Our next macOS Vulnerability Researcher trainings with @gergely_kalman will be: 📆 2026-10-12 - 15: Self-organized, 4 (!!!!) day training (Budapest, Hungary) 📆 2026-11-15 - 17: Objective by the Sea v9 (Hawaii, USA) More info here: macosvuln.training/

People often ask how do I find bugs. I always tell them I learn how things work, and bugs follow. I spent the last month deep diving into the inner bits of GateKeeper and all the related technologies. It's MASSIVE! I still feel I'm scratching the surface however bugs starting to fall out... People afraid of AI finding all the bugs. Honestly me too... It can certainly find single-component well described issues really well. But when it comes to multi layered, multi component spaghetti like interconnections and dependencies... well that is where your human 🧠 can shine. But it does require you to understand and oversee the whole system. It's not easy, but it was never meant to be.

🍎🐛 Found my second Notarization/GateKeeper bug. I can get something stamped and then modify contents and still accepted by the system. 🙈 Remember: Everything that was notarized was checked for malware by Apple... unless you can modify content as you wish. 🤷‍♂️

So apparently according to Apple: MITMing an encrypted communication to a service on the LAN and sniffing clear text password is... fine. "We’re unable to identify a security issue in your report." 🤷‍♂️

Join my short introductory workshop to Apple fs logic bugs during #Hacktivity2026 hacktivity.wixsite.com/so/04…

As I was writing Day 4 content about a sandbox escape vulnerability, I added a whole section about GateKeeper internals as well. Interested in finding that 100k$ GK bypass vulnerability? Join our training and understand the basics so you know how to get started! Only in Budapest this year.

Please don't install - it's trivial to turn Muse into the ultimate backdoor 💀👀 Ya, as an AI assistant built to manage your Mac, Muse needs broad access to your digital life. But serious 0-day flaw(s) can let local malware/attackers invisibly hijack it. Let me show you. 🧵

A new species of cat has been identified for the first time in a century—and experts think that there may be even more to discover around the world: on.natgeo.com/n5nxra

I want cats back for macOS. We even have a new!

We made it possible for Santa to stop the pid_suspend call against a client. SIGKILL and SIGSTOP still left as an exercise for the reader because legitimate updaters still use these. Longer form explainer here northpole.security/blog/edr-… Thanks for calling this out @patrickwardle

Endpoint Security arrives in the iPhone kernelcache as a kext. (iOS 27.2 beta) + com.apple.iokit.EndpointSecuritySE + /usr/lib/libEndpointSecurity.dylib "An Endpoint Security product on the system denied the process from executing." ES on iOS? 👀

🍏 Fresh LPE in macOS: Repair Permissions - Get Root! CVE-2026-43783 found by our researcher Ilya Andr (@andrd3v) has been recently fixed by Apple. A single XPC request to DesktopServicesHelper lets you chown any path on disk - straight to root. 👇👇👇 ptswarm.com/blog/cve-2026-43…

We are officially sold out!
We are absolutely blown away by your support and cannot wait to see everyone at macsysadmin.se. #msa2026

😈 Dirty little tricks make beautiful exploits. AI is a huge help in my research, however I find that it can't help with finding small tricks which moves something from impossible to exploit to trivial.

I am just crying 😆 piped.video/watch?v=gGlpBuW6…

A bird? A plane? NO! It's Binary Ninja 6.0, codename "Krypton". Major new stable with massive performance improvements, built-in MCP, Binary Similarity, Extension Manager, TMS320C6x, New User Wizard, and so much more: binary.ninja/2026/09/03/bina…

Part of Recon 2026 video have been released recon.cx/2027/en/index.html on our youtube channel piped.video/@reconmtl we are still waiting for confirmation from our speakers to release the rest.

Did you know macOS binaries can run on iOS? It needs rewriting architecture information and adjusting library paths. I automated this, including DYLD shared cache library extraction and replacement, allowing many macOS command line tools to run on iOS. github.com/mowisec/macos-to-…

Our next training with @gergely_kalman will be in Budapest between the 12th and 15th of October. This is our only training in Europe for this year, and this is the only time we will teach the 4 day version of the training. If you are looking getting into Apple vuln research then this is Your training. Although we don't do iOS here, many of the concepts we teach are applicable there as well. macosvuln.training/

I normally don't run on roads, maybe once a week, but only for short sections. I can happily run 100k on trails, but doing more than 10k on roads is not for me. Except if it's for a good cause! Me and some of my trainee partners at the mountain leader training decided to do a donation campaign, and we would like to collect 1500$ to donate it to a children hospital foundation in Hungary. For that, we will run a half-marathon as a group. If anyone is willing to support here is the link, unfortunately this is a Hungarian website, but hopefully browser translator can help. Any small amount is appreciated 🙏 orzok.hu/termek/egyutt-a-kis…