Apple in macOS Big Sur 11.4 patched a zero-day vulnerability that could allow attackers to secretly take screenshots or record video of a user’s screen by hijacking existing app permissions.
The flaw bypassed Apple’s Transparency Consent and Control framework, which controls what system functions applications can access, according to security researchers at Jamf, who first discovered the vulnerability.
Jamf notes that the vulnerability appears to have been actively exploited in the wild. It discovered the flaw while researching a strain of Mac malware dubbed XCSSET, which targets macOS developers through infected Xcode projects.
Read more at AppleInsider.com