UNC6691

Reports per quarter

CVEs named in reports

• CVE-2022-48503 KEV
• CVE-2023-32434 KEV
• CVE-2023-41974 KEV
• CVE-2023-43000 KEV
• CVE-2024-23222 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 March 2026

   Coruna: A Complete Technical Teardown of a State-Grade iOS/macOS Watering-Hole Exploit Chain

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Coruna: A Complete Technical Teardown of a State-Grade iOS/macOS Watering-Hole Exploit Chain

2. 3 March 2026

   Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

3. 3 March 2026

   Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

Newest first. Details opens the report in Explore.