Signal

Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13–17.2.1

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-03-03 14:00 UTCUpdated 2026-03-04 15:53 UTC
redditrss
securityexploit_kit_uses
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (4 domains)domains are deduped. counts indicate coverage, not truth.
4 top sources shown
Overview

A powerful iOS exploit kit has circulated among multiple threat actors over the past year, moving from a commercial surveillance operation to state-linked espionage campaigns and, ultimately, ended into the hands of financially motivated hackers, according to new research...

Score total
2.09
Momentum 24h
7
Posts
7
Origins
7
Source types
2
Duplicate ratio
0%
All evidence
All evidence
Kaspersky dismisses claims Coruna iPhone exploit kit is connected to NSA-linked operation
theregister_security · go.theregister.com · 2026-03-04 14:18 UTC
Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13–17.2.1
The Hacker News · thehackernews.com · 2026-03-04 13:28 UTC
Coruna: Inside the Nation-State-Grade iOS Exploit Kit We've Been Tracking
blueteamsec · iverify.io · 2026-03-04 05:47 UTC
Possible U.S.-developed exploits linked to first known ‘mass’ iOS attack
CyberScoop · cyberscoop.com · 2026-03-03 22:42 UTC
Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit
blueteamsec · cloud.google.com · 2026-03-03 19:58 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 5Origin domains: 6Duplicates: -
Showing 6 / 0
Top publishers (this list)
  • blueteamsec (2)
  • SC Media (1)
  • theregister_security (1)
  • The Hacker News (1)
  • CyberScoop (1)
Top origin domains (this list)
  • scworld.com (1)
  • go.theregister.com (1)
  • thehackernews.com (1)
  • iverify.io (1)
  • cyberscoop.com (1)
  • cloud.google.com (1)