Apple Sends Lock Screen Alerts to Outdated iPhones Over Active Web-Based Exploits

Apple is sending Lock Screen notifications to iPhones and iPads running older iOS and iPadOS to warn users of web-based attacks and urge installation of a critical update. The alerts follow disclosures about exploit kits Coruna and DarkSword—used by multiple threat actors to deliver malicious payloads via compromised websites—and advise updating or enabling Lockdown Mode if upgrades are not possible. #Coruna #DarkSword

Keypoints

Apple is sending Lock Screen notifications to users on older iOS and iPadOS urging immediate updates.
Coruna targets iOS versions 13.0–17.2.1 while DarkSword targets iOS 18.4–18.7.
Kaspersky reports Coruna is an evolution of the Operation Triangulation zero‑click iMessage framework.
Researchers warn a market for second‑hand zero‑day exploits may be spreading these kits to various threat actors.
Users who cannot update should enable Lockdown Mode to reduce exposure to malicious web content.