Cybersecurity researchers have discovered a new iPhone exploitation technique dubbed "DarkSword" that can compromise devices running Apple's latest iOS 18 operating system through malicious websites.

The attack method allows hackers to take control of iPhones when users simply visit infected web pages, requiring no additional user interaction beyond browsing to a compromised site. This type of attack, known as a "watering hole" or drive-by download, represents a significant security concern as it requires minimal user error to succeed.

Security experts have linked the use of DarkSword to Russian-affiliated hacking groups, though the full scope of its deployment remains under investigation. The technique targets hundreds of millions of devices potentially vulnerable to this form of attack.

Apple has not yet publicly commented on the discovery or indicated whether a security update addressing the vulnerability is in development. The company typically releases security patches quickly after researchers report critical vulnerabilities that affect user safety.

The discovery highlights ongoing cybersecurity challenges facing mobile device users, as sophisticated nation-state actors continue developing new methods to compromise smartphones and access sensitive personal information.