BREAKING: Berlin’s Apple security threat level just changed from “probably fine” to “@patrickwardle is in town.” 🍏🇩🇪 I’ve arrived for #OFTW v4.0 — two days of brilliant minds, suspicious processes, and people who actually read permission pop-ups. Tonight: Berlin. Tomorrow morning: the learning begins. My MacBook has not been informed. @objective_see @andyrozen – at Berlin, Germany

And that’s a wrap on #OFTW v4.0. Two days flew by. Incredible research. Incredible conversations. Incredible people. The talks may be over, but the ideas, friendships, and inspiration are coming home with us. What a community. 🍏 @objective_see @patrickwardle @andyrozen – at Berlin, Germany

One of the most valuable sessions of #OFTW isn’t only about vulnerabilities or exploits. It’s about people too. Hearing the journeys behind the research, the setbacks that became lessons, and how experienced professionals are evolving alongside the rapid rise of AI. For those just entering the field, these conversations can change the trajectory of a career. #OFTW 🍏🔥 @objective_see @patrickwardle @andyrozen @osint_barbie @gergely_kalman – at Berlin, Germany

We’re technically on a break. Good luck convincing anyone in this room of that. The energy is unreal right now. Panel up next. Let’s go. 🔥🍏 #OFTW @objective_see @patrickwardle @andyrozen – at Berlin, Germany

That’s a wrap for the talks at #OFTW. From iMessage attacks and malware detection to ClickFix, filesystems, co-processors, Apple Watch internals, and iOS security research. Exactly the kind of day I was hoping for. @objective_see @patrickwardle @andyrozen – at Berlin, Germany

The talks may be over. The questions definitely aren’t. Thanks to Patrick for closing out an incredible day of research and learning. Now onto the panel and Happy Hour, where the slides disappear but the discussions keep going. @objective_see @patrickwardle @andyrozen #OFTW 🍏🚀 – at Berlin, Germany

Every vulnerability gets fixed. Every fix leaves a trail. Great talk from Billy Ellis on following that trail into the world of iOS security research. Strong finish to an incredible day. @objective_see @patrickwardle @andyrozen #OFTW 🍏🚀 – at Berlin, Germany

Last talk of #OFTW. What better way to close than learning how to find security insights in the places most people scroll past? Reading between the patches with Billy Ellis. @objective_see @patrickwardle @andyrozen – at Berlin, Germany

What started at OBTS didn’t stay at OBTS. Great to see the next chapter of the Apple Watch research from Nils Rollshausen. #OFTW #OBTS ⌚️🔥 @objective_see @patrickwardle @andyrozen – at Berlin, Germany

One of my favorite things about the Objective-See community is watching research grow over time. A talk at OBTS isn’t always the end of a story. Sometimes it’s just Chapter 1. Looking forward to seeing where Nils Rollshausen takes the Apple Watch protocol stack research next. Back in Apple Watch territory, and I have a feeling there are still a few surprises left. @objective_see @patrickwardle @andyrozen #OFTW #OBTS 🍏⌚️🚀 – at Berlin, Germany

Today’s lesson: If you’re not slightly overwhelmed by how much technology is happening underneath your iPhone, you’re probably not looking deep enough. Fantastic session from Lukas Arnold exploring co-processor firmware and the layers of Apple’s architecture that rarely get the spotlight. Every answer seemed to uncover three more questions. That’s usually a sign of a great talk. @objective_see @patrickwardle @andyrozen #OFTW 🍏🔐 – at Berlin, Germany

Normal people: “I wonder how my iPhone works.” Apple security researchers: “What’s running on the chip that’s helping the chip that’s helping the iPhone work?” Lukas Arnold is currently answering that question. @objective_see @patrickwardle @andyrozen #OFTW 🍏 – at Berlin, Germany

Halfway through Day 2 and the biggest problem so far is information overload. Great talks. Great people. Great conversations. And somehow the afternoon lineup still hasn’t started. Let’s keep going. @objective_see @patrickwardle @andyrozen @osint_barbie @gergely_kalman #OFTW 🍏🔐🔥 – at Berlin, Germany

Not every treasure map starts with a giant X. Sometimes it starts with a filesystem. Great talk by Gergely Kalman showing that some of the most rewarding paths in Apple security research begin in places that don’t look exciting at first glance. That’s usually where the good stuff is. @objective_see @patrickwardle @andyrozen @gergely_kalman #OFTW 🚀🍏

Most people at conferences try to get a good seat. I somehow ended up next to the speakers. Today’s neighbor: OSINT Barbie, Kseniia Yamburh. One of the things that makes #OFTW unique is that the distance between “attendee” and “speaker” is basically one chair. @objective_see @patrickwardle @andyrozen @osint_barbie #OFTW 🍏🔥🔐 – at Berlin, Germany

Every bug hunter wants the bounty. Nobody wants the homework. Gergely Kalman is currently explaining why the homework might be the bounty. @objective_see @patrickwardle @andyrozen @gergely_kalman #OFTW 🍏 – at Berlin, Germany

Breaking news from #OFTW: Uncle Mike has achieved full conference compromise. It appears above talks. It appears during discussions. It appears whenever someone has a question. No CVE assigned yet. The threat level remains under investigation. @objective_see @patrickwardle @andyrozen 🎤🍏 – at Berlin, Germany

Kseniia Yamburh just gave us the most realistic mission design yet: no zero-day, no cinematic heist, just convincing the player to copy, paste, click, and compromise themselves. ClickFix is proof that the easiest system to exploit is often the one holding the keyboard. Brilliant, sharp, and dangerously entertaining from the OSINT Barbie. @objective_see @patrickwardle @andyrozen @osint_barbie #OFTW #CyberSecurity – at Berlin, Germany

We got a ClickFix mission before we got GTA 6. Objective: convince the target to do the work for you. Reward: access granted. Wanted level: 5 stars. Fantastic talk in progress by the OSINT Barbie herself, Kseniia Yamburh @osint_barbie , showing how modern attacks increasingly rely on manipulating people instead of exploiting software. Sometimes the weakest link isn’t the code. It’s the quest giver. @objective_see @patrickwardle @andyrozen #OFTW 🍏 – at Berlin, Germany

Malware authors hate patterns. Machine learning loves patterns. Guess who’s trying harder to win? Excellent session from Biagio Montaruli on where machine learning fits into the future of macOS malware detection. @objective_see @patrickwardle @andyrozen #AppleSecurity #OFTW – at Berlin, Germany