- Apple artificial move to encourage people to upgrade… if they could release security update for older iPhones they can release it for the rest of models…
- > CVE-2025-43529 allows threat actors a direct code execution capability, while CVE-2025-14174 provides the much needed sandbox escape and privilege escalation capabilities which makes it devastating
Good news for people wanting to run the code they want on their own devices?
- iOS 18 with glaring, actively-exploited security holes is still better than iOS 26.
- Guess some high up at Apple noticed iOS 26 adoption is low:
https://mjtsai.com/blog/2026/01/09/slow-ios-26-adoption/
by theogravity
2 subcomments
- If I'm on 18.7.1, do I still need to upgrade?
https://www.cvedetails.com/version/2021355/Apple-Iphone-Os-1...
seems to be the same as 18.7.2
https://www.cvedetails.com/version/2037518/Apple-Iphone-Os-1...
- Note the CVEs discussed were patches almost a month ago with iOS 18.7.3. If you used the beta workaround[1] to get that, you're safe and don't have to upgrade to iOS 26... for now.
[1] eg. https://news.ycombinator.com/item?id=46264741
- Odd, I have an iPhone 11 on 18.6.2 and the Software Update page offers me nothing, just says "iOS is up to date".
A few weeks ago it was offering me iOS 26, but not anymore.
by sillywalk
1 subcomments
- I don't know if it still works, but there was a way to get 18.7.3, for devices pushed to "upgrade" to Tahoe by enabling ios 18 beta releases.
- If you’re in the public beta program you’ll already have this update.
- Jokes on them, I ran android for years, I'm used to no security updates. iOS 18 forever!
by handsclean
0 subcomment
- I rejected iOS 26 for a while and boy did my opinion on whether Apple forces version changes do a 180. Everything people lambast Windows for was there. Nags with no “no” option, a red notification badge you can’t dismiss, scare dialogs, and disabling unrelated features. This latest slimy behavior is unfortunately quite consistent with how Apple treats disobedient iOS users.
On macOS they still seem to be stopped by firm enough non-consent, but they really try to force you first, and I get the impression they may do worse any year now.
- > Take this seriously. If your iPhone does not have Apple’s new update, you must install it now. We know attacks on iPhones have started. We have been warned the threat will extend well beyond those highly targeted initial attacks. And hundreds of millions of iPhone users are also now facing down an unwelcome surprise.
It's hard to take this seriously.
Hacker News