This morning, Microsoft's 365 Defender research team released details of a new macOS "Powerdir" vulnerability that allows an attacker to bypass transparency, consent, and control technology to gain unauthorized access to protected data.
Apple has already fixed vulnerability CVE-2021-30970 in the macOS Monterey 12.1 Update released in December, so users who have upgraded to the latest version of Monterey are protected. Those who haven't should update. Apple in its Security Release Notes for Update 12.1 confirmed the vulnerability of TCC and attributed its discovery to Microsoft.
|
