Coruna and DarkSword iOS Exploit Chains Proliferate to Global Cybercrime

Dark Reading reports that sophisticated iPhone exploit chains previously limited to nation-states are spreading far and wide to organized cybercrime groups. The exploit chains, codenamed Coruna and Dark Sword, represent sophisticated iOS vulnerability chains that have historically been the domain of nation-state threat actors. As of August 2026, these capabilities are reported to be reaching organized cybercrime groups worldwide, marking a significant shift in the accessibility of high-grade iPhone exploitation tools. The proliferation suggests that previously restricted exploit infrastructure is now available to a broader range of threat actors, potentially enabling more widespread cybercrime operations targeting iPhone and iOS users. While specific CVE identifiers were not listed in the source reporting, the report indicates active exploitation of iOS vulnerabilities as part of these chains. Apple is expected to issue security updates to address the exploited vulnerabilities, and users are advised to update to the latest iOS versions immediately to mitigate risk.