Big Sur 11.4 fixes a bug that let malware capture screenshots and camera footage using other apps' permissions; researchers found ~400 instances of the malware
It's time to update your Apple Mac again, as malware that secretly takes screenshots has been spotted exploiting a serious weakness in macOS security.
Context & Ripple Effects
Apple had already issued Big Sur 11.3.1 security fixes for actively exploited WebKit flaws and patched a separate loophole that allowed unnotarized apps to run in Big Sur 11.3. The new release extends that patch cadence from code-signing and browser exposure to abuse of macOS privacy permissions.
The related coverage frames the issue as a gap between the controls Mac users see and the protections malware can evade. Later reporting on more frequent macOS malware-protection scans points to Apple reinforcing multiple layers rather than relying on a single gate.
First-order effects
- Mac users who install Big Sur 11.4 are protected against the reported route for using another app's permissions to collect screenshots and camera footage.
- Operators behind the roughly 400 identified malware instances lose that collection technique on updated Macs, even though the update does not itself establish that every affected system is cleaned.
Second-order effects
- Mac administrators must prioritize OS-update deployment alongside permission review, because an app-level privacy approval can be repurposed through an OS flaw.
- Apple's security controls face pressure to work as a chain: the earlier notarization bypass and this permissions flaw show that signing checks and consent prompts address different attack paths.
Third-order effects
- If this pattern persists, macOS security will increasingly depend on defense in depth across app signing, privacy permissions, rapid patching, and malware scanning rather than any one control.
- The recurring fixes make update adoption part of the effective security boundary for supported Mac versions; users who defer releases retain exposure after a mitigation exists.
The trend: Apple's macOS defenses are evolving toward layered protection, with rapid OS patches closing gaps between app trust, user consent, and malware detection.