Leaked DarkSword Exploit Puts Millions of Older iPhones at Risk

Cybersecurity researchers have discovered that a new version of the iPhone hacking tool DarkSword has been publicly leaked on GitHub. This exploit kit targets iPhones and iPads running older versions of iOS, including iOS 18, making hundreds of millions of devices vulnerable. Experts warn that the leaked files are simple HTML and JavaScript scripts, which means even individuals without iOS security knowledge can deploy them quickly to steal sensitive data. The malware can exfiltrate contacts, messages, call history, and passwords stored in iOS keychain to attacker-controlled servers. Researchers from iVerify and Google confirm that the exploits work out of the box and share infrastructure with previous DarkSword versions. Apple has responded by issuing emergency updates for devices unable to run the latest iOS 26 and recommends keeping software up to date, along with using Lockdown Mode to block these attacks. The leak follows the recent discovery of another advanced iPhone hacking toolkit, Coruna, originally developed by the defense contractor L3Harris for U.S. government use. With one-quarter of all Apple devices reportedly running outdated iOS versions, experts emphasize the importance of immediate software updates to prevent potential breaches from this widely available hacking tool.