⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe-Coded Malware

This weekly cybersecurity recap covers major threats, takedowns, and vulnerabilities from the week of March 9, 2026.

• •Tycoon 2FA phishing-as-a-service infrastructure and LeakBase cybercrime forum were dismantled by law enforcement and security companies.
• •Anthropic's Claude Opus 4.6 discovered 22 Firefox vulnerabilities (14 high, 7 moderate, 1 low) through a security partnership with Mozilla.
• •Qualcomm CVE-2026-21385 (CVSS 7.8), a buffer over-read in the Graphics component, is being actively exploited on Android devices.
• •The Coruna iOS exploit kit targets iOS 13.0–17.2.1 with 5 full exploit chains and 23 exploits, used by surveillance vendors, Russian espionage groups, and Chinese financially motivated attackers.
• •Pakistan-aligned Transparent Tribe used AI coding tools to generate malware in niche languages (Nim, Zig, Crystal) targeting Indian government entities.