APT29 (Cozy Bear) compromised the Plerdy web analytics script to deliver zero-click iOS and Android exploit chains to thousands of websites’ visitors. CISA added CVE-2024-27834 to its KEV catalog with a November 18 deadline. Here is what enterprise security teams must do now.
