Bypassing Signature Verification and Kernel Exploitation in macOS System Updates
Objective-See Foundation via YouTube
Lead AI Strategy with UCSB's Agentic AI Program — Microsoft Certified
AI Engineer - Learn how to integrate AI into software applications
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Watch a detailed 39-minute security conference talk from Objective-See Foundation where independent security researcher Mickey Jin reveals critical vulnerabilities discovered in Apple's over-the-air (OTA) update process. Learn about CVE-2022-42791, CVE-2022-46722, and other vulnerabilities that could allow attackers to bypass signature verification, infect OS kernels, and execute arbitrary code. Explore how Intel Macs without T2 chips were vulnerable to System Integrity Protection (SIP) and Signed System Volume (SSV) protection bypasses, enabling kernel-level code execution. Discover the technical details of how crafted system updates could potentially infect devices and inject malicious code without user awareness, including a vulnerability allowing pre-kernel boot code execution. Gain insights from Jin's extensive vulnerability research experience, which has led to the discovery of over 100 CVEs acknowledged by Apple.
Syllabus
#OBTS v6.0 "Bypassing the Signature Verification and Pwning the Kernel" - Mickey Jin
Taught by
Objective-See Foundation