Ledger Chief Technology Officer Charles Guillemet warned that the DarkSword attack targeting iPhone Safari could steal wallet information and recovery phrases simply when a user visits a website. Apple fixed six vulnerabilities in iOS 26.3, while the vulnerabilities have reportedly been exploited since around November 2025. Guillemet advised users not to store recovery phrases in images or locations that synchronize across devices.