Coruna is a malware family tracked across 10 threat clusters and 44 intelligence report mentions on ThreatCluster. First observed March 3, 2026; most recent activity July 12, 2026.
The Google Threat Intelligence Group has identified DarkSword, a full-chain iOS exploit affecting versions 18.4 to 18.7. This exploit leverages multiple zero-day vulnerabilities, including CVE-2025-31277 and…
On April 22, 2026, Apple published CVE-2026-28950, a critical security flaw that allowed deleted notifications to be retrieved, posing a significant privacy risk. The issue affects all iPhones starting from the iPhone…
A mass cyber-espionage campaign targeting iPhone users in Ukraine and China has emerged, utilizing the Coruna exploit kit, developed by U.S. military contractor L3Harris' Trenchant division. The toolkit, comprising 23…
CISA has added 23 vulnerabilities exploited by the Coruna exploit kit targeting iOS versions 13 to 17.2.1 to its Known Exploited Vulnerabilities (KEV) list. The exploit kit is associated with nation-state actors,…
Google has issued an urgent warning about a new malware strain named Coruna that specifically targets iPhone users worldwide to steal cryptocurrency seed phrases. This malware poses a significant risk to individuals…
The art-template npm package, a popular JavaScript templating library, was compromised to deliver a sophisticated iOS exploit targeting Safari users. Discovered on May 20, 2026, the attack involved a watering-hole…
Kaspersky's Global Research and Analysis Team has identified the Coruna exploit kit as an updated version of the Operation Triangulation framework used in a 2023 cyber-espionage campaign. The analysis revealed that one…
Researchers from Calif, a Palo Alto-based cybersecurity startup, successfully exploited Apple's Memory Integrity Enforcement (MIE) on the M5 chip within a week using Anthropic's AI model, Claude Mythos. The exploit…
In May 2026, a critical Android vulnerability (CVE-2026-0073) was disclosed, allowing remote device takeover without user interaction. This flaw, linked to the Android Debug Bridge, affects devices with ADB enabled,…
The Coruna iOS exploit kit has emerged, targeting Apple iPhone models running iOS 13.0 to 17.2.1. It includes five exploit chains and 23 exploits, with advanced techniques that are non-public. Various threat actors,…