Google reveals another exploit chain affecting outdated iPhones

Following the recent disclosure of the Coruna exploit chain targeting older iOS versions, a similar attack named DarkSword has been revealed. Here are the details.

A few more reasons to keep your devices up to date

A few weeks ago, Google and iVerify released reports on the Coruna exploit, which exploited multiple vulnerabilities in iOS to compromise iPhones with outdated system versions.

Apple responded by releasing iOS 16.7.15, iOS 15.8.7, iPadOS 16.7.15, and iPadOS 15.8.7, addressing the vulnerabilities used in the Coruna exploit.

Apple also published a support document urging users to update their iOS to protect against web attacks targeting older versions. The document provides detailed instructions for updating to the latest iOS versions.

If you have kept your iPhone software up to date, then you are already protected. (…) If your iPhone has an older version of iOS, update to protect your data:

• Devices with the latest iOS versions are already protected. Update your software if you haven’t done so recently.
• A software update was released on March 11, 2026, to extend protection to older devices.
• Devices with iOS 13 or iOS 14 must update to iOS 15 to receive additional protections.
• Apple Safe Browsing in Safari blocks malicious URL domains identified in these attacks.

Note: Users unable to update their device can consider enabling Lockdown Mode for added protection.

Alongside the Coruna exploit, another exploit chain known as DarkSword has been identified by the Google Threat Intelligence Group (GTIG). DarkSword has been used by commercial surveillance vendors and suspected state-sponsored actors in various campaigns.

DarkSword functions similarly to Coruna, exploiting multiple vulnerabilities to compromise devices at a kernel level. It is delivered through compromised websites and deploys payloads like GHOSTBLADE, GHOSTKNIFE, and GHOSTSABER.

GTIG has associated several CVEs with DarkSword, including those patched in recent iOS updates.

For a deeper technical analysis, refer to GTIG’s report in collaboration with Lookout and iVerify. Stay vigilant and ensure your devices are running the latest iOS version.

Worth checking out on Amazon