New ‘HM-Surf’ Vulnerability Could Expose MacOS Data

The macOS vulnerability known as HM Surf (CVE-2024-44133), allows attackers to bypass the Transparency, Consent, and Control (TCC) framework, granting unauthorized access to sensitive data like the camera and microphone. Active exploitation has been linked to the adware family Adload. Apple has released security updates to address this issue. Users are advised to install updates promptly and exercise caution with app permissions.