Coruna and DarkSword iPhone exploit kits spread via 608 web domains and a backdoored npm package
THREAT ACTORCVE-2022-48503redteam/daily · 1 source
- Severity
- High
- Exploited
- Yes
- Sources
- 1
What happened
Two sets of hacking tools, called Coruna and DarkSword, can break into iPhones that visit a booby-trapped web page, with no app to install. Researchers found hundreds of websites, including dating, casino and chat sites, delivering them. Updating the iPhone to the latest iOS version fixes the flaws used.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- CVE-2022-48503 is being exploited: treat it as urgent.
- CISA’s required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Check whether you use Apple Multiple Products: add it to your watchlist to hear when it is affected. Open your watchlist
Based on advisory data
Vulnerabilities
Full story timeline · 2 updates
Who reported · 1 outlet
Cyber Security News