Bypassing Signature Verification and Kernel Exploitation in macOS System Updates

Watch a detailed 39-minute security conference talk from Objective-See Foundation where independent security researcher Mickey Jin reveals critical vulnerabilities discovered in Apple's over-the-air (OTA) update process. Learn about CVE-2022-42791, CVE-2022-46722, and other vulnerabilities that could allow attackers to bypass signature verification, infect OS kernels, and execute arbitrary code. Explore how Intel Macs without T2 chips were vulnerable to System Integrity Protection (SIP) and Signed System Volume (SSV) protection bypasses, enabling kernel-level code execution. Discover the technical details of how crafted system updates could potentially infect devices and inject malicious code without user awareness, including a vulnerability allowing pre-kernel boot code execution. Gain insights from Jin's extensive vulnerability research experience, which has led to the discovery of over 100 CVEs acknowledged by Apple.