惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

有赞技术团队
有赞技术团队
M
MIT News - Artificial intelligence
Hugging Face - Blog
Hugging Face - Blog
博客园 - 聂微东
量子位
S
SegmentFault 最新的问题
V
Visual Studio Blog
博客园 - 【当耐特】
Apple Machine Learning Research
Apple Machine Learning Research
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
小众软件
小众软件
Stack Overflow Blog
Stack Overflow Blog
Vercel News
Vercel News
D
Docker
J
Java Code Geeks
博客园 - 三生石上(FineUI控件)
博客园 - Franky
Recent Announcements
Recent Announcements
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
MongoDB | Blog
MongoDB | Blog
D
DataBreaches.Net
Y
Y Combinator Blog
云风的 BLOG
云风的 BLOG
V
V2EX

Schneier on Security

More on the OpenAI Agent's Attack on Hugging Face - Schneier on Security The OpenAI Hack Shows the Genie Is Out of the Bottle - Schneier on Security Friday Squid Blogging: Squid Helps Discover New Marine Species - Schneier on Security Anthropic's Opus 5 Is Better at Resisting Prompt Injection - Schneier on Security Facial Recognition at Madison Square Garden - Schneier on Security American Being Prosecuted for Wiping His Phone Before Handing It Over to Border Officials - Schneier on Security Should You Use AI for a Task? Here’s a Simple Way to Decide - Schneier on Security Measuring the Tendency of AI Agents to Go Rogue - Schneier on Security Long-Lived Vulnerability in Microsoft Secure Boot - Schneier on Security Measuring LLMs' Ability to Perform Cryptanalysis - Schneier on Security Axon Is Another License Plate Surveillance Company - Schneier on Security Cognyte Sells a Mobile Cell Surveillance Van - Schneier on Security Friday Squid Blogging: Illex Squid Catch in the Falklands - Schneier on Security Why AI Needs a “Genie Coefficient” - Schneier on Security End-to-End Encryption and "Going Dark" - Schneier on Security First-Person Identity Theft Story - Schneier on Security MIT to Become Hotbed of AI Video Surveillance - Schneier on Security On Flock License Plate Tracking Cameras - Schneier on Security Friday Squid Blogging: Squid Washing Up on Cape Cod Beach - Schneier on Security Details of Alan Turing's Voice Encryption System - Schneier on Security Protecting Privacy in an AI Era - Schneier on Security A Video Screen That Is Also a Camera - Schneier on Security Upcoming Speaking Engagements - Schneier on Security Vulnerability in FIFA's Network - Schneier on Security AI Data Centers and the Concentration of Wealth - Schneier on Security Friday Squid Blogging: "Squidbleed" Vulnerability - Schneier on Security AI Surveillance and Social Progress - Schneier on Security The Language of AI Could Change How Humans Speak - Schneier on Security Cybersecurity and the Gap Between Skill and Ability - Schneier on Security Google Is Suing Chinese Scammers Who Are Using Gemini - Schneier on Security
macOS Kernel Memory Corruption Exploit
Bruce Schneier · 2026-05-22 · via Schneier on Security

Comments

Rontea May 22, 2026 9:59 AM

Apple’s introduction of Memory Integrity Enforcement (MIE) represents a textbook example of raising the cost of attacks by integrating hardware-assisted mitigations. For five years, Apple followed the classic defense-in-depth principle: layering multiple barriers in hardware and software to make memory corruption exploits prohibitively expensive.

And yet, as this report demonstrates, no mitigation is absolute. Attackers, augmented by AI systems like Mythos Preview, can now explore the vulnerability space at speeds that outpace traditional human-only approaches. The fact that a small team could develop a working macOS kernel memory corruption exploit on M5 hardware in under a week validates the old adage: attacks only get better.

We’re entering a transitional era. Hardware-enforced protections like MIE were designed for a pre-AI threat model. In a world where autonomous systems can rapidly discover and generalize exploit patterns, security will need to evolve again. Mitigations can slow attackers down, but they will not stop them.

Atom Feed Subscribe to comments on this entry

Leave a comment

Sidebar photo of Bruce Schneier by Joe MacInnis.