(Web Desk) - Apple has released an emergency iOS update, urging millions of iPhone users to download it now.
The company expanded the availability of its iOS 18.7.7 and iPadOS 18.7.7 updates to a much wider range of devices, warning that the software contains critical protections against a cyberattack method known as DarkSword.
Apple said this allows more users with automatic updates enabled to receive protection from what it described as web-based attacks.
The DarkSword exploit kit, first identified in 2025, is designed to target vulnerable Apple devices and secretly install malicious software.
Security researchers said the attack is triggered when a user visits a legitimate website that has been secretly infected with malicious code, a tactic known as a 'watering hole attack.' Once activated, the malware can install hidden backdoors that allow hackers to maintain long-term access to a device and steal sensitive information.
Experts warned that a newer version of the hacking tool has now leaked online, raising fears that additional cybercriminal groups could begin using it in broader attacks.
Users who believe they may be targets of such attacks, particularly journalists, activists or those handling sensitive information, are advised to enable Apple's Lockdown Mode by going to Settings, selecting Privacy & Security, tapping Lockdown Mode and following the prompts to turn it on and restart their device.
Cybersecurity firms, including Google's Threat Intelligence Group and Lookout, previously revealed that the DarkSword toolkit has been used in attacks targeting users in Saudi Arabia, Turkey, Malaysia, and Ukraine since July 2025.
The team found that it takes advantage of several hidden weaknesses in iPhones and the Safari browser.
This allows attackers to secretly install malware on a device, another reminder of why keeping your phone updated is crucial.
In some cases, attackers created fake websites or apps to trick people, such as a lookalike version of Snapchat, while in others they hacked legitimate websites, including a government site.
Once a phone is infected, hackers can install different types of spyware depending on their goal. Apple has also begun sending lock screen warnings to some users running outdated software, urging them to install updates immediately.
Experts warned that failing to install the patch could leave devices vulnerable to data theft and long-term surveillance.