanwhile Apple keeps back-porting security fixes only to the newest minor branch—15.8.3 and 16.7.15 received their last kiss of code in March. If your iPhone 6s never jumped to 15.8.4, it never will. The update window has quietly slammed shut.

Lockdown Mode, introduced in iOS 16, still ships with half the WebKit JIT compiler lit up; it slows, not stops, a zero-click chain. Without a patch underneath, the mode is a screen door on a submarine.

How to check in ten seconds

How to check in ten seconds

Settings → General → Software Update. If the badge offers anything older than 17.3, tap Install Tonight and plug the phone in. No badge? Scroll to About; if the version string starts with 15 or 16, your silicon is retired from the security carousel. Apple will still sell you a battery, but not another patch.

The resale market already smells blood. Gazelle and Cashify dropped trade-in quotes 18 % this week for any iPhone unable to upgrade past 15.8.3. Hackers bid higher.

Update tonight, or tomorrow’s push notification might be a ransom note.