Apple Flaw CVE-2024-27834 Actively Exploited to Deploy Malware
CISA adds a patched Apple vulnerability to its KEV catalog after reports of real-world exploitation. The flaw enables attackers to bypass authentication and deploy info-stealing malware.
TL;DR
- CISA adds CVE-2024-27834 to its Known Exploited Vulnerabilities list.
- The flaw affects multiple Apple operating systems and allows improper authentication.
- Attackers are actively exploiting the vulnerability to deliver malware.
- Organizations should ensure all Apple devices are updated immediately.
- The vulnerability has a CVSS score of 5.5, classified as medium severity.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a medium-severity Apple vulnerability, CVE-2024-27834, to its Known Exploited Vulnerabilities (KEV) catalog. This move follows confirmed reports of the flaw being exploited in the wild to deploy information-stealing malware.
The vulnerability, which impacts multiple Apple operating systems, stems from an issue with improper authentication. Although Apple has already released patches, many systems may remain exposed due to delayed updates. Organizations using Apple devices should act immediately to verify patch status and mitigate potential risks.
About CVE-2024-27834
- CVE-2024-27834 is an authentication bypass vulnerability affecting macOS, iOS, and iPadOS.
- It has a CVSS score of 5.5, indicating medium severity.
- Improper validation in system authentication processes allows attackers to gain unauthorized access.
- Once exploited, attackers can install malware capable of stealing sensitive user data.
Recommended Actions for IT Teams
- Audit all Apple devices for the presence of the latest security patches.
- Prioritize patching for systems exposed to external networks or public internet.
- Monitor endpoint detection and response (EDR) tools for suspicious activity related to known malware signatures.
- Educate users about signs of compromise, including unexpected performance issues or unknown applications.
- Review and enforce mobile device management (MDM) policies to ensure compliance with update requirements.
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.