Apple patches macOS vulnerability exploited to bypass security defenses
SHARE
Apple Inc. today released a security update for macOS Big Sur 11.4 to address a vulnerability that was being exploited to bypass macOS security defenses.
The vulnerability traces back to a discovery made by researchers at Trend Micro Inc. in August that found a form of malware dubbed XCSSET targeting Xcode projects. Further digging by researchers at Jamf found that a related, unpatched vulnerability was now being exploited to take screenshots secretly on Macs.
Using the vulnerability, hackers can get around a macOS privacy feature called Transparency Consent and Control. TCC is designed to flag an app is partaking in an activity that may affect a user’s privacy, such as taking photos or recording keystrokes. The feature asks users for permission before any action is taken and herein is where the issue occurs.