This is

this is Mac OSKIN. updates for everything.

The WDC keynote is confirmed, and closing arguments in Epic v Apple.

It's Tuesday, the 25th of May 2021.

I'm Ken Ray, and this is news from Macau West Can brought to you by yours truly and sponsored by

head space.

Meditation made simple. Get a free one month trial at headspace.com slash

Maco-S-Kan. This show is also supported by people like you, patrons through Patreon.

Find out more and at your support at patreon.com slash MacOSKam. Patreon. While all of those updates have security components, we'll start with the Mac since its security fix seems most urgent.

As seen on Mac rumors, Apple's notes for the Mac OS Big Sur 11.4 update say the update adds Apple

podcast subscriptions and channels and includes important bug fixes. It

also includes a patch for a scary sounding security issue.

That part wasn't in Apple's notes.

A piece from Forbes says the device management firm and former MacO.S. Ken sponsored JAMF discovered the issue last year

when researching the XCS set malware. According to the piece, the hackers who created the spyware discovered they could get around a Mac-O-S privacy feature known as transparency, consent and control.

The TCC is the feature that raises a flag when an app is doing something that might affect

a user's privacy such as taking photos or recording keystrokes asking for explicit permission

from the user before any action is taken.

The malware coders found a way to hijack other apps permissions, ones that have already been

approved by the user. So you give an app permission to record the screen and the

malware can sneak in under that permission and record the screen without you

knowing. Apparently not theoretical this one. The Forbes piece indicates that it's been spotted

...