Out-of-date iPhones, iPads and Macs are being attacked.

What's happening.

Pointer authentication is a built-in protection that makes it harder for attackers to take over an iPhone, iPad or Mac. This flaw lets an attacker who can already read and write memory get around it.

Apple fixed it in May 2024. CISA added it to its list of exploited vulnerabilities on 4 November 2026, so attackers are using it against devices that never got the update.

What it means for you.

On its own it is one step in a longer attack, not a way in by itself. A successful attack can take over the device, including work email and files on it. Devices that are years behind on updates are the likeliest targets.

How to fix it.

1. Update to the current iOS, iPadOS and macOS. That includes everything above the fixed versions in the table.
2. Turn on automatic updates on staff phones, tablets and Macs, or use device management to require them.
3. Replace devices that can no longer be updated. They are no longer protected against known attacks.
4. Check old devices that are only used occasionally, such as a spare tablet or a shared Mac.