If upgrading your iPhone is on your mind, but now’s not a good time for an upgrade, wait no longer.
Apple has already made available iOS 18.7.7 & iPadOS 18.7, and it is a critical update. A major vulnerability existed before this release that could be exploited without the user’s knowledge.
What’s the issue?
At the centre of this update is a vulnerability tied to a spyware toolkit called DarkSword. What makes this dangerous is how easy it is to use. The exploit code has already surfaced publicly on platforms like GitHub, which means it’s no longer limited to high-level attackers.
In simple terms, a malicious website could silently compromise your device the moment it loads. No suspicious downloads. No obvious warning signs.
Apple had already fixed this issue in iOS 26. But if you didn’t upgrade, your device stayed exposed until now.
Why this update is a big deal
The reason Apple is releasing a security patch like this for previous versions of iOS is that many iPad/iPhone users are not able to update to iOS 26.
There will likely be a sizable number of users who are unable to upgrade because of:
- Apps they don’t want to lose (either because they are not supported or go against their current user interface)
- Storage space limitations
- Preferred experience with the existing user interface.
Rather than requiring these users to upgrade to iOS 26, Apple is working with them to provide them with a fix at their level. Though it will be clear to users what they’re expected to do next (upgrade to iOS 26).
To make sure people don’t ignore it, Apple is pushing it as a “Critical Security Update” rather than a regular software update.
If auto-updates are turned on, you might already have it installed. If not, expect a more urgent prompt than usual.
What you should do right now
Go to: Settings > General > Software Update
You will likely see two options:
- Update to iOS 18.7.7 (security patch only)
- Upgrade to iOS 26 (full update with all fixes)
If you’re not ready for iOS 26 yet, at least install the iOS 18 patch. Skipping both leaves your phone open to known attacks.
Also Read: Apple Suspends AI-Generated News Service After BBC Complaint
