Jamf details scary iCloud flaw that was exploitable until this fall

Macworld
Jamf on Tuesday revealed the details of an iCloud vulnerability that was fixed with the release of iOS 18, iPadOS 18, and macOS 15 Sequoia. The vulnerability involved the Transparency, Consent, and Control (TCC) subsystem, and when successfully exploited, would allow an app to access contact information, GPS locations, photos, are other sensitive data.The TCC in iOS, iPadOS, and macOS alerts the user when an app wants to access sensitive data; the user can then grant or deny access