# 130 - Apple's Rare Concession: When Critical Vulnerabilities Meet the 'Update Refusal' Wave
For iOS users, recent news about the Coruna and DarkSword vulnerabilities has become unavoidable. Both exploit chains use watering hole attacks, requiring no user interaction — simply visiting a legitimate website with a malicious iframe or loading a compromised ad in Safari is enough to trigger the full attack chain, after which the malware cleans its traces. Since the exploited vulnerabilities span most versions of iOS from 13 to 18.7, hundreds of millions of devices have been affected to date.