NaVeeS

Security Research

[Billy Ellis @bellis1000]

Uncovering an iOS 26.5 ImageIO Vulnerability https://t.co/fOUbgFkTqs

[Blacktop @blacktop__]

NEW macOS 26.0 🥫🍝 sauce! 🎉

xnu:
https://t.co/d1DjJsStqx

dyld:
https://t.co/iKYiWSpxcV

objc4:
https://t.co/Kvp9wWc8lU

Security:
https://t.co/IqmyOIcvsE

Libsystem:
https://t.co/JflpfJ49II

Libc:
https://t.co/eLTMJ2n2tJ

- this post was generated by `ipsw` 🤖

[Frida @fridadotre]

Frida 17.4 introduces Simmy, a new backend for Apple’s Simulators on macOS.

Spawn, attach, and instrument apps — just like on a real device.

[NaVeeS @naveeeees]

@Jr0dR87 https://t.co/YDCcyk2dyD

[SpecterOps @SpecterOps]

New blog post just dropped!

West Shepherd breaks down extending the Mythic Poseidon agent for ARM64 Dylib injection on Apple Silicon. Details include:

✅ Shellcode construction
✅ Memory allocation
✅ Runtime patching
✅ Thread creation

Read more ⤵️ https://t.co/irEVtFy2Aq

[Patrick Wardle @patrickwardle]

Just posted my @defcon slides (talk #1): "Mastering Apple's Endpoint Security for Advanced macOS Malware Detection"

Writing 🍎 security software? You should be using Endpoint Security! But its advanced features are rather nuanced & often misunderstood 🫣

https://t.co/TRn6dRnjV5

[Mobile Security @mobilesecurity_]

How Phys Puppet Exploits the iOS Kernel
#MobileSecurity #iOSsecurity by @bellis1000
https://t.co/fUAhtiXP0w

[Karol Mazurek @karmaz95]

This article is part of a series about the #Apple #Sandbox. It introduces how and when the sandbox is enforced on the #app process. It should be interesting for anyone curious about #debugging and #programming.

https://t.co/Q2DabQgDtn

Enjoy reading!

[8kSec @8kSec]

Follow us at @8kSec more such content. New here? We recommend reading our previous posts in the ARM64 Exploitation series:

https://t.co/dwyksNzJIG

https://t.co/lqovqqAdSq

https://t.co/dNF87FPDhk

https://t.co/3sUJJblUB3

https://t.co/M0Ajq8gniH

https://t.co/DT2y9WjquH