Apple released an emergency iOS 18.7.7 update on April 2, 2026, to address the DarkSword vulnerability that can silently steal personal data and cryptocurrency wallet keys from iPhones and iPads running iOS 18.4 through 18.7.

Why it matters: The DarkSword exploit requires no user interaction beyond visiting a compromised webpage in Safari. Malicious JavaScript can harvest credentials and digital assets automatically. No click, no warning, no second chance. This zero-interaction attack makes it one of the most dangerous web exploits Apple has patched this year.

What they're saying: Security researchers confirmed the exploit chain involved six linked bugs in the JavaScriptCore engine, the heart of Safari's web processing, and a bypass of pointer protection mechanisms that Apple built to keep exactly this kind of attack at bay. Apple's advisory notes the attack requires no user interaction beyond loading a page, a hallmark of the most dangerous web exploits.

Driving the news: This out-of-cycle release follows earlier patches Apple issued for iOS 16.7.15 and iOS 15.8.7 that addressed earlier stages of the DarkSword kit. Devices running iOS 18.4 through 18.7 remained vulnerable until this latest fix arrived. DarkSword was initially used for targeted espionage, but after its source code leaked on GitHub, cybercriminals shifted to mass attacks.

What to do now: iPhone and iPad users should install iOS 18.7.7 immediately by navigating to Settings → General → Software Update. For older devices that cannot update, enabling the built-in "Lockdown Mode" adds an extra barrier against remote code execution, though it limits some device functionality.

What's next: Apple strongly recommends keeping devices updated with the latest iOS version for long-term protection. Users with legacy devices that cannot receive security patches may consider disabling JavaScript in Safari, a drastic measure that breaks many modern web experiences but may be necessary for hardware without other security options.

For more detail on the DarkSword exploit, see our earlier coverage of the iOS 18 DarkSword threat.