TLDR InfoSec · ATTACKS & VULNERABILITIES
NEW MACOS TCC VULNERABILITY DISCOVERED
Summary from the TLDR InfoSec newsletter
Microsoft researchers discovered a new vulnerability that could allow attackers to bypass Transparency, Consent, and Control (TCC) protections for Safari. The vulnerability can be exploited by an attacker modifying specific configuration files in Safari and then forcing a user to browse to a malicious page. A patch is available and users are encouraged to update as Microsoft has determined that threat actors may be actively exploiting the vulnerability.