- Apple is urging users of outdated iOS versions to update their iPhones immediately to protect against powerful web-based exploit kits, Coruna and DarkSword.
- These attacks, distributed through compromised websites, have been adopted by multiple threat actors for mass-scale data theft, moving beyond targeted nation-state espionage.
- Devices running iOS versions 15 through 26 are already protected, while users cannot update to the latest version received emergency security patches like iOS 15.8.7.
Apple issued a critical warning in March 2026, urging iPhone users worldwide to update outdated iOS software immediately. The company is responding to mass-scale attacks exploiting old vulnerabilities via powerful exploit kits like Coruna and DarkSword.
These kits use malicious web content from compromised sites to steal sensitive data from unsuspecting users. Apple confirmed that attackers trigger an infection chain when a user clicks a malicious link or visits a compromised website.
In a support document, the company said, “For example, if you’re using an older version of iOS and were to click a malicious link or visit a compromised website, the data on your iPhone might be at risk of being stolen.”
Devices already on the latest iOS versions, from 15 through 26, have fixes and require no action. Consequently, Apple provided a specific action plan for other users.
This plan includes updating to emergency patches like iOS 15.8.7 or enabling Lockdown Mode if an update is impossible. Apple emphasized that keeping software updated is the most important security step.
The advisory followed alarming reports from security firms about the widespread use of these iOS exploits. iVerify noted these tools were now being used on a mass scale rather than for selective, targeted attacks.
Spencer Parker, chief product officer at iVerify, said the discoveries signal a dangerous shift. He stated, “nation-state-grade mobile exploitation is now available for mass attack.”
He further warned that evidence confirms these exploits are repurposed easily. This makes modified deployments highly likely to infect unpatched users globally.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
