All Your Macs Are Belong To Us ... Again!
summary
Patrick Wardle demonstrates two specific macOS vulnerabilities that bypass Apple security features including File Quarantine, Gatekeeper, and Notarization; he outlines how these bugs allowed malware to infect Macs despite those protections. The talk focuses on the technical nature of the two reliable bypasses and their impact on macOS security over the past decade.
AI-written summary · about
chapters (9)
- 0:00Start
- 4:35Gatekeeper
- 20:26Proof of Concept
- 26:22System Policy Kernel Extension
- 32:16Dylib Hijack Attack
- 37:23Conclusions
- 40:06Takeaways
- 41:37Book on Mac Malware Analysis
- 46:42Who the Mac Users Are
related talks
42mBypassing macOS Security and Privacy Mechanisms: From Gatekeeper to System Integrity Protectio
36mmacOS Vulnerabilities Hiding in Plain Sight
45mmacOS application isolation and its exploitation
49mLeveraging MacOS's Networking Frameworks to Heuristically Detect Malware
40mKnockout Win Against TCC - 20+ NEW Ways to Bypass Your MacOS Privacy Mechanisms
54mmacOS: Tracking High Profile Targeted Attacks, Threat Actors & TTPs
43mFrom u0 to Millionaire - Attacking Interprocess Communication...
42mDiscovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf