vulnerability

Why You Can’t Trust Privacy & Security

An investigation using a custom macOS app, Insent, reveals that Apple's Privacy & Security settings can misleadingly suggest an app lacks access to protected folders like Documents when it actually does. The macOS TCC system grants folder access based on user intent (e.g., selecting a folder via Open Panel), which circumvents typical consent prompts and disables effective revocation via Settings, requiring terminal commands and a restart to reset permissions. This exposes a discrepancy where Security settings do not accurately reflect an app’s actual access, raising concerns about the reliability of these macOS privacy controls.

https://eclecticlight.co/2026/04/10/why-you-cant-trust-privacy-security/

OpenClaw Gives Users yet Another Reason to Be Freaked Out About Security

Security researchers have warned users of OpenClaw, a viral AI agentic tool that accesses numerous user resources, due to a recently fixed high-severity vulnerability allowing attackers with minimal permissions to escalate to full administrative control without user interaction. This flaw, rated up to 9.8 out of 10 in severity, enabled silent approval of device pairing requests, potentially compromising thousands of instances, many of which lacked authentication, leading experts to advise users to assume compromise and reconsider using the tool.

https://arstechnica.com/security/2026/04/heres-why-its-prudent-for-openclaw-users-to-assume-compromise/

Scroll to Top