Apple has begun notifying users of iPhones and iPads on older iOS versions about potential web-based threats. These alerts encourage immediate updates to enhance device security. The notifications follow a recent advisory from Apple highlighting the risks associated with outdated software and the emergence of new exploit kits, including Coruna and DarkSword.
Coruna targets devices operating between iOS 13.0 and 17.2.1, while DarkSword affects those running versions 18.4 to 18.7. Kaspersky's latest report indicates that Coruna represents an advanced iteration of the exploit framework first utilized in the sophisticated Operation Triangulation campaign, which became known for its zero-click iMessage exploits.
The report raises alarms regarding the potential for these exploit kits to be accessible to a broader range of threat actors, posing increased risks for iPhone and iPad users. For those unable to upgrade their devices, Apple recommends enabling Lockdown Mode, available on devices with iOS 16 or newer, to mitigate risks from harmful web content.