https://cybertoolchain.io/tools/corellium New releases and features in Corellium, tracked by The Cyber Toolchain. en Thu, 08 Oct 2026 00:00:00 GMT https://support.corellium.com/releases/7.14.0 https://support.corellium.com/releases/7.14.0 Thu, 08 Oct 2026 00:00:00 GMT Corellium 7.14 adds cluster-hosted MCP server for AI agent access, Mirror as a purchasable add-on, iPhone 18 support, and iOS/iPadOS 27 coverage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds cluster-hosted Corellium MCP server — cloud customers get AI agent access immediately on login with no setup; self-hosted (SA/DA) customers get it bundled with their existing deployment, using existing Corellium credentials with full tenant isolation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds rate limiter on the MCP server keyed by authenticated caller rather than proxy address, and credential redaction from default conversational MCP results. • Adds support for larger HTTP file uploads via the MCP server. • Moves API docs from `/api/docs` to a new UI built on Scalar, with ongoing investigation into surfacing SDK method names and per-language type signatures. • Makes Mirror available as a purchasable add-on to Falcon Essentials or Falcon Premium — loads a Cellebrite UFED (UFD) extraction directly into a new Corellium iOS virtual device for native app-based review. • Adds iPhone 18 device support. • Adds support for iOS/iPadOS 27.0.0, 27.0.1, and 27.2.0 beta 1 and beta 2 (betas for SA Falcon Premium only). • Updates Frida framework integration to support Frida 17.19.0 for iOS and 17.18.0 for Android. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases https://support.corellium.com/releases Mon, 05 Oct 2026 07:56:08 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases https://support.corellium.com/releases Sun, 04 Oct 2026 13:44:57 GMT Corellium on-premise gains parity with cloud 7.12.0; adds iOS/iPadOS 26.5.2, 26.6.0, and 27.0.0 beta support⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds iOS/iPadOS 26.5.2 virtual device support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds iOS/iPadOS 26.6.0 RC1/GA virtual device support. • Adds iOS/iPadOS 26.6.0 betas 2, 3, 4, and 5 virtual device support for SA Falcon Premium subscribers only. • Adds iOS/iPadOS 27.0.0 betas 1, 2, 3, and 4 virtual device support for SA Falcon Premium subscribers only. • Updates on-premise deployments to reach feature parity with the 7.12.0 cloud release. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.12.0 https://support.corellium.com/releases/7.12.0 Thu, 23 Jul 2026 00:00:00 GMT Corellium 7.12 adds Metal graphics support, KASAN/HWASAN kernel debugging, PongoOS pre-boot, MCP Server integration, and folder downloads. • Adds initial Apple Metal graphics support via a software-based implementation targeting Flutter applications, enabling apps that previously failed to launch or render in virtualized iOS environments. • Adds Android KASAN/HWASAN kernel debugging support, giving security researchers visibility into memory corruption, use-after-free, and buffer overflow issues at the kernel level. • Enables pre-boot of supported Apple devices directly into PongoOS before iOS loads, streamlining jailbreak research and low-level boot customization workflows. • Introduces an integrated Model Context Protocol (MCP) Server as the first phase of next-generation API/SDK modernization, allowing AI tools and autonomous agents to interact directly with Corellium environments. • The Files Browser now supports downloading entire folders and nested sub-folder structures from virtual devices in a single operation. • Adds support for iOS/iPadOS 26.5.2 and iOS/iPadOS 26.6.0 betas 2–4 and 27.0.0 betas 1–3 (beta OS access for Falcon Premium customers). • Updates Frida framework integration to support the latest Frida releases. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.11.0 https://support.corellium.com/releases/7.11.0 Thu, 21 May 2026 00:00:00 GMT Corellium 7.11 adds one-click RAM dump, USB direct-upload, storage quotas, NIAP mapping, and keyboard shortcuts. • Adds a 'Dump RAM' button in the VM admin control panel for live memory acquisition streamed to the workstation • Allows uploading files directly from USB or attached storage via the Corellium UI to bypass network bottlenecks • Provides Cluster Storage and VM Storage views on the Devices page to display exact available storage quotas before provisioning • Enables automatically mapping MATRIX-detected vulnerabilities to NIAP standards for compliance reporting • Adds a Command Menu toggled by CMD + K (or Ctrl + K) for keyboard-driven navigation across Corellium Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.10.0 https://support.corellium.com/releases/7.10.0 Fri, 27 Mar 2026 00:00:00 GMT Corellium 7.10 adds SBOM artifacts, Generic Linux VMs, Cluster Admin role with snapshot management and console access • New Cluster Administrator role for on-premises appliances enabling centralized snapshot management (clone, restore, rename, share, delete) and web-based appliance console access. • Corellium MATRIX now generates Software Bill of Materials (SBOM) artifacts listing all direct and transitive dependencies with version details to improve supply chain visibility. • Viper Advanced and Falcon instances now include a Generic Linux VM running Ubuntu, allowing deployment of Linux tooling (e.g., Appium server, MITM proxies) alongside mobile VMs without external VPNs. • Secure LDAP (LDAPS) configuration now supports customer-supplied certificates or automatic acceptance of server-presented credentials for encrypted communications. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.9.0 https://support.corellium.com/releases/7.9.0 Thu, 12 Feb 2026 00:00:00 GMT Corellium 7.9 adds WAN toggle, one-click screenshots, Cluster Admin role, and iOS/iPadOS 26.x support. • Adds WAN Enabled / WAN Disabled toggle during device creation to control internet access • Adds WAN toggle in the device settings panel post-creation without rebooting • Adds a 'Take Screenshot' button that downloads images locally without writing to the device camera roll • Introduces the Cluster Administrator role for web-UI appliance console access • Enables cluster-wide snapshot management (clone, restore, rename, share, delete, global limits) via the UI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.8.0 https://support.corellium.com/releases/7.8.0 Thu, 04 Dec 2025 00:00:00 GMT Corellium 7.8.0 adds iOS/iPadOS 26 support, enhanced firmware upload UI, and improved MATRIX test error messages • Adds support for iOS/iPadOS 26.1 GA and 26.2 beta releases for on-premises Premium customers. • Introduces a drag-and-drop web interface for batch or individual firmware/IPSW uploads with progress indicators. • Improves MATRIX test failure messaging to provide specific context when a test fails. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.7.0 https://support.corellium.com/releases/7.7.0 Thu, 09 Oct 2025 00:00:00 GMT Corellium 7.7 adds iPhone 17/Android 16/iOS 26 support, user-resizable device storage, and live MATRIX risk scores • Supports iPhone 17 models including iPhone 17 Pro, Pro Max, and Air with instruction-only Memory Integrity Enforcement (MEI) via Arm MTE. • Adds `Android 16` as a supported mobile operating system platform. • Adds `iOS/iPad OS 26.0.x` as a supported mobile operating system platform. • Enables specifying primary storage volume size directly during virtual device creation in Advanced Boot Options and Configure Your Device pages for iOS, Android, and IoT flavors. • Introduces the live MATRIX risk score panel for computing real-time app risk based on vulnerability severity and enabling audit-ready traceability via the `Activity` tab. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.6.0 https://support.corellium.com/releases/7.6.0 Thu, 28 Aug 2025 00:00:00 GMT Corellium 7.6 adds Cluster Admin role with in-UI console access, Frida script upload in MATRIX, and expanded compliance mapping. • Adds `Cluster Administrator` role providing in-UI appliance console access for on-premises deployments • Adds ability to upload Frida scripts in MATRIX test configuration to run automatically when the app opens Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.5.0 https://support.corellium.com/releases/7.5.0 Thu, 03 Jul 2025 00:00:00 GMT Corellium 7.5.0 adds MATRIX report customization (N/A status, severity adjustments, evidence suppression), User Activity Log, and Deep Linking to Files Browser. • Adds new 'Not Applicable' (N/A) result status for checks in MATRIX reports, with automatic reflection in summary, history, and activity log. • Enables direct adjustment of result severities within the MATRIX report interface, with full support for reverting changes. • Introduces ability to suppress individual pieces of evidence within a MATRIX result to reduce report clutter. • Adds new User Activity Log within MATRIX assessments to track scan start/stop times, modifications, and user actions. • Adds MATRIX Deep Linking: clicking an evidence path in a MATRIX report navigates directly to the containing directory in the Files Browser. • Redesigns MATRIX report with horizontal summary layout and visual enhancements for improved readability. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.4.0 https://support.corellium.com/releases/7.4.0 Thu, 22 May 2025 00:00:00 GMT Corellium 7.4 adds Rapid Start for iOS/iPadOS, Android Binder Tracing, new hardware appliances, and enhanced CLI/API capabilities. • Rapid Start: Spins up virtual iOS and iPadOS devices 5X faster using specialized firmware snapshots. • Android Binder Tracing: CoreTrace now parses Android IPC Binder transactions to display interface headers, method names, and arguments in a human-readable format instead of raw hexdumps. • High-Speed Server Appliances: New generation hardware based on the NVIDIA Grace platform runs up to 2X faster with flexible licensing for 60 or 120 VM cores. • File Navigation: Enhanced Files tool adds a path entry field to directly access specific directory or file locations. Breaking changes: • iOS 10–14 versions are moved to End-of-Support (EOS) for cloud customers, receiving no QA testing or enhancements. • iOS 10–14 versions enter End-of-Support (EOS) for onsite customers, requiring manual re-inclusion for future updates. • iPhone 6 & 6 Plus models reach End-of-Life (EOL) and are no longer actively supported. • iPhone 6 & 6 Plus models enter End-of-Support (EOS), will not appear in the IPSW Loader by default, and require manual inclusion upon request. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.3.0 https://support.corellium.com/releases/7.3.0 Thu, 03 Apr 2025 00:00:00 GMT Corellium 7.3 adds iOS Camera Passthrough, iPadOS 16-18 support, MATRIX compliance mapping, and Split APK scanning. • Adds `iOS Camera Passthrough` for Microphone and Camera support on select older iOS devices (iPhone 8, SE 2020/2022). • Expands platform support to include iPad Mini 5, iPad Mini 7, and all iPadOS versions 16.x through 18.x. • Enables `Split APK Support` in MATRIX scans to handle Google Play's app splitting delivery method. Breaking changes: • Cloud customers lose access to iOS 10–14 and iPhone 6/6 Plus devices as they reach End-of-Life (EOL). • Onsite customers' iOS 10–14 versions enter End-of-Support (EOS) and will be removed from the IPSW Loader by default in future updates. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.2.0 https://support.corellium.com/releases/7.2.0 Thu, 27 Feb 2025 00:00:00 GMT Corellium 7.2 adds SAML/LDAP auth, VLAN tagging, Admin Activity Logger, and Android code signing checks. • Adds `SAML` authentication support for single sign-on with Identity Providers like Okta, OneLogin, and Azure AD. • Adds LDAP authentication integration to map LDAP groups to Corellium roles and centralize RBAC management. • Adds VLAN tagging configuration at the project level for network isolation in on-premise deployments. • Adds a User Activity Logger in the Admin interface to track user actions for security auditing. • Adds a new check that gathers code signing artifacts from Android applications. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.1.0 https://support.corellium.com/releases/7.1.0 Fri, 20 Dec 2024 00:00:00 GMT Corellium 7.1.0 adds iOS 18.1.1/18.2 support, Android 15, dark mode UI, and new static analysis checks for network, crypto, storage, platform, and artifacts. • Adds `History Page` filtering options to improve navigation • Adds Dark Mode support to the Web Interface • Adds iOS Checks: Network (deprecated FTP), Crypto (hardcoded keys), Storage (plaintext Keychain values) • Adds Android Checks and Artifacts: Platform (FLAG_SECURE detection) and Artifact (local database listing with paths) • Adds GApps support for Android 13, 14, and 15 • Adds premium licence-only iOS 18.2 beta support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium https://support.corellium.com/releases/7.0.2 https://support.corellium.com/releases/7.0.2 Tue, 26 Nov 2024 00:00:00 GMT Corellium 7.0.2 improves on-site upgrade experience and upgrades OS to Ubuntu 24 • Improved on-site appliance upgrade installation experience • Upgraded on-site appliance operating system to Ubuntu 24 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/corellium