logo

Apple urges iPhone users to update as Coruna and DarkSword exploit kits emerge

ID: 0c3f0873-2286-5a90-920b-dfc352942f88

STIX ID: report--0c3f0873-2286-5a90-920b-dfc352942f88

Feed Name: Security Affairs

Threat Score
88/100

Date Published: 2026-03-20

Date Updated: 2026-04-22

Author: Pierluigi Paganini

...
...

The report describes two advanced iOS exploit kits — Coruna (targeting iOS 13.0–17.2.1) and DarkSword (targeting iOS 18.4–18.7) — used in active campaigns by multiple actors (including UNC6353 and UNC6691 and surveillance vendors) to deliver full-chain exploits, bypass mitigations, and exfiltrate sensitive data (notably crypto wallets and credentials); it lists affected CVEs, campaign details, IOCs/Yara rules, and recommends updating iOS and enabling Lockdown Mode.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.