New ‘DarkSword’ Leak Puts Millions of iPhones at Risk After Initial Attack

A leaked version of the DarkSword iPhone exploit kit has been published publicly (reported on GitHub), transforming a previously targeted watering‑hole campaign into an easy-to-deploy threat. The leak consists of simple HTML/JavaScript exploit files that can compromise outdated iOS devices, enabling fileless-style post-exploitation data theft (contacts, messages, call logs, keychain credentials) and exfiltration to attacker servers. Apple has released emergency updates and organizations are urged to identify and remediate unmanaged or outdated devices to reduce exposure.