Apple has unexpectedly released iOS 18.7.7, a security patch for older iPhones, to counter a dangerous hacking toolkit called DarkSword. While the company generally encourages users to upgrade to the latest iOS 26 for maximum protection, this update extends critical defenses to devices that cannot run the newest operating system. If you are still on an older version of iOS 18, you should download this update immediately.
What is DarkSword and Why Does It Matter?
DarkSword is a hacking toolkit capable of accessing sensitive data on vulnerable iPhones, including messages and cryptocurrency wallets. The threat is currently concentrated in Saudi Arabia, Turkey, Malaysia, and Ukraine, according to Google’s Threat Intelligence Group. However, the toolkit’s public availability on GitHub significantly increases the risk of wider exploitation.
According to security experts, the public release of DarkSword is a major concern because approximately 20% of iPhones within the last four years are still running older iOS 18 versions. These devices remain exposed to this and other potential attacks.
How to Update Your iPhone
Updating is straightforward:
- Go to Settings > General > Software Update.
- If iOS 18.7.7 is available, a download prompt will appear.
Apple has already enabled automatic updates for devices with that setting enabled, so some users may have already been protected without manual intervention.
What If Your Device Can’t Update?
If your iPhone cannot run iOS 18.7.7 or you refuse to upgrade, Apple recommends enabling Lockdown Mode. This extreme security setting severely restricts device functionality to minimize attack surfaces.
“Opportunistic attacks using this exploit kit appear very likely,” warns Christoph Hebeisen, director of security intelligence research at Lookout.
The company still advises upgrading to iOS 26 for the strongest protections, but acknowledges that this is not always an option.
This security update is not optional. It is essential for anyone who cannot or will not upgrade to the latest iOS version. Delaying or ignoring this update leaves your personal data at risk.
