Overview
- Apple has pushed a broader re-release of iOS 18.7.7 that now reaches devices still on iOS 18 as an automatic security update to block the DarkSword attack chain.
- The rollout covers iPhone XS, iPhone XS Max and iPhone XR, plus every model from 2019 onward including iPhone 11 and second- and third‑generation iPhone SE.
- DarkSword strings together flaws in Safari’s WebKit, the iOS loader and the kernel to seize control of a phone when a user visits a booby‑trapped site, enabling silent spyware installs and data theft.
- Google’s Threat Intelligence Group says commercial surveillance vendors and suspected state actors have used DarkSword, and public code on GitHub lowered the barrier for copycats.
- Apple urges users to move to iOS 26 for stronger protection, notes that devices already on iOS 26 cannot downgrade, and says those staying on iOS 18 should install 18.7.7 now or enable Lockdown Mode if at high risk.