iOS 26.4 Security Push

Apple rolled 26.4 across iOS, iPadOS, macOS, watchOS and visionOS as a coordinated update that SecurityWeek says resolves “over 80” distinct vulnerabilities across those platforms. (securityweek.com) The exploit chain called DarkSword was publicly disclosed by Google’s Threat Intelligence Group alongside Lookout and iVerify on March 18, 2026 and is described as a full‑chain iOS toolkit that chains six vulnerabilities to achieve complete device compromise. (cloud.google.com) Researchers say DarkSword combines six flaws—including at least three zero‑days—and has been observed in active campaigns since November 2025 against targets in Saudi Arabia, Turkey, Malaysia and Ukraine. (cybersecsentinel.com) Apple patched pieces of the chain incrementally in earlier 26.x releases (iOS 26.1, 26.2 and 26.3) and closed remaining DarkSword vectors on the iOS 18 branch with updates such as iOS 18.7.3, according to iVerify and multiple security reports. (iverify.io) The U.S. Cybersecurity and Infrastructure Security Agency added related iOS flaws to its Known Exploited Vulnerabilities list and has ordered federal agencies to remediate the affected vulnerabilities on a short timetable (mandates and advisories published in late March 2026). (labs.cloudsecurityalliance.org) Apple’s Playlist Playground uses Apple Intelligence to generate short, ready‑to‑play playlists of roughly 20–25 tracks from brief text prompts and is currently flagged as a beta feature inside Apple Music’s Library UI. (applemagazine.com) Security researchers warned the DarkSword exploit kit was posted to GitHub after disclosure, increasing the risk to devices that remain on older iOS builds and underscoring why multiple vendors and government agencies pushed for immediate patching. (9to5mac.com)