Hackers used macOS 0-days to bypass privacy features, take screenshots