Android vs iPhone: Which Is More Secure? CVEs, Zero-Days, Exploit Prices and Patch Speed in Numbers (2026)

Android vs iPhone: which one is more secure? 501 vs 317 CVEs, $5-7M zero-click iPhone exploit, phishing 16% vs 8%, 0 attempts on the iPhone at Pwn2Own 2024-2026

Today’s post answers the question I hear more than any other: “Michał, iPhone or Android?”. Instead of opinions, I gathered numbers: 501 vs 317 CVEs, 15 zero-days used in attacks on phones in 2025, 70 vs 72 days to patch according to Project Zero, $7M for an iPhone exploit and $5M for Android, 16% vs 8% of devices hit by a phishing attempt. There’s also the fresh Pwn2Own, where the Pixel 10 fell three times while nobody touched the iPhone for the third year running, and the Polish banking trojans you install yourself. The verdict is less obvious than fans of either camp suggest – and at the end you’ll find 7 things worth doing whatever logo is on the back of your phone. 🔓 Continue reading →