Google Warns of "Coruna" Vulnerabilities Targeting iPhone Users
Google has issued a security alert regarding a potential cyberattack exploiting a set of vulnerabilities known as "Coruna" that could compromise iPhones. The threat involves 23 distinct security flaws that, if exploited, allow attackers to bypass iOS protections, gain deep system access, and potentially steal sensitive data including financial information, communications, and authentication credentials.
The vulnerabilities enable stealthy infiltration, with attackers able to override built-in defenses and manipulate core device functions without user awareness. While the exact origin of the attack remains unclear, Google Threat Intelligence is investigating, noting the lack of clear attribution to a specific group or nation-state actor.
Security firm iVerify has suggested a possible link to tools developed by or associated with the Pentagon, citing their sophistication in exploiting Apple’s system-level defenses. The discovery raises concerns about how such tools may have been repurposed or leaked for malicious use.
The incident highlights the persistent risks in even widely trusted platforms, as cybersecurity teams race to identify and patch vulnerabilities before widespread exploitation occurs. Apple and independent researchers are actively monitoring the situation to assess the full scope of the threat.
Source: https://www.cybersecurity-insiders.com/google-warns-about-data-breach-on-apple-iphones/
Apple cybersecurity rating report: https://www.rankiteo.com/company/apple
"id": "APP1773124191",
"linkid": "apple",
"type": "Vulnerability",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Potentially all iPhone users',
'industry': 'Technology / Consumer Electronics',
'location': 'Global',
'name': 'Apple (iPhone users)',
'type': 'Technology Company / End Users'}],
'attack_vector': 'Unknown (potentially zero-click or stealthy infiltration)',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Financial information',
'Communications',
'Authentication credentials']},
'description': 'Google has issued a security alert regarding a potential '
'cyberattack exploiting a set of vulnerabilities known as '
"'Coruna' that could compromise iPhones. The threat involves "
'23 distinct security flaws that, if exploited, allow '
'attackers to bypass iOS protections, gain deep system access, '
'and potentially steal sensitive data including financial '
'information, communications, and authentication credentials.',
'impact': {'data_compromised': 'Sensitive data including financial '
'information, communications, and '
'authentication credentials',
'identity_theft_risk': 'High',
'payment_information_risk': 'High',
'systems_affected': 'iPhones (iOS)'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Highlights persistent risks in widely trusted platforms '
'and the need for rapid vulnerability patching.',
'post_incident_analysis': {'corrective_actions': 'Active monitoring, '
'patching, and collaboration '
'between Apple and security '
'researchers',
'root_causes': 'Exploitation of 23 distinct iOS '
'vulnerabilities (Coruna)'},
'recommendations': 'Monitor for updates from Apple, enable enhanced security '
'measures, and remain vigilant for suspicious activity.',
'references': [{'source': 'Google Threat Intelligence'},
{'source': 'iVerify'}],
'response': {'communication_strategy': 'Security alert issued by Google',
'enhanced_monitoring': 'Yes',
'remediation_measures': 'Active monitoring and patching by Apple '
'and independent researchers',
'third_party_assistance': 'Google Threat Intelligence, iVerify'},
'title': "Google Warns of 'Coruna' Vulnerabilities Targeting iPhone Users",
'type': 'Vulnerability Exploitation',
'vulnerability_exploited': 'Coruna (23 distinct security flaws)'}