Apple patches older devices because attackers do not care how old your iPhone is
Apple released security updates for older iPhone, iPad and macOS Sonoma devices after a WebKit flaw, CVE-2023-43010, was found to have been used in the Coruna exploit kit. The company backported the fix to legacy supported versions so users on older hardware would not be left exposed. The vulnerability could lead to memory corruption when processing malicious web content, making older devices vulnerable to compromise through booby-trapped websites. The move highlights that exploit kits do not only target the newest hardware; ageing devices still make attractive targets if they remain widely used and insufficiently patched.
There is a comforting myth that if a device is old enough, cybercriminals will simply lose interest and move on. Apple’s latest security updates suggest otherwise.
The company has issued patches for older iOS, iPadOS and macOS Sonoma versions after a WebKit vulnerability, tracked as CVE-2023-43010, was linked to the Coruna exploit kit. In plain English, older Apple devices were still very much in play, so Apple has backported the fix rather than leaving them to fend for themselves.
What the flaw does
The vulnerability sits in WebKit, the engine behind Safari and various other web-rendering functions. Apple said the flaw could result in memory corruption when processing maliciously crafted web content. That means visiting a hostile webpage could, under the right conditions, help an attacker compromise a device. Which is not the sort of surprise anyone wants from a casual browse.
Why the update matters
The important part here is not merely that the bug was fixed, but that the fix was pushed to older supported devices. Too many people assume older hardware is beneath the notice of exploit developers. It often is not. Older devices can linger in corporate fleets, family households and test environments long after the shiny replacements arrive, making them attractive targets if patching falls behind.
What users should do
If you have an older iPhone, iPad or Mac on a supported legacy release, install the updates promptly. Security updates are not decorative. They are the digital equivalent of locking the door after discovering someone has been trying the handle.