Reports of an exploit for the mobile version of Apple Mail that has been around for 8 years has come to the surface recently. The gist is that all you have to do is open an infected email, you don't have to interact with it. Apple is reportedly releasing an update to fix it soon, but it is recommended not to use mail for the time being.
https://arstechnica.com/information-...active-attack/