A DarkSword hangs over unpatched iPhones

Google researchers identified DarkSword, an iOS exploit chain (affecting iOS 18.4–18.7) that uses six vulnerabilities to achieve drive‑by full device compromise and deliver payloads such as Ghostblade — a JavaScript-based infostealer that exfiltrates messages, contacts, location, keychain items, photos, and targeted cryptocurrency app data; the tool has been used by both commercial spyware vendors and state‑aligned actors in multiple campaigns across Saudi Arabia, Turkey, Malaysia, and Ukraine.