The kit, named DarkSword, has a variety of possible implications, the research from iVerify, Lookout and Google suggests.

Researchers traced the kit moving from a spyware vendor’s customer to Russian hackers to Chinese cybercriminals.

The tech giant didn’t report active exploitation of any of the patched defects, yet details about potential impacts remain limited.

The system, a five-year effort to address memory safety “at scale,” is the result of spyware developers making zero-click exploits that targeted a device’s memory.

The defect, which affects the company’s most popular devices, has been exploited in an “extremely sophisticated attack against specific targeted individuals,” Apple said.

Both companies have faced controversy in recent years, primarily for their work in circumventing mobile device security features

The company released a host of security patches Monday, including ones that address two zero-day vulnerabilities.

Apple released emergency software patches Tuesday that address a newly identified zero-day vulnerability in the company’s WebKit web browser engine.  Tracked as CVE-2025-24201, an attacker can potentially…

The zero-day impacts Apple’s framework that manages audio and video playback.

The operations are just the latest example of the proliferation of sophisticated spyware among private vendors, Google says.