Today, attackers are targeting multiple Apple products for a vulnerability that could allow unauthorized access. Small businesses using these products should be aware and take immediate action to secure their systems.
Apple Multiple Products (CVE-2024-27834)
Apple Multiple Products. This vulnerability affects iOS, iPadOS, macOS, Safari, tvOS, and watchOS 10.5. An attacker could exploit this to bypass authentication and potentially gain unauthorized access. Businesses should update to the latest security patches to protect their systems.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Tip of the day: Pause before you click
Urgent emails about invoices, deliveries or locked accounts are the usual way in. Open the site yourself rather than following the link.
Doing it once, properly
The lowest quote rarely stays the lowest. Work that skips the security basics tends to be redone from scratch later, and redoing it costs more than doing it properly once.
Sources
Written each morning from CISA's catalogue of vulnerabilities known to be exploited, with the help of an AI model that runs on our own server. Check the sources before acting, and talk to us if you are not sure whether you are affected.