Topic: webkit vulnerabilities

  • Urgent Apple Update Fixes Critical Security Exploits

    Urgent Apple Update Fixes Critical Security Exploits

    Apple has released urgent security patches for two actively exploited zero-day vulnerabilities (CVE-2025-14174 and CVE-2025-43529) in its WebKit browser engine, which is used across iPhones, iPads, and Macs. The flaws, discovered through a collaboration between Apple and Google, could allow memor...

    Read More »
  • iOS Spyware 'Coruna' Powers Financial Crime Wave

    iOS Spyware 'Coruna' Powers Financial Crime Wave

    The 'Coruna' exploit kit is a sophisticated iOS threat that evolved from a surveillance tool to a weapon for state-sponsored espionage and, most recently, large-scale financial crimes targeting cryptocurrency and sensitive data. It consolidates multiple exploit chains, leveraging both known and u...

    Read More »
  • Coruna Exploit Kit Targets Older iPhones in Multi-Stage Attack

    Coruna Exploit Kit Targets Older iPhones in Multi-Stage Attack

    The Coruna toolkit is a sophisticated exploit framework targeting iPhones on iOS 13.0 through 17.2.1, using multiple vulnerabilities to steal sensitive financial information. It has been used by both a suspected Russian cyber-espionage unit in Ukraine and a financially motivated Chinese group, wh...

    Read More »
  • Apple Patches Critical Zero-Day Flaw Actively Exploited in Attacks

    Apple Patches Critical Zero-Day Flaw Actively Exploited in Attacks

    Apple has patched a critical zero-day vulnerability (CVE-2026-20700) in its dyld component, which was exploited in a sophisticated, targeted attack against older iOS versions. The updates also fix two related WebKit vulnerabilities, all discovered and reported by Google's Threat Analysis Group, t...

    Read More »
  • Apple Issues Critical Security Update for Older iPhones and iPads

    Apple Issues Critical Security Update for Older iPhones and iPads

    Apple has released a critical security update for older iPhone and iPad models to patch actively exploited vulnerabilities, including those from the Coruna exploit kit, which are used for espionage and financial theft. The update addresses several critical WebKit and kernel flaws, such as CVE-202...

    Read More »