Google GTIG and iVerify uncovered Coruna, a nation‑state‑grade iOS exploit kit with 23 exploits across five exploit chains that targets iOS 13–17.2.1 and has been used by UNC6353 and later criminal actors in watering‑hole and fake financial‑site campaigns against government and financial users. Mitigate by updating devices to iOS 17.3+, enabling Lockdown Mode if you cannot update, hunting telemetry for iOS 13–17.2.1 indicators, blocking known watering‑hole domains, and isolating compromised devices for forensic imaging.