Old Apple Bug Back in Play as Hackers Use CVE-2024-27834 to Spread Data‑Stealing Malware
Hackers are exploiting CVE‑2024‑27834, an Apple vulnerability patched more than two years ago, to deliver information‑stealing malware, prompting U.S. cyber authorities to add it to their list of actively exploited flaws.
An Apple security hole that was fixed years ago has re-emerged as a live threat for users who never installed the patch.
Security reports say attackers are actively exploiting CVE‑2024‑27834, a vulnerability in Apple software that the company addressed more than two years ago. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has now added the bug to its catalog of exploited vulnerabilities.
Recent attacks use the flaw to plant information‑stealing malware. Once on a device, this kind of malware is designed to quietly harvest sensitive data for resale or use in other intrusions. The campaigns focus on systems that are still running older, unpatched versions of Apple operating systems.
CISA’s decision to list CVE‑2024‑27834 signals to federal agencies that the bug is being used in real‑world attacks and that they must find and fix affected systems within set deadlines. That process often reveals how many devices, especially older or less centrally managed ones, have slipped behind on updates.
The renewed abuse of this vulnerability underlines a familiar reality: attackers don’t need brand‑new flaws when they can rely on users and organizations failing to apply existing patches.
Key indicators to watch now are whether these exploits stay focused on broadly exposed targets or begin to appear in more tailored attacks against higher‑value networks, and whether Apple or CISA issue more detailed guidance on detecting and cleaning infections linked to CVE‑2024‑27834.
Sources
- OSINT