TCC Bypass

Beyond Gatekeeper: How Sapphire Sleet’s AppleScript Trap Hijacks macOS and Crypto Wallets

• Malware

Beyond Gatekeeper: How Sapphire Sleet’s AppleScript Trap Hijacks macOS and Crypto Wallets

Do Son April 21, 2026 0

In a sophisticated shift away from traditional software exploitation, the North Korean state-sponsored threat actor Sapphire Sleet...

Read More Read more about Beyond Gatekeeper: How Sapphire Sleet’s AppleScript Trap Hijacks macOS and Crypto Wallets

The “Compatibility” Trap: New Mac Malware Tricks Users into Bypassing TCC

• Malware

The “Compatibility” Trap: New Mac Malware Tricks Users into Bypassing TCC

Do Son February 9, 2026 0

Mac users, often confident in the “walled garden” security of their devices, are facing a new threat...

Read More Read more about The “Compatibility” Trap: New Mac Malware Tricks Users into Bypassing TCC

New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation

• Vulnerability Report

New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation

Do Son January 6, 2026 0

Apple’s privacy fortress, the Transparency, Consent, and Control (TCC) framework, has been breached once again. Security researcher...

Read More Read more about New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation

CVSS 9.8 Flaw in macOS Allows Apps to Access Protected User Data, PoC Available

• Vulnerability

CVSS 9.8 Flaw in macOS Allows Apps to Access Protected User Data, PoC Available

Do Son September 9, 2025 0

Security researcher Mickey Jin (@patch1t) has uncovered a critical vulnerability in Apple’s file copy APIs that could...

Read More Read more about CVSS 9.8 Flaw in macOS Allows Apps to Access Protected User Data, PoC Available

PoC Available: macOS Sequoia Flaw Allows Keychain Dump and TCC Bypass (CVSS 9.8)

• Vulnerability

PoC Available: macOS Sequoia Flaw Allows Keychain Dump and TCC Bypass (CVSS 9.8)

Do Son September 5, 2025 0

Apple has patched a critical security vulnerability in macOS Sequoia, tracked as CVE-2025-24204 (CVSS 9.8), that could...

Read More Read more about PoC Available: macOS Sequoia Flaw Allows Keychain Dump and TCC Bypass (CVSS 9.8)

Critical macOS Flaw (CVSS 9.8) Bypasses TCC Without Root Access: PoC Published

• Vulnerability

Critical macOS Flaw (CVSS 9.8) Bypasses TCC Without Root Access: PoC Published

Do Son August 11, 2025 0

Security researcher Zhongquan Li has uncovered a critical flaw in macOS InstallAssistant, tracked as CVE-2025-24103 with a...

Read More Read more about Critical macOS Flaw (CVSS 9.8) Bypasses TCC Without Root Access: PoC Published

Microsoft Uncovers “Sploitlight”: macOS Flaw (CVE-2025-31199) Bypasses TCC, Leaking Apple Intelligence Data

• Vulnerability Report

Microsoft Uncovers “Sploitlight”: macOS Flaw (CVE-2025-31199) Bypasses TCC, Leaking Apple Intelligence Data

Do Son July 29, 2025 0

Microsoft Threat Intelligence has unveiled a critical macOS vulnerability that exploits Spotlight plugins to bypass the system’s...

Read More Read more about Microsoft Uncovers “Sploitlight”: macOS Flaw (CVE-2025-31199) Bypasses TCC, Leaking Apple Intelligence Data

CVE-2024-55950: Tabby Terminal Emulator Vulnerability Exposes macOS Users to Privacy and Security Risks

• Vulnerability

CVE-2024-55950: Tabby Terminal Emulator Vulnerability Exposes macOS Users to Privacy and Security Risks

Do Son December 29, 2024 0

A high-severity vulnerability, CVE-2024-55950 (CVSS 8.6), has been identified in Tabby (formerly Terminus), a widely used terminal...

Read More Read more about CVE-2024-55950: Tabby Terminal Emulator Vulnerability Exposes macOS Users to Privacy and Security Risks