Malwarebytes
Why iPhone users should update and restart their devices now
According to Apple, attackers are already exploiting two WebKit zero‑day vulnerabilities in the wild, prompting a push for iPhone 11 and newer users to move to iOS 26+ where fixes and new memory protections reside. The flaws were patched on 12 December 2025 and are linked to mercenary spyware, with campaigns historically targeting diplomats, journalists or executives, making the upgrade a high‑priority security task for all users.
As of January 2026, only about 4.6% of active iPhones are on iOS 26.2 and roughly 16% are on any version of iOS 26, leaving many devices on older releases such as iOS 18. Upgrading requires a restart, which also flushes memory‑resident malware, making the update a win‑win for improving protection. The piece notes that iOS 26.2 introduces protections like Memory Integrity Enforcement and advises users to check Settings > General > Software Update and enable Automatic Updates. It also cites the NSA’s recommendation to restart devices regularly and encourages broader adoption to reduce exposure to newly found vulnerabilities.