Possible U.S.-developed exploits linked to first known ‘mass’ iOS attack

This feed aggregates multiple high-impact cybersecurity developments: researchers linked a mass iOS exploit kit (Coruna) to a chain from a spyware vendor customer to Russian and then Chinese operators; a set of vulnerabilities in agentic AI browsers (e.g., Comet/Zenity Labs) lets attackers via simple calendar invites access and exfiltrate local files; Google released a March Android security update fixing 129 vulnerabilities including an actively exploited Qualcomm zero-day; leadership churn at CISA and the FBI’s Winter SHIELD initiative signal heightened U.S. focus on China-related threats;EU