Vulnerabilities & Exploits · Zero-Day Exploit
Researchers attribute mass-scale iPhone exploitation to a sophisticated iOS exploit kit called Coruna. The kit contains five exploit chains and 23 exploits that target iOS 13 through 17.2.1. Researchers traced Coruna from a surveillance-customer operation to suspected Russian espionage and then to financially motivated actors targeting government and financial sectors.
9 sources · Mar 12
The Hacker News
Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit
Apple backports CVE-2023-43010 WebKit fix after Coruna exploit kit abused iOS flaws, protecting older iPhones and iPads from memory corruption attacks
originalBleepingComputer
CISA warns feds to patch iOS flaws exploited in crypto-theft attacks
federal agencies to patch three iOS security flaws targeted in cyberespionage and crypto-theft attacks using the Coruna exploit kit.
originalArs Technica Security
Feds take notice of iOS vulnerabilities exploited under mysterious circumstances
The long, strange trip of a large assembly of advanced iOS exploits.
originalPart of the PlainSec briefing for 2026-03-05
Every edition of this story: Mass iPhone Attacks Tied to Coruna Exploit Kit