Talks·25 min
Ian Beer
Shows how an in-the-wild iPhone exploit escaped the app sandbox through a zero-day in Apple's display co-processor.
vulnerability-researchexploitingkernel+2
Talks OBTS v5.0
Spain · October 2022 · 20 talks
Talks from Objective by the Sea v5.0 (2022).
Filters+
1–20 of 20 talks
Talks·27 min
Cat Self
Maps macOS malware behaviors, such as Gatekeeper bypass and installer abuse, to ATT&CK techniques and data sources.
malware-analysisframeworkattack+2
Talks·26 min
Jaron Bradley · Ferdous Saljooki
Explains two macOS Gatekeeper bypasses in Safari and Archive Utility that let unsigned apps run unchecked.
vulnerability-researchexploitdetection+2
Talks·30 min
K. Del Rosso
Follows a newcomer's route into Mac malware analysis, covering app bundle structure, Mach-O files and common pitfalls.
malware-analysislearninglessons-learned+2
Talks·33 min
Thomas Reed
Traces how Mac threats evolved from early viruses to today's adware, backdoors and fake security apps.
threatmalware-analysisevolution+1
Talks·16 min
Chris Ross · Cedric Owens
Surveys native macOS utilities and data sources that attackers can abuse for reconnaissance and post-exploitation.
attackexploitingsystem+2
Talks·36 min
Linus Henze
Walks through the exploit chain that jailbreaks iOS 15.4.1 despite pointer authentication and PPL protections.
vulnerability-researchkernelexploit+1
Talks·36 min
Linus Henze
Walks through the vulnerability chain behind Fugu15 and how it defeats iOS 15 mitigations to jailbreak iOS 15.4.1.
vulnerability-researchkernelexploitation+3
Talks·31 min
Christine Fossaceca
Shows how Apple's Continuity Bluetooth packets leak device and user activity to nearby observers, and how to capture them.
privacyreverse-engineeringdevice+1
Talks·49 min
Michael Epping
Shows how reducing excessive sign-in prompts on macOS can strengthen security through modern SSO and passwordless methods.
identityclouddevice+2
Talks·19 min
Matt Benyo
Shows how the open-source Swift framework Aftermath gathers and timelines macOS endpoint artifacts after a malware alert.
incident-responseopen-sourceframework+2
Talks·37 min
Matthias Frielingsdorf
Surveys known zero-click iOS malware campaigns and explains why detecting them on-device remains so difficult.
mobilemalware-analysisthreat-detection+1
Talks·29 min
Explains how machine learning can be applied to classify Mach-O malware.
machine-learningmalware-analysisdetection
Talks·35 min
Cody Thomas
Shows how macOS keychain item protections can be enumerated and bypassed, illustrated with Microsoft, Slack and Kerberos case studies.
attackidentityvulnerability-research+2
Talks·36 min
Patrick Wardle
Shows how a custom command-and-control server can coax a Go-based macOS RAT into revealing its capabilities.
malware-analysisreverse-engineeringvulnerability-research+1
Talks·44 min
Daan Keuper · Thijs Alkemade
Shows how one process injection flaw in macOS let an attacker escape the sandbox, gain root and bypass SIP.
vulnerability-researchexploitingmacos+2
Talks·17 min
Matt Carman
Shows how a Python wrapper around ESF Playground automates macOS malware detonation and event collection on a physical Mac.
malware-analysissandboxautomation+2
Talks·22 min
Sharvil Shah
Walks through the entitlements, provisioning, packaging and notarization steps needed to ship an Endpoint Security client on macOS.
open-sourcebuildingdevice+2
Talks·32 min
Fitzl Csaba
Shows how tccutil and Full Disk Access let attackers disarm macOS EndpointSecurity clients, and how Apple's successive fixes fell.
vulnerability-researchdefensive-securityprivacy+2
Talks·24 min
Wojciech Regula
Shows how a malicious macOS app can pull iCloud-held location, contacts, calendars and reminders without extra permissions.
privacyvulnerability-researchcloud+2