aiqbench analysis
This article details critical zero-day vulnerabilities in iOS WebKit and JavaScriptCore that allow attackers to bypass browser sandboxes and achieve kernel-level control via exploit kits like Coruna and DarkSword. The research highlights the specific threat landscape for users running older or unpatched versions of iOS, emphasizing how chained flaws enable data theft without user interaction.
Coruna and DarkSword Exploit Kits Can Fully Compromise iPhones From a Single Web Visit
Two powerful iPhone exploit kits, Coruna and DarkSword, show how a visit to a malicious or compromised website can put an outdated device at risk. The kits can link several software flaws together to break out of the browser and reach deeper parts of iOS. Depending on the device’s software version and the kit used, […] The post Coruna and DarkSword Exploit Kits Can Fully Compromise iPhones From a Single Web Visit appeared first on Cyber Security News.
Two powerful iPhone exploit kits, Coruna and DarkSword, show how a visit to a malicious or compromised website can put an outdated device at risk. The kits can link several software flaws together to break out of the browser and reach deeper parts of iOS. Depending on the device’s software version and the kit used, an attacker may then steal sensitive information without needing the user to install an app or tap through extra prompts. These are not ordinary malicious webpages. An exploit…
Excerpt shown under the publisher's RSS terms · 83 words · full text and figures are on the publisher's site
Related coverage
DarkSword iOS Exploit Kit Spreads Across 180 Web Properties and 27 Hosts
Cybersecurity News · Aug 4, 2026
DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases
Cybersecurity News · Oct 8, 2026
Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ Stories
Cybersecurity News · Sep 14, 2026
Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories
Cybersecurity News · Aug 23, 2026