glyph.sh
CDC-ACM Serial Interface Bypasses TCC on macOS: A Disclosure After Apple Declined
macOS creates a fully read/write CDC-ACM serial device node with no TCC gate. Chained with a HID keyboard interface on the same USB composite device, this exfiltrates SSH keys, cloud credentials, and...
