DarkSword Exploit Chain That Can Hack Millions of iPhones Leaked Online

DarkSword is a leaked JavaScript iOS exploit chain that chains six zero-day vulnerabilities to achieve full kernel read/write and complete device compromise via a single browser visit; originally used by the UNC6353 espionage group against Ukrainian targets, the toolkit is now publicly available on GitHub, enabling rapid, low-skill deployment against devices running iOS 18.4–18.7. Apple has released emergency patches and recommends upgrading to iOS 26 or enabling Lockdown Mode to mitigate the threat.