Apple has improved protection for users running older software by making iOS 18.7.7 more widely available. This update ensures a greater number of devices are safeguarded against the actively exploited DarkSword exploit kit.
This move signals a shift in Apple’s approach: Even users staying on older iOS versions are now being protected against modern threats.
What’s changed?
As of April 1, 2026, Apple enabled broader distribution of iOS 18.7.7, allowing more devices to receive:
- Critical security patches
- Protection against web-based attacks
- Automatic updates (if enabled)
👉 Previously, many newer devices on iOS 18 were not receiving the latest security fixes
The threat: DarkSword exploit kit
The update specifically addresses the DarkSword exploit kit, a powerful attack framework targeting iPhones running:
- iOS 18.4 → 18.7
DarkSword chains together six vulnerabilities to compromise devices, including:
- CVE-2025-31277
- CVE-2025-43529
- CVE-2026-20700
- CVE-2025-14174
- CVE-2025-43510
- CVE-2025-43520
From targeted attacks to broader abuse
Historically, iOS exploits were used in highly targeted spyware campaigns.
DarkSword marks a change:
- Used by multiple threat actors
- Includes commercial surveillance vendors
- Linked to state-sponsored espionage groups
👉 This indicates a shift toward wider, more scalable exploitation
Malware delivered by DarkSword
Researchers observed multiple payloads deployed through the exploit kit:
- GhostBlade – aggressive JavaScript infostealer
- GhostKnife – persistent backdoor
- GhostSaber – code execution + data theft
👉 These tools allow attackers to fully compromise devices and extract sensitive data
The reason for this urgency
The risk increased significantly after:
- The DarkSword exploit kit was leaked on GitHub
- Making it accessible to a wider range of attackers
At the same time:
- Apple had limited iOS 18 updates to older devices
- Leaving some users exposed without patches
Apple’s response
With iOS 18.7.7, Apple has:
- Re-enabled updates for a broader range of devices
- Ensured continued protection for users not upgrading to newer iOS versions
- Enabled automatic delivery of security fixes
Supported devices now include:
- iPhone XR → iPhone 16 series
- Multiple iPad models (including Pro, Air, and Mini variants)
👉 This significantly expands protection coverage
What users should do
1. Enable Automatic Updates
Ensure your device receives security patches without delay
2. Install iOS 18.7.7 immediately
If you remain on iOS 18, this update is critical
3. Consider upgrading to latest iOS
Where possible, newer versions provide broader protection
4. Be cautious of web-based threats
Many attacks rely on compromised websites
Key takeaway
This update highlights a critical shift:
Exploit kits are no longer exclusive — they are becoming widely accessible.
By extending support to older devices, Apple is acknowledging a new reality:
👉 Security must follow the user — even if they don’t upgrade.
