Securityaffairs.Co CISA Adds Apple CVE-2024-27834 to KEV Catalog Amid Active Exploitation
Article Content
- •CVE-2024-27834 added to CISA's KEV catalog due to active exploitation.
- •The vulnerability affects multiple Apple operating systems and allows bypassing of Pointer Authentication.
- •Attacks linked to APT29 utilize this flaw to deploy information-stealing malware.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2024-27834, a medium-severity vulnerability affecting multiple Apple operating systems, to its Known Exploited Vulnerabilities (KEV) catalog due to reports of active exploitation. This flaw allows attackers with arbitrary read and write capabilities to bypass Apple's Pointer Authentication, a security feature. The vulnerability was patched by Apple in May 2024 across various systems, including iOS, iPadOS, macOS, and Safari. Recent attacks attributed to the Russian cyberespionage group APT29 have exploited this vulnerability alongside other flaws to deploy information-stealing malware. CISA has recommended that federal agencies apply necessary patches by November 18, 2026, to mitigate risks associated with this vulnerability.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track APT29, Plerdy SEO Tracker and CVE-2024-27834 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which Apple systems are affected?
What is the current exploitation status?
What should organizations do to protect themselves?
Continue Reading
APT29 Targets Mobile Users with Watering Hole Campaign APT29, a Russian state-sponsored hacking group, is behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites and fake domains. The campaign, identified by Sekoia in mid-October 2026, employs multiple infection vectors, including JavaScript injection on legitimate sites… 
ClickFix Technique Surges with AI Lures in Cyber Attacks ClickFix has emerged as a dominant cyber attack technique since 2024, now accounting for over 52% of Push's detections. This method has evolved to include sub-techniques like InstallFix and ConsentFix, with attackers increasingly using AI tools as bait. In Q2 2026, ClickFix detections reached 67%, surpassing other…