New DarkSword tool targets hundreds of millions of iPhones

A hacking technique called DarkSword, used by Russian hackers, can compromise iPhones running iOS 18 simply by visiting infected websites. Discovered in the wild, this tool has been deployed in espionage and cybercriminal campaigns to target thousands of devices indiscriminately. It is now available online in a reusable form, risking a large portion of iPhone users worldwide.

iPhone hacking techniques were once rare, likened to elusive animals used stealthily against select targets. Recent developments show a shift, with espionage and cybercriminal groups embedding phone-takeover tools in websites to hack thousands of devices broadly. Among these is DarkSword, a powerful method spotted in active use by Russian hackers. This technique can seize control of devices on iOS 18 with just a visit to a malicious site, affecting hundreds of millions of iPhones. The tool has surfaced on the web in an easily adaptable format, heightening risks for many users. Previously selective hacks are now scaling up, as noted in cybersecurity observations.

Makala yanayohusiana

IT expert Supangat warns of Lebaran digital scams via WhatsApp and SMS in a press conference illustration.
Picha iliyoundwa na AI

IT expert warns of digital scams ahead of Lebaran

Imeripotiwa na AI Picha iliyoundwa na AI

Ahead of Idul Fitri, IT expert from Untag Surabaya, Supangat, urges the public to heighten vigilance against scams via WhatsApp and SMS. Rising digital transactions are exploited by cybercriminals. Vida founder Niki Santo Luhur identifies two main methods: phishing and malware prevalent in Indonesia.

Apple released an update to iOS 18.7.7 on April 1, 2026, making it available for more devices to protect against the DarkSword hacking toolkit. The company extended support to older iPhones, such as the iPhone 16e, without requiring an upgrade to iOS 26. DarkSword primarily targets users outside the US.

Imeripotiwa na AI

Mjasiriamali wa Kenya Khalif Kairo ameonya watumiaji wa iPhone waliopoteza simu zao kuwa makini dhidi ya ulaghai unaotumia tovuti bandia zinazoiga Apple. Wapangaji hutuma SMS zinazoonekana kuwa kutoka Apple Support, zikidai kuwa simu imewekwa katika hali ya kupotea na iko mahali pya. Kairo amesema usiingie Apple ID yako kwenye viungo hivyo.

Hackers are targeting WhatsApp users with a new GhostPairing scam that allows full account access without cracking passwords or encryption safeguards. The scam bypasses traditional authentication methods, posing a significant risk to user privacy and security. Users are advised to check the Linked Devices section to detect any compromises.

Imeripotiwa na AI

A vulnerability in a popular WordPress quiz plugin has impacted over 40,000 sites, allowing potential SQL injection attacks. Security researchers have identified the flaw, urging site owners to check for exposure. The issue was reported on February 4, 2026.

Two groups linked to China are exploiting a newly discovered vulnerability in Cisco's email security products. The campaign involves zero-day attacks, highlighting ongoing cybersecurity risks. The issue was reported on December 19, 2025.

Imeripotiwa na AI

Hackers have accessed and stolen personal information from millions of Pornhub users, aiming to use the data for extortion schemes. The incident was highlighted in a WIRED security news roundup.

Jumatano, 18. Mwezi wa tatu 2026, 03:20:19

Infostealers Disguised as Claude Code, OpenClaw, and Other AI Tools

Jumatano, 11. Mwezi wa tatu 2026, 02:47:16

Dutch intelligence accuses Russia of hacker attacks on WhatsApp and Signal

Jumamosi, 7. Mwezi wa tatu 2026, 21:02:03

Fake IT support scam infects company devices with Havoc malware

Alhamisi, 26. Mwezi wa pili 2026, 18:05:06

New AirSnitch attack bypasses Wi-Fi client isolation

Jumatano, 25. Mwezi wa pili 2026, 15:18:59

New cybercrime platform 1Campaign aids malicious Google ads

Ijumaa, 20. Mwezi wa pili 2026, 10:04:38

Massiv android malware targets portuguese users with fake iptv app

Jumatano, 4. Mwezi wa pili 2026, 19:25:39

Russian hackers exploit Microsoft Office vulnerability days after patch

Jumapili, 4. Mwezi wa kwanza 2026, 03:38:05

GhostPairing: WhatsApp Hijacking Threat

Jumanne, 16. Mwezi wa kumi na mbili 2025, 11:30:18

Silent Whisper vulnerability exposes WhatsApp users to secret tracking

Jumatatu, 15. Mwezi wa kumi na mbili 2025, 07:33:41

Apple fixes zero-day flaws in WebKit for sophisticated attacks

 

 

 

Tovuti hii inatumia vidakuzi

Tunatumia vidakuzi kwa uchambuzi ili kuboresha tovuti yetu. Soma sera ya faragha yetu kwa maelezo zaidi.
Kataa