Unpatched Apple devices remain exposed to Sploitlight, a macOS flaw that allows unauthorized access to private user data despite security measures.

Microsoft Threat Intelligence has discovered a macOS vulnerability, tracked as CVE-2025-31199, that could allow attackers to steal private data of files normally protected by Transparency, Consent, and Control (TCC),

New SploitLight macOS vulnerability lets attackers use Spotlight plugins to bypass TCC and access sensitive data cached by Apple Intelligence.

Microsoft has disclosed a critical vulnerability in macOS that allows attackers to bypass core privacy protections and steal sensitive user data. The flaw, dubbed ‘Sploitlight’ by its researchers, exploits the operating system’s Spotlight search function to circumvent the Transparency,

Microsoft Threat Intelligence found a Spotlight-related vulnerability that could allow attackers to steal private file data, outlining the issue in

Microsoft Threat Intelligence has found a Spotlight-related vulnerability that could allow attackers to steal private file data, outlining the issue in a blog post today — as noted by MacRumors. From

Microsoft has detailed a serious macOS vulnerability that could allow malicious apps to bypass system privacy protections. Dubbed “SploitLight,”