Talks and Workshops
2025 Link to heading
Finding Vulnerabilities in Apple Packages at Scale (SecurityFest, MacDevOpsYVR)
The Evolution of macOS Security from the Desert to the Lake (MacSysAdmin)
Crash One: A Starbucks Story - CVE-2025-24277 /CA: Gergely Kalman/ (Hexacon, Objective By The Sea)
Video - Objective By The Sea v8.0
2024 Link to heading
Mac, Where’s My Bootstrap? /CA: Brandon Dalton/ (Objective By The Sea)
Video - Objective By The Sea v7.0
Apple Disk-O Party (POC, BlackHat EU, BSidesBud 2025)
History of macOS DiskArbitration Vulnerabilities (MacSysAdmin, Hacktivity)
The Final Chapter: Unlimited ways to bypass your macOS privacy mechanisms /CA: Wojciech Regula/ (BlackHat Asia)
2023 Link to heading
Launch and Environment Constraints Deep Dive (MacSysAdmin, Objective By The Sea)
Video - Objective By The Sea v6.0
2022 Link to heading
20+ New Ways to Bypass Your macOS Privacy Mechanisms /CA: Wojciech Regula/ (BlackHat EU)
macOS Vulnerabilities Hiding in Plain Sight (BlackHat Asia, Troopers, Zer0Con)
The Achilles Heel of Endpoint Security (Objective By The Sea, MacSysAdmin)
Video - Objective By The Sea v5.0
Beyond the Good Ol’ LaunchAgents (SecurityFest, MacDevOpsYVR, BSidesBudapest 2023)
2021 Link to heading
Mount(ain) of Bugs (Objective By The Sea, Hacktivity)
Video - Objective By The Sea v4.0
Mitigating Exploits using Apple’s Endpoint Security Framework (Virus Bulletin, MacDevOpsYVR, ITBN)
20+ Ways to Bypass Your macOS Privacy Mechanisms /CA: Wojciech Regula/ (BlackHat US, DEEP, AtHack)
Exploiting XPC in Antivirus Software /CA: Wojciech Regula/ (NullCon)
2020 Link to heading
XPC Exploitation on macOS (Hacktivity)
Exploiting Directory Permissions on macOS (HackInTheBox, BSidesBudapest)
2019 Link to heading
Getting root with Bening App Store Apps (Troopers, SecurityFest, Objective By The Sea)
Video - Objective By The Sea v2.0
GateKeeper: Bypass or not Bypass? (Hacktivity)
2018 Link to heading
Driver Signing Enforcement Bypass Workshop (DEF CON 26, hack.lu)
2017 Link to heading
How to Convince a Malware to Avoid Us (SecurityFest, Hacktivity)
IOC Sharing: Why We are Doing it Wrong? (BSidesBudapest)
2016 Link to heading
Exploit Generation and Automation with WinDBG /CA: Miklos Desbordes-Korcsev/ (Hacktivity, hack.lu, hek.si)
2015 Link to heading
Hello Anti-Disassembly Workshop (Hacktivity)
2014 Link to heading
Hello PDF Workshop (Hacktivity)