Apple Disk-O Party - Vulnerabilities in macOS Disk Management Systems

Explore a comprehensive Black Hat conference talk that delves into four disk-related vulnerabilities in Apple systems. Begin by understanding the diskarbitrationd system daemon's functionality and security measures before examining how it can be exploited for sandbox escapes and TCC bypasses. Learn about diskutil and storagekitd tools and their potential security implications. Discover multiple vulnerabilities including privilege escalations and additional TCC bypasses. Finally, investigate how Disk Utility can be leveraged to elevate privileges from admin to root on unattended workstations with GUI access. Presented by Csaba Fitzl, Principal macOS Security Researcher at Kandji, this 41-minute security briefing provides detailed insights into Apple's disk management security weaknesses.