Hackers Exploit The Powerdir Flaw For Access To MacOS Data

Share post:

The Microsoft 365 Defender Research Team has discovered a flaw known as powedir.

The bug, a macOS vulnerability, allows threat actors to gain access to the user’s protected data.

Attackers can do this by bypassing Transparency, Consent, and Control (TCC) technology. TCC was created to block apps from accessing sensitive user data.

The technology achieves this goal by allowing macOS users to configure privacy settings for the apps installed on their systems and devices connected to their Macs.

Apple has restricted TCC access to only apps with full disk access. Apple has also set up features to automatically block unauthorized code execution.

However, Microsoft researchers have shown that attackers can create a second, specially crafted TCC database that allows them to access protected user information.

“If exploited on unpatched systems, this vulnerability could allow a malicious actor to potentially orchestrate an attack based on the user’s protected personal data,” said Jonathan Bar Or, a principal security researcher at Microsoft.

For more information, read the original story in BleepingComputer.

Featured Tech Jobs

SUBSCRIBE NOW

Related articles

Exim issues email server update, mitigations for 6 zero-day vulnerabilities

All previous versions of Exim are obsolete, the developers warn admi

Cyber Security Today, Oct. 2, 2023 – How to create a cybersecurity awareness program

For October Cyber Security Awareness Month this episode offers tips on how to build an effective awarene

Cyber Security Today, Oct. 2, 2023 – How to create a cybersecurity awareness program

For October Cyber Security Awareness Month this episode offers tips on how to build an effective awarene

Cyber Security Today, Week in Review for the week ending Friday, Sept. 29, 2023

This episode features discussion on October Security Awareness Month, ransomware, teenage hackers and the start of hearings into proposed Canadian privacy a

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways