Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

The U.S. Cy­ber­se­cu­rity and In­fras­truc­tu­re Se­cu­rity Agency (CISA) on Wed­nes­day added a me­dium-se­ve­rity se­cu­rity flaw im­pac­ting mul­ti­ple Apple ope­ra­ting sys­tems to its Known Ex­ploi­ted Vul­ne­ra­bi­li­ties (KEV) ca­ta­log, fo­llo­wing re­ports of ac­ti­ve ex­ploi­ta­tion. The vul­ne­ra­bi­lity in ques­tion is CVE-2024-27834 (CVSS score: 5.5), a case of im­pro­per authen­ti­ca­tion that could allow an at­tac­ker…