• Apple warns of critical flaw threatening half of iPhones worldwide
• Latest iOS 26.2 update is the only effective protection

Apple has alerted iPhone users to a serious security vulnerability that could affect nearly half of all devices globally, putting hundreds of millions at potential risk.

The company explained that the flaw exists in the WebKit engine, which powers Safari and all iOS browsers. It has been exploited in sophisticated attacks targeting specific individuals, enabling hackers to execute malicious code, steal passwords, or access payment information simply by visiting unsafe websites.

Apple clarified that the latest iOS 26.2 and iPadOS 26.2 updates address the problem. However, many users have not installed the updates, leaving their devices vulnerable.

Estimates indicate that about 50% of eligible devices have yet to upgrade, while other reports suggest only 20% of users have actually updated.

Security experts emphasized that installing the latest updates is the only reliable protection, noting that no browser settings or safe browsing habits can neutralize the flaw.

They also recommended using robust antivirus software as an additional safeguard to monitor suspicious links and block harmful sites.

Apple stressed the urgency of updating immediately, especially for users who rely on their devices for banking, shopping, or work, warning that delaying the update carries a real risk.