On Wednesday, the U.S This article explores vulnerabilities safari google. . Cybersecurity and Infrastructure Security Agency (CISA) added a medium-severity security flaw to its Known Exploited Vulnerabilities (KEV) catalog.
The vulnerability, identified as CVE-2024-27834 (CVSS score: 5.5), involves improper authentication, enabling an attacker with arbitrary read and write capabilities to circumvent Pointer Authentication. Reports indicate active exploitation of this issue. Apple addressed the vulnerability in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5, iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5, and Safari 17.5 in May 2024.
The exploit was demonstrated at the Pwn2Own Vancouver hacking contest in March 2024. This follows a report from Sekoia that threat actors, possibly linked to Russia's Foreign Intelligence Service, used previously patched vulnerabilities in Safari and Google Chrome to deliver malware. The activity has been attributed to APT29, a state-sponsored hacking group.
The attacks involve three initial access pathways: compromised legitimate websites, fake sites masquerading as popular websites, and a supply chain attack aimed at Plerdy SEO Tracker.
The exploit chain combines a remote code execution flaw in WebKit and a pointer authentication codes (PACs) bypass to execute a JavaScript payload designed for browser cookie theft. As a result, Federal Civilian Executive Branch (FCEB) agencies are recommended to apply the necessary patches by November 18, 2026.
