惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

J
Java Code Geeks
Google DeepMind News
Google DeepMind News
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
小众软件
小众软件
Blog — PlanetScale
Blog — PlanetScale
腾讯CDC
A
About on SuperTechFans
Vercel News
Vercel News
I
InfoQ
阮一峰的网络日志
阮一峰的网络日志
月光博客
月光博客
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
人人都是产品经理
人人都是产品经理
S
SegmentFault 最新的问题
V
Visual Studio Blog
T
Tailwind CSS Blog
大猫的无限游戏
大猫的无限游戏
M
MIT News - Artificial intelligence
博客园 - 【当耐特】
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Microsoft Azure Blog
Microsoft Azure Blog
Apple Machine Learning Research
Apple Machine Learning Research
GbyAI
GbyAI
美团技术团队

Schneier on Security

Axon Is Another License Plate Surveillance Company - Schneier on Security Cognyte Sells a Mobile Cell Surveillance Van - Schneier on Security Friday Squid Blogging: Illex Squid Catch in the Falklands - Schneier on Security Why AI Needs a “Genie Coefficient” - Schneier on Security End-to-End Encryption and "Going Dark" - Schneier on Security First-Person Identity Theft Story - Schneier on Security MIT to Become Hotbed of AI Video Surveillance - Schneier on Security On Flock License Plate Tracking Cameras - Schneier on Security Friday Squid Blogging: Squid Washing Up on Cape Cod Beach - Schneier on Security Details of Alan Turing's Voice Encryption System - Schneier on Security Protecting Privacy in an AI Era - Schneier on Security A Video Screen That Is Also a Camera - Schneier on Security Upcoming Speaking Engagements - Schneier on Security Vulnerability in FIFA's Network - Schneier on Security AI Data Centers and the Concentration of Wealth - Schneier on Security Friday Squid Blogging: "Squidbleed" Vulnerability - Schneier on Security AI Surveillance and Social Progress - Schneier on Security The Language of AI Could Change How Humans Speak - Schneier on Security Cybersecurity and the Gap Between Skill and Ability - Schneier on Security Google Is Suing Chinese Scammers Who Are Using Gemini - Schneier on Security France to Stop Certifying Non-Quantum-Safe Encryption - Schneier on Security Flock Cameras Can Surveil Cars Without License Plates - Schneier on Security Cybersecurity Mission Creep in the US - Schneier on Security Papa Johns Surveillance-Based Advertising - Schneier on Security The Realities of AI Video Surveillance - Schneier on Security Factoring RSA Keys with Many Zeros - Schneier on Security Robot Police Officers - Schneier on Security The Chinese Control the Majority of Argentina's Squid Fleet - Schneier on Security Meta Is Testing Facial Recognition for Police and Military - Schneier on Security One Million Passports Leaked Online - Schneier on Security
macOS Kernel Memory Corruption Exploit
Bruce Schneier · 2026-05-22 · via Schneier on Security

Comments

Rontea May 22, 2026 9:59 AM

Apple’s introduction of Memory Integrity Enforcement (MIE) represents a textbook example of raising the cost of attacks by integrating hardware-assisted mitigations. For five years, Apple followed the classic defense-in-depth principle: layering multiple barriers in hardware and software to make memory corruption exploits prohibitively expensive.

And yet, as this report demonstrates, no mitigation is absolute. Attackers, augmented by AI systems like Mythos Preview, can now explore the vulnerability space at speeds that outpace traditional human-only approaches. The fact that a small team could develop a working macOS kernel memory corruption exploit on M5 hardware in under a week validates the old adage: attacks only get better.

We’re entering a transitional era. Hardware-enforced protections like MIE were designed for a pre-AI threat model. In a world where autonomous systems can rapidly discover and generalize exploit patterns, security will need to evolve again. Mitigations can slow attackers down, but they will not stop them.

Atom Feed Subscribe to comments on this entry

Leave a comment

Sidebar photo of Bruce Schneier by Joe MacInnis.