🍎🐛🎙️Following my #poc2024 talk we are releasing a blogpost series at Kandji, detailing the vulnerabilities of diskarbitrationd and storagekitd I discussed in my "Apple Disk-O Party" talk.

First part is out, and covers CVE-2024-44175.

https://www.kandji.io/blog/macos-audit-story-part1

Uncovering Apple Vulnerabilities: The diskarbitrationd and storagekitd Audit Story Part 1

Kandji's Threat Research team performed an audit on the macOS diskarbitrationd & storagekitd system daemons, uncovering several (now fixed) vulnerabilities

Just landed in Seoul 🇰🇷 for #POC2024. Ping me if you are around and want to have a chat and/or discuss job opportunities @ Paradigm Shift.