Objective-See Foundation
138 talks · 2023–2026 · indexed by Breach Arc Archive. Links open each talk on YouTube.
Browse with filters →- #OFTW v4.0: “Apple bug bounty: Why should you learn about the filesystem in 2026?” - Gergely Kalman 2026
- #OBTS v8.0: “Crash One - A StarBucks Story (CVE-2025-24277)” - Gergely Kalman & Csaba Fitzl 2025
- #OBTS v7.0: "Swift Reversing in 2024 - It's Not So Bad :)" - Chris Lopez 2024
- #OBTS v7.0: "Unveiling the Apple CVE-2024-40834 - A 'shortcut' to the Bypass Road" - Marcio Almeida 2024
- #OFTW v2.0, Kyiv: "Navigating the Rising Tide of macOS Stealer Malware in 2024" - Kseniia Yamburh 2024
- #OBTS v7.0: "Triangulating TrueType Fonts On macOS: Reconstructing CVE-2023-41990" - Aleks Nikolic 2023
- #OBTS v7.0: "Apple's Not So Rapid Security Response" - Mykola Grymalyuk
- #OBTS v7.0: "Endless Exploits: The Saga of a macOS Vulnerability Exploited Seven Times" - Mickey Jin
- #OBTS v7.0: "How to Use ML to Detect Bad?" - Martina Tivadar
- #OBTS v7.0: "iPhone Backup Forensics" - Kinga Kieczkowska
- #OBTS v7.0: "Mach-O in Three Dimensions" - Jaron Bradley
- #OBTS v7.0: "macOS Stealers: Stealing Your Coins, Cookies and Keychains" - M. Stewart & S. De Souza
- #OBTS v7.0: "Mirror Mirror: Restoring Reflective Code Loading on macOS" - Patrick Wardle
- #OBTS v7.0: "Patch Different on *OS" - John Mclntosh
- #OBTS v7.0: "Stealer Crossing: New Horizons" - Alden Schmidt & Stuart Ashenbrenner
- #OBTS v7.0: "Tripwires in the Dark: Developing Behavior Detections for macOS" - Colson Wilhoit
- #OBTS v7.0: From Theory to Practise - Let’s find an iOS Commercial Spyware Sample - M. Frielingsdorf
- #OBTS v7: Unraveling the iPhone’s Baseband Architecture to Defend Against Cellular Attacks. L Arnold
- #OBTS v8 Exploring FSKit: Writing Filesystems for Fun, profit, & Def, Detections & Evasion? S. Shah
- #OBTS v8 “Beyond Static Labels: A Behavioral Framework for macOS Grayware Classification” R. Charles
- #OBTS v8.0 “BYOB: Bring your own Blackbox - Containerized Defense Evasion on macOS” - Colson Wilhoit
- #OBTS v8.0 “Placeboed Apples: A New Way to Hunt Spyware on iOS” - Matthias Frielingsdorf
- #OBTS v8.0: "Dylib Hijacking on macOS: Dead or Alive?” - Patrick Wardle
- #OBTS v8.0: "Gotta Catch 'em All" - Jaron Bradley
- #OBTS v8.0: "Reverse Engineering Apple Security Updates" - John McIntosh
- #OBTS v8.0: "Revoked, Not Dead: When CDHash Revocation Fails to Kill” - Ferdous Saljook
- #OBTS v8.0: "The Power of Powerlogs” - Sarah Edwards
- #OBTS v8.0: “Breaking the Sound Barrier: Exploiting CoreAudio via Mach Message Fuzzing” - D. Franke
- #OBTS v8.0: “Catch me if you Scan” - Kseniia Yamburh & Nazar Grycshuk
- #OBTS v8.0: “Introducing the Next Generation of Mac Monitor” - Brandon Dalton
- #OBTS v8.0: “macOS Internals for Threat Detection Engineers” - Olivia Gallucci
- #OBTS v8.0: “macOS Privilege Escalation Via Traceroute6” - Paweł Płatek
- #OBTS v8.0: “Make XNU GREAT Little Again” - Jonathan Levin
- #OBTS v8.0: “OopsSec: The Short Lived Campaign of Cthulhu Stealer” - Tara Gould
- #OBTS v8.0: “Queen B: Apple Compressor 0-click RCE” - Zhi Zhou
- #OBTS v8.0: “Something from Nothing - Exploiting Memory Zeroing in XNU” Ian Beer
- #OBTS v8.0: “Sploitlight: Exploiting Spotlight to Bypass TCC on macOS” - C. Fossaceca & J. Bar Or
- #OBTS v8.0: “Trust me, I’m an Apple Watch” - Nils Rollshausen
- #OBTS v8.0: “Unpacking the iOS Sandbox” - Yarden Hamami
- #OBTS v8.0: “Using Type Metadata from Swift Binaries” - Gregor Carmesin
- #OBTS v8.0: “What's at the Bottom of the Sea, One Baseband? - Diving into the C1" - Lukas Arnold
- #OBTS v8.0: “What’s New in Lockdown Mode?” - Marie Fischer
- #OBTS v8.0: “Who Cares Where Waldo is. Locating macOS Users Without their Consent” - Wojciech Regula
- #OBTS v8.0: “XUnprotect: Reverse Engineering macOS XProtect Remediator” - Koh Nakagawa
- #OBTS v8: “BlueNoroff’s Clues: Investigating a DPRK Intrusion” - Stuart Ashenbrenner & Alden Schmidt
- #OFTW v1.0: "About Diversity" panel - Megan Valentine, Kt Sagona, Laura Peaslee, & Patrick Wardle
- #OFTW v1.0: "Ask a Hacker" panel - Devin Byrd, Jaron Bradley, Eva Galperin & Patrick Wardle
- #OFTW v1.0: "Hey Siri, Find My Ex" - Eva Galperin
- #OFTW v1.0: "Leveraging macOS's Networking Frameworks to Heuristically Detect Malware" - Patrick W.
- #OFTW v1.0: "Navigating the Dynamic Landscape of Mac Malware" - Ferdous Saljooki
- #OFTW v1.0: "The Art of Cryptojacking" - Jaron Bradley
- #OFTW v1.0: "Your Mac's Immune System: Resilience through Endpoint Security" - Brandon Dalton
- #OFTW v1.0: Introduction
- #OFTW v2.0 Kyiv: "Reverse Engineering of Application and What Can We Get From It" - Roman Mishchenko
- #OFTW v2.0, Kyiv: "Cmd+Option+Sec: Navigating App Security" - Anastasiia Voitova
- #OFTW v2.0, Kyiv: "Detection of Hidden Sanctioned Mobile Applications" - Dmytro Kovalenko
- #OFTW v2.0, Kyiv: "The Hidden Treasures of Crash Reports" - Patrick Wardle
- #OFTW v2.0, Kyiv: Closing speech
- #OFTW v2.0, Kyiv: Panel "Cyber Guardians: The Critical Need for Security Experts in Times of War"
- #OFTW v2.0, Kyiv: Panel "Unlocking Security Careers: Skills, Mindset, and Learning from Mistakes"
- #OFTW v2.0, Kyiv: Welcome speech
- #OFTW v3.0, Lon: "From Alert to Action: Investigating a Real Security Incident" - Shannon McCormick
- #OFTW v3.0, London. Panel: “Finding Your Footing in Apple Security”
- #OFTW v3.0, London: “Come Reverse Engineer Malware With Me” - Chris Lopez
- #OFTW v3.0, London: “How far can we push AI for detection?” - Martina Tivadar
- #OFTW v3.0, London: “iPhone Forensics 101: Backups” - Kinga Kieczkowska
- #OFTW v3.0, London: “Mirror Mirror: Restoring Reflective Code Loading on macOS” - Patrick Wardle
- #OFTW v3: “A Snake in the Apple Tree: Bridging Python & Obj-C for Red Team Tradecraft” -Luke Roberts
- #OFTW v4.0: "Machine Learning for macOS Malware Detection" - Biagio Montaruli
- #OFTW v4.0: "Reading between the patches: Getting started with iOS security" - Billy Ellis
- #OFTW v4.0: "Venturing Beyond iOS: Exploring Co-Processor Firmware" - Lukas Arnold
- #OFTW v4.0: Panel “Finding Your Footing in Apple Security”
- #OFTW v4.0: “A Closer Look at Quick Start - Emulating a new iPhone” - Sebastien Schnorbus
- #OFTW v4.0: “Clickfix&Crypto: Making Victims Do the Work” - Kseniia Yamburth
- #OFTW v4.0: “Skip the Mac, Hit the iPhone: Evasive iMessage Attacks” - Swantje Lange
- OBTS v1.0: "Aliens Among Us" - Mike Lynn
- OBTS v1.0: "Code Signing Flaw in macOS" - Thomas Reed
- OBTS v1.0: "Crashing to Root" - Branzdon Azad
- OBTS v1.0: "From Apple Seeds to Apple Pie" - Sarah Edwards
- OBTS v1.0: "Leveraging Apple's Game Engine for Advanced Threat Detection" - Malm/Stein
- OBTS v1.0: "MacDoored" - Jaron Bradley
- OBTS v1.0: "Protecting the Garden of Eden" - Patrick Wardle
- OBTS v1.0: "When Macs Come Under ATT&CK" - Richie Cyrus
- OBTS v1.0: "Who Moved my Pixels?" - Mike Sosonkin
- OBTS v2.0: "Grafting Apple Trees" - Jaron Bradley
- OBTS v3.0 Conference Opening
- OBTS v3.0: "Binary Emulation Environment for Mach-O Malware" - Erika Noerenberg
- OBTS v3.0: "Exploring MacOS with APOLLO" - Sarah Edwards
- OBTS v3.0: "Abusing & Security XPC in macOS apps" - Wojciech Regula
- OBTS v3.0: "An Attackers Perspective on Jamf Configurations" - Luke Roberts / Calum Hall
- OBTS v3.0: "Documents of Doom" - Patrick Wardle
- OBTS v3.0: "Endpoint Security & Insecurity" - Scott Knight
- OBTS v3.0: "File Quarantine Handling in macOS Apps" - Vladmir Metnew
- OBTS v3.0: "Finding Waldo: Leveraging the Apple Unified Log for Incident Response" - Musunuri/Martin
- OBTS v3.0: "iMessage Exploitation" - Samuel Grob
- OBTS v3.0: "Job(s) Bless Us! Privileged Operations on macOS" - Julia Vashchenko
- OBTS v3.0: "KTRW: The journey to build a debuggable iPhone" - Brandon Azar
- OBTS v3.0: "Mimic in Configuration" - Manabu Niseki / Suguru Ishimaru
- OBTS v3.0: "The Case of The Fly on the Wall" - Thomas reed
- OBTS v3.0: "tvOS-Checkra1n" - Kevin Bradley
- OBTS v3.0: "Walking the bifrost" - Cody Thomas
- OBTS v4.0: "All Your Macs Are Belong To Us" - Cedric Owens, Jaron Bradley & Parick Wardle
- OBTS v4.0: "Anti Analysis Logic of Arm Malware on macOS" - Patrick Wardle
- OBTS v4.0: "Apple's Envy: Root once, bypass TCC" - Andy Grant
- OBTS v4.0: "Becoming a Yogi on Mac ATT&CK with OceanLotus Postures" - Cat Self & Adam Pennington
- OBTS v4.0: "Environmental Disaster: A LaunchServices Tale" - Ron Waisberg
- OBTS v4.0: "FIDO on MacOS: How it works, Attack Vectors and Other Learnings" - Joel Rennich
- OBTS v4.0: "iOS Reverse Engineering With Frida" - Christine Fossaceca
- OBTS v4.0: "Kernel Exploitation on Apple's M1 chip" - 08tc3wbb
- OBTS v4.0: "Mac Detections by The Numbers" - Thomas Reed
- OBTS v4.0: "Mount(ain) of Bugs" - Csaba Fitzl
- OBTS v4.0: "n-1 and n-2: Should we really trust in you?" - Josh Long
- OBTS v4.0: "Plug-n-Play: Using Native Code with Installer Plugins for Initial Access" - Chris ross
- OBTS v4.0: "Pocket Litter - A Peek Inside Your Apple Wallet" - Sarah Edwards
- OBTS v4.0: "Siri, Find My Ex" - Eva Galperin
- OBTS v4.0: "The Wild World of macOS Installers" - Tony Lambert
- OBTS v4.0: Made In America: Analyzing US Spy Agencies macOS Implants - Runa Sandvik & Patrick Wardle
- OBTS v7 "Broken isolation: Draining your Credentials from Popular macOS Password Managers" W. Regula
- OBTS v7 A Better Way, YARA-X, Mach-O Feature Extraction, and Malware Similarity. Latonis & Lesnewich
- OBTS v7 Unraveling Time: Understanding Time Formats in iOS Sysdiagnose for Sec Forensics. L. Wilske
- OBTS v7: A Little Less Malware, A Little More Context: Using LLMs to Detect Malicious macOS Activity
- OBTS v7: Sweet QuaDreams or Nightmare before Christmas? Dissecting an iOS 0-Day. Marczak & Fossaceca
- OBTS v8 Fun & Games: Analyzing the Authentication Protocol in Apple's Private Cloud Compute, C Gratz
- OBTS v8 “From Bits to Behavior: Detecting macOS Com & Con Through Statistical Analysis” A Knottnerus
- OBTS v8: “Hook, Line & Koi Stealer: New macOS Malware in DPRK Fake Job Interviews” A Gabay & D Frank
- OBTS: Mac, Where’s my Bootstrap? What is the Bootstrap Server & How Can U Talk To It? Csaba & Dalton
- OFTW v4 "Trust me, I'm an Apple Watch — Fun & Games with the Apple Watch Protocol..." N. Rollshausen
- Patreon and Objective-See: Interview with Patrick Wardle
- Patrick Wardle on Yahoo Finance: Government and private sector working together on cybersecurity
- Podcast: Apple, Please Give Us More Logs (via @DetectionDispatch_AlexsVersion)
- WeTalks - Keynote tutorial (Part 1): “Keynope to Keydope” with Stuart Ashenbrenner
- WeTalks - Tips & Tricks for public speaking with Christine Fossaceca & Stuart Ashenbrenner
- WeTalks - Tips & Tricks for public speaking with Jaron Bradley
- WeTalks - Tips & Tricks for public speaking with Patrick Wardle
- WeTalks v2 · Session #1: “From CFP Outline to Talk Structure” with Stuart Ashenbrenner
- WeTalks v2 · Session #2: “Building a Technical Narrative” with Olivia Gallucci
- WeTalks v2 · Session #3: “Speaking & Delivering” with Patrick Wardle
- What is "Objective by the Sea" #OBTS?