Feds Warn iPhone And Android Users: Update Now—Attacks Confirmed - Forbes
December 16, 2025 at 7:45 AM
Feds warn iPhone and Android users: Update now—attacks confirmed
Federal cybersecurity authorities have confirmed real-world attacks targeting mobile devices and are urging all iPhone and Android users to install the latest updates immediately. Delaying patches leaves phones exposed to exploits that can enable spyware, account takeovers, data theft, and tracking.
Why this matters
- Active exploitation means known vulnerabilities are already being used against users.
- Mobile devices hold sensitive data: messages, photos, 2FA codes, banking apps, and work accounts.
- Prompt updates close the window attackers rely on to compromise devices.
What to do now (fast checklist)
- Update your OS:
- iPhone: Settings > General > Software Update
- Android: Settings > System > System update (paths vary by device/brand)
- Turn on automatic updates for both the operating system and apps.
- Install Google Play system updates (Android) and any additional security patches when prompted.
- Update critical apps (browsers, messaging, email, banking) via the official App Store/Play Store.
- Restart your device after updating to fully apply security fixes.
- Avoid sideloading apps and remove apps you don’t recognize or no longer use.
- Be extra cautious with links and attachments—phishing often drives these attacks.
For businesses and high-risk users
- Enforce mobile OS update policies via MDM and block outdated OS versions from sensitive resources.
- Monitor for signs of compromise and educate users about phishing and malicious apps.
- Use least-privilege access and require strong MFA for corporate apps.
Bottom line
Confirmed attacks are underway. The fastest and most effective protection is to update your iPhone or Android device now and keep automatic updates enabled. Stay current, stay protected.