Coruna Exploit Kit is a tool tracked by ThreatCluster, appearing in 4 threat clusters built from 14 intelligence report mentions.
Coruna Exploit Kit is a tool tracked across 4 threat clusters and 14 intelligence report mentions on ThreatCluster. First observed March 3, 2026; most recent activity May 21, 2026.
A mass cyber-espionage campaign targeting iPhone users in Ukraine and China has emerged, utilizing the Coruna exploit kit, developed by U.S. military contractor L3Harris' Trenchant division. The toolkit, comprising 23…
CISA has added 23 vulnerabilities exploited by the Coruna exploit kit targeting iOS versions 13 to 17.2.1 to its Known Exploited Vulnerabilities (KEV) list. The exploit kit is associated with nation-state actors,…
The art-template npm package, a popular JavaScript templating library, was compromised to deliver a sophisticated iOS exploit targeting Safari users. Discovered on May 20, 2026, the attack involved a watering-hole…
The Coruna iOS exploit kit has emerged, targeting Apple iPhone models running iOS 13.0 to 17.2.1. It includes five exploit chains and 23 exploits, with advanced techniques that are non-public. Various threat actors,…
Coruna Exploit Kit is a tool tracked by ThreatCluster, appearing in 4 threat clusters built from 14 intelligence report mentions.
The most recent intelligence report mentioning Coruna Exploit Kit on ThreatCluster is dated May 21, 2026. Activity was first observed March 3, 2026, giving a tracked span from then to May 21, 2026.
Across ThreatCluster reporting, Coruna Exploit Kit most frequently co-occurs with Unc6353, Malware, Supply Chain Attack, Zero-day Exploit, Operation Triangulation, among 12 tracked related entities.
The most significant recent cluster is “Coruna Spyware Exploited by State Actors in Global Campaigns” (4 articles · Updated March 12, 2026). Coruna Exploit Kit appears across 4 threat clusters in total, listed above with sources.
Coruna Exploit Kit appears in 14 intelligence report mentions across 4 deduplicated threat clusters, aggregated from 17,000+ monitored sources.