Reports from RSAC and beyond.

This CyberWire Daily roundup summarizes recent cybersecurity news: a publicly leaked exploit kit (DarkSword) reportedly able to compromise iPhones, the FCC restricting foreign-made consumer routers, warnings of a critical Citrix NetScaler vulnerability likely to be exploited, DOE’s five-year energy-sector cyber strategy, the CanisterWorm npm/Kubernetes wiper campaign, suspected exploitation of KACE SMA (CVE-2025-32975), a 3.1 million-record breach at QualDerm, and legal action against a Russian access broker tied to ransomware activity.