Russia

• DarkSword: the iOS exploit kit left in the open March 18, 2026

  DarkSword is an iOS exploit kit targeting iOS 18.4-18.7 devices via compromised websites -- no interaction required beyond visiting a page. Discovered by Google, iVerify, and Lookout. Used by Russian, Turkish, and other actors. All CVEs patched in current iOS. And the code shows signs of LLM-assisted development.