Apple rolls out security update for older iPhones and iPads to counter DarkSword threat

Technology company Apple has issued a new security update for older iPhone and iPad devices, aimed at protecting users from a recently exposed set of hacking tools that can extract sensitive data from affected devices.

On Wednesday, Apple announced the release of iOS 18.7.7 and iPadOS 18.7.7, updates designed to extend critical protections to a wider range of devices. The company said the update addresses web-based attacks associated with a threat known as DarkSword.

DarkSword is a toolkit that allows attackers to compromise Apple devices running iOS versions 18.4-18.7. The exploit can be triggered simply by a user visiting a website that contains malicious code, including legitimate websites that have been compromised. Once activated, the tools can extract various types of data from the device, such as messages, browsing history, location information, and even cryptocurrency holdings, and transmit it to servers controlled by attackers.

The toolkit has already been observed in targeted attacks affecting users in countries including China, Malaysia, Turkey, Saudi Arabia, and Ukraine. However, cybersecurity researchers warn that the situation could escalate further now that the tools have been made publicly available online, potentially enabling a broader range of attackers to exploit devices that have not been updated.

Apple noted that users running its latest operating system, iOS 26, had already received protection against these vulnerabilities weeks earlier. The company also rolled out updates for users on iOS 18 whose devices are not compatible with iOS 26.

With this latest release, Apple is now extending protection to millions of users whose devices are compatible with iOS 26 but have not yet been upgraded. Some users have delayed updating due to concerns about changes introduced in the newer software, including the redesigned “liquid glass” interface, which has received mixed reactions.

The update was anticipated following earlier reporting by Wired, which indicated that Apple was preparing to address the vulnerability.

Users who have enabled automatic software updates are expected to receive the patch without additional action. Apple also highlighted that its optional security feature, Lockdown Mode, provides an additional layer of protection against threats like DarkSword. The company stated last week that it is not aware of any successful government-grade spyware attacks against devices that have Lockdown Mode enabled.

The release underscores the importance of keeping devices updated, particularly as newly disclosed vulnerabilities and publicly available exploit tools increase the risk of widespread attacks targeting unpatched systems.