TLDR InfoSec · ATTACKS & VULNERABILITIES

NEW MACOS TCC VULNERABILITY DISCOVERED

links.tldrnewsletter.com2 min read

Summary from the TLDR InfoSec newsletter

Microsoft researchers discovered a new vulnerability that could allow attackers to bypass Transparency, Consent, and Control (TCC) protections for Safari. The vulnerability can be exploited by an attacker modifying specific configuration files in Safari and then forcing a user to browse to a malicious page. A patch is available and users are encouraged to update as Microsoft has determined that threat actors may be actively exploiting the vulnerability.