CISA Issues Warning on Apple Vulnerabilities Exploited Through DarkSword iOS Chain

CISA has issued an urgent advisory that three critical Apple vulnerabilities (CVE-2025-31277, CVE-2025-43520, CVE-2025-43510) are actively exploited as the multi-stage "DarkSword" iOS chain, enabling remote kernel-level takeover across macOS, iOS, iPadOS, watchOS, tvOS, and visionOS via malicious web content and apps; federal agencies must apply mitigations by April 3, 2026 under BOD 22-01, and all organizations and consumers are strongly urged to update or discontinue vulnerable devices.