By Jason Snell
April 1, 2026 1:56 PM PT
Apple releases iOS 18 security updates for iOS 26 holdouts
Last December I complained that Apple was withholding iOS 18 security updates from iPhones capable of running iOS 26, leaving users who didn’t want to upgrade to Apple’s latest OS version yet in some security peril.
Well, I have good news and bad news. The good news: As of Wednesday April 1, Apple is pushing out iOS 18.7.7 to all devices running iOS 18. This update, released last month for devices that were not capable of running iOS 26, is now available even for compatible devices. If you’ve got auto-update turned on but have not gone through the steps to do a full upgrade to iOS 26, this update can be automatically pushed and applied. This is good news, as those who have opted not to run iOS 26 will get to take advantage of several sets of security releases.
Now the bad news: This is happening because of some really bad security breaches like DarkSword and Coruna. As Apple noted in a security update:
We enabled the availability of iOS 18.7.7 for more devices on April 1, 2026, so users with Automatic Updates turned on can automatically receive important security protections from web attacks called DarkSword. The fixes associated with the DarkSword exploit first shipped in 2025.
Now, to be clear, security patches on an older operating system are not as effective as they are on an entirely new system, since a new OS like iOS 26 has all sorts of structural changes made for security reasons. As a new Apple security note says, iOS 26 “contains the strongest security protections.” If you’re very concerned about your iPhone being secure, updating to iOS 26 is going to make it more secure than updating to 18.7.7.
But this does mean that Apple’s patches, which seek to break the chain of bugs that led to serious security exploits, are available to many more people.
Bottom line: If you’re an iOS 26 holdout, and you’re not ready to update your iPhone, at the very least you should update to 18.7.7 and protect yourself from some seriously ugly malicious software.
If you appreciate articles like this one, support us by becoming a Six Colors subscriber. Subscribers get access to an exclusive podcast, members-only stories, and a special community.