notarization

1 talk tagged with this topic.

Filters+

Loading filters…

1–1 of 1 talk · loading…

Sort

Main Stage·45 min

DEF CON
Malware
Date: Aug 2021
Location: Las Vegas

Bundles of Joy: Breaking macOS via Subverted Application Bundles

Patrick Wardle

Patrick Wardle dissects CVE-2021-30657, a zero-click logic bug in macOS application bundles that completely bypassed Apple File Quarantine, Gatekeeper, and Notarization.

macosgatekeepernotarization+2