Nullcon Berlin 2023 | The Achilles Heel Of The macOS Gatekeeper by Jonathan Bar Or

This talk explores the hardening of macOS through the implementation of the Gatekeeper, a security mechanism that prevents non-notarized downloaded binaries from executing on the system. The speaker reviews recent bypass techniques, including a novel 0day vulnerability reported to Apple in 2022. Additionally, the session examines detection heuristics provided by Microsoft Defender for Endpoint on macOS, comparing the security landscape of macOS and Windows.