tech
March 29, 2026
A major hacking tool has leaked online, putting millions of iPhones at risk. Here’s what you need to know.
Here’s what we know, and what you need to know, about Coruna and DarkSword, two advanced iPhone hacking tools discovered by security researchers. DarkSword has now leaked online.

TL;DR
- Two advanced hacking toolkits, Coruna and DarkSword, target iPhones and iPads, stealing data like messages, location history, and cryptocurrency.
- Coruna exploits iOS versions 13 through 17.2.1, while DarkSword targets more recent iOS versions (18.4 to 18.7).
- Part of DarkSword has been leaked online on GitHub, increasing the risk for users with older iOS versions.
- Coruna's exploits were developed by Trenchant, a unit within U.S. defense contractor L3Harris, and have been linked to government spies.
- DarkSword has been observed targeting users in China, Malaysia, Turkey, Saudi Arabia, and Ukraine, but its origin remains unclear.
- Users are urged to update their iPhones and iPads to the latest iOS versions to mitigate these threats.
- Apple states that users running the latest versions of iOS 15 through iOS 26 are protected.
- Lockdown Mode, an extra security feature, also blocks these specific attacks and has no public evidence of being bypassed.
- Potentially hundreds of millions of Apple devices could be vulnerable due to users not running the latest iOS software.
Continue reading the original article