Apple is now providing security updates to more iPhones utilizing iOS 18 to defend against the actively exploited DarkSword vulnerability package.

According to the iOS 18.7.7 security update notes released today for April 1, 2026, “iOS 18.7.7 is now available for additional devices, ensuring that users with Automatic Updates enabled will gain crucial security shields against web-based attacks known as DarkSword.”

The initial security measures addressing DarkSword were implemented back in 2025.

In March, security experts from Lookout, iVerify, and Google Threat Intelligence uncovered a fresh “DarkSword” exploit affecting iPhones operating on iOS versions 18.4 to 18.7.

DarkSword leverages six different vulnerabilities identified as CVE-2025-31277, CVE-2025-43529, CVE-2026-20700, CVE-2025-14174, CVE-2025-43510, and CVE-2025-43520.

While iOS exploits are typically associated with targeted espionage campaigns, this particular exploit kit saw broader use by groups such as PARS Defense, a Turkish commercial surveillance company, a threat actor known as UNC6748, and a suspected Russian intelligence group, UNC6353.

GTIG identified three distinct malware families used in these attacks to steal information from victim’s devices: GhostBlade, a highly invasive JavaScript infostealer, the GhostKnife backdoor, and GhostSaber, a JavaScript malware capable of code execution and data theft.

Since the release of iOS 18.6 in July 2025, Apple has been consistently patching these vulnerabilities through security updates for compatible devices.

However, by the end of 2025, Apple ceased offering iOS 18 updates to newer devices capable of running the more recent iOS 26. 

Users who chose to remain on iOS 18 saw their access to security updates curtailed, with updated devices no longer receiving patches for the DarkSword vulnerabilities starting in 2026.

Subsequently, only a limited number of devices could still receive iOS 18 updates, with the latest 18.7.6 version only made available for the iPhone XS, iPhone XS Max, and iPhone XR.

Adding to the problem, a researcher leaked the DarkSword exploit kit on GitHub last month, thereby granting access to other malicious actors seeking to exploit outdated iPhones.

Today, Apple is distributing iOS 18.7.7 to more devices remaining on the older OS in order to provide lasting protection from recent cyber threats.

The array of devices now eligible to receive the updated security patches includes iPhone XR, iPhone XS, iPhone XS Max, iPhone 11 (all models), iPhone SE (2nd generation), iPhone 12 (all models), iPhone 13 (all models), iPhone SE (3rd generation), iPhone 14 (all models), iPhone 15 (all models), iPhone 16 (all models), iPhone 16e, iPad mini (5th generation – A17 Pro), iPad (7th generation – A16), iPad Air (3rd – 5th generation), iPad Air 11-inch (M2 – M3), iPad Air 13-inch (M2 – M3), iPad Pro 11-inch (1st generation – M4), iPad Pro 12.9-inch (3rd – 6th generation), and iPad Pro 13-inch (M4).

iPhone users still relying on iOS 18 with Automatic Updates enabled will now automatically receive the latest version and the associated defenses against the DarkSword exploit.