Post #1644270

Short post about LPE and TCC Bypass on macOS through third-party apps bundled with Sparkle framework - a reminder of why XPC services should validate their clients. https://afine.com/threats-of-unvalidated-xpc-clients-on-macos/