APPLE has warned that iPhones running outdated iOS versions are vulnerable to Coruna and DarkSword exploit kits and urges users to update iOS. The advisory notes these attacks use malicious web content to trigger infections that can steal data, with Lockdown Mode providing an additional protective measure but updates remaining strongly recommended.
The piece draws on a Lookout report identifying DarkSword as a powerful iOS exploit tool used since late 2025 by multiple threat actors, including surveillance vendors, and notes that Google’s GTIG has observed exploitation across Ukrainian and broadly targeted campaigns. Coruna, described as targeting iPhones on iOS 13.0 through 17.2.1 and comprising 23 exploits, is said to be ineffective against the latest iOS release, according to the report.
The article lists update guidance for various iOS versions, emphasising that devices on the latest iOS versions are not vulnerable and detailing March 11, 2026 updates for older devices. It also highlights that in February 2025 Google’s Threat Intelligence Group identified Coruna, with Lookout and collaborators later naming DarkSword as a distinct chain, underscoring the evolving risk of exploit proliferation across actors.