macOS HM Surf vuln might already be under exploit by major malware family

Microsoft disclosed a Safari-related macOS vulnerability (CVE-2024-44133) that allows attackers to tamper with local configuration files to bypass TCC privacy protections; the company developed a PoC exploit called "HM Surf," deployed detections, and observed activity resembling the Adloader macOS malware, while Apple issued a patch in macOS Sequoia to mitigate the issue.