Apple Backtracks: iOS 18 Users Get Urgent DarkSword Patch

Apple has issued an unprecedented security patch for iPhones operating on iOS 18, specifically addressing the dangerous DarkSword exploit. This action marks a significant departure from Apple's typical strategy, as patches are generally reserved for devices incapable of updating to the latest operating system, currently iOS 26.

The DarkSword exploit, identified by security firms on March 18, 2026, is a sophisticated type of spyware. It can infect iPhones by simply having a user visit a malicious or compromised website. Once active, it allows attackers to control the device, enabling them to spy on activities, steal personal files, capture text messages, and access cryptocurrency accounts without leaving a trace.

This exploit chain is particularly concerning due to its reliability and the recent leak of its source code, making it adaptable by various threat actors. Google and other intelligence vendors have noted that adaptations are already underway. DarkSword has been active since November 2025 and has been used by cybercriminal and state-backed groups, with initial targets including Saudi Arabia, Turkey, Malaysia, and Ukraine.

The widespread availability of the exploit's code on platforms like GitHub raises concerns for a broader user base. While initially targeting specific iOS and iPadOS versions, Apple's decision to backport the patch to iOS 18 is likely due to the exploit's accessibility and the significant portion of users, estimated between 50%-66%, who have not yet updated to iOS 26. Users are strongly advised to update their devices via Settings > General > Software Update to install iOS 18.7.7 and iPadOS 18.7.7.