Tag: CVE-2025-31277

1 Attack Reports | 1 Vulnerabilities

Attack reports

The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

Google Threat Intelligence Group has identified a new iOS full-chain exploit called DarkSword, which leverages multiple zero-day vulnerabilities to compromise devices running iOS 18.4 through 18.7. Since November 2025, multiple commercial surveillance vendors and suspected state-sponsored actors ha…
ios
state-sponsored
zero-day
watering hole
exploit chain
CVE-2025-31277
CVE-2025-43529
CVE-2025-14174
CVE-2025-43510
CVE-2025-43520
coruna
2026-03-18
commercial surveillance
CVE-2026-20700
darksword
ghostblade
ghostknife
ghostsaber
Published: March 18, 2026
Linked vulnerabilities : CVE-2025-31277 (CVSS 8.8), CVE-2025-43529 (CVSS 8.8), CVE-2025-14174 (CVSS 8.8), CVE-2025-43510 (CVSS 7.8), CVE-2025-43520 (CVSS 7.1), CVE-2026-20700
Downloadable IOCs: 4
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-31277

8.8
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025
Click here to see more Vulnerabilities