2026-03-18 15:40 UTC
@agreenberg@infosec.exchange more in depth analysis from Google.
It doesn’t seem to affect 18.7.3 at least (might also not work on 18.7.2 given that CVE-2025-43520, which DarkSword uses, has been patched in .2).
https://www.wired.com/story/hundreds-of-millions-of-iphones-can-be-hacked-with-a-new-tool-found-in-the-wild/
Replies (1)
-
@Andres4NY@social.ridetrans.it 2026-03-18 16:10
@fmarini@mastodon.social @agreenberg@infosec.exchange So this sounds like a WebKit or Nitro exploit combined with another at the OS level? It's annoying to deal with, but I'm thinking that chromium-style weekly security updates are a better choice than everyone else's (mozilla/apple/android) roughly monthly updates.