Cybersecurity Today Coruna iOS Exploit Kit Goes Mass-Market: Cybersecurity Today for March 9, 2026 with David Shipley
7 snips
Mar 9, 2026 A rundown of a mass-market iOS exploit kit now used in crypto scams and wallet theft. An investigation into suspicious access to an FBI wiretap system and vendor exposure. A Windows Terminal abuse that drops a credential‑stealing Luma Stealer via encoded commands. Rising Iran-linked cyber campaigns, new backdoors, cloud exfiltration, and strikes that disrupted AWS data centers.
AI Snips
Chapters
Transcript
Episode notes
Karuna Exploit Kit Weaponized For Crypto Theft
- Advanced iOS exploit kits have migrated from targeted espionage to mass-market scams and loader distribution.
- Karuna contains 23 exploits and five chains for iOS 13–17.2.1 and drops Plasma Loader that targets MetaMask, Phantom, and Uniswap recovery phrases.
Enable Lockdown Mode And Keep iOS Updated
- Enable built-in iOS protections and keep devices updated to reduce risk from sophisticated exploit chains.
- David Shipley highlights Lockdown Mode and private browsing which Karuna checks for and disables activity if enabled.
FBI Wiretap Platform Breach Highlights Vendor Risk
- FBI investigated suspicious activity in its Digital Collection System Network that supports wiretaps and surveillance tools.
- Attackers may have entered via an ISP vendor, expanding the probe to DHS, NSA, and the White House due to vendor risk.