The latest security updates released by Apple have brought WhatsApp security back into the spotlight for iPhone owners using older iOS versions. With the iOS 27.2, iOS 26.7.2, and iOS 18.7.11 versions released by the company on October 26, 2026, fixes were made for more than 160 security vulnerabilities identified in different components of the operating system.
The updates included security patches for numerous system components, particularly the WebKit infrastructure that Safari uses to display web pages. Apple also reported that it is aware of reports that a vulnerability in some older iOS versions may have been used in advanced attacks targeting specific individuals.
Research that emerged during the same period pointed to a more complex risk targeting WhatsApp accounts on older iPhone models. According to an investigation by an Italy-based digital forensic company, devices running on older iOS versions can remain vulnerable to an advanced attack tool called “Coruna.”
In the cases examined, it was determined that attackers sent messages requesting money to people in the user's contact list through the compromised WhatsApp accounts. The fact that these messages did not appear on the account holder's phone stood out as a significant factor that made the fraud difficult to detect.
According to the research, Coruna can interfere with WhatsApp's device pairing mechanism, allowing attackers to link another device to the account. A more critical point is that this device can be hidden from the “Linked Devices” list in WhatsApp. Thus, when the user checks their account, they may not notice the unusual session.
In an investigation published by Google's Threat Analysis Group, it was stated that Coruna can exploit 23 different security vulnerabilities targeting versions between iOS 13.0 and iOS 17.2.1. In some scenarios, the user does not need to download any application; vulnerabilities on the device can be exploited through maliciously prepared websites.
WHAT SHOULD USERS DO?
The updates released by Apple cover different iPhone models. While iOS 27.2 and iOS 26.7.2 are offered for iPhone 11 and later models, iOS 18.7.11 includes security fixes for iPhone XS, XS Max, and XR models. It is recommended that users check whether their devices are up to date by following the Settings > General > Software Update steps.
For WhatsApp users, enabling two-step verification, keeping applications updated, and staying away from suspicious links are among the essential precautions. It is important for users who notice an unusual situation to inform their close circle and verify money requests through a different communication channel.
Users who suspect their account has been compromised can register their phone number and enter the six-digit code received via SMS to re-verify WhatsApp. However, if the device itself has been infected with malware, simply recovering the account may not be enough; the phone needs to be cleaned for security purposes and necessary checks must be performed.
News Source: 12punto
