Update or Wait?

Inside the iOS Security Dilemma Every iPhone User Faces

With DarkSword exposing 270 million iPhones and Apple’s history of slowing
older devices, users are caught between a real threat and a familiar trust
deficit.

Abet News · March 20, 2026

Before we get into what DarkSword is, what it does, and what Apple is asking
you to do about it — we want to know where you stand:

[ READER POLL ]
When Apple releases a security update, what’s your first instinct?
A) I update immediately — security comes first
B) I wait a few days to see if others report problems
C) I check forums and tech sites before deciding
D) I delay as long as possible — I don’t trust Apple’s updates

[ READER POLL ]
Has an iOS update ever noticeably slowed down your device?
E) Yes — and it never recovered
F) Yes — but it seemed to improve after a later update
G) No, I haven’t noticed any difference
H) I’m not sure / I don’t pay close attention

The Threat Is Real: What Darksword Actually Does

This week, security researchers disclosed details of DarkSword — an iOS
exploit kit that chains six vulnerabilities together, including three previously
unknown zero-days, to give attackers complete control over a targeted iPhone.
The attack is what researchers call a drive-by: simply visiting a malicious or
compromised website is enough to trigger infection. No taps required. No
downloads prompted. The page loads, and within seconds, the malware is running.

The payload researchers identified — named GHOSTBLADE — is comprehensive in
what it can steal: SMS and iMessage conversations, call logs, contacts, saved
passwords, Safari cookies, Wi-Fi credentials, location data, photos, iCloud
files, emails, and cryptocurrency wallet data from apps like Coinbase, Binance,
and MetaMask. WhatsApp and Telegram message histories are also targeted.

Any iPhone running iOS 18.4 through 18.7 is potentially affected — an
estimated 270 million devices worldwide. Multiple threat actors have already
used the kit, including a suspected Russian state-sponsored group and customers
of a Turkish commercial surveillance vendor. The kit has been active since at
least November 2025.

Apple has patched all six vulnerabilities. The fix is in iOS 18.7.6 and iOS
26.3.1. For users on older iOS versions, Apple extended patches to iOS 15 and
16 in March 2026. The update is, by any objective measure, important.

Music as a Stress Reliever: GoAvo Announces New Album Human

The Trust Problem: Apple’s History With Updates

The hesitation many users feel when a new iOS update drops is not irrational.
It is learned.

In 2017, Apple was caught deliberately throttling CPU performance on older
iPhones through software updates. The company’s explanation — that it was
managing power draw from degraded batteries to prevent unexpected shutdowns —
had a kernel of technical truth. But for millions of users who had experienced
their perfectly functional devices becoming sluggish after an update with no
explanation, it confirmed a long-held suspicion. Apple eventually apologized,
offered discounted battery replacements, added a Battery Health transparency
tool, and ultimately paid $500 million in a class action settlement.

That episode was not an isolated incident. Across Apple’s product lines — Mac,
iPad, and iPhone alike — users have documented a consistent pattern: updates
designed for newer hardware land on older devices and quietly degrade the
experience. Features get locked to new models even when older hardware could
technically support them. The upgrade cycle, conveniently, benefits Apple’s
bottom line.

None of this means every security update is a trojan horse for planned
obsolescence. Apple’s engineering teams and its security teams are not the same
people with the same goals. But the company has long since spent the benefit of
the doubt it once carried.

For long-time Apple users — the ones who remember the pre-throttling era of
Mac OS updates slowing down perfectly capable machines — the skepticism runs
even deeper. The battery story was new. The pattern was not.

The Browser Myth Worth Addressing

One common misconception is worth clearing up: switching to a third-party
browser like DuckDuckGo, Brave, or Chrome on iPhone does not protect you from
an exploit like DarkSword. Apple’s App Store rules have historically required
all third-party iOS browsers to use Apple’s own WebKit rendering engine
underneath. The address bar and privacy features may differ, but the underlying
engine parsing the web page — the vulnerable component — is identical to
Safari’s. Clearing your history and cookies helps with tracking, but does
nothing to prevent a drive-by exploit that executes before you would ever think
to clear anything.

This is a meaningful structural limitation of iOS that distinguishes it from
Android, where browsers can ship their own engines. On iPhone, WebKit
vulnerabilities are universal browser vulnerabilities.

What You Can Actually Do

If you decide to update, checking Settings → Battery → Battery Health before
and after gives you a concrete baseline for monitoring any performance impact.
User reports on forums like Reddit’s r/apple tend to surface real-world effects
within 48 to 72 hours of a major update’s release — waiting that window costs
relatively little if DarkSword is not already targeting you.

For users who are genuinely high-risk targets — journalists, activists,
executives, or anyone who has reason to believe they could be surveilled —
Apple’s Lockdown Mode (Settings → Privacy & Security → Lockdown Mode)
significantly restricts the browser attack surface by disabling certain web
technologies that exploit kits rely on. It is not for everyday use, but for
those who need it, it is meaningful protection independent of any update cycle.

The honest answer to the dilemma DarkSword poses is that the threat is real,
the update is legitimate, and your distrust of Apple’s motivations is also
legitimate. Those two things are not contradictory. They are simply the reality
of being an iPhone user in 2026.

Share your poll responses and thoughts in the comments below. Abet News
publishes reader results on a rolling basis.

Andy Young