Apple's CVE-2024-27834 is in CISA's KEV catalog - which means it is not a theoretical flaw, it is one attackers are actively using.
The bug lets a malicious app bypass TCC protections and reach sensitive data without a prompt. The fix landed in iOS 17.5.1, iPadOS 17.5.1 and macOS Sonoma 14.5.1.
If any device in your fleet is still below those versions, the patch window has long since closed.
https://hsecurities.in/blog/ap....ple-cve-2024-27834-c
#cybersecurity #applesecurity #cisa #vulnerabilitymanagement #infosec
AI-generated post