Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
// AI summary
CISA added CVE-2024-27834, a medium-severity improper authentication flaw in multiple Apple operating systems, to its KEV catalog due to active exploitation by attackers.
// from the source
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability in question is CVE-2024-27834 (CVSS score: 5.5), a case of improper authentication that could allow an attacker with