Apple Patches Coruna Exploits on Legacy iOS Devices

Apple released security updates this week for older iPhone, iPad and iPod touch models, addressing vulnerabilities exploited by a sophisticated toolkit known as Coruna. The patches, available as iOS and iPadOS versions 15.8.7 and 16.7.15, target devices running legacy operating systems that cannot upgrade to the current iOS release. These updates fix kernel and WebKit flaws previously patched in newer versions, protecting users from potential remote code execution and data theft.

The Coruna exploit kit, disclosed on March 3, 2026, by Google's Threat Intelligence Group and security firm iVerify, consists of 23 exploits organized into five complete attack chains. It targets iOS versions from 13.0, released in September 2019, through 17.2.1, issued in December 2023. The kit enables attackers to bypass protections, escape sandboxes and gain kernel privileges through malicious web content. Once compromised, devices can install persistent malware that scans for cryptocurrency wallets, banking data and backup phrases, then exfiltrates the information via encrypted channels to command-and-control servers.

Google's researchers first observed Coruna in February 2025 during a targeted...