Related Threat Clusters
-
DarkSword iOS Exploit Chain Targets Mobile Devices Globally
The Google Threat Intelligence Group has identified DarkSword, a full-chain iOS exploit affecting versions 18.4 to 18.7. This exploit leverages multiple zero-day vulnerabilities, including CVE-2025-31277 and…
2 articles · Updated July 11, 2026 -
Coruna and DarkSword iOS Exploit Kits Targeting Users Globally
The Coruna and DarkSword iOS exploit kits, initially limited to nation-state actors, are now being widely adopted by organized cybercriminals. iVerify has tracked around 17,000 domains associated with second-generation…
3 articles · Updated August 10, 2026 -
CISA Includes Coruna Exploit Kit iOS Vulnerabilities in KEV List
CISA has added 23 vulnerabilities exploited by the Coruna exploit kit targeting iOS versions 13 to 17.2.1 to its Known Exploited Vulnerabilities (KEV) list. The exploit kit is associated with nation-state actors,…
2 articles · Updated March 6, 2026 -
Coruna iOS Exploit Kit Targets Multiple Threat Actors
The Coruna iOS exploit kit has emerged, targeting Apple iPhone models running iOS 13.0 to 17.2.1. It includes five exploit chains and 23 exploits, with advanced techniques that are non-public. Various threat actors,…
372 articles · Updated March 3, 2026
Recent Intelligence Reports
- Darksword — www.lookout.com · August 13, 2026
- 3 Apple flaws from Coruna exploit kit added to CISA vulnerability list | news — Scmagazine · March 6, 2026
- Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit — Mandiant · March 3, 2026