Apple Issues Rare iOS 18 Security Update to Protect Against DarkSword Exploit

[MacRumors]

Apple today released a new build of iOS 18.7.7 and iPadOS 18.7.7, presumably with a fix for the DarkSword exploit. Apple told Wired that it would release an iOS 18 update for more devices, allowing users with auto-update turned on to receive the security update. iOS 18.7.7 was initially limited to the iPhone XS and XR models, but it is now available for other iPhones.

Apple is pushing the iOS 18 fix to customers who have decided not to upgrade to iOS 26, but the company encourages users with supported devices to update to iOS 26 to get better protection.

Devices running iOS 26 are already protected against DarkSword, which is a vulnerability that allows a malicious entity to take over an iPhone if the iPhone user visits a website with infected code.

It is highly unusual for Apple to provide a security update to iOS 18 users who simply don't want to upgrade to iOS 26, as Apple uses security fixes as a way to push people to the latest version of iOS or iPadOS that their device supports. Apple says that the iOS 18.7.7 update is available for more devices, and devices with older versions of iOS 18 will receive an additional alert to install a Critical Security Update.

Note: We enabled the availability of iOS 18.7.7 for more devices on April 1, 2026, so users with Automatic Updates turned on can automatically receive important security protections from web attacks called DarkSword. The fixes associated with the DarkSword exploit first shipped in 2025.

Devices with older versions of iOS 18 will receive an additional alert to install a Critical Security Update.

DarkSword has received quite a bit of attention, and it has been used by hacker groups to break into the iPhones of people in Malaysia, Saudi Arabia, Turkey, and Ukraine. The exploit kit has also been posted to open source code repository GitHub, which makes it more widely available to bad actors.

Article Link: Apple Issues Rare iOS 18 Security Update to Protect Against DarkSword Exploit

 

[klasma]

And people were complaining that Apple isn’t releasing anything on their 50th anniversary. The best Apple news this year yet. 🎉

 

[platinumaqua]

Looks like bad PR got them to change their mind about the update availability. They should just keep doing that for the foreseeable future.

I wish they also put out an update for iOS 17 too

 

[qacjared]

Anyone know if it includes the new certificate from 18.7.4 which would allow iMessage/Facetime to work past January 2027? I assume it does but it’s a good question to ask.

 

[WarmWinterHat]

Wonder if there is any change of downgrading? Don't see the files on ipsw.me.

 

[syntastic]

Finally, Apple chooses to protect their users instead of solely standing on the hill of "adopt liquid glass or die"

 

[JosephAW]

I had my brother check on his iPhone 13 mini, it is not there.

 

[AppleTO]

Wonder if there is any change of downgrading? Don't see the files on ipsw.me.

Unlikely, it's probably OTA only.

 

[winxmac]

I had my brother check on his iPhone 13 mini, it is not there.

If the device is already on iOS 26.x or currently set to receive beta, it will not show in Software Update.

It seems Apple will not release a full iPSW of iOS 18.7.7 for devices that can upgrade to iOS 26.x so should something go wrong, a restore of iOS 26.x is the only option.

I just noticed a few things on https://developer.apple.com/download/os/ that contradicts what is on https://support.apple.com/en-us/100100

iOS 16.7.15 is available for iPhone 7 and 7 Plus when the last major version is iOS 15.x

iPadOS 16.7.15 is available for iPad 6 when the latest version is iOS 17.x [iOS 16.7.2 was the last update then iOS 17.x only]

iOS 15.8.7 is available for iPhone 6 and 6 Plus when the last major version is iOS 12.x

iOS 15.8.7 does not list iPhone 7 and 7 Plus

iOS 12.5.8 does not list iPhone 6, only 6 Plus

 

[WarmWinterHat]

Unlikely, it's probably OTA only.

Probably. Looks like it's a 'critical update':

We enabled the availability of iOS 18.7.7 for more devices on April 1, 2026, so that users with Automatic Updates turned on can automatically receive important security protections.

Update iOS to protect your iPhone from web attacks - Apple Support

If your iPhone doesn’t have the latest software, update iOS to protect your data.

support.apple.com

 

[turbineseaplane]

New emojis too!

Imagine how well iOS18 could still be supported if Apple actually wanted to.

 

[BGrifter]

I’ll look forward to the upgrade from 18.7.3!

Increasingly glad I didn’t downgrade to iOS 26. What a mess.

 

[MarioPhone96]

The update is live. Just updated my 16 Pro Max to 18.7.7. Glad to know I don’t need 26.4 to have the Dark Sword fix now.

 

[HouseLannister]

What if the new Siri still comes to iOS 18 as originally planned?

 

[winxmac]

The update is live. Just updated my 16 Pro Max to 18.7.7. Glad to know I don’t need 26.4 to have the Dark Sword fix now.

Only a few people keep the original version intended [and not upgrade to the next major version] for their iPhone, and you're one of them, iOS 18.x on iPhone 16 Pro Max

Let's increase iOS 18.x usage so Apple fixes iOS 26.x and iOS 27.x [but for those on iOS 26.x already, it seems no way to downgrade]

 

[WarmWinterHat]

Still holding on to iOS 18 on my 16 Pro! ✊🏻

Edit: Update showing up for me.

 

[addamas]

See? We can force Apple to do good things. Thank you hackers for finding this exploit and media for forcing this company to fully support old devices with security updates as we deserve.

 

[Agent_Apple]

So glad I can stay on iOS and iPadOS 18 for a bit longer...feel bad for those who reluctantly updated due to security concerns.

 

[turbineseaplane]

Successfully updated and re-implemented my block of 26 update updates. 👌

 

[B4U]

"allowing users with auto-update turned on to receive the security update. iOS 18.7.7"

hm...little skeptical on this one. It will most likely get the 26.4.
Still not seeing it on my 13 pro with 18.7.3 public beta.
Okay, turns out need to turn off the public beta to see it at the bottom of the screen.

 

[kinless]

I was this 🤏 close to upgrading to 26.4 on the SE3, but decided to procrastinate even more. And now 18.7.7 is installed lol. Will have to give in eventually if I want to find my AirTag 2s with more than just the iPad.

 

[thadoggfather]

"allowing users with auto-update turned on to receive the security update. iOS 18.7.7"

hm...little skeptical on this one. It will most likely get the 26.4.
Still not seeing it on my 13 pro with 18.7.3 public beta.
Okay, turns out need to turn off the public beta to see it at the bottom of the screen.

turn public/dev beta off, then scroll down. still huge iOS 26 prompt until you go down the page.

 

[tywebb13]

build number this time is 22H340

although the 18.7.7 released on march 24 for the XR and XS was same version number the build number back then was 22H333

 

[B4U]

turn public/dev beta off, then scroll down. still huge iOS 26 prompt until you go down the page.

Thanks, mate.
My fingers on one hand tapping my phone and the other hand typing on the computer were apparently out of sync! 🤣

 

[Bigwaff]

I see it on my iPhone 13 mini