Microsoft recently disclosed details about a security flaw in Apple's Transparency, Consent, and Control (TCC) framework for macOS, codenamed "HM Surf." This flaw, now patched, could have allowed attackers to bypass privacy preferences and access sensitive user data without consent. It has been tracked as CVE2024-44133 and was resolved with the release of macOS Sequoia 15, which removed the vulnerable code. Here’s what you need to know about this issue, its impact, and the lessons learned.

‍

DOWNLOAD