I am running Sonoma 14.0 Developer Beta. On M1 MacBook Pro. I opened the activity monitor to see what is accessing my network. I found "Classroom (System Settings) (13180)". This is a personal unmanaged device. Have I been hacked? Or is this a normal process to access the network?
I noticed my screen flash. As if my screen was being monitored and I wondered if this was it. I had installed Teams for my work. And wondered if they had somehow leveraged Classroom through Teams to monitor.
I figured out the answer myself... And removed the nefariously installed SSOAgent which leveraged Classroom to view my screen unauthorized.