The Plerdy SEO tracker hack turned a script that ordinary websites embed into a delivery route for a Safari and Chrome exploit chain that steals browser cookies. CISA has now flagged the Apple bug at its center, CVE-2024-27834, as actively exploited. If your site loaded that tag, or your admins log in from older Apple devices, you have work to do.