Apple issues urgent iOS fixes

Google and iVerify disclosed the Coruna exploit kit on March 3, 2026, describing a toolkit that chains 23 distinct exploits across five full exploit chains and targets devices running iOS 13.0 through iOS 17.2.1. (cloud.google.com) Google Threat Intelligence, Lookout and iVerify published DarkSword research showing a six-vulnerability full-chain exploit (including three zero-days) that researchers observed in campaigns since at least November 2025, with evidence of both state-sponsored and commercial spyware use. (cloud.google.com) Apple released iOS and iPadOS 26.4 to the public on March 24, 2026 and published security content for that release, while Apple Developer logs show legacy security builds iOS 16.7.15 and iOS 15.8.7 were issued on March 11, 2026. (developer.apple.com) (support.apple.com) Reporting shows Apple devices running older builds received lock‑screen “Critical Software” notifications as part of the response, and CISA added three Apple CVEs tied to DarkSword to its Known Exploited Vulnerabilities catalog with a federal remediation due date of April 3, 2026. (macrumors.com) (bleepingcomputer.com) Analyst coverage and past cadence point to an iOS 26.5 developer beta window in early April 2026 with a public beta following several weeks later, a timing inference drawn from the March 24 public launch of iOS 26.4 and Apple’s historical four‑to‑six‑week.5 update rhythm. (9to5mac.com) (apple.gadgethacks.com) For executive updates tied to this surge, present a single slide with five concrete fields—(1) active exploit names: Coruna and DarkSword, (2) affected builds: iOS 13.0–17.2.1 and iOS 18.4–18.7.x, (3) patched builds released: iOS/iPadOS 26.4 and legacy builds 16.7.15/15.8.7 (March 11–24, 2026), (4) remediation metric: percentage of fleet updated within X hours, and (5) immediate ask: emergency MDM push window and SLA—aligning slide facts to the public disclosures and Apple release notes. (cloud.google.com 1) (cloud.google.com 2) (developer.apple.com)