Apple Breaks Precedent, Patches DarkSword for iOS 18
2026-04-03T20:51:42Z•b37e668b295e8ddbdbe3d6af7a827ba774c4a9981afabab9c99fc5de0edde43b
ai-malwareaxioscasbaneiroclaude-source-leakcve-2025-53521darksworddeeploadf5-big-ipgoogle-pqcioslangflowmobile-securitynpm-compromisesupply-chain-securityteampcptelegram-vulnerabilityvenom-stealervertex-ai
What happened
This DarkReading roundup highlights multiple active, high-impact threats and supply-chain risks: Apple patched DarkSword exploits for iOS 18, F5 BIG‑IP flaw CVE-2025-53521 was reclassified as an RCE and is under exploitation, and TeamPCP supply-chain/cloud credential attacks are expanding with other criminal groups taking credit. Other notable issues include a Claude source-code leak and broader supply-chain hardening discussions (Chainguard), an Axios NPM package compromise, a critical Langflow code-injection flaw being actively exploited, AI-powered malware (DeepLoad) and MaaS (Venom stealer
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- b37e668b295e8ddbdbe3d6af7a827ba774c4a9981afabab9c99fc5de0edde43b
- Enrichment time
- 2026-04-03T20:51:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.