Apple Breaks Precedent, Patches DarkSword for iOS 18
ID: 27edf102-bcbf-5850-abf8-72e10eb86e20
STIX ID: report--27edf102-bcbf-5850-abf8-72e10eb86e20
Feed Name: Dark Reading
Apple backported patches after the DarkSword exploit chain leaked to GitHub and began appearing in active campaigns alongside the previously disclosed Coruna iOS exploit kit. DarkSword provides privilege escalation without rooting (making detection harder), Coruna had root capabilities and wormable SMS-based C2 potential; both were used or tested by criminal and surveillance-ware actors (including an observed TA446 phishing campaign). The leak and active use forced Apple to extend fixes to additional iOS versions, highlighting the growing market for n-day iOS exploit kits and operational challenges for organizations that delay or restrict OS upgrades.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
