A security flaw has been discovered in macOS Mojave, the latest update for Apple's operating system, by well-known security researcher Patrick Wardle.
As Bleeping Computer, Wardle discovered a flaw in macOS Mojave through which hackers can gain access to contact data, with the help of an app that does not have the required permissions.
Wardle demonstrated how he was able to exploit the vulnerability in a video, which you can watch below.
According to Wardle, the vulnerability exists because of the way Apple has implemented the new privacy mechanisms in the new macOS.
"I found a trivial, albeit 100% reliable flaw in their implementation," Wardle said.
The flaw does not affect other hardware components, such as the webcam and privacy features. With a greater focus on security, Apple has made some changes to privacy. Now, apps must obtain permission from users if they need to access items such as location data, camera, contacts, calendars, reminders, message history, Safari data, mail databases, etc.
Wardle will reveal more details about the security flaw in November during the Mac Security Conference in Hawaii. In the meantime, Apple is expected to fix the flaw in upcoming macOS Mojave updates.
