CISA warns of active exploitation of patched Apple flaw to deliver information-stealing malware

TechnologyInternationalThe Hacker NewsNov 5, 2026, 12:17 AMAI summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple's CVE-2024-27834 vulnerability to its catalog of exploited flaws, following reports of active exploitation. The medium-severity bug (CVSS 5.5) allows an attacker with arbitrary read and write capability to bypass pointer authentication. Apple fixed it in May 2024 across iOS, iPadOS, macOS Sonoma, tvOS, watchOS and Safari. According to Sekoia, actors possibly linked to Russia, attributed to APT29, used it to distribute malware that harvests browser and device data.

In 35 seconds

CISA added CVE-2024-27834 to its KEV catalog due to active exploitation
The medium-severity flaw (5.5) allows bypassing pointer authentication
Apple fixed it in May 2024 across iOS, iPadOS, macOS, tvOS, watchOS and Safari

Read the full story at The Hacker News

IASummary generated by artificial intelligence from a story by The Hacker News. It may contain errors: the original source prevails.

Apple
CISA
ciberseguridad
vulnerabilidades
APT29

Comments

Be respectful. Comments reported by several people are hidden until a moderator reviews them.

You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.

Keep reading

"Justice cannot hide behind an algorithm": the debate over AI and prompt injection in courts
An opinion column addresses the use of artificial intelligence in judicial activity and the practice of "prompt injection": inserting hidden instructions into documents to alter the behavior of AI systems and gain procedural advantages. It cites sanctions in the United States, where a Connecticut judge sanctioned a litigant for invisible messages in court documents, and in Brazil, where the Supreme Federal Court and the Superior Court of Justice imposed fines and ordered disciplinary investigations against lawyers. The text argues that a judge cannot delegate responsibility to an algorithm.
TechnologyInternationalLa Nación12:25 AMAI
Colombia ranks fourth in AI in Latin America, but weak infrastructure and investment limit the leap
The 2026 Latin American Artificial Intelligence Index (Ilia), prepared by Cenia and ECLAC, places Colombia fourth in the region with 56.8 out of 100, behind Chile (71.4), Brazil (68.4) and Uruguay (67.0), and ahead of Argentina (55.6) and Mexico (52.0). The country leads the group of "adopters" and ranks second in AI Governance and Ethics, but scores 50.2 in digital infrastructure and shows modest venture capital raising for AI startups.
TechnologyColombiaLa República12:01 AMAI
Antioquia spent COP 7.212 billion from security levy on 36 drones for the security forces
Antioquia Governor Andrés Julián Rendón handed 36 drones to the security forces, purchased with funds from the Special Security and Citizen Coexistence Levy for more than COP 7.212 billion. The equipment, with day and night surveillance, high-resolution cameras and thermal sensors, aims to expand surveillance, reconnaissance and operational response capabilities. They will be distributed among the Empás squadrons, Army brigades, the National Police and the Air Force. Thirty-eight officers trained to operate them.
TechnologyColombiaRevista SemanaNov 4AI
Google to disable its AI tools by default for elementary and high school students
Google announced that several of its artificial intelligence features will be disabled by default for elementary and high school students, and that administrators at each institution will be able to authorize their use. The measure includes Gemini, Gemini Notebook, Gemini in Classroom and the AI features built into its search engine. The rollout will be global and will begin in the United States, although the company has not yet set an effective date.
TechnologyInternationalNoticias RCNNov 4AI

CISA warns of active exploitation of patched Apple flaw to deliver information-stealing malware

In 35 seconds

Comments

Keep reading

"Justice cannot hide behind an algorithm": the debate over AI and prompt injection in courts

Colombia ranks fourth in AI in Latin America, but weak infrastructure and investment limit the leap

Antioquia spent COP 7.212 billion from security levy on 36 drones for the security forces

Google to disable its AI tools by default for elementary and high school students