DarkSword Exploit Chain Leaked Online, Posing Risk to Millions of iPhones

Security researchers report that the DarkSword iOS exploit chain — a JavaScript-based, in-memory exploit kit — is available outside its original operators and has been used to achieve kernel read/write on iOS devices via watering-hole pages, bypassing mitigations and pivoting through GPU and kernel vulnerabilities to deploy infostealer payloads (GHOSTBLADE, GHOSTKNIFE, GHOSTSABER). Attribution is made to UNC6353 with observed targeting across multiple countries; administrators are urged to update to iOS 26.1+ and consider Lockdown Mode.