
Yuliya Taba/Getty Images
Read More
Smartphones typically receive at least one major operating system update, such as the transition from iOS 18 to iOS 26 or Android 15 to Android 16. Alongside these upgrades, smaller updates, or patches, are regularly issued to fix bugs, enhance performance, and bolster security. The latter is especially crucial because it reduces the likelihood of vulnerabilities being exploited by cybercriminals. Once exploited, a phone can be compromised in various ways, including the installation of malware and the theft of personal information.
While exploits can exist even in supported phones, they are usually quickly addressed by manufacturers. However, once official updates cease, the risk of using that device increases significantly. Initially, a device is not immediately unsafe, but the likelihood of vulnerabilities being exploited grows day by day.
Android users have an advantage; even after their devices become outdated for standard support, they can install custom ROMs to maintain safer functionality, provided that these ROMs receive regular updates.
Hackers often target outdated operating systems. For example, in April 2024, Apple warned users to update to the latest version of iOS due to active exploit kits named Coruna and DarkSword, which specifically targeted devices running outdated versions from iOS 13 to iOS 16. Users on iOS 15 and 16 received updates, while those on iOS 13 and 14 were encouraged to upgrade. Those unable to transition would have remained at constant risk.
Similarly, the infamous Stagefright exploit, discovered in 2015, allowed hackers to hijack Android phones from versions 2.2 (Froyo) to 5.1.1 (Lollipop) via malicious MMS messages. This vulnerability enabled intruders to access users' cameras and microphones, and many Android phones still running these versions remain susceptible.
For iPhone users, once Apple stops providing security patches, upgrading is the only option, as there are no custom ROMs available for iOS. Conversely, Android users can utilize custom ROMs like LineageOS, a lightweight, open-source distribution compatible with many devices from brands such as Samsung and Motorola, which incorporates the latest security updates. Another option is GrapheneOS, which prioritizes privacy and supports only Google Pixel devices, offering an environment without pre-installed Google apps or services, thus better safeguarding user data.