Breaking AI & Tech News Analyzed

The Coruna and DarkSword Threat For years, the prevailing narrative among iPhone security experts was that breaking through Apple's defenses was a rare, high-barrier event requiring significant resources. However, recent investigations by Google, iVerify, and Lookout have shattered this assumption. Researchers have documented broad-scale hacking campaigns utilizing two specific tools, Coruna and DarkSword, which have been used to target victims globally who are not running the latest software updates. Attack Vectors: Hackers are compromising legitimate websites and creating fake pages to deliver spyware. Key Actors: Involvement of Russian spies and Chinese cybercriminals. Tool Availability: The source code for these tools has leaked online, allowing anyone to launch attacks against older iPhones. The Two-Tier iPhone Security Landscape The discovery of Coruna and DarkSword highlights a critical data point in the current security ecosystem: the existence of two distinct classes of iPhone users. This bifurcation is driven by the introduction of Memory Integrity Enforcement in iOS 26, a feature designed to prevent memory corruption bugs—the very vulnerabilities exploited by DarkSword. Class A (Secure): Users on the latest iPhone 17 models running iOS 26 are protected by memory-safe code and Lockdown Mode, making them resistant to these specific memory-based hacks. Class B (Vulnerable): Users running iOS 18 or older versions remain exposed to memory corruption attacks, as these older systems lack the new safety enforcement layers. Challenging the 'Rare Hack' Myth The widespread use of these leaked tools suggests that spyware attacks are becoming more common and less exclusive. This shift is fueled by a thriving "second-hand" market for exploits, where brokers resell vulnerabilities before they are patched. Experts argue that the rarity of iPhone hacks has been overstated simply because they are rarely documented. As noted by Patrick Wardle, the baseline capability for such attacks is now accessible to a wider range of actors, moving beyond state-sponsored actors to include cybercriminals. The End of the 'Rare Hack' Era The future of mobile security appears to be one of continuous escalation. With the code for Coruna and DarkSword now public, the barrier to entry for launching attacks against older devices has lowered significantly. This indicates that memory-based exploits will continue to plague lagging users, and the market for exploit development will likely expand as brokers seek to monetize vulnerabilities before updates are applied.

The Dual Threat: Coruna and DarkSwordSecurity researchers have identified two distinct but equally dangerous hacking toolkits, Coruna and DarkSword, that have leaked onto the open web. These advanced exploit kits, capable of breaking into iPhones and iPads, were originally developed for high-level government surveillance but are now available for anyone to download.Coruna: Targets iOS 13 through 17.2.1. Linked to Trenchant, a unit within U.S. defense contractor L3Harris, and previously used in Operation Triangulation against Russian targets.DarkSword: Targets iOS 18.4 and 18.7. Leaked on GitHub, making it "plug-and-play" for cybercriminals.The Scale of VulnerabilityThe scale of this exposure is staggering. According to Apple's statistics, nearly one-in-three iPhone and iPad users are still not running the latest software. With over 2.5 billion active devices globally, this implies hundreds of millions of users are susceptible to these attacks.DarkSword is particularly concerning because it targets newer devices running iOS 18.4 and 18.7. Researchers have already tested the leaked code, successfully hacking their own devices to demonstrate the ease of use.From State-Sponsored Espionage to Public ExploitationThis leak marks a dangerous shift in the cybersecurity landscape. Historically, sophisticated tools like Coruna were the domain of state-sponsored actors targeting specific regions, such as the Uyghurs in China or activists in Hong Kong.However, the release of DarkSword represents a move toward indiscriminate cybercrime. The tool is written in web languages like HTML and JavaScript, allowing attackers to launch attacks simply by hosting a malicious website. Victims in China, Malaysia, Turkey, Saudi Arabia, and Ukraine have already been targeted.The Future of Zero-Day WeaponizationThe leak of these tools mirrors the infamous 2017 WannaCry ransomware attack, which was fueled by leaked NSA exploits. Once powerful zero-day vulnerabilities are released into the wild, they are nearly impossible to fully contain.Experts recommend immediate action: users must update to iOS 18.7.6 or iOS 26.3.1. For high-risk individuals, enabling Lockdown Mode remains the most effective defense, as there is currently no public evidence of hackers bypassing its protections.

A federal judge in California has ruled in favor of Anthropic in its case against the Department of Defense, granting a temporary injunction against the government's punitive measures. The standoff revolves around Anthropic's refusal to allow the Pentagon to use its Claude AI model for autonomous lethal weapons or domestic mass surveillance.Judge Rita Lin found that the government overstepped its authority in designating Anthropic as a 'supply chain risk,' stating that this move was 'likely both contrary to law and arbitrary and capricious.' The judge questioned the government's rationale, suggesting that their actions seemed aimed at crippling Anthropic.Anthropic argued that the government's actions violated its First Amendment rights and could cost the company hundreds of millions or even billions of dollars. The injunction has significant implications for the government's efforts to replace Claude with other AI tools, particularly given its extensive use in military operations, including target selection and analysis of missile strikes.

US President Donald Trump has extended his deadline for Iran to open the Strait of Hormuz by 10 days to April 6, 2026. The decision comes as talks between the US and Iran are described as 'going very well'.In a social media post, Trump stated: 'As per Iranian Government request, please let this statement serve to represent that I am pausing the period of Energy Plant destruction by 10 Days to Monday, April 6, 2026, at 8 P.M., Eastern Time.'Trump also mentioned that despite 'erroneous statements to the contrary by the Fake News Media,' talks with Iran are ongoing and progressing well. He had previously urged Iranian leaders to negotiate an end to the near-month-long war or face further assassinations of senior officials.The conflict has resulted in significant escalation, with Israel conducting strikes on Iranian targets, including the killing of Alireza Tangsiri, the Revolutionary Guards' naval commander. Iran has retaliated with strikes across the Middle East, including in Tel Aviv, Modi'in, and Jerusalem.Trump has claimed victory in the war, stating, 'In a certain sense, we have already won.' He has also criticized NATO allies and described Iran as producing 'great negotiators' but 'lousy fighters.'The US and Israel have destroyed much of Iran's naval capabilities, but Tehran still possesses smaller boats capable of laying mines and launching anti-ship cruise missiles. These could render the Strait of Hormuz impassable to shipping.Iran's foreign minister, Abbas Araghchi, accused the US of 'double standards,' citing the US support for Israel's actions in Gaza while condemning Iran's defense in the Strait of Hormuz.The conflict has resulted in a significant death toll, with over 1,900 people killed in Iran and nearly 1,100 in Lebanon. The situation remains volatile, with fears of further escalation and potential ground invasion.

The European Commission has initiated an investigation into Snapchat over concerns that the social messaging app is putting children at risk of grooming, sexual exploitation, and other criminal activities. This probe is part of the EU's efforts to enforce its Digital Services Act (DSA), which aims to protect European society from a wide range of internet harms, including child safety provisions to combat cyberbullying, exposure to adult content, and illegal products.In a separate decision, the commission also accused four pornographic websites - Pornhub, Stripchat, XNXX, and XVideos - of failing to prevent minors from accessing adult content, which could lead to mental health issues, negative gender attitudes, and increased tolerance of violent sexual behaviors.The investigations follow a landmark ruling in a Los Angeles court that found two social media companies, Meta and YouTube, had deliberately created addictive products that harmed a young user. The EU is now considering whether to follow Australia and ban social media for under-16s.Snapchat reports 94.7 million monthly users in the EU and is hugely popular among teenagers and young people. However, EU regulators believe the company is failing to ensure its age limit of 13 is respected, and users are not given adequate guidance on privacy and safety features.The commission's tech spokesperson, Thomas Regnier, described the situation as 'quite terrible' in EU member states, citing statistics on the prevalence of minors accessing pornographic websites. The companies may now examine the findings and mount a defense, before any final decision is taken. If the complaint is upheld, the four websites could be fined up to 6% of global annual turnover.

Alireza Tangsiri, the Islamic Revolutionary Guard Corps (IRGC) naval commander killed in an Israeli airstrike, was a veteran hardliner with a reputation for fiery rhetoric. He had a deep understanding of the strategic importance of the Strait of Hormuz, a critical waterway that carries a fifth of the world’s oil and gas.Tangsiri was a prominent figure in the IRGC, having won his credentials during the Iran-Iraq war and rising through the ranks to become the commander of the IRGC’s maritime force in 2018. He was known for pioneering unconventional weapons that allowed Iran to project power in the Persian Gulf and beyond.The US Treasury sanctioned Tangsiri in 2019 and 2023, citing his role in overseeing the IRGC Navy’s testing of cruise missiles and his involvement with a company that developed armed drones. These weapons could potentially be used to maintain the current blockade of the Strait of Hormuz.Tangsiri was also a strong supporter of fast boats, which can threaten civilian shipping and evade modern warship defense systems. His recent statements had dared the US to launch a ground assault on Kharg Island, Iran’s principal hub for oil exports, and warned of the impact on oil prices.The Israeli airstrike that killed Tangsiri has been seen as a significant blow to the IRGC. The commander of US Central Command, Adm Brad Cooper, said the killing “makes the region safer.” Israel’s Defense Minister, Israel Katz, described the strike as a “message” to the IRGC, vowing to “hunt you down and eliminate you one by one.”

The escalating tensions between the US and Israel against Iran have created a lucrative market for arms manufacturers. As the conflict continues to intensify, defense companies are reaping significant benefits from the increased demand for military equipment and technology.The geopolitical landscape in the region remains volatile, with the US and Israel maintaining a strong stance against Iran. This has resulted in a surge in defense spending, with arms manufacturers capitalizing on the opportunity to supply the necessary equipment.The thriving arms industry is a testament to the enduring demand for military hardware and technology in the face of global conflicts. As tensions persist, it is likely that defense companies will continue to experience significant growth and profitability.

The United States Department of State has approved a significant arms deal worth $16.5 billion to Gulf states, including the United Arab Emirates, Kuwait, and Jordan. This move comes as tensions between the US and Iran continue to intensify. The deal includes $8.4 billion worth of arms to the United Arab Emirates, which will be used to purchase drones, missiles, radar systems, and F-16 aircraft. Additionally, the US has approved roughly $8 billion for air and missile defense radar systems to Kuwait. Jordan will receive an additional $70.5 million to cover aircraft and munition support. The State Department stated that the proposed sale will support the foreign policy and national security objectives of the United States by improving the security of a major defense partner. The UAE is considered a force for political stability and economic progress in the Middle East. This arms deal comes amid ever-increasing tensions between the US and Iran. The administration of US President Donald Trump joined Israel in attacking Iran on February 28, prompting fears of a protracted regional conflict. The war has also caused energy prices around the world to surge. Iran has largely choked off tanker shipments through the Strait of Hormuz, a waterway through which a fifth of the world’s oil and gas travels. Gas prices in the United States have jumped from $3.10 per gallon ($0.82 per litre) on average this time last month to $3.88 ($1.02 per litre) on Thursday, according to the American Automobile Association (AAA). The principal contractors in Thursday’s proposed sales will include RTX Corporation, Northrop Grumman, and Lockheed Martin Corporation. Despite the deals, all three companies’ stocks are trending downward on Wall Street. The Pentagon is seeking more money to fund the war, with the US Department of Defense seeking an additional $200 billion, according to The Associated Press. Defense Secretary Pete Hegseth acknowledged that he was seeking a significant spending boost from Congress.

Anthropic, a leading artificial intelligence company, is set to face off against the US Pentagon in a San Francisco court over a ban that prevents the military from using its Claude AI model. The company refused to remove safety guardrails that prevent its AI from being used for fully autonomous weapons and mass domestic surveillance.The legal showdown began on Tuesday, with US District Judge Rita Lin presiding over the hearing. Anthropic argues that the Pentagon's move is an unprecedented and unlawful designation that violates freedom of speech protections and due process rights.The Pentagon-led ban was enacted after Anthropic refused to strip safety guardrails from its AI model. The company's designation as a national security supply chain risk prohibits anyone within the Defense Department or its contractors from using the technology.Legal experts believe that Anthropic is likely to prevail, pointing to a February 27 post on X in which Defense Secretary Pete Hegseth said he is directing the DoD to designate Anthropic a Supply-Chain Risk to National Security. The post also said that contractors, suppliers, or partners for the United States military are prohibited from commercial activity with Anthropic.The White House has pushed back on Anthropic's claims that government action violated free speech protections under the First Amendment of the US Constitution, saying the dispute stems from contract negotiations and national security concerns rather than retaliation.Democratic Senator Elizabeth Warren of Massachusetts has penned a letter to Hegseth voicing her concerns, saying she is particularly concerned that the DoD is trying to strong-arm American companies into providing the Department with the tools to spy on American citizens and deploy fully autonomous weapons without adequate safeguards.