Breaking AI & Tech News Analyzed

The Coruna and DarkSword Threat For years, the prevailing narrative among iPhone security experts was that breaking through Apple's defenses was a rare, high-barrier event requiring significant resources. However, recent investigations by Google, iVerify, and Lookout have shattered this assumption. Researchers have documented broad-scale hacking campaigns utilizing two specific tools, Coruna and DarkSword, which have been used to target victims globally who are not running the latest software updates. Attack Vectors: Hackers are compromising legitimate websites and creating fake pages to deliver spyware. Key Actors: Involvement of Russian spies and Chinese cybercriminals. Tool Availability: The source code for these tools has leaked online, allowing anyone to launch attacks against older iPhones. The Two-Tier iPhone Security Landscape The discovery of Coruna and DarkSword highlights a critical data point in the current security ecosystem: the existence of two distinct classes of iPhone users. This bifurcation is driven by the introduction of Memory Integrity Enforcement in iOS 26, a feature designed to prevent memory corruption bugs—the very vulnerabilities exploited by DarkSword. Class A (Secure): Users on the latest iPhone 17 models running iOS 26 are protected by memory-safe code and Lockdown Mode, making them resistant to these specific memory-based hacks. Class B (Vulnerable): Users running iOS 18 or older versions remain exposed to memory corruption attacks, as these older systems lack the new safety enforcement layers. Challenging the 'Rare Hack' Myth The widespread use of these leaked tools suggests that spyware attacks are becoming more common and less exclusive. This shift is fueled by a thriving "second-hand" market for exploits, where brokers resell vulnerabilities before they are patched. Experts argue that the rarity of iPhone hacks has been overstated simply because they are rarely documented. As noted by Patrick Wardle, the baseline capability for such attacks is now accessible to a wider range of actors, moving beyond state-sponsored actors to include cybercriminals. The End of the 'Rare Hack' Era The future of mobile security appears to be one of continuous escalation. With the code for Coruna and DarkSword now public, the barrier to entry for launching attacks against older devices has lowered significantly. This indicates that memory-based exploits will continue to plague lagging users, and the market for exploit development will likely expand as brokers seek to monetize vulnerabilities before updates are applied.

Former US President Donald Trump has made a striking statement about Iran, characterizing its fighters as 'lousy' while acknowledging them as 'great negotiators'. This mixed assessment came in a recent public statement, reflecting Trump's distinctive approach to international relations and diplomacy.The comment underscores the complex dynamics between the United States and Iran, particularly during Trump's presidency. Trump's remarks often sparked controversy and debate, and this latest statement is no exception. By highlighting Iran's negotiation skills, Trump may be suggesting a potential avenue for future diplomatic engagement, despite his critical view of their military capabilities.The relationship between the US and Iran has been marked by periods of heightened tension, particularly over issues such as nuclear agreements and regional influence. Trump's comments add to the ongoing discourse about how to approach diplomatic relations with Iran, reflecting broader themes in international relations about the balance between military strength and negotiation.

The Dual Threat: Coruna and DarkSwordSecurity researchers have identified two distinct but equally dangerous hacking toolkits, Coruna and DarkSword, that have leaked onto the open web. These advanced exploit kits, capable of breaking into iPhones and iPads, were originally developed for high-level government surveillance but are now available for anyone to download.Coruna: Targets iOS 13 through 17.2.1. Linked to Trenchant, a unit within U.S. defense contractor L3Harris, and previously used in Operation Triangulation against Russian targets.DarkSword: Targets iOS 18.4 and 18.7. Leaked on GitHub, making it "plug-and-play" for cybercriminals.The Scale of VulnerabilityThe scale of this exposure is staggering. According to Apple's statistics, nearly one-in-three iPhone and iPad users are still not running the latest software. With over 2.5 billion active devices globally, this implies hundreds of millions of users are susceptible to these attacks.DarkSword is particularly concerning because it targets newer devices running iOS 18.4 and 18.7. Researchers have already tested the leaked code, successfully hacking their own devices to demonstrate the ease of use.From State-Sponsored Espionage to Public ExploitationThis leak marks a dangerous shift in the cybersecurity landscape. Historically, sophisticated tools like Coruna were the domain of state-sponsored actors targeting specific regions, such as the Uyghurs in China or activists in Hong Kong.However, the release of DarkSword represents a move toward indiscriminate cybercrime. The tool is written in web languages like HTML and JavaScript, allowing attackers to launch attacks simply by hosting a malicious website. Victims in China, Malaysia, Turkey, Saudi Arabia, and Ukraine have already been targeted.The Future of Zero-Day WeaponizationThe leak of these tools mirrors the infamous 2017 WannaCry ransomware attack, which was fueled by leaked NSA exploits. Once powerful zero-day vulnerabilities are released into the wild, they are nearly impossible to fully contain.Experts recommend immediate action: users must update to iOS 18.7.6 or iOS 26.3.1. For high-risk individuals, enabling Lockdown Mode remains the most effective defense, as there is currently no public evidence of hackers bypassing its protections.

A California jury has ruled that Meta and Google are liable for $3m in damages in a landmark social media addiction lawsuit. The case, which began over a month ago, accused the companies of designing features intended to hook young users, including notifications and autoplay features.The plaintiff, a 20-year-old woman referred to as KGM or Kaley, claimed that she became addicted to social media at a young age, which exacerbated her mental health issues. She began using YouTube at age six and Meta-owned Instagram at age nine.The jury deliberated for over 40 hours across nine days before reaching a verdict. Meta CEO Mark Zuckerberg and Instagram head Adam Mosseri testified in the case, although YouTube chief executive Neal Mohan was not called to testify.The verdict is the latest in a wave of lawsuits targeting social media companies. There is a looming federal social media addiction case slated to begin in June in Oakland, California. On Tuesday in New Mexico, a jury found that Meta violated state law by misleading users about the safety of Facebook, Instagram, and WhatsApp, and by enabling child sexual exploitation on those platforms.Legal experts say the verdict will shape future litigation. 'The fact the jury found Meta and Google liable represents that these cases have real exposure to the social media giants, and are going to frame how future litigation will proceed,' entertainment lawyer Tre Lovell told Al Jazeera.

Kuala Lumpur, Malaysia – For over a decade, Sanjeet, a business consultant from India, considered Malaysia his home. Having grown comfortable with the country's climate, people, and lifestyle, he had begun planning long-term investments, including property purchases.However, recent government initiatives to reduce Malaysia's reliance on foreign workers have abruptly disrupted these plans for Sanjeet and thousands of other expatriates. Starting June, minimum salary requirements for foreign workers will increase by up to 100%, while their maximum permitted stay will be limited to five or ten years."What was surprising was that this came out of the blue," Sanjeet, who requested to use a pseudonym, told Al Jazeera. "It does leave room for doubt in terms of long-term plans, which include things like buying a house or car here."Malaysia has long been an attractive destination for foreign labor, with approximately 2.1 million documented foreign workers currently in the country. While many take on manual labor at the minimum wage of 1,700 ringgit ($430) monthly, a smaller but significant pool of around 140 highly-paid expatriates contributes substantially to the economy.In 2024, Home Affairs Minister Saifuddin Nasution revealed that these high-salaried expatriates injected about 75 billion ringgit ($19 billion) into the domestic economy annually while contributing approximately 100 million ringgit ($25 million) in taxes.The government's latest five-year national strategy, released in 2025, warns that Malaysia's "continuous reliance" on low-skilled foreign workers has hampered technological adoption and created "ripple effects" in the labor market, including wage distortions and slow productivity growth.To address these concerns, authorities aim to reduce the foreign workforce proportion from 14.1% in 2024 to just 5% by 2035. This ambitious target is supported by new minimum salary requirements that will see thresholds increase from 10,000 to 20,000 ringgit ($2,500 to $5,000), 5,000 to 10,000 ringgit ($1,260 to $2,520), and 3,000 to 5,000 ringgit ($760 to $1,260) for different work permit categories.UK native Thomas Mead, a 28-year-old wealth manager who recently purchased property in Kuala Lumpur, expressed shock at the sudden policy changes. "However, the jump from RM10,000 to RM20,000 was quite a shock," he said, noting that some expatriates are already considering relocation options despite their reluctance to leave.The policy changes are also raising concerns among businesses. Douglas Gan, a Singaporean founder of a venture capital fund with Malaysian portfolio companies, warned that the new rules would drive up costs and make it challenging to recruit specialized talent. "If salaries increase to 10,000 ringgit, companies definitely won't bring them here," he said, advocating for a more tailored approach rather than a "blanket solution."Leonardo, an Indonesian professional working in Malaysia's computer games sector, faces downgrading to a lower employment pass category under the new rules, potentially jeopardizing his plans to bring his mother to live in the country. "My mum is alone and living in Indonesia. There was a thought that if I could settle here, I could bring her over," he said.Economic analysts caution that the success of these policies depends on Malaysia's ability to develop its local workforce. "The long-run gain depends less on blocking expats and more on whether Malaysia can actually supply the skills," said Wan Suhaimie, head of economic research at Kenanga Investment Bank. He emphasized that foreign workers on mid-tier employment passes are not extravagant hires but "core managers, engineers and specialists."Anthony Dass, CEO of FSG Advisory, noted that while the measures align with strengthening the local talent pipeline, their effectiveness will depend on complementary reforms in capability building and industry upgrading.As these policies take shape, expatriates like Sanjeet are already considering alternatives. "If Malaysia pursues these policies without a comprehensive rationale, then people like me will look for alternatives such as Vietnam, Thailand and elsewhere, which have favourable policies for expats," he concluded.

The Republic of Ireland's hopes of reaching the 2026 World Cup were cruelly extinguished in Prague as they suffered a penalty shootout defeat to the Czech Republic. Despite leading 2-0 and 3-2 in the shootout, Heimir Hallgrímsson's team failed to capitalize on their advantages and ultimately fell to a Ladislav Krejci equalizer in the 86th minute, forcing a shootout.Ireland had started brightly, with Troy Parrott scoring a penalty and an own goal by Czech goalkeeper Matej Kovar doubling their lead. However, a needless penalty conceded by Ryan Manning allowed the Czechs back into the contest. The Czech Republic, led by captain Ladislav Krejci, equalized in the 86th minute, sending the match into extra time and eventually a shootout.In the shootout, Caoimhín Kelleher made a crucial save but Finn Azaz and Alan Browne failed to convert their spot kicks, allowing the Czech Republic to advance. Jan Kliment converted the fifth and final spot-kick to send the Czech Republic into a home final against Denmark on Tuesday.The Republic of Ireland have now lost five of their last six World Cup playoff fixtures, and the pain of this latest defeat will be heightened by the realization that it was largely unnecessary. As Heimir Hallgrímsson said, 'Just pain, we all feel pain. When you go this far it's a flip of a coin. Just pain we feel being that close.'

Donald Trump has launched a scathing attack on the UK's military capabilities, describing its aircraft carriers as 'toys' compared to those of the US. Speaking at the White House, Trump claimed that the UK had offered to send two aircraft carriers to support US military actions against Iran, but he had rejected the offer, saying 'Don't bother, we don't need it.'The comments have sparked a fresh row between Trump and UK Prime Minister Keir Starmer, who has refused to engage directly with the US president's repeated insults. Starmer has emphasized his focus on addressing the UK's domestic priorities, including the cost of living crisis, and has reiterated his commitment to defending British interests while avoiding escalation.Tensions between the US and UK have been rising over Nato's role in the conflict with Iran. Trump has expressed disappointment with Nato allies, accusing them of not doing enough to support the US. He also criticized Starmer for not providing sufficient support, saying 'He's not exactly Winston Churchill.'In response, Starmer has reaffirmed the UK's commitment to its Nato allies while emphasizing the need to address the threat posed by Russia. During a visit to Finland, Starmer warned of a 'war on two fronts' – Ukraine and Iran – and highlighted the importance of cooperation between Nato allies to counter these threats.The UK has deployed a warship, HMS Dragon, to the eastern Mediterranean in response to an Iranian-made missile launch from Lebanon at a UK RAF base in Cyprus. Officials are also considering deploying a Royal Navy vessel to support efforts to reopen the Strait of Hormuz, a critical waterway for global energy supplies.

The United States has recently presented a 15-point plan as part of its ongoing diplomatic efforts with Iran. This proposal is seen as a significant move in the complex and often tense relationship between the two nations. While specific details of the plan have not been disclosed, it is understood to cover a range of critical issues that have been points of contention between the US and Iran. These may include nuclear negotiations, economic sanctions, and regional security concerns. The proposal comes at a time when diplomatic efforts between the US and Iran have been intensifying, with both sides seeking to find common ground to address their differences. The Iran nuclear deal, from which the US withdrew in 2018, remains a central point of discussion, with the US pushing for stricter controls on Iran's nuclear program in exchange for relief from economic sanctions. The international community has been closely watching these developments, given the potential impact on global security and energy markets. A successful negotiation could lead to a more stable Middle East and lower oil prices, while a failure could exacerbate tensions and lead to further instability.

Riz Ahmed's latest venture, 'Bait', is a comedy series that masterfully blends humor with poignant commentary on identity, fame, and the entertainment industry. Ahmed, who created, co-wrote, and stars in the show, plays Shah Latif, a rapper turned actor from a lively west London Pakistani Muslim family.The series navigates Shah's journey as he finds himself in contention to replace Daniel Craig as the new James Bond, a career milestone that brings about a crisis in his life. This predicament leads Shah to question his authenticity and fear of becoming 'bait' – both in the London slang sense of being 'obvious' or 'naff,' and in the sense of being used by the British state to co-opt legitimate dissent.'Bait' skillfully balances humor with emotional authenticity, particularly through its portrayal of family dynamics. Sheeba Chaddha shines as Shah's mother, Tahira, bringing depth and warmth to every scene she's in. The show's humor is largely derived from its witty dialogue, which showcases a dazzling display of linguistic dexterity, effortlessly switching between Urdu, Arabic, MLE, and RP.The series also highlights the strength of the British south Asian actor community, with notable cameos and roles for Himesh Patel, Nabhaan Rizwan, and Sagar Radia. Ritu Arya is excellent as Yasmin, Shah's love interest, and her chemistry with Ahmed is undeniable.While 'Bait' occasionally veers into self-indulgence, its self-referential humor and industry satire add layers to the narrative. The show's exploration of themes such as identity, cultural representation, and the pressures of fame makes it a compelling watch. With its talented cast and clever writing, 'Bait' is a must-watch on Prime Video.