Which iPhones are vulnerable to the DarkSword exploit?

Devices running iOS 18.4 through 18.6.2 are exposed — roughly 221 million iPhones worldwide. Apple patched the final two zero-days in iOS 18.7. If your iPhone still shows 18.6.x or earlier in Settings > General > Software Update, you are vulnerable today and should upgrade immediately.

Can DarkSword infect my iPhone without me clicking anything?

It requires a single website visit — no download, no consent prompt, no attachment. The entire exploit chain fires inside Safari or WebKit when the page loads. One tap on a malicious link in an SMS, email, or compromised ad network is enough to hand an attacker kernel-level access to the device.

Does Lockdown Mode actually protect against DarkSword?

Apple's Lockdown Mode disables the just-in-time JavaScript compiler in Safari, which is the entry point DarkSword depends on. Researchers at iVerify confirmed the chain fails when Lockdown Mode is enabled. It is not convenient for everyday browsing, but for journalists, activists, and executives it is the strongest single mitigation available.

Back to Blog

SecurityBy Ciphera Team8 min read15-04-2026

DarkSword iPhone Exploit: 221 Million iOS Devices at Risk and How to Protect Yours

Security10 min read

What Happened in the Basic-Fit Data Breach — and Why Your IBAN Makes It Dangerous

Security11 min read

How the Vercel Data Breach Happened — And What It Means for Every Developer

Security9 min read

How We Stopped a Bot Account Farming Attack With Zero-Knowledge Auth

Back to all posts

DarkSword iPhone Exploit: 221 Million iOS Devices at Risk and How to Protect Yours

Related Articles

What Happened in the Basic-Fit Data Breach — and Why Your IBAN Makes It Dangerous

How the Vercel Data Breach Happened — And What It Means for Every Developer

How We Stopped a Bot Account Farming Attack With Zero-Knowledge Auth