AI Image

Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

The Hacker News • November 5, 2026 • technology

Key Points:

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a medium-severity Apple OS vulnerability, CVE-2024-27834, to its Known Exploited Vulnerabilities catalog due to active exploitation reports.
CVE-2024-27834 involves improper authentication allowing attackers to bypass Pointer Authentication and gain arbitrary read/write access; it was patched by Apple in May 2024 across multiple operating systems including iOS, macOS, and Safari.
The vulnerability was demonstrated as a zero-day at the Pwn2Own Vancouver contest in March 2024 and is being exploited by APT29, a Russian state-sponsored hacking group, using malware to steal browser and device data.
Attackers use compromised legitimate sites, fake websites, and a supply chain attack on Plerdy SEO Tracker to deliver malicious JavaScript that triggers the exploit and deploys information-stealing payloads.
Federal Civilian Executive Branch agencies are advised to apply the patches by November 18, 2026, to mitigate risks from this actively exploited vulnerability.

Trending Business