VulnerabilitiesHIGH

New Coruna Exploit Kit Targets iPhones with 23 Vulnerabilities

THThe Hacker News19h ago2 min read
CorunaCryptoWatersiOSGooglevulnerabilities
🎯

Basically, a new tool is attacking iPhones to steal data using 23 weaknesses.

Quick Summary

A new exploit kit called Coruna is targeting older iPhones, using 23 vulnerabilities. If you’re on iOS 13 to 17.2.1, your data could be at risk. Update your device now to stay safe.

What Happened

A significant threat has emerged for iPhone users. Google has uncovered a new exploit kit known as Coruna, which targets iOS? devices from version 13.0 to 17.2.1. This exploit kit? is particularly alarming because it utilizes 23 different exploits across five chains, making it a formidable tool for cybercriminals.

The Coruna kit, also referred to as CryptoWaters?, is designed to exploit vulnerabilities? in older iPhone models. While it’s not effective against the latest iOS? version, those still using older systems are at risk. This discovery was first highlighted by WIRED, and it underscores the ongoing battle between tech companies and cyber threats.

Why Should You Care

If you own an iPhone running an older version of iOS?, you could be in danger. Your personal data, including photos, messages, and banking information, could be at risk. Think of your iPhone as a safe; if someone finds a way to pick the lock, everything inside is vulnerable.

Even if you think you’re safe because you don’t store sensitive information, remember that attackers can use your device for other malicious activities. They could access your contacts or use your phone to spread malware to others. It's crucial to stay updated to protect your digital life.

What's Being Done

Google's Threat Intelligence Group is actively monitoring the situation. They are working to raise awareness and provide guidance on how to stay safe. Here are some immediate actions you should take:

  • Update your iPhone to the latest iOS? version.
  • Avoid downloading unverified apps or clicking on suspicious links.
  • Educate yourself about phishing attacks and other common tactics used by cybercriminals.

Experts are keeping a close eye on how this exploit kit? evolves and whether attackers will find ways to bypass the latest security measures. Stay vigilant and proactive to safeguard your device and personal information.

💡 Tap dotted terms for explanations

🔒 Pro insight: The Coruna exploit kit's complexity indicates a sophisticated threat landscape, warranting immediate patching and user awareness efforts.

Original article from

The Hacker News

Read Full Article

Related Pings

HIGHVulnerabilities

Android Devices Face Exploited Vulnerabilities – Update Now!

Android has issued a security advisory for vulnerabilities being actively exploited. Users must update their devices immediately to protect their data. Don’t risk your personal information—act now!

Canadian Cyber Centre Alerts·Just now·2m
HIGHVulnerabilities

VMware Issues Urgent Security Advisories for Tanzu Products

VMware has issued urgent security advisories for several Tanzu products due to vulnerabilities. Users of Tanzu Greenplum and RabbitMQ are at risk. It's essential to update your software immediately to protect your data. Don't wait for a breach to happen!

Canadian Cyber Centre Alerts·Just now·2m
CRITICALVulnerabilities

Redis Vulnerability CVE-2025-49844 Hits Critical 10.0 Rating

A critical flaw in Redis has been rated CVSS 10.0, exposing users to potential control by hackers. If you rely on Redis, your systems could be at risk. Immediate updates and security reviews are essential to safeguard your data.

Scott Helme·Just now·2m
HIGHVulnerabilities

Samsung Security Update Fixes Critical Mobile Vulnerabilities

Samsung has issued a vital security update for older mobile devices. Users with versions prior to SMR-MAR-2026 are at risk. Ignoring this update could expose personal data to cyber threats. Act now to secure your device!

Canadian Cyber Centre Alerts·Just now·2m
HIGHVulnerabilities

Critical RCE Flaw Discovered in mcp-atlassian Software

A critical vulnerability in mcp-atlassian could allow hackers to take control of systems. This flaw affects anyone using the software, putting sensitive data at risk. Immediate updates are essential to protect against potential attacks.

Arctic Wolf Blog·Just now·2m
HIGHVulnerabilities

Zero-Days Target Enterprise Tech: Google Reports Alarming Trend

Google's latest report reveals a troubling trend: half of all zero-day vulnerabilities in 2025 targeted enterprise software. Businesses using outdated security devices are at risk. Act now to protect your data and systems from potential breaches.

TechCrunch Security·Just now·2m