UNC6353

Reports per quarter

CVEs named in reports

• CVE-2022-48503 KEV
• CVE-2023-43000 KEV
• CVE-2024-23222 KEV
• CVE-2025-14174 KEV
• CVE-2025-31277 KEV
• CVE-2025-43510 KEV
• CVE-2025-43520 KEV
• CVE-2025-43529 KEV
• CVE-2026-20700 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 18 March 2026

   The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

2. 3 March 2026

   Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

3. 3 March 2026

   Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

Newest first. Details opens the report in Explore.