Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit
GTIG's disclosure of the Coruna iOS exploit kit — covering five exploits against iOS 13 through 17.2.1 — underscores the commercial exploit market's ability to stockpile and chain zero-days across multiple iOS generations.
Summary written by editorial AI · Source link below
Introduction Google Threat Intelligence Group (GTIG) has identified a new and powerful exploit kit targeting Apple iPhone models running iOS version 13.0 (released in September 2019) up to version 17.2.1 (released in December 2023) . The exploit kit, named “Coruna” by its developers, contained five full iOS exploit chains and a total of 23 exploits. The core technical value of this exploit kit lies in its comprehensive collection of iOS exploits, with the most advanced ones using non-public expl
Editorial Analysis
The breadth of iOS versions covered by a single exploit kit signals that organisations with heterogeneous mobile fleets face elevated risk from commercial spyware vendors.
Enforce minimum iOS version policies via MDM and accelerate device refresh cycles to reduce exposure to exploit kits targeting legacy iOS releases.
Commercial exploit kits covering four years of iPhone models highlight the importance of aggressive mobile patching and device lifecycle management.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at Google Threat Intel in a new tab.
More from the Research Desk
- Firecracker VM Escape: PwnEscape Part 23d
- A Gingerbread House for LLM Agents: Source-Planned Honeypots That Lure Autonomous Attackers into an Isolated Shadow3d
- LABBA: LLM-Assisted Behavioral Biometric Authentication3d
- A Cyber Range Evaluation of Inductive Autonomous Network Incident Response Agents3d
- KeHoSu: Keyed Homoglyph Substitution for Authenticated Text Provenance over Copy-Paste Channels3d