Two iPhone Exploit Kits Mean You Should Update iOS Now

Two iPhone Exploit Kits Mean You Should Update iOS Now

The discovery of two sophisticated iPhone exploit kits—DarkSword and Coruna—within weeks of each other signals a troubling shift. Unlike previous spyware attacks that targeted high-profile users, these exploit kits have been deployed via compromised legitimate websites, so anyone who visits an infected site could fall victim, with no additional clicks or downloads required. This suggests that exploit brokers are now selling tools to multiple buyers, including financially motivated hacking organizations.

Making matters worse, the complete DarkSword exploit code was published to GitHub, making it easy for any hacker to deploy. Security researchers warn that the exploits “will work out of the box” with no iOS expertise required—anyone could copy and paste the code and have it running on a server within hours.

Because it ultimately operates with elevated system privileges, DarkSword can silently harvest alarming amounts of data from vulnerable iPhones, including passwords stored in the keychain, photos, call logs, contacts, browsing history, chat message history, and more. It takes a smash-and-grab approach: collecting and exfiltrating data quickly, then disengaging. Coruna is more targeted and persistent, focusing on stealing cryptocurrency wallet credentials and scanning notes for financial information.

Protection Is Simple

Happily, it’s easy to protect yourself against these and future vulnerabilities: keep your devices up to date. We’ve been beating that drum for years, but DarkSword and Coruna are sufficiently worrying that Apple published a dedicated support page urging users to update, saying: “Keeping your software up to date is the single most important thing you can do to maintain the security of your Apple products.”

If your iPhone is running the latest version of iOS it supports, you’re already protected. But if you’ve been putting off updates—or are still running an earlier version of iOS 18 to avoid iOS 26’s Liquid Glass interface redesign—your iPhone may be vulnerable. Happily, Apple has taken the unprecedented step of releasing an update to an older operating system—iOS 18.7.7—to protect users who don’t wish to upgrade to iOS 26. (You may have to scroll down in the Software Update screen to find it under Also Available.)

Check and Update Your Device

To check your iOS version, go to Settings > General > About and look at the iOS Version line.

DarkSword targets iPhones running iOS 18.4 through iOS 18.7.2. If you’re running iOS 18.7.3 or later, or have upgraded to iOS 26.3 or later, you’re protected. Although none of the DarkSword security reports specifically mention the iPad, it’s best to assume that the corresponding versions of iPadOS are similarly affected.

Coruna can compromise older iPhones and iPads running iOS 13.0 through iOS 17.2.1. Apple recently released iOS 15.8.7 and iOS 16.7.15 to address these vulnerabilities on devices that cannot run newer iOS versions. Devices running iOS 13 or iOS 14 must be upgraded to iOS 15.8.7. Devices running a vulnerable version of iOS 17 should update to the latest version of iOS their device supports.

You can update using Settings > General > Software Update to the latest version of iOS your device supports:

  • iPhone 11 and later (and other devices that support iOS 26): Update to either iOS 18.7.7 or iOS 26.4 or later.
  • iPhone XR, XS, and XS Max: Update to iOS 18.7.7, the latest version these devices support, which includes the DarkSword fixes.
  • Older devices that can’t run iOS 18 (iPhone 6s through iPhone X, plus various older iPads and 7th-generation iPod touch): Update to iOS 15.8.7 or iOS 16.7.15, depending on your device. Devices still running iOS 13 or 14 will need to upgrade to iOS 15.8.7.

If you cannot upgrade for some reason, Apple says that enabling Lockdown Mode in Settings > Privacy & Security > Lockdown Mode in iOS 16 and later will block DarkSword attacks. However, Lockdown Mode significantly degrades the iPhone experience by blocking most message attachment types, disabling certain Web technologies, limiting incoming FaceTime calls, and more. For most people, upgrading to the most recent version of iOS available is the better option.

These discoveries make it clear that installing security updates promptly is more important than ever. Sophisticated exploits that were once reserved for targeted attacks against activists and journalists are now being deployed more broadly. Check your iOS version today, update all your devices, and encourage family members and colleagues to do the same.

(Featured image by iStock.com/sqback)


Social Media: Two major iPhone exploit kits—DarkSword and Coruna—can steal passwords, messages, and photos from everyday users who visit an infected website. Check your iOS version and update immediately to protect yourself.

Understanding New MacBook Battery Charging Features

Understanding New MacBook Battery Charging Features

The just-released macOS 26.4 Tahoe introduced two battery-related features for MacBook users, helping them understand and control MacBook charging. A Slow Charger indicator now appears in the battery status menu and in Battery settings when your Mac is connected to a charger that isn’t delivering the minimum recommended wattage. More significantly, a new Charge Limit feature lets you manually set a ceiling for what the Mac considers a full charge—between 80% and 100%.

These additions are the latest in Apple’s ongoing effort to extend battery lifespan. Understanding how these features work—and when to override them—can reduce frustration and help keep your MacBook battery healthy.

Why Apple Limits Charging

A battery’s lifespan depends on its “chemical age,” which is affected by charging patterns and temperature history. Lithium-ion batteries degrade faster when they spend extended time at full charge or when they generate excess heat during charging. As batteries chemically age, they hold less charge and deliver reduced performance.

Apple’s solution is to reduce the time batteries spend fully charged. This is particularly important for MacBooks that spend most of their time plugged into power at a desk—a scenario that would otherwise keep the battery at 100% and generate heat, both of which shorten battery life.

Optimized Battery Charging

Apple has rolled out optimized battery charging features on the Mac. The Optimized Battery Charging algorithm uses on-device machine learning to learn your daily charging routine, aiming to ensure your Mac is fully charged by the time you actually need to disconnect it from power and leave for the day.

If your MacBook spends most of its time plugged in at your desk, macOS may keep the battery at 80% and charge to full only when it predicts you’ll need to use it away from a power source. When Optimized Battery Charging is holding your battery at 80%, you’ll see Charging On Hold in the battery status menu. (The iPhone, iPad, and Apple Watch have similar features that learn when you typically unplug and delay charging past 80% until shortly before that time.)

The New Charge Limit Feature

Charge Limit in macOS 26.4 takes a different approach. Rather than relying on machine learning to predict when you’ll need a full charge, it lets you explicitly set a maximum charge level. Your Mac will charge to within a few percentage points of your chosen limit, then stop. If the battery drops more than 5% while connected to power, charging resumes until it reaches the limit again.

To set a charge limit, go to System Settings > Battery, click the ⓘ next to Charging, and choose a limit between 80% and 100%. When the limit is active, the battery status menu shows Charged to X% Limit.

Using Charge Limit is ideal if your MacBook rarely leaves your desk. Setting an 80% limit reduces battery wear while ensuring you always have enough charge for brief periods away from power.

When You Need a Full Charge

What about when you want your MacBook’s battery to be at full strength for an unpredictable day away from power, such as for a long flight? You can override both Optimized Battery Charging and Charge Limit when you need maximum battery life:

  • For immediate needs: Click the battery icon in the menu bar and choose Charge to Full Now. Your Mac will charge to 100% regardless of current settings.
  • To disable limits temporarily: In System Settings > Battery, click the ⓘ next to Charging, turn off Optimized Battery Charging, and click the Turn Off Until Tomorrow button when prompted. Also set Charge Limit to 100%.
  • To disable limits permanently: Follow the same steps as the bullet above, but click the Turn Off button in the warning dialog instead. Also set Charge Limit to 100%. Remember, this will likely reduce your battery’s overall lifespan.

(Similar charging limits and workarounds also apply to the iPhone and Apple Watch. On the iPhone, go to Settings > Battery > Charging and turn off Optimized Battery Charging. For the Apple Watch, look in Settings > Battery > Battery Health on the watch itself.)

About That Slow Charger Warning

The new Slow Charger indicator helps explain why your MacBook might be charging slowly or even draining while in use. If the power adapter doesn’t deliver enough wattage for your Mac model, you’ll now see a warning in the battery menu and in System Settings > Battery.

You can check your current power adapter’s wattage by reading the fine print on the charger itself, or by opening the System Information app and checking the AC Charger section in the Power screen. It’s safe to use an adapter with a higher wattage than required, but don’t go below the wattage of Apple’s included adapters.

For optimal charging, use an adapter that delivers at least the minimum wattage recommended for your Mac:

  • MacBook Neo: 20 watts (no fast charging available)
  • 13-inch MacBook Air: 30 or 35 watts standard, 67 watts for fast charging
  • 15-inch MacBook Air: 35 watts standard, 70 watts for fast charging
  • 14-inch MacBook Pro: 70 watts standard (or 96 watts for M4 Pro and M4 Max chips); 96 watts for fast charging
  • 16-inch MacBook Pro: 140 watts for both standard and fast charging

Using your iPhone’s 20W charger with a MacBook Pro might technically work, but you’ll now be warned that it’s not delivering adequate power.

Finding the Right Balance

Apple’s battery optimization features represent a trade-off between immediate convenience and long-term battery health. For most users, leaving Optimized Battery Charging enabled makes sense—it learns your patterns and charges to full when needed. The new Charge Limit feature offers more explicit control for those who prefer it, particularly those whose MacBooks rarely leave the desk and can be locked at 80%.

If you frequently fight these features, you may have an unpredictable schedule that the algorithms can’t anticipate. In that case, consider turning off Optimized Battery Charging or setting a higher Charge Limit. Just remember that keeping your battery at 100% more often will shorten its lifespan—a trade-off that might be acceptable depending on how long you plan to keep your laptop.

(Featured image by iStock.com/shirophoto)


Social Media: Is your MacBook’s battery stuck at 80%? That’s Apple protecting your battery’s long-term health. macOS 26.4 adds new controls, including Charge Limit and a Slow Charger warning. Learn how these features work—and when to override them.

View Suspicious Documents Safely with Dangerzone

View Suspicious Documents Safely with Dangerzone

A standard piece of advice for staying safe online is to avoid opening attachments from people you don’t know or attachments that seem suspicious. It’s good advice, since PDFs and office documents can contain JavaScript and macros that present a security risk, or they could be maliciously crafted to take advantage of vulnerabilities in common apps to execute code on your computer.

But in the real world, unless the document is attached to a message that is obviously spam, it’s difficult to know whether you should be worried. If you could just look at the document, you might be able to tell, but how can you do that without opening it?

Enter Dangerzone, an open source app created by the nonprofit Freedom of the Press Foundation. The impetus for creating it came from journalists who need to review attachments from possibly untrustworthy sources while protecting themselves from hacking and retaliation from powerful corporate and government interests.

Dangerzone won’t tell you whether or not a document is safe. Instead, when you drop a document on its window, it creates a PDF image of the document that contains nothing of the original other than the visual representation of its pixels. Think of Dangerzone as a virtual photocopier—it makes a visual copy.

But Dangerzone is a highly sophisticated virtual photocopier, since it has to work with malicious documents without allowing them to cause harm. Behind the scenes, Dangerzone first creates a Linux container to keep the document away from your Mac. Within the container, it then creates a sandbox to protect the Linux kernel. Then it uses open source tools—LibreOffice and PyMuPDF—to convert the original document to a PDF, split that PDF into individual pages, and convert each page to RGB pixels—just colored dots. Then it quits the sandbox since the file has been sanitized, and if possible, it converts the RGB pixel data into a compressed, searchable PDF. Finally, it saves the PDF to the specified folder and archives the original file. You can process only one file or batch of files at a time to ensure that the entire secure conversion environment starts fresh each time.

Here are the document types that Dangerzone can convert into safe PDFs:

  • PDF (.pdf)
  • Microsoft Word (.docx, .doc)
  • Microsoft Excel (.xlsx, .xls)
  • Microsoft PowerPoint (.pptx, .ppt)
  • ODF Text (.odt)
  • ODF Spreadsheet (.ods)
  • ODF Presentation (.odp)
  • ODF Graphics (.odg)
  • EPUB (.epub)
  • JPEG (.jpg, .jpeg)
  • GIF (.gif)
  • PNG (.png)
  • SVG (.svg)
  • TIFF (.tif, .tiff)
  • Other image formats (.bmp, .pnm, .pbm, .ppm)

You won’t want to use Dangerzone on every document you receive in email. There’s no reason to fuss with it for attachments that come from people you know, in contexts where it makes sense that they’re sending you something. But if you get an attachment out of the blue that makes you think, “Why is this person sending me a document?” run the document through Dangerzone to make sure it’s safe.

(Featured image by iStock.com/shironosov)


Social Media: Got a suspicious attachment? Dangerzone converts potentially dangerous PDFs and Office docs into safe, pixel-only copies you can view without risk. Think of it as a virtual photocopier that strips any hidden malware, JavaScript, or macros.

Secret Link