Heap Overflow in Apple's EXR Decoder
A MacSec Labs security research writeup. Responsibly disclosed to Apple and fixed across iOS, iPadOS, macOS, and visionOS as CVE-2026-28977.
Overview
Some of
Leaking the Kernel: A KASLR Bypass in macOS IOKit
A MacSec Labs security research writeup. Responsibly disclosed to Apple, awarded an Apple Security Bounty, and fixed in macOS 26.4 as CVE-2026-20695.
Silent SMB: A macOS Calendar Vulnerability
Overview
Calendar invites are one of the most trusted objects in a modern operating system. We subscribe to team calendars, add conference feeds, and click
Abusing WinML for In-Memory Staging and EDR Evasion
Abusing legitimate machine learning infrastructure for payload delivery, in-memory staging, and EDR evasion on Windows 10/11.
Introduction
Every red team operator knows the
Kernel Space C2 Encryption on RHEL - Your EDR Can't See
Overview
Over 90% of Fortune 500 companies run Red Hat Enterprise Linux in production. Database backends, identity infrastructure, CI/CD pipelines, internal APIs. When the