Apple rushes patches to 2015-17 iphones as mercenary spyware hunts them
They came for your iPhone 6S again. apple quietly slipped iOS 15.8.7 and iOS 16.7.15 onto the update servers last week, breathing another fortnight of life into devices that Silicon Valley etiquette says should already be in a recycling bin. The trigger: a fresh exploit chain, codenamed DarkSword, now peddled by at least four commercial-surveillance vendors and, according to Google’s Threat Intelligence Group, already active against targets in Saudi Arabia, Turkey, Malaysia and Ukraine.
‘Unsupported’ is now a death sentence
Every iPhone left behind by iOS 17 is a sitting duck. The Coruna exploit kit fingerprints the exact SoC, screen size and language pack, then auto-serves a Safari-based jailbreak that opens the entire file system to whoever paid for the campaign. apple’s patch notes are characteristically terse, but the byte-diffs show more than 40 kernel and WebKit rewrites—an emergency volume last seen during the 2021 Pegasus firefight.
Owners of the iPhone X, 8 and 8 Plus get 16.7.15; the iPhone 7, SE (2016) and 6S must make do with 15.8.7. iPad Air 2 and mini 4—tablets still common in south-east Asian schools—receive the same life-support dose. None of these machines will ever taste iOS 17; their CPUs lack the AMX co-processor instructions apple now leans on for on-device sandboxing.
Lockdown mode becomes the only parachute
If the update badge refuses to appear, apple’s new support document is blunt: toggle Lockdown Mode or buy a new phone. The setting neuters JIT compilers, wired accessories, configuration profiles and most message attachments—effectively turning your consumer slab into a burner. The company even removed the animated emoji from iMessage inside the mode; attackers had been stuffing malformed TIFFs into Live Stickers.
The subtext is brutal. Cupertino is no longer promising years of backward compatibility; it is offering triage. With EU pressure mounting to open iOS to third-party stores, every legacy device kept alive is another potential side-loading vector. The cost-benefit calculus has flipped: patching a five-year-old phone now costs more in regression testing than selling a new one.
Still rocking an iPhone 6 as a daily driver? The final security update for that model arrived in 2021. Every day you refuse to upgrade is a statistical gift to whoever buys zero-day access by the week. apple’s telemetry shows 8 % of active iPhones worldwide remain on iOS 15 or earlier. That is roughly 120 million handsets—an attack surface the size of Japan.
Apple will keep pushing micro-patches until the last carrier lab approves them, but the roadmap is clear: the only secure old iPhone is one in a museum. Until then, tap Settings → General → Software Update, or accept that someone else may soon own your camera roll for the price of a Istanbul hotel minibar bill.