
Apple released a new security update today for iOS 18 and iPadOS 18 to protect users from the “DarkSword” vulnerability that was recently discovered by the Google Threat Intelligence Group (GTIG). This security exploit affects iOS/iPadOS versions 18.4 through 18.7, and the GTIG found out that it’s been exploited by “multiple commercial surveillance vendors and suspected state-sponsored actors” to compromise the devices of targets in Saudi Arabia, Turkey, Malaysia, and Ukraine.
To protect iPhone and iPad users against this DarkSword vulnerability, Apple released iOS 18.7.7 and iPadOS 18.7.7 in two waves: On March 24, the two updates were first made available on iPhones and iPads that can’t update to iOS 26 and iPadOS 26, and the list includes the iPhone XS, iPhone XS Max, iPhone XR, and 7th gen iPad. Today, the two updates were released for all iPhone and iPad models that can update to iOS 26 and iPadOS 26, respectively, but haven’t received the latest major releases yet.
Speaking with Wired (via 9to5Mac), Apple explained that it’s expanding the availability of iOS 18.7.7 and iPadOS 18.7.7 to all supported iPhone and iPad models “so users with auto-update enabled can automatically receive important security protections.” The company added that it’s encouraging “all users with supported devices to update to iOS 26 to receive our most advanced protections.”
Earlier this month, Apple also released new security updates for iOS/iPadOS 15 and 16 to protect users from Coruna, another security vulnerability discovered by the Google Threat Intelligence Group. Coruna was already being exploited by a customer of a surveillance company, fake Chinese gambling and crypto websites, and other threat actors, according to the GTIG.