Apple has expanded the availability of iOS 18.7.7 and iPadOS 18.7.7 to a broader range of devices to protect users from the risk posed by a recently disclosed exploit kit known as DarkSword.
“We enabled the availability of iOS 18.7.7 for more devices on April 1, 2026, so users with Automatic Updates turned on can automatically receive important security protections from web attacks called DarkSword,” the company said. “The fixes associated with the DarkSword exploit first shipped in 2025.”
Who Is Behind DarkSword?
DarkSword is a suspected Russian-linked iOS exploit kit that was leaked on GitHub, threatening to “democratize” iPhone exploits once reserved for nation-state actors. According to research from iVerify, Lookout, and Google, the kit has a variety of possible implications and puts hundreds of millions of iOS 18 devices at risk.
It follows the emergence of the Coruna exploit kit — the first known “mass” iOS attack — which researchers traced moving from a spyware vendor’s customer to Russian hackers to Chinese cybercriminals. That kit is believed to have been built from possible U.S.-government-developed exploits that were leaked.
Update Availability
The iOS 18.7.7 update is available for:
- iPhone XR through iPhone 16e series
- iPad mini (5th gen – A17 Pro) through iPad Air and iPad Pro models
