DarkSword iOS Exploit Kit Publicly Leaked; Millions of iPhones Vulnerable to Full Device Takeover

An exploit kit targeting iOS 18.4-18.7 using 6 vulnerabilities including 3 zero-days was publicly leaked, enabling full device takeover of millions of iPhones. Google's Mandiant tracked the DarkSword chain being used by multiple commercial surveillance vendors and suspected state actors targeting Saudi Arabia, Turkey, Malaysia, and Ukraine. CISA ordered federal agencies to patch within two weeks by April 3. The leak democratizes what was previously an expensive, restricted capability; TechCrunch called it one of the most significant iOS security events in years.