iOS 18 gets a DarkSword patch
Apple issued a rare iOS 18 patch to fix the DarkSword exploit, tightening security as on‑device AI features expand across the platform. The targeted fix suggests active hardening alongside feature development. (x.com)
Apple released a new build of iOS/iPadOS 18.7.7 and widened its availability to more devices on April 1, 2026. (macrumors.com) The initial iOS 18.7.7 rollout on March 24 had been limited to the iPhone XS, XR and certain iPad models before Apple expanded coverage to additional iPhones. (malwarebytes.com) Google’s Threat Intelligence Group (GTIG) says the DarkSword chain uses six distinct vulnerabilities — including three zero‑days — and has been observed in campaigns since at least November 2025 targeting Saudi Arabia, Turkey, Malaysia and Ukraine. (cloud.google.com) Industry reporting estimates as many as 270 million devices remain on iOS 18, leaving a large population exposed, while GTIG notes the underlying flaws were patched in iOS 26.3 and earlier releases. (techrepublic.com) (cloud.google.com) Apple told WIRED it would enable iOS 18‑specific fixes to be pushed to devices with Automatic Updates turned on, and public reporting says users without auto‑update will be offered either the patched iOS 18 release or an upgrade to iOS 26. (wired.com) (thehackernews.com) Security firms flagged a public leak of the DarkSword toolkit on GitHub and a rise in phishing lures delivering the chain, with Proofpoint/PCMag documenting email campaigns and research groups noting the repository posting widened attacker access. (tomsguide.com) (pcmag.com) Apple quietly revised its March 24 security bulletin to broaden the iOS 18 fixes to additional device models, according to investigative coverage, and Forbes described the public advance notice and backporting step as an uncommon move for the company. (malwarebytes.com) (forbes.com)
