Apple announced that on Wednesday it will issue software updates for devices still running iOS 18 to protect them from an exploit called DarkSword. This exploit can silently take control of an iPhone if it visits a website infected with the malicious code.
See also: Apple celebrates its 50th anniversary with an animated homepage
Devices running iOS 26 are already protected from DarkSword, but in a surprising move for Apple, the latest critical update is specifically designed to protect vulnerable iOS 18 users who have consciously decided not to upgrade to iOS 26, even though their iPhone model supports it. Some users may be hesitant to upgrade to iOS 26 due to the redesigned Liquid Glass interface that brings significant changes to the iPhone's appearance.
“Tomorrow, we’re making an iOS 18 update available to more devices so that users with automatic updates enabled can automatically receive important security protections,” an Apple spokesperson told Wired. “We encourage all users with supported devices to upgrade to iOS 26 to get our most advanced protections.” iPhone users can install the updates by opening the Settings, going to General , and selecting Software Update. Those with automatic updates enabled will see the new software install automatically.
See also: Apple: Privacy Rules for Third-Party Access to Live Activities and Notifications
This is the second time in recent weeks that Apple has pushed out a critical update for iPhones running older software. On March 11, Apple issued a patch to protect users from a different iOS hacking tool known as Coruna. The patch was for older devices that can’t run iOS 26. Apple recommended that everyone else upgrade to the latest version of the operating system that their device supports.
The practice of protecting an older version of an operating system is known in the cybersecurity industry as “backporting,” but it’s not something Apple typically does if a newer, compatible version of iOS already has the same protections built in.
See also: Apple competes with Google Workspace and Microsoft 365 with new email service
According to Google, DarkSword has been used by various hacking groups to break into the iPhones of users in Malaysia, Saudi Arabia, Turkey , and Ukraine. Last week, the exploit kit was posted to the open-source GitHub repository, making it even more likely to be used by malicious actors.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
