International
The Morning Dev

Only the news worth knowing

‹
 
A65/100

Vulnerability · high

Leaked exploit kits used to hack iPhones via Instagram ads

Tier A · Patch today – Before you go home

Who’s exposed: Employees' iPhones reached via ads and compromised websites

Tier A because: Core infrastructure or popular tool AND exploited in the wild

Reach

Attack

Damage

Fix

Popular tool · Exploited in the wild · Public exploit

The Brief

  • Criminals are using leaked exploit kits to break into vulnerable iPhones, according to iVerify's 2026 Advanced Mobile Threat Report.
  • Attacks delivered through ads and compromised websites have reached employees who use iPhones for work.
  • The DarkSword exploit kit chains together several software flaws.

Why it matters

Leaked exploit kits lower the barrier for attackers to compromise iPhones, and work devices are being targeted through ordinary web ads and compromised sites.

The checklist behind the tier

Checklist · 4 of 10 yes
YesHits tech teamsiPhones used by employees for work; iOS is an OS developers and IT teams use.
NoCore infrastructureiOS is a single vendor's mobile OS, not software nearly every team runs like OpenSSH or the Linux kernel.
YesPopular tooliOS is a widely used mainstream operating system.
YesExploited in the wildHelp Net Security: criminals are using leaked exploit kits to break into vulnerable iPhones.
YesPublic exploitHelp Net Security: leaked exploit kits are circulating and being used by criminals.
NoRemote, no loginHelp Net Security: attacks delivered through ads and compromised websites; no source says zero-click or unauthenticated access.
NoFull takeoverHelp Net Security: 'break into' iPhones; no source explicitly states code execution or root access.
NoSecrets exposedHelp Net Security does not report any credentials, data or configs being stolen.
NoSupply chainHelp Net Security describes exploit kits delivered via ads and websites, not a compromised trusted channel.
NoNo fix yetHelp Net Security does not say whether Apple has shipped a patch.

Timeline

  1. iVerify 2026 Advanced Mobile Threat Report on leaked exploit kit attacks on iPhones reported

  2. Help Net Security

    An Instagram ad was all it took: Leaked exploit kits are hitting employees’ iPhones

Source

An Instagram ad was all it took: Leaked exploit kits are hitting employees’ iPhones ↗ Help Net Security · 3h ago

First seen · 1 source · Full story page · How tiers are decided