⚡ Quick Summary
- Apple released iOS 16.7.15, iOS 15.8.7, iPadOS 16.7.15, and iPadOS 15.8.7 for older devices
- Updates cover devices as old as the iPhone 6s and first-generation iPad Pro from 2015
- The patches follow reports of government-grade exploit tools spreading to criminal threat actors
- Apple continues to demonstrate industry-leading long-term security support for legacy hardware
Apple Releases Critical Security Updates for iPhones and iPads Dating Back to 2015
Apple has rolled out a fresh round of security updates for older iPhones and iPads that are no longer supported by the latest versions of iOS and iPadOS. The updates — iOS 16.7.15, iOS 15.8.7, iPadOS 16.7.15, and iPadOS 15.8.7 — cover devices as old as the iPhone 6s and first-generation iPad Pro, demonstrating Apple's continued commitment to securing hardware that millions of people still use daily despite being years past their flagship software support window.
What Happened
On March 11, 2026, Apple released four security updates targeting devices running older operating system versions. iOS 16.7.15 and iPadOS 16.7.15 address devices stuck on iOS 16, while iOS 15.8.7 and iPadOS 15.8.7 cover even older hardware limited to iOS 15. The updates were first spotted by security researcher Aaron Perris and confirmed through Apple's standard release channels.
Apple's release notes are characteristically sparse, stating only that each update "provides important security fixes and is recommended for your iPhone." The company did not detail the specific vulnerabilities being patched, which is standard practice for security updates — full details typically appear in Apple's security advisories after users have had time to install the patches.
The affected devices include the iPhone X, iPhone 8 and 8 Plus, iPhone 7 and 7 Plus, iPhone SE (1st generation), iPhone 6s and 6s Plus, iPad 5th generation, iPad Pro 9.7-inch, iPad Pro 12.9-inch (1st generation), and iPad mini 4. Many of these devices were released between 2015 and 2017, making them 9-11 years old — an extraordinary support lifespan in the consumer electronics industry.
Background and Context
Apple's approach to long-term security support sets it apart from most technology companies. While the company limits new feature updates to relatively recent hardware, it continues to patch critical security vulnerabilities on devices far beyond their typical software support window. This practice reflects both a genuine security commitment and a practical reality: hundreds of millions of older Apple devices remain in active daily use worldwide.
The timing of these updates is particularly significant in light of a recent report from Google and mobile security firm iVerify that documented government-grade iPhone exploit kits targeting devices running iOS 13 through iOS 17.2.1. These exploit kits, previously limited to state-sponsored attackers, have begun proliferating to a wider range of threat actors. While Apple has not confirmed whether today's updates address the specific vulnerabilities identified in that report, the timing suggests a connection.
The security landscape for older devices has grown increasingly dangerous. As newer hardware receives more sophisticated protections — hardware security keys, advanced biometrics, secure enclaves — older devices become comparatively more vulnerable. Criminal organizations and state actors specifically target older iOS versions because they know many users delay updates or are unaware that patches are available. For users and businesses managing mixed device fleets alongside enterprise productivity software, keeping every device current is essential to maintaining organizational security.
Apple's sustained investment in legacy device security also has competitive implications. Android devices from most manufacturers typically receive 2-3 years of security updates, with Google's Pixel line extending to 7 years. Apple's willingness to patch devices approaching their 11th birthday reinforces the value proposition that Apple hardware retains its security and functionality far longer than competing platforms.
Why This Matters
The release of these updates highlights a frequently overlooked aspect of the technology security landscape: the long tail of older devices. While industry attention tends to focus on the latest hardware and operating systems, a massive installed base of older devices remains vulnerable to exploitation. Apple's decision to continue patching these devices acknowledges that security is not just a feature of new products — it's an ongoing obligation to every user who trusts the company with their personal data.
The proliferation of government-grade exploit tools to non-state actors makes this particularly urgent. Tools that were once exclusively available to intelligence agencies are now accessible to criminal organizations, corporate espionage operatives, and other threat actors. Older devices running unpatched software are the primary targets for these tools, as they offer the easiest path to compromise. Every unpatched iPhone 7 or iPad mini 4 is a potential entry point into its owner's personal and professional life.
For the broader technology industry, Apple's approach serves as a benchmark. The company's willingness to invest engineering resources in securing decade-old hardware challenges other manufacturers to extend their own support commitments. Samsung, Google, and other Android manufacturers have responded by gradually extending their security update timelines, but none yet match Apple's track record of supporting devices into their second decade of existence.
Industry Impact
The enterprise mobility management (EMM) market is directly affected by Apple's continued legacy support. Organizations that maintain fleets of older Apple devices — common in education, healthcare, and small business environments — benefit enormously from ongoing security patches. Without these updates, organizations would face the expensive choice between replacing functional hardware or accepting known security vulnerabilities.
The refurbished device market also benefits. Companies that sell refurbished iPhones and iPads can offer devices with greater confidence when they know Apple will continue to provide security patches. This supports the growing circular economy for electronics and reduces e-waste — a consideration that resonates with environmentally conscious consumers and regulators alike.
For mobile application developers, the continued support of iOS 15 and 16 means these platform versions remain viable targets for app deployment. Developers working on genuine Windows 11 key workstations alongside Apple development tools can continue supporting a broad range of iOS versions with the assurance that the underlying platform remains secure.
The cybersecurity community will be watching closely for the detailed vulnerability disclosures that typically follow Apple's security updates. If the patches address the exploit techniques documented by Google and iVerify, it would confirm that nation-state hacking tools have driven Apple to prioritize legacy device patches — a significant escalation in the ongoing arms race between platform security and offensive hacking capabilities.
Expert Perspective
Apple's continued investment in legacy device security reflects a sophisticated understanding of the real-world threat landscape. The company recognizes that the security of its ecosystem depends not just on the latest devices but on the entire installed base. A compromised iPhone 6s can be used to access the same iCloud account, the same corporate email, and the same messaging conversations as a brand-new iPhone 17 — making legacy device security a first-order concern for the entire ecosystem.
The minimalist release notes are also telling. By not disclosing specific vulnerabilities before users have patched, Apple reduces the window during which attackers can reverse-engineer the patches to develop exploits. This responsible disclosure approach balances transparency with practical security — users know they should update immediately, without providing a roadmap for attackers.
What This Means for Businesses
Organizations that issue or allow older Apple devices should ensure these updates are deployed promptly. MDM (Mobile Device Management) solutions can automate this process, but smaller businesses without MDM infrastructure should communicate the update availability directly to employees. The cost of a compromised device — in data exposure, compliance violations, and remediation effort — far exceeds the brief inconvenience of installing an update.
For businesses evaluating their broader technology strategy, including investments in affordable Microsoft Office licence suites and device management, Apple's long-term security support should be factored into total cost of ownership calculations. Devices that receive security updates for a decade deliver significantly more value than devices that become security liabilities after three years.
Key Takeaways
- Apple released iOS 16.7.15, iOS 15.8.7, iPadOS 16.7.15, and iPadOS 15.8.7 for older devices.
- Affected devices include models dating back to 2015, such as the iPhone 6s and first-generation iPad Pro.
- The updates follow reports of government-grade iPhone exploit tools spreading to non-state threat actors.
- Apple's legacy security support extends far beyond what most technology companies provide.
- Organizations with older Apple device fleets should deploy updates immediately via MDM or manual processes.
- Detailed vulnerability disclosures typically follow within weeks of Apple's security update releases.
Looking Ahead
As the threat landscape for mobile devices continues to evolve, Apple's commitment to legacy device security will remain a critical differentiator. The coming weeks will reveal the specific vulnerabilities addressed in these updates and whether they connect to the government-grade exploit kits recently documented by security researchers. For the hundreds of millions of users still relying on older iPhones and iPads, the message is clear: install the update today, and be grateful that Apple is still watching your back.
Frequently Asked Questions
Which devices are getting these Apple updates?
The updates cover iPhone X, iPhone 8/8 Plus, iPhone 7/7 Plus, iPhone SE (1st gen), iPhone 6s/6s Plus, iPad 5th generation, iPad Pro 9.7-inch, iPad Pro 12.9-inch (1st gen), and iPad mini 4.
What security issues do these updates fix?
Apple has not disclosed specific vulnerabilities, stating only that the updates provide important security fixes. Detailed disclosures typically follow within weeks. The timing suggests a possible connection to recently documented government-grade exploit tools.
Should I update my older iPhone or iPad?
Yes, immediately. Older devices running unpatched software are primary targets for exploit tools that were once exclusive to intelligence agencies but have recently spread to a wider range of attackers.