@objective_see

🍎 🛡️ 🛠️ Open-Source Tools 📚 "The Art of Mac Malware" books 🫂 "Objective by the Sea" conference Support us on https://xitter.cf/t.co/tuGceSeyiC 🙏

 Maui, Hawaii
objective-see.org
Joined October 2011
  • Tweets5.2K
  • Following2
  • Followers19.6K
658Media
Our Valentine's Day gift 💝 objectivebythesea.org/v9/ind… Announcing Objective by the Sea (#OBTS) v9.0: 👩🏻‍💼 Train: Nov 15-17 👩🏻‍🏫 Talks: Nov 18-20 📍 Maui, Hawaii, 2026 CFP (talks & trainings) and tickets are now officially open! Hope to see you by the sea 🏝️ Special 🙏🏽 to @andyrozen!!
3
9
4
47
20,817
Like all our tools, TaskExplorer is free & open-source! 🥰😇
Patrick Wardle
@patrickwardleOct 5
TaskExplorer now natively integrates with Ollama 🤖 ...so you can bring your favorite local LLM to the party! Latest version available here: objective-see.org/products/t…
1
8
903
Objective-See Foundation retweeted
Patrick Wardle
@patrickwardleOct 5
TaskExplorer now natively integrates with Ollama 🤖 ...so you can bring your favorite local LLM to the party! Latest version available here: objective-see.org/products/t…
Patrick Wardle
@patrickwardleSep 16
I've just (re)written TaskExplorer Think Process Monitor but for macOS, open source, & much more powerful 💪🏽 Highlights: • CLI + JSON export • On-device AI assistant • Code signing + VirusTotal context • Live process/file/dylib/network activity objective-see.com/products/t…
3
12
1
56
4,975
Objective-See Foundation retweeted
Patrick Wardle
@patrickwardleOct 4
security? privacy? 😬
Alexandr Wang
@alexandr_wangOct 4
what we've shipped: muse ♥️ ton of connectors 🔧 muse invite codes 💌 muse phone call beta ☎️ muse for mac  muse in canada 🇨🇦 muse connector platform 🛠️ muse mac computer use 💻 muse for small business 💼 muse gadgets 🕹️ muse memes 🤡 no butthole 🍰 what should we ship next?
3
6
1
59
5,716
Objective-See Foundation retweeted
Jamf
@JamfSoftwareOct 2
A fake Zoom installer found by #JamfThreatLabs hides a stolen macOS password inside a config file using invisible Unicode characters. CloudSyncD uses that password once to launch a backdoor with elevated access. okt.to/SHA3m2 #CybersecurityAwarenessMonth

CloudSyncD: macOS backdoor hidden in a fake Zoom installer

Jamf Threat Labs analyzes CloudSyncD, a fake Zoom installer that phishes the Mac login password, hides it in zero-width Unicode and launches a backdoor.

jamf.com
3
7
1,555
Objective-See Foundation retweeted
Patrick Wardle
@patrickwardleOct 3
Smart way to limit AI agents! 👏 But, @Apple, please don't make Full Disk Access changes harder for macOS Endpoint Security tools! They (per your design) require FDA plus a special entitlement you only grant after vetting, so please keep them easy for users to install! 🙏
Patrick Wardle
@patrickwardleOct 2
Apple is already understandably annoyed by poorly written/insecure/greedy AI agents/assistants insisting on Full Disk Access, and then once granted/obtained, abusing that, to access <all the things>. ...that didn't take long!
6
2
54
4,496
Last week, our @patrickwardle spoke with @ThomasClaburn at @TheRegister about this exact issue: AI apps "undoing" Apple's hard work on security & privacy. Great to see @Apple jumping into action to protect the security & privacy of its users. Read: theregister.com/ai-and-ml/20…
Patrick Wardle
@patrickwardleOct 2
Apple is already understandably annoyed by poorly written/insecure/greedy AI agents/assistants insisting on Full Disk Access, and then once granted/obtained, abusing that, to access <all the things>. ...that didn't take long!
1
2
7
1,638
Objective-See Foundation retweeted
Patrick Wardle
@patrickwardleOct 2
But its not secure 😩 Exhibit A: prompt injection (via local attack against ChatGPT)
Sam Altman
@samaOct 2
dot is my favorite openai product so far! it is amazing to me that each day it feels noticably better as it learns more of my workflow and style. having it do the stuff i don't like doing--and usually just builds up as a gravity well of dread--has me very happy.
6
1
47
8,577
Objective-See Foundation retweeted
Alex Kleber a.k.a Privacy 1st
@privacyis1stOct 2
⚠️ Potential scam / impersonation concern: this Mac App Store app uses an icon that closely resembles OpenAI’s official ChatGPT icon. @Apple is obsolete to fight with scams.... @OpenAI @AppleSupport apps.apple.com/us/app/ai-cha…
2
1
3
12
3,939
Objective-See Foundation retweeted
Arin
@arinwaichulisOct 2
Wild. I've written about clones like this multiple times and Apple sees it and pulls them no problem. But I still have no idea how they keep getting through the review process. This one is currently #2 in education on the Mac App Store 😖
Alex Kleber a.k.a Privacy 1st
@privacyis1stOct 2
⚠️ Potential scam / impersonation concern: this Mac App Store app uses an icon that closely resembles OpenAI’s official ChatGPT icon. @Apple is obsolete to fight with scams.... @OpenAI @AppleSupport apps.apple.com/us/app/ai-cha…
2
1
13
1,452
Maybe Apple read about our research 🤭 Either way, happy to see them taking steps to limit the granting of Full Disk Access (FDA)! techcrunch.com/2026/10/02/ap…
Objective-See Foundation@objective_seeOct 2
Mahalo to @WIRED for covering our initial research into ChatGPT (CVE-2026-100754) Traditionally, protecting the privacy & security of Apple users meant focusing on malware & attackers...now, AI agents belong in that threat model too 🤖⚠️ More bugs reported, so stay tuned... 👀
3
5
36
4,061
Objective-See Foundation retweeted
Pacific NW Computers
@PacificNWComputOct 2
If you are a Mac OSX user, check out @objective_see !! They are a non-profit foundation focused on macOS security, driven by the mission to create free tools, grow and support a global community and advance Apple security through education, research, collaboration, and opportunity!! objective-see.org/tools.html

Objective-See: Tools

Free, open-source tools to protect your Mac

objective-see.org
3
5
492
Objective-See Foundation retweeted
Calif
@calif_ioSep 30
CVE-2026-86950: The Great Glyph Grift calif.io/research/the-great-…
4
79
7
249
55,954
Objective-See Foundation retweeted
Csaba Fitzl
@theevilbitOct 2
🍎🐛 I got Claude making this, maybe it's useful for others as well. Every Apple security advisory since 2002 - parsed, indexed, charted. With links to writeups, POCs and presentations. apple-cve.com/

APPLE·CVE — every Apple security advisory, indexed

Search, filter and chart every CVE in Apple's security release notes since 2002.

apple-cve.com
13
54
5
296
25,491
Mahalo to @WIRED for covering our initial research into ChatGPT (CVE-2026-100754) Traditionally, protecting the privacy & security of Apple users meant focusing on malware & attackers...now, AI agents belong in that threat model too 🤖⚠️ More bugs reported, so stay tuned... 👀
WIRED
@WIREDOct 2
While the focus has been on AI agents’ hacking capabilities, a recently patched vulnerability in the macOS version of OpenAI’s ChatGPT shows that AI software is itself an inviting—and vulnerable—target. wired.com/story/a-flaw-in-ch…

A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data

While the focus has been on AI agents’ hacking capabilities, a recently patched vulnerability in a ChatGPT app shows that AI software is itself an inviting—and vulnerable—target.

wired.com
5
5
2
24
8,959
0-day flaws in ChatGPT let a local unprivileged attacker bypass OpenAI's safeguards, subvert the agent on macOS, and take over your Dot. Responsibly reported to (and ack'd by) OpenAI. Our research into the (in)security of AI agents continues... 🫠
Sam Altman
@samaSep 29
Dots are here! A new way to use AI that works 24/7 for you; get more of your time and attention back to work at a higher level. openai.com/index/introducing…

Introducing dots

Dots by OpenAI are proactive assistants that can keep working across complex projects and everyday tasks. Learn how dots help you stay in control while work moves forward.

openai.com
6
11
2
200
17,711
Congrats to our #OBTS v9.0 student scholars! From ~100 applications (thank you all!), our Objective-We program is supporting these scholars with full or partial scholarships, covering tickets, training, travel, & lodging at #OBTS v9 Mahalo to our supporters @OpenAI & @addigy 🙏
1
2
2
20
2,664
Security & privacy used to mean fighting malware and hackers ...now, we have to add "AI agents" to that threat model 🤖 😅 Mahalo to the @nytimes for spotlighting some of our recent ChatGPT research & bugs! nytimes.com/2026/09/29/techn…
3
5
1
22
10,827
#OBTS v9 schedule is LIVE! 🔥 objectivebythesea.org/v9/sch… If you're into Apple security (yes, including securing those pesky AI agents 🤖), you seriously don't want to miss this one! Hope to see you by the sea ☀️🌊
1
9
26
2,355
Objective-See Foundation retweeted
Arin
@arinwaichulisSep 28
Just wrote up a lil threat landscape review January-September. TL;DR: ClickFix is basically the on-ramp for everything now, stealers evolving into something much worse. Go read! 9to5mac.com/2026/09/28/secur…

Security Bite: Mac threat landscape review (September) - 9to5Mac

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe...

9to5mac.com
2
4
616
Objective-See Foundation retweeted
Virus Bulletin@virusbtnSep 23
MacOS credentials are under fire from PAMStealer (Wavel), a new infostealer using PAM-based credential validation. Jamf caught it using a server-side key exchange that prevents static payload recovery. jamf.com/blog/pamstealer-wav…
10
23
2,222
Load more