Virtual Event: Threat Detection & Incident Response Summit - Watch Now
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Mobile & Wireless

Apple Says iPhones Will Get Security Updates for at Least 5 Years

To comply with new UK government regulations, Apple has specified that iPhones will get at least 5 years of security updates.

iPhone security

In order to comply with new UK government regulations, Apple has revealed that its latest iPhones will receive security updates for at least five years.

The UK’s consumer connectable product security regime, which came into effect on April 29, 2024, includes the Product Security and Telecommunications Infrastructure (PSTI) Act, and the Security Requirements for Relevant Connectable Products. 

The security requirements businesses must comply with include setting unique passwords or allowing users to define their own passwords, providing information on how security issues can be reported, and specifying a minimum period for which security updates will be delivered for their products.

In response, Apple has shared a document which specifies that iPhones released after September 2023 (when the iPhone 15 came out), running iOS version 17 and later, will receive security updates for a minimum of five years.

Dave Kleidermacher, a Google VP of engineering for Android security and privacy, pointed out that Apple’s security update commitment period is shorter than the one of Google and Samsung, both of which have promised to deliver security updates for seven years for their flagship Android-based devices. 

“For years, iPhone was known as having a longer security support lifetime than Android. Yet Apple never actually committed to a minimum support lifetime at purchase. Thanks to the UK government’s PSTI regulation […], Apple has finally published a purchase-time commitment – 5 years – two years LESS than Android flagships from Google (Pixel) and Samsung,” Kleidermacher said.

Advertisement. Scroll to continue reading.

“Apple deserves a lot of credit for providing 5+ years of security updates for a long time. But now it’s time to acknowledge iOS is no longer offering the best security lifetimes in the smartphone industry. Android is,” he added.

Related: Apple Patch Day: Code Execution Flaws in iPhones, iPads, macOS

Related: Apple Testing New Stolen Device Protection Feature for iPhones

Related: Unwanted Tracking Alerts Rolling Out to iOS, Android

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Register

Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Register

People on the Move

Joe Chen has become Chief Technology Officer at Trellix.

Usercentrics has named Pawan Hegde as COO and Elena Ignatova as CPTO.

SecureAuth has named Mark van Oppen as Chief Revenue Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.