Talks and Workshops
2026#
macOS Exploit Mixtape – Hack Like it's the 80s /CA: Gergely Kalman/ (Zer0Con)
macOS Mounting Madness (MacSysAdmin, Hacktivity)
2025#
Finding Vulnerabilities in Apple Packages at Scale (SecurityFest, MacDevOpsYVR)
The Evolution of macOS Security from the Desert to the Lake (MacSysAdmin, IT Defense 2026, University of Utah MacAdmins meeting)
Crash One: A Starbucks Story - CVE-2025-24277 /CA: Gergely Kalman/ (Hexacon, Objective By The Sea, BSidesBud 2026)
Video - Objective By The Sea v8.0
2024#
Mac, Where's My Bootstrap? /CA: Brandon Dalton/ (Objective By The Sea)
Video - Objective By The Sea v7.0
Apple Disk-O Party (POC, BlackHat EU, BSidesBud 2025)
History of macOS DiskArbitration Vulnerabilities (MacSysAdmin, Hacktivity)
The Final Chapter: Unlimited ways to bypass your macOS privacy mechanisms /CA: Wojciech Regula/ (BlackHat Asia)
2023#
Launch and Environment Constraints Deep Dive (MacSysAdmin, Objective By The Sea)
Video - Objective By The Sea v6.0
2022#
20+ New Ways to Bypass Your macOS Privacy Mechanisms /CA: Wojciech Regula/ (BlackHat EU)
macOS Vulnerabilities Hiding in Plain Sight (BlackHat Asia, Troopers, Zer0Con)
The Achilles Heel of Endpoint Security (Objective By The Sea, MacSysAdmin)
Video - Objective By The Sea v5.0
Beyond the Good Ol' LaunchAgents (SecurityFest, MacDevOpsYVR, BSidesBudapest 2023)
2021#
Mount(ain) of Bugs (Objective By The Sea, Hacktivity)
Video - Objective By The Sea v4.0
Mitigating Exploits using Apple's Endpoint Security Framework (Virus Bulletin, MacDevOpsYVR, ITBN)
20+ Ways to Bypass Your macOS Privacy Mechanisms /CA: Wojciech Regula/ (BlackHat US, DEEP, AtHack)
Exploiting XPC in Antivirus Software /CA: Wojciech Regula/ (NullCon)
2020#
XPC Exploitation on macOS (Hacktivity)
Exploiting Directory Permissions on macOS (HackInTheBox, BSidesBudapest)
2019#
Getting root with Bening App Store Apps (Troopers, SecurityFest, Objective By The Sea)
Video - Objective By The Sea v2.0
GateKeeper: Bypass or not Bypass? (Hacktivity)
2018#
Driver Signing Enforcement Bypass Workshop (DEF CON 26, hack.lu)
2017#
How to Convince a Malware to Avoid Us (SecurityFest, Hacktivity)
IOC Sharing: Why We are Doing it Wrong? (BSidesBudapest)
2016#
Exploit Generation and Automation with WinDBG /CA: Miklos Desbordes-Korcsev/ (Hacktivity, hack.lu, hek.si)
2015#
Hello Anti-Disassembly Workshop (Hacktivity)
2014#
Hello PDF Workshop (Hacktivity)