VulnerabilitiesHIGH

Coruna Exploit Kit Targets iPhones Running iOS 13–17.2.1

SASecurity Affairs
🎯

Basically, a new tool can hack older iPhones to steal information.

Quick Summary

Google has identified the Coruna exploit kit targeting older iPhones. Users on iOS 13 to 17.2.1 are at risk of data theft. Update your device to stay safe and secure.

What Happened

A new threat has emerged that could put many iPhone users at risk. The Coruna iOS exploit kit has been identified by Google, specifically targeting iPhones running iOS versions from 13.0 to 17.2.1. This exploit kit uses 23 different exploits across five chains, making it a formidable tool for cybercriminals. It’s important to note that the latest iOS versions are not affected, which means those who have updated their devices are currently safe.

The Coruna exploit kit, also known as CryptoWaters, was discovered by Google’s Threat Intelligence Group. This kit allows attackers to compromise devices and potentially gain access to sensitive information. With the vast number of iPhones in use, this could affect millions of users who haven’t updated their devices. The exploit kit’s complexity and the number of exploits it employs make it particularly dangerous.

Why Should You Care

If you own an iPhone, this news should definitely catch your attention. Imagine leaving your front door unlocked; that’s what using an outdated iOS version is like. Your personal information, photos, and even banking details could be at risk. Cybercriminals can exploit these vulnerabilities to access your data without you even knowing.

Keeping your device updated is crucial for your security. Just as you wouldn't drive a car with faulty brakes, you shouldn't use a phone with known vulnerabilities. The risk of data theft is real, and it could have serious consequences, including identity theft or financial loss. Make sure you’re running the latest iOS version to protect yourself.

What's Being Done

In response to this threat, Google is actively monitoring the situation and working to inform affected users. Here are some immediate actions you should consider:

  • Update your iPhone to the latest iOS version if you haven’t already.
  • Be cautious of suspicious links or downloads that could exploit these vulnerabilities.
  • Stay informed about any updates from Apple regarding security patches.

Experts are watching for any new developments or additional exploits that may arise from this kit. Keeping your software updated is the best defense against these types of threats.

🔒 Pro insight: The Coruna kit's multi-chain approach indicates a sophisticated threat landscape, requiring vigilant monitoring and rapid patch deployment.

Original article from

Security Affairs · Pierluigi Paganini

Read Full Article

Related Pings

HIGHVulnerabilities

Vulnerabilities - CISA Adds SharePoint and Zimbra Bugs

CISA has added critical vulnerabilities in SharePoint and Zimbra to its exploited flaws list. These flaws allow for remote code execution and cross-site scripting. Organizations must act quickly to patch these vulnerabilities and protect their systems.

SC Media·
HIGHVulnerabilities

KVM Device Vulnerabilities - Remote Access Risks Exposed

Nine serious vulnerabilities have been found in low-cost KVM-over-IP devices. This could allow attackers remote access to critical systems. Businesses must act quickly to secure these devices and protect their networks.

CSO Online·
HIGHVulnerabilities

Ubuntu Desktop - Critical Root Privilege Escalation Flaw

A critical flaw in Ubuntu Desktop allows local attackers to gain root access. Versions 24.04 and later are affected, posing serious risks to system security. Immediate patching is essential to protect against potential exploits.

SC Media·
HIGHVulnerabilities

ScreenConnect Vulnerability - ConnectWise Issues Critical Alert

ConnectWise has warned of a critical vulnerability in ScreenConnect. This flaw could allow unauthorized access to remote systems. Users must upgrade immediately to protect their networks.

SC Media·
HIGHVulnerabilities

Vulnerabilities in IP KVM Devices - Significant Network Risks

Recent findings reveal critical vulnerabilities in IP KVM devices, exposing networks to severe risks. Attackers can gain root access and execute malicious code, threatening security. Immediate action is essential to mitigate these vulnerabilities.

SC Media·
CRITICALVulnerabilities

Ubiquiti UniFi Vulnerability - Critical Account Hijacking Risk

Ubiquiti has patched critical vulnerabilities in its UniFi Network app, allowing potential account hijacking. Users must update to secure their systems. This flaw poses serious risks to network security.

Security Affairs·