Actively Exploited Mobile Firmware and Platform Vulnerabilities

A Google Pixel modem flaw is reportedly under active exploitation with zero-click characteristics and a short federal remediation deadline. Apple iOS exploitation involving Coruna/DarkSword kits and WebKit-related memory corruption is also active and in CISA KEV; organizations should inventory affected devices, apply and validate firmware or OS updates, and perform forensic triage without overstating commercial-spyware attribution.