{"id":449391,"date":"2026-05-15T00:47:07","date_gmt":"2026-05-15T00:47:07","guid":{"rendered":"https:\/\/www.newsbeep.com\/ie\/449391\/"},"modified":"2026-05-15T00:47:07","modified_gmt":"2026-05-15T00:47:07","slug":"daring-fireball-aided-by-mythos-preview-researchers-announce-macos-kernel-exploit-circumventing-m5-memory-integrity-enforcement","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ie\/449391\/","title":{"rendered":"Daring Fireball: Aided by Mythos Preview, Researchers Announce MacOS Kernel Exploit Circumventing M5 Memory Integrity Enforcement"},"content":{"rendered":"<p>Many security experts consider Apple devices to be the most secure<br \/>\nconsumer platform. The latest flagship example is MIE (Memory<br \/>\nIntegrity Enforcement), Apple\u2019s hardware-assisted memory safety<br \/>\nsystem built around ARM\u2019s MTE (Memory Tagging Extension). It was<br \/>\nintroduced as the marquee security feature for the Apple M5 and<br \/>\nA19, specifically designed to stop memory corruption exploits, the<br \/>\nvulnerability class behind many of the most sophisticated<br \/>\ncompromises on iOS and macOS. [&#8230;]<\/p>\n<p>Our macOS attack path was actually an accidental discovery. Bruce<br \/>\nDang found the bugs on April 25th. Dion Blazakis joined Calif on<br \/>\nApril 27th. Josh Maine built the tooling, and by May 1st we had a<br \/>\nworking exploit.<\/p>\n<p>We didn\u2019t build the chain alone. Mythos Preview helped identify<br \/>\nthe bugs and assisted throughout exploit development. [&#8230;] To the<br \/>\nbest of our knowledge, this is the first public macOS kernel<br \/>\nexploit on MIE hardware. Again, we\u2019ll publish our 55-page report<br \/>\nafter Apple ships a fix.<\/p>\n<p>The Wall Street Journal <a href=\"https:\/\/blog.calif.io\/p\/first-public-kernel-memory-corruption\" rel=\"nofollow noopener\" target=\"_blank\">ran a story<\/a> on Calif\u2019s announcement today that was heavy on hyperbole and extraordinarily light on technical details. Unsurprisingly, the team\u2019s own blog post was much more informative and interesting. The achievement here is circumventing MIE.<\/p>\n","protected":false},"excerpt":{"rendered":"Many security experts consider Apple devices to be the most secure consumer platform. The latest flagship example is&hellip;\n","protected":false},"author":2,"featured_media":133193,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[61,60,80],"class_list":["post-449391","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-ie","tag-ireland","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/449391","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=449391"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/449391\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/133193"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=449391"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=449391"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=449391"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}