Coruna Exploit Kit Targets Older iOS Devices—Here’s What You Need to Know
In March 2026, Google issued a critical warning about the Coruna exploit kit, which targets Apple iPhone models running iOS versions from 13.0 (2019) to 17.2.1 (2023). This exploit kit, linked to severe WebKit and kernel vulnerabilities, poses a major threat to users of older devices that can no longer receive updates. Here’s how to stay protected.
What Is the Coruna Exploit Kit?
The Coruna exploit kit leverages three critical vulnerabilities:
- CVE-2023-43000 and CVE-2024-23222: WebKit flaws triggered by malicious web content.
- CVE-2023-41974: A kernel vulnerability that grants attackers elevated privileges.
Initially used in targeted attacks, the exploit later appeared in watering hole campaigns targeting Ukrainian users and fake Chinese financial sites. Cybercriminals have now repurposed it for broader attacks, making it a pressing concern for iOS users.
Which Devices Are at Risk?
Apple has patched the vulnerabilities in newer iOS versions (16.6–17.2). However, older devices running iOS 13.0–17.2.1 remain vulnerable. These include:
- iPhone 8, 8 Plus, X
- iPad (5th gen), iPad Pro 9.7/12.9 (1st gen)
- iPhone XS, XS Max, XR
- iPad (7th gen)
If your device cannot update beyond iOS 17.2.1, you’re at risk. Apple has stopped supporting these models with security updates.
How to Check for iOS Updates
Updating your device is the first line of defense. Follow these steps:
- Open Settings > General > Software Update.
- Install any available updates immediately.
- Enable Automatic Updates to stay protected automatically.
Why Older iOS Versions Are Vulnerable
Apple’s security updates prioritize newer devices. Older models like the iPhone 8 or iPad (5th gen) lack the hardware to support iOS 18+ features. This creates a gap where exploits like Coruna thrive. Cybercriminals often target these devices because users may not realize their risk.
Protect Your Device Beyond Updates
While updates are critical, additional steps can enhance security:
- Avoid clicking links from unknown sources.
- Use a trusted antivirus like Malwarebytes for iOS to detect threats.
- Enable two-factor authentication for Apple ID and other accounts.
Stay Ahead of Cyber Threats
The Coruna exploit highlights the importance of proactive security. Even if your device can’t update, tools like Malwarebytes can help detect and block malicious activity. For Android users, Malwarebytes offers similar protection.
Final Thoughts
Cybersecurity is a shared responsibility. By staying informed about threats like the Coruna exploit and taking action, you can protect your data and privacy. Always verify your device’s software version and consider additional security tools for comprehensive protection.
Take action now: Download Malwarebytes for iOS or Android to defend against emerging threats like the Coruna exploit kit.
