Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

CISA added CVE-2024-27834, a medium-severity improper authentication flaw in multiple Apple operating systems, to its Known Exploited Vulnerabilities catalog on Wednesday. The vulnerability, with a CVSS score of 5.5, is being actively exploited by hackers to deliver info-stealing malware. Apple has patched the flaw, but CISA warns of ongoing attacks.