Topic
Vulnerabilities, mitigations and patching practice in Apple's mobile operating system, including its sandbox, kernel protections and credential storage.
Calif.io showed an untethered jailbreak on an iPhone 18 Pro running iOS 27.0.1 at Hexacon in Paris, with root access returning after a reboot. No bugs are named and no tool is public, so patch timing turns largely on when Calif publishes.
Reality
iVerify has disclosed P7 DarkSword, iPhone spyware that scans for crypto wallets and polls its operators for new orders every 15 seconds. It gets at wallet data through the phone's own stores, so protecting the device is now part of protecting the coins.
Reality
iVerify disclosed P7 DarkSword, a reworked variant of a leaked iOS exploit kit for iPhones on iOS 18.4 to 18.7 that steals keychain and crypto-wallet data. The commercial chain leaked onto a second-hand market, where financially motivated operators have been buying it since late 2025.
Reality
iVerify found P7 DarkSword, a stealthier spyware variant that steals Keychain and crypto-wallet data from iPhones hit by the DarkSword exploit chain. Apple's iOS 18.7.7 still blocks that chain for phones kept off iOS 26, so fleets need to find the devices that skipped it.
Reality
Magnet Forensics tells police in a leaked video that GrayKey can hold seized iPhones in After First Unlock state through Apple's 72-hour reboot. If it holds, police need only reach a seized phone before the reboot and can unlock it on their own schedule.
Perspective Coverage
4 publishersReality
Attacker server logs show the Coruna iOS WebKit kit compromising a live iPhone's browser in six seconds, two months after Google published its teardown. It fired with no tap from the user, on a phone still running iOS 15.8.3.
Reality
Blockchain security firm SlowMist says an active exploit chain walks from a Safari page to kernel access and the iOS Keychain on everything from iOS 13 to 26.5, while Apple's patches, by the same account, reach 26.3.
Reality