Signal
Coruna iOS exploit kit linked to 2023 Operation Triangulation vulnerabilities
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-03-26 08:00 UTCUpdated 2026-03-26 11:07 UTC
rss
cveexploitsmalwarethreat_actorsincident_response
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.2 top sources shown
limited source diversity in top sources
Overview
The Coruna iOS exploit kit, recently uncovered in mass attacks, reuses kernel exploits for two security vulnerabilities first seen in the 2023 Operation Triangulation campaign.
Entities
GoogleiVerifyKasperskyOperation TriangulationCoruna
Score total
1.03
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
Why now
- Recent discovery of Coruna kit in mass attacks raises immediate security concerns.
- New analysis confirms link to high-profile 2023 Operation Triangulation exploits.
- Timely information for defenders to prioritize patching and incident response.
Why it matters
- Highlights ongoing exploitation of patched iOS vulnerabilities by advanced threat actors.
- Demonstrates reuse and evolution of exploit code in mobile APT campaigns.
- Signals persistent risk to iOS device security from sophisticated exploit frameworks.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
- Coruna iOS exploit kit reuses kernel exploits from 2023 Operation Triangulation campaign
- Coruna exploits CVE-2023-32434 and CVE-2023-38606 vulnerabilities
How sources frame it
- Kaspersky Researchers: neutral
- The Hacker News: neutral
All evidence
All evidence
Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacks
The Hacker News · thehackernews.com · 2026-03-26 11:07 UTC
Coruna: the framework used in Operation Triangulation
Securelist (Kaspersky) · securelist.com · 2026-03-26 08:00 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
- The Hacker News (1)
- Securelist (Kaspersky) (1)
Top origin domains (this list)
- thehackernews.com (1)
- securelist.com (1)