Talks·42 min
Jaron Bradley · Ferdous Saljooki
Follows the reverse engineering of a Rust-based macOS backdoor attributed to BlueNoroff, from initial triage to C2 emulation.
malware-analysisreverse-engineeringthreat-detection+2
October 2023 · Spain
Objective by the Sea v6.0
1 session · 23 talks
Sessions at this event
All OBTS v6.0 talks
Filters+
1–23 of 23 talks
Talks·40 min
Greg Longo · Ben Wiley
Traces a North Korea-linked actor's interactive macOS intrusions, from social-engineered access to credential theft and hunting leads.
threatintelligencehunting+2
Talks·39 min
Mickey Jin
Shows how crafted macOS over-the-air updates can bypass signature checks and inject code into the kernel.
vulnerability-researchkernelexploiting+3
Talks·23 min
Closes the conference with thanks, raffle prizes, and plans for student-focused events and the next edition.
open-sourceinitiativelearning+2
Talks·29 min
Patrick Wardle · Chris Lopez
Explains how macOS Background Task Management tracks persistent items, and how security tools and attackers interact with it.
reverse-engineeringthreat-detectionmalware-analysis+2
Talks·29 min
Christine Fossaceca
Breaks down the Bluetooth packet format and key exchange that let Apple AirTags report locations through the FindMy network.
privacyreverse-engineeringdevice+2
Talks·29 min
Cat Self · Megan Carney
Shows how to build an ATT&CK-based macOS emulation of an OceanLotus scenario and turn it into validated enterprise detections.
attackthreat-detectionlessons-learned+2
Talks·26 min
Wojciech Reguła
Shows how abusing Electron defaults lets attackers inherit macOS privacy permissions from trusted desktop apps.
macosprivacyattack+3
Talks·37 min
Thijs Alkemade
Shows how a mismatched XPC connection lets a process spoof audit tokens and escalate privileges on macOS.
vulnerability-researchexploitingreverse-engineering+2
Talks·34 min
Ian Beer
Walks through a 2023 in-the-wild iOS 16 chain that escapes the hardened Safari renderer sandbox via WebKit's custom IPC.
vulnerability-researchexploitationmobile+2
Talks·39 min
Patrick Wardle
Shows how macOS crash reports from everyday use expose bugs, from uninitialized pointers to kernel heap overflows.
vulnerability-researchreverse-engineeringkernel+2
Talks·34 min
Andy Rosenberg
The founders of Objective by the Sea discuss the conference's origins, diversity initiatives, and student scholarships.
interviewdiversitylearning+2
Talks·26 min
Laurie Kirk
Walks through the obfuscation layers in iOS apps, from App Store encryption to Swift name mangling and VM-based protection.
mobilemalware-analysisreverse-engineering+2
Talks·31 min
Fitzl Csaba
Explains how Apple's launch and environment constraints limit macOS process launches and blunt logic-bug exploitation.
reverse-engineeringkernelvulnerability-research+2
Talks·19 min
Karl Hiramoto
Shows how newer similarity search and automatic YARA generation make macOS threat hunting faster on VirusTotal.
huntingthreat-detectionmalware-analysis+2
Talks·32 min
Matthias Frielingsdorf
Shows how to collect forensic data from iPhones, including a live backup and sysdiagnose demo, to spot spyware.
malware-analysisthreat-detectionmobile+2
Talks·41 min
Javier Jimenez · Vignesh Rao
Covers three JavaScriptCore bugs from one Safari commit, plus a brute-force ASLR bypass that leads to renderer code execution.
vulnerability-researchfuzzingexploit+2
Talks·37 min
Matt White · Pete Markowsky
Explains Google's redesign of the open-source Santa Mac agent around Endpoint Security and the features it enables.
open-sourcedefensive-securitydetection+2
Talks·26 min
Aleksander Nikolic
Shows how snapshot-based coverage-guided fuzzing of macOS kernel components can run under an x86 emulator on commodity hardware.
vulnerability-researchfuzzingkernel+2
Talks·40 min
Jiska Classen · Alexander Heinrich
Examines how Apple's satellite SOS and location sharing services work and how they protect access and privacy.
mobileprivacyreverse-engineering+1
Talks·22 min
Calum Hall · Luke Roberts
Shows how macOS TCC permissions can be made more visible and controllable for end users through logs and a new tool.
privacymacosdetection+2
Talks·29 min
Arthur Valiev · Rasmus Sten
Walks through two macOS Gatekeeper bypasses caused by missing quarantine attributes, from discovery to root cause.
vulnerability-researchreverse-engineeringexploitation+2
Talks·26 min
Gergely Kalman
Walks through logic bugs in macOS file operations that break TCC, sandbox and root boundaries.
vulnerability-researchexploitingvulnerabilities+2