NewsPublished 27 Mar 2026

Coruna iOS Exploit Kit Likely an Update to Operation Triangulation

Source SecurityWeek

Description

Coruna contains the updated version of a kernel exploit used in Operation Triangulation three years ago. The post Coruna iOS Exploit Kit Likely an Update to Operation Triangulation appeared first on SecurityWeek .

Impact

If successfully exploited, the Coruna iOS Exploit Kit could allow attackers to gain kernel-level access to iOS devices, compromising confidentiality, integrity, and availability. This level of access can enable attackers to bypass sandboxing, install persistent malware, extract sensitive data, and manipulate system functions undetected. For organizations, especially those in sectors like government, defense, finance, and critical infrastructure, such a compromise could lead to espionage, data breaches, and operational disruption. The exploit's potential to evade detection and persist on devices increases the risk of long-term compromise. Although no active exploitation is currently known, the presence of this updated exploit kit signals a credible threat that could be weaponized in targeted attacks. The impact extends to any organization relying heavily on iOS devices for communication, data storage, or operational control, particularly where device security is paramount.

Defensive guidance

1. Maintain up-to-date iOS versions and promptly apply security patches once Apple releases fixes addressing kernel vulnerabilities. 2. Employ Mobile Device Management (MDM) solutions to enforce security policies, restrict device functionalities, and monitor for anomalous behavior. 3. Limit physical access to iOS devices and enforce strong authentication mechanisms such as biometric locks and complex passcodes. 4. Educate users about the risks of installing untrusted applications or clicking on suspicious links that could trigger exploit delivery. 5. Implement network-level protections to detect and block command and control communications potentially used by exploit payloads. 6. Conduct regular security audits and device integrity checks to identify signs of compromise. 7. Collaborate with threat intelligence providers to stay informed about emerging iOS exploit techniques and indicators of compromise. 8. For high-risk environments, consider using hardware-based security features like Secure Enclave and enable features such as activation lock and Find My iPhone to deter device tampering and theft.

References

securityweek.com/coruna-ios-exploit-kit-likely-an-update-to-operation-triangulation/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 27 Mar 2026, 10:44 UTC

References

Community reviews

Related threats