darksword

Apple Is Literally Warning Millions of iPhone Users: You're Being Attacked Right Now

John Z Black Mar 28, 2026

Vulnerabilities & Patching #apple #ios #iphone #exploit #coruna #darksword #lockdown-mode #mobile-security #consumer

Apple pushed lock screen alerts to millions of iPhones warning of active attacks from the Coruna and DarkSword exploit kits -- and some users have no patch path at all.

CISA Added Five Actively Exploited Flaws to Its List. You Have Until April 3.

John Z Black Mar 25, 2026

Vulnerabilities & Patching #cisa #kev #apple #laravel #craft-cms #patch #vulnerability #darksword

CISA added five actively exploited vulnerabilities to its KEV catalog, including three Apple flaws tied to the DarkSword iOS exploit kit and a CVSS 10.0 RCE in Craft CMS. The April 3 deadline is for federal agencies. The exploitation isn't.

iPhone Exploit Kits Go Mainstream: DarkSword, Coruna, and the End of 'iOS Is Enough'

John Z Black Mar 21, 2026

Vulnerabilities & Patching #ios #apple #darksword #coruna #mobile-security #exploit-kit #zero-day #nation-state

New research from Google, iVerify, and Lookout confirms iOS exploit kits have moved from rare targeted spyware to website-level deployment against broad populations. A companion toolkit was found targeting US government officials specifically.

DarkSword Spread Beyond One Campaign. Mobile Risk Has to Follow.

John Z Black Mar 19, 2026

Threat Intelligence #darksword #ios #mobile-exploitation #threat-intelligence #enterprise-security #high-risk-users #incident-response

Google threat intelligence ties DarkSword-linked iOS exploitation to a broader actor picture than earlier reporting suggested. The bigger signal isn't the exploit chain. It's that the capability is spreading across actors and channels.

iPhone Exploit Chains Are Becoming a Market, Not a One-Off

John Z Black Mar 18, 2026

Threat Intelligence #ios #darksword #iphone #spyware #threat-intelligence #mobile-security #webkit

DarkSword iOS exploit capability is showing up across multiple actor sets -- state-linked groups, commercial spyware vendors, and infostealer campaigns. The old 'rare nation-state' framing doesn't hold anymore.