New macOS vulnerability, “HM Surf”, could lead to unauthorized data access

Microsoft Threat Intelligence disclosed HM Surf (CVE-2024-44133), a macOS vulnerability that removes TCC protections for the ~/Library/Safari directory enabling attackers to modify Safari configuration (PerSitePreferences.db) and cause Safari to grant camera, microphone, location, and browsing-data access without user consent; Apple released a patch in macOS Sequoia and Microsoft Defender for Endpoint detects and blocks exploitation attempts, with telemetry showing Adload-related activity that modified browser preference files using a world-writable temporary binary and a fake com.BasicIndex.service installation.