Learn macOS Forensics with This Affordable Course

Mac Forensics Best Practices – 2025 Update A lot has changed in the world of macOS forensics. SUMURI has released the 2025 edition of our Mac Forensics Best Practices Guide to keep examiners current with Apple’s evolving ecosystem. If you investigate Macs—even occasionally—this guide is designed to be your go-to reference. Keep it close and stay aligned with today’s best practices. Check out the updated guide now! https://lnkd.in/dK-iwwNs #MacForensics #DigitalForensics #SUMURI #APFS #RECON

Posted From Mid Atlantic Consulting Blog - Apple releases macOS Tahoe 26.0.1 Apple on Monday released macOS Tahoe 26.0.1 which provides important bug fixes, security updates, and resolves an issue that prevented some users from upgrading to macOS Tahoe on Mac Studio (M3 Ultra, 2025). For information on the security content of Apple software updates, please visit: https://lnkd.in/eFGKt8gh ‎ Plus, it’s snappy! (No known issues here after updating.) ‎ . Source link: https://lnkd.in/eXcisU9r .... (Click link to read entire article) https://lnkd.in/eMyyXq_7

Introducing Mac or Chrome OS into a Windows-only IT environment is an excellent test of its maturity. A well-maintained and documented environment using modern standards and security will make the transition straightforward. Otherwise, the cracks will show.

Apple’s macOS 26 Tahoe introduces new image formats that matter for forensics: Apple Sparse Image Format (ASIF)and the updated Sparse Bundle Image (UDSB). These containers can be formatted to any file system and cannot be examined natively outside of macOS.

Apple’s macOS 26 Tahoe introduces new image formats that matter for forensics: Apple Sparse Image Format (ASIF)and the updated Sparse Bundle Image (UDSB). These containers can be formatted to any file system and cannot be examined natively outside of macOS.

Miss the mark on CMMC, and you risk bid ineligibility, stop-work orders, and lost contracts.    Compliance isn’t about filling out forms. It’s about proving at audit time that your endpoints enforce the right controls. In our new roadmap, you’ll see how Netwrix helps you:    - Align with CIS and STIG benchmarks — and keep drift under control  - Eliminate standing admin rights with fleet-wide policy enforcement and evidence  - Block or automatically encrypt USB devices — while logging file transfers across Windows and macOS. Compliance isn’t what you claim — it’s what you can prove.    🔒 Download the CMMC Endpoint Compliance Roadmap now: https://lnkd.in/d9D-k-F9

Every empire runs on operating systems. But so does the leader running it. If your Identity OS™ is outdated, no amount of strategy will save you.

I did a major overhaul of my blog recently and just published my first post on exploiting vulnerable Windows kernel drivers. In this article, I analyze CVE-2019-16098 (RTCore64.sys) and build a proof-of-concept to read arbitrary memory. For those that are new to this concept (like me a few weeks ago), I hope this post demystifies arbitrary RW primitive abuse in vulnerable drivers. In a future blog post, I will cover post-exploitation techniques such as token stealing, disabling ETW providers, removing callbacks, and more so stay tuned for that! Link: https://lnkd.in/gGrihc7c Cheers!

Apple releases updates fixing CVE-2025-43300, a critical ImageIO flaw exploited in targeted attacks causing memory corruption (CVSS 8.8). Patches cover iOS 18.6.2, macOS 13.7.8, and legacy devices. #CVE2025 #ImageIO #USA link: https://ift.tt/0f7agFy

Jamf Threat Labs uncovered ChillyHell, a modular macOS backdoor notarized since 2021. It features host profiling, multiple persistence methods, DNS/HTTP C2 channels, and a brute-force module. Apple revoked its developer certificates. #MacBackdoor #ChillyHell link: https://ift.tt/4x8KYg2