Someone has publicly leaked an exploit kit that can hack millions of iPhones

TechCrunch reports that a newer version of DarkSword — an advanced iOS spyware/exploit toolkit previously linked to government actors — was leaked and posted on GitHub. The leak contains simple HTML/JavaScript payloads that researchers say can be repurposed with no iOS expertise to exploit devices running iOS 18 or earlier, potentially allowing mass exfiltration of contacts, messages, call history and iOS keychain data; Apple has issued emergency updates and recommends updating devices.