CVE-2023-32434
Sfruttamento noto · CISA KEV
CVSS 7.8 HIGH: an integer overflow was addressed with improved input validation. EPSS 52% (99º percentile).
Data di correzione federale CISA 14 lug · data superata
Malware e strumenti · Spionaggio APT
Kaspersky ha scoperto che l'exploit kit Coruna include exploit kernel aggiornati impiegati in Operation Triangulation. Il kit contiene 23 exploit che mirano a iOS 13–17.2.1 e controllori A17/M3 ed è stato usato per spionaggio mirato e campagne di massa. Le vulnerabilità chiave sono CVE-2023-32434 e CVE-2023-38606.
4 fonti · 27 mar
Sfruttamento noto · CISA KEV
CVSS 7.8 HIGH: an integer overflow was addressed with improved input validation. EPSS 52% (99º percentile).
Data di correzione federale CISA 14 lug · data superata
Sfruttamento noto · CISA KEV
CVSS 5.5 MEDIUM: this issue was addressed with improved state management. EPSS 3% (86º percentile).
Data di correzione federale CISA 16 ago · data superata
SecurityWeek
Coruna iOS Exploit Kit Likely an Update to Operation Triangulation
Coruna contains the updated version of a kernel exploit used in Operation Triangulation three years ago.
originaleThe Hacker News
Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in Recent Mass Attacks
Coruna reuses Triangulation kernel exploits targeting iOS 13–17.2.1 devices, expanding attacks into mass exploitation campaigns.
originaleBleepingComputer
Coruna iOS exploit framework linked to Triangulation attacks
The Coruna exploit kit is an evolution of the framework used in the Operation Triangulation espionage campaign, which in 2023 targeted iPhones via zero-click iMessage exploits.
originalePart of the PlainSec briefing for 2026-03-27
Every edition of this story: Coruna Riusa Zero‑Day di Operation Triangulation contro iPhone