Explore the details of the CVE-2024-54527 vulnerability in macOS and understand how attackers can leverage powerful entitlements to bypass TCC protections.

Microsoft discovered "Sploitlight" (CVE-2025-31199), a macOS flaw exploiting Spotlight plugins to bypass TCC, leading to private data exfiltration, including Apple Intelligence cached info.

A critical flaw (CVE-2025-24103) in macOS InstallAssistant allows a normal user to bypass TCC, exposing private data. A PoC is public, urging users to update to 15.3.

A critical macOS flaw (CVE-2025-24204) in gcore allows a user to read any process memory and bypass TCC. A PoC is public, and patching is urgent.

Microsoft has unveiled Sploitlight, a technique that abuses macOS Spotlight to bypass TCC protections and siphon data from databases used by Apple Intelligence.

Apple’s privacy fortress, the Transparency, Consent, and Control (TCC) framework, has been breached once again. Security researcher Mickey Jin (@patch1t) has disclosed a sophisticated new vulnerab…

Mac users, often confident in the “walled garden” security of their devices, are facing a new threat that doesn’t rely on cracking code, but on cracking human trust. A new invest…

Microsoft uncovers Sapphire Sleet's macOS campaign. Using fake recruiters and AppleScript, they bypass TCC to steal crypto wallets, Telegram, and SSH keys.