Published 18 days ago • loading... • Updated 17 days ago

Microsoft Throws Spotlight on Apple Bug Patched in March

Amid routine scans, Microsoft Threat Intelligence announced Monday it discovered 'Sploitlight', a macOS Spotlight vulnerability tracked as CVE-2025-31199 that bypasses privacy protections.
Amid routine cross-platform security reviews, Microsoft said it identified a Spotlight plugin vulnerability during proactive hunting, sharing findings with Apple via Coordinated Vulnerability Disclosure.
Microsoft noted that 'Sploitlight' can leak sensitive data cached by Apple Intelligence, with risks heightened by iCloud account linking, in a vulnerability affecting macOS Spotlight.
Following Microsoft’s disclosure, Apple addressed the flaw in macOS 15.4 and iOS 15.4 updates released on March 31, 2025, and users are encouraged to apply the updates.
Industry experts warn that as threats evolve, ongoing vigilance and cross-company cooperation will be crucial to defending against sophisticated exploits like 'Sploitlight', and analysts recommend adopting zero-trust models.

Insights by Ground AI

Does this summary seem wrong?

14 Articles

The Register

Center

Microsoft throws spotlight on Apple bug patched in March

: Look over there!

18 days ago

Read Full Article

9to5Mac

Reposted by

machash.com

Center

SploitLight: Microsoft warns macOS flaw could leak Apple Intelligence metadata

Microsoft has detailed a serious macOS vulnerability that could allow malicious apps to bypass system privacy protections. Dubbed “SploitLight,” the...

18 days ago

Read Full Article

BleepingComputer

Center

Microsoft: macOS Sploitlight flaw leaks Apple Intelligence data

Attackers could use a recently patched macOS vulnerability to bypass Transparency, Consent, and Control (TCC) security checks and steal sensitive user information, including Apple Intelligence cached data.

18 days ago

Read Full Article

MacRumors

Center

macOS Spotlight Vulnerability Discovered by Microsoft

Microsoft Threat Intelligence found a Spotlight-related vulnerability that could allow attackers to steal private file data, outlining the issue in a blog...

18 days ago·United States

Read Full Article

Heise

Microsoft Researchers Find Tcc Gap in Apple's Spotlight: Data Leak Threatens

The exploit "Sploitlight" is designed, among other things, to capture sensitive data via Apple Intelligence. The bug has been fixed, also affecting the iPhone.

17 days ago·Germany

Read Full Article

Cyber Security News

Critical macOS 'Sploitlight' Vulnerability Let Attackers Steal Private Data of Files Bypassing TCC

A critical macOS vulnerability enables attackers to bypass Transparency, Consent, and Control (TCC) protections and steal sensitive user data, including files from protected directories and Apple Intelligence caches.

17 days ago

Read Full Article

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/year