The (sad) reality is most Mac infections occur with inadvertent assistance from the user. Apple, realizing this, has added a myriad of foundational macOS security features such as File Quarantine, Gatekeeper, and Notarization. Alas, they weren't enough. This talk will describe two bugs that reliably bypassed all such security features, setting back macOS' security over a decade!


RSA® Conference, the world’s leading information security conferences and expositions, today concluded its 31st annual event at the Moscone Center in San Francisco. The year’s event attracted over 26,000 attendees, including 600+ speakers, 400+ exhibitors, and over 400 members of the media. Throughout the week, attendees networked on the expo floor and participated in keynote presentations, track sessions, tutorials, seminars, and special events.

Several of the most pressing topics discussed during this year’s Conference included issues surrounding privacy and surveillance, the positive and negative impacts of machine learning and artificial intelligence, the nuances of risk and policy, and cybersecurity-focused innovations across crypto and blockchain.

All Your Macs Are Belong To Us ... Again!

Conference: RSA Conference 2022

Abstract

Post a comment

Related work

Bundles of Joy: Breaking macOS via Subverted Applications Bundles

Behind the scenes of iOS and Mac Security

Process Injection: Breaking All macOS Security Layers With a Single Vulnerability

Demystifying (& Bypassing) macOS's Background Task Management

PPLdump Is Dead. Long Live PPLdump!

The Windows Notification Facility: Peeling the Onion of the Most Undocumented Kernel Attack Surface Yet