Apple iOS 26 Security Improvements Face Challenges from Leaked Exploit Tools

Key Points

• iOS 26 introduces Memory Integrity Enforcement for iPhone 17 models to prevent memory corruption
• Lockdown Mode expanded to counter potential spyware attacks
• Coruna and DarkSword exploit kits targeting millions of devices on older iOS versions
• Researchers document near-indiscriminate hacking campaigns using leaked tools

Full Details

Apple has made significant security strides with the release of iOS 26, introducing Memory Integrity Enforcement for iPhone 17 models and expanding Lockdown Mode to better protect users against sophisticated spyware attacks. These new features represent substantial investments by Apple in memory-safe code development and targeted defenses against zero-day exploits. However, cybersecurity researchers at Google, iVerify, and Lookout have documented several broad-scale hacking campaigns using tools known as Coruna and DarkSword that have been near-indiscriminately targeting victims worldwide who are not running Apple's most up-to-date software. The challenge lies in the enormous population of devices still running iOS 18 or earlier versions, which contain known vulnerabilities that these exploit kits can target. The combination of Apple's improved security for new devices and the continued vulnerability of older devices creates a two-tier security landscape where only those with the latest hardware and software receive meaningful protection against modern threats.