New Vulnerability Discovered in Outdated iPhones: Yet Another Exploit Chain

A New macOS Exploit Discovered by Microsoft

Microsoft recently disclosed a new exploit chain named DarkSword, following the revelation of the Coruna exploit chain targeting older iOS versions. The DarkSword attack shares similarities with Coruna. Here’s what you need to know.

A Reminder to Keep Your Devices Updated

Google and iVerify recently published reports on the Coruna exploit, prompting Apple to release iOS and iPadOS updates addressing vulnerabilities leveraged by Coruna. It’s crucial to keep your devices updated to prevent such exploits.

Apple also published a support document emphasizing the importance of updating iOS to protect against web-based attacks. Users with outdated iOS versions are advised to update to the latest software for enhanced security.

Apple recommends updating to the latest iOS versions to safeguard your data. Users with older iOS versions can consider enabling Lockdown Mode for additional protection against malicious web content and threats.

DarkSword, similar to Coruna, exploits multiple vulnerabilities to compromise devices at the kernel level. Commercial surveillance vendors and state-sponsored actors have utilized DarkSword in targeted campaigns in various countries.

The CVEs associated with DarkSword include:

• CVE-2025-31277 (patched in iOS 18.6)
• CVE-2026-20700 (patched in iOS 26.3)
• CVE-2025-43529 (patched in iOS 18.7.3 and iOS 26.2)
• CVE-2025-14174 (patched in iOS 18.7.3 and iOS 26.2)
• CVE-2025-43510 (patched in iOS 18.7.2 and iOS 26.1)
• CVE-2025-43520 (patched in iOS 18.7.2 and iOS 26.1)

For more technical details, refer to the GTIG report, which highlights the methods and payloads associated with DarkSword. It’s essential to ensure that your devices are running the latest iOS version for optimal security.

Explore More on Amazon