Coruna: Spy-grade iOS exploit kit powering financial crime

This feed highlights multiple security developments. Top story: Google TAG reports a powerful iOS exploit kit called “Coruna” circulated among commercial surveillance groups, state-linked actors and financially motivated criminals; Coruna reportedly contains five full iOS exploit chains and 23 exploits (including CVE-tracked flaws). Microsoft researchers disclose active phishing campaigns abusing OAuth redirection logic to bypass defenses and deliver malware or harvest credentials targeting government/public-sector organizations. Additional items: Cloudflare’s Cyber Threat Report cites ~230B+/