{"id":51462,"date":"2026-04-02T17:42:14","date_gmt":"2026-04-02T21:42:14","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=51462"},"modified":"2026-04-08T09:19:47","modified_gmt":"2026-04-08T13:19:47","slug":"ios-18-7-7-and-ipados-18-7-7","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2026\/04\/02\/ios-18-7-7-and-ipados-18-7-7\/","title":{"rendered":"iOS 18.7.7 and iPadOS 18.7.7"},"content":{"rendered":"

Jason Snell<\/a>:<\/p>\n

\n

Last December I complained that Apple was withholding iOS 18 security updates from iPhones capable of running iOS 26<\/a>, leaving users who didn’t want to upgrade to Apple’s latest OS version yet in some security peril.<\/p>\n

[…]<\/p>\n

The good news: As of Wednesday April 1, Apple is pushing out iOS 18.7.7 to all devices running iOS 18. This update, released last month for devices that were not capable of running iOS 26, is now available even for compatible devices.<\/p>\n

[…]<\/p>\n

Now the bad news: This is happening because of some really bad security breaches like DarkSword<\/a> and Coruna<\/a>.<\/p>\n<\/blockquote>\n\n

Meek Geek<\/a>:<\/p>\n

\n

My iPhone was stuck on 18.7.2 since early December and was deprived of FOUR point updates!<\/p>\n

I considered this an unprecedented user-hostile move to coerce users to upgrade to iOS 26 when they don’t want to or can’t, and was determined to never buy another iPhone.<\/p>\n<\/blockquote>\n\n

Mr. Macintosh<\/a>:<\/p>\n

\n

What a crazy #Apple50 birthday present! 🎁<\/p>\n

[…]<\/p>\n

Who else is still holding the iOS 18 line like me?😅<\/p>\n<\/blockquote>\n\n

Pieter Arntz<\/a>:<\/p>\n

\n

DarkSword is a full‑chain iOS exploit kit that strings together six vulnerabilities in WebKit, Safari, the dynamic loader, and the kernel to go from a browser visiting a malicious website to full device compromise. The chain has been observed in the wild since at least November 2025 in campaigns set up by commercial spyware vendors and state‑sponsored actors.<\/p>\n

There is no need to tap a link in Messages or approve an install prompt. Just loading a compromised site or even a malicious advertisement inside Safari is enough to trigger the exploit chain if your device is still missing the relevant patches.<\/p>\n<\/blockquote>\n\n

Adam Engst<\/a>:<\/p>\n

\n

After I wrote “DarkSword Exploit Threatens iPhones Still Running iOS 18<\/a>” (23 March 2026), Apple published the tech note page “Update iOS to protect your iPhone from web attacks<\/a>,” emphasizing the importance of staying current. It also addresses what those with older versions of iOS should do, noting that Apple released updates for iOS 15 and iOS 16 (to protect against Coruna—see “Older iPhones and iPads Receive Critical Security Updates for Coruna Exploits<\/a>,” 13 March 2026).<\/p>\n<\/blockquote>\n\n

Previously:<\/p>\n