惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

小众软件
小众软件
C
Check Point Blog
Vercel News
Vercel News
Y
Y Combinator Blog
G
Google Developers Blog
P
Proofpoint News Feed
WordPress大学
WordPress大学
MongoDB | Blog
MongoDB | Blog
博客园 - 司徒正美
Last Week in AI
Last Week in AI
博客园 - 【当耐特】
N
Netflix TechBlog - Medium
L
LangChain Blog
V
V2EX
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
大猫的无限游戏
大猫的无限游戏
D
DataBreaches.Net
博客园_首页
B
Blog RSS Feed
The Cloudflare Blog
MyScale Blog
MyScale Blog
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Microsoft Security Blog
Microsoft Security Blog

Schneier on Security

More on the OpenAI Agent's Attack on Hugging Face - Schneier on Security The OpenAI Hack Shows the Genie Is Out of the Bottle - Schneier on Security Friday Squid Blogging: Squid Helps Discover New Marine Species - Schneier on Security Anthropic's Opus 5 Is Better at Resisting Prompt Injection - Schneier on Security Facial Recognition at Madison Square Garden - Schneier on Security American Being Prosecuted for Wiping His Phone Before Handing It Over to Border Officials - Schneier on Security Should You Use AI for a Task? Here’s a Simple Way to Decide - Schneier on Security Measuring the Tendency of AI Agents to Go Rogue - Schneier on Security Long-Lived Vulnerability in Microsoft Secure Boot - Schneier on Security Measuring LLMs' Ability to Perform Cryptanalysis - Schneier on Security Axon Is Another License Plate Surveillance Company - Schneier on Security Cognyte Sells a Mobile Cell Surveillance Van - Schneier on Security Friday Squid Blogging: Illex Squid Catch in the Falklands - Schneier on Security Why AI Needs a “Genie Coefficient” - Schneier on Security End-to-End Encryption and "Going Dark" - Schneier on Security First-Person Identity Theft Story - Schneier on Security MIT to Become Hotbed of AI Video Surveillance - Schneier on Security On Flock License Plate Tracking Cameras - Schneier on Security Friday Squid Blogging: Squid Washing Up on Cape Cod Beach - Schneier on Security Details of Alan Turing's Voice Encryption System - Schneier on Security Protecting Privacy in an AI Era - Schneier on Security A Video Screen That Is Also a Camera - Schneier on Security Upcoming Speaking Engagements - Schneier on Security Vulnerability in FIFA's Network - Schneier on Security AI Data Centers and the Concentration of Wealth - Schneier on Security Friday Squid Blogging: "Squidbleed" Vulnerability - Schneier on Security AI Surveillance and Social Progress - Schneier on Security The Language of AI Could Change How Humans Speak - Schneier on Security Cybersecurity and the Gap Between Skill and Ability - Schneier on Security Google Is Suing Chinese Scammers Who Are Using Gemini - Schneier on Security
macOS Kernel Memory Corruption Exploit
Bruce Schneier · 2026-05-22 · via Schneier on Security

Comments

Rontea May 22, 2026 9:59 AM

Apple’s introduction of Memory Integrity Enforcement (MIE) represents a textbook example of raising the cost of attacks by integrating hardware-assisted mitigations. For five years, Apple followed the classic defense-in-depth principle: layering multiple barriers in hardware and software to make memory corruption exploits prohibitively expensive.

And yet, as this report demonstrates, no mitigation is absolute. Attackers, augmented by AI systems like Mythos Preview, can now explore the vulnerability space at speeds that outpace traditional human-only approaches. The fact that a small team could develop a working macOS kernel memory corruption exploit on M5 hardware in under a week validates the old adage: attacks only get better.

We’re entering a transitional era. Hardware-enforced protections like MIE were designed for a pre-AI threat model. In a world where autonomous systems can rapidly discover and generalize exploit patterns, security will need to evolve again. Mitigations can slow attackers down, but they will not stop them.

Atom Feed Subscribe to comments on this entry

Leave a comment

Sidebar photo of Bruce Schneier by Joe MacInnis.