Webcam covers for laptops

Small sliding covers attached to laptop webcams have become a common precaution against potential hacking, though they carry risks such as damaging the screen on MacBooks.

Vulnerability in Apple systems

A vulnerability fixed in iOS 27.2 and macOS 27.2 highlights that malicious applications could access the camera without first obtaining user permission. This flaw, referenced under CVE-2026-86990, affects CoreMedia, a system component responsible for managing audio and video content, as reported by 9to5Mac.

How the vulnerability works

The issue was discovered by researcher Mustafa Calap and involves bypassing the permission request window that typically appears when an application wants to use the camera. On Mac, this mechanism is part of the TCC (Transparency, Consent, and Control) system, which controls access to applications for data and sensitive devices.

Physical camera protections

The green light on Macs equipped with an integrated camera is physically linked to its power, meaning the camera cannot function without turning it on. An application that bypasses permissions does not bypass this physical protection. On iPhones, the green dot displayed in the status bar indicating camera use remained functional despite the vulnerability, as hackers could bypass the permission request but not make the activity indicator disappear.

Limitations of webcam covers

Webcam covers may not fully resolve the issue, as they do not indicate which application attempted to use the camera. For those who want to monitor peripheral activity, the free and open-source utility OverSight, developed by security researcher Patrick Wardle, can alert users to camera or microphone activation and identify the affected application.

Apple’s recommendations

Apple has advised against closing laptops with a camera cover installed due to the risk of damaging the screen. A visit to privacy settings allows users to check which applications have permission to use the camera. The correction is present in iOS 27.2 and macOS 27.2, as well as in maintenance versions for older systems. The incident underscores the importance of installing security updates and managing permissions effectively.