Malware caught using a macOS zero-day to secretly take screenshots

Jamf says it found evidence that the XCSSET malware was exploiting a vulnerability that allowed it access to parts of macOS that require permission — such as accessing the microphone, webcam, or recording the screen — without ever getting consent. XCSSET was first discovered by Trend Micro in 2020 targeting...