flash on Nostr: ⚡️⚙️‼️ TECH - Apple is doubling down on security and has quietly built a ...
⚡️⚙️‼️ TECH - Apple is doubling down on security and has quietly built a kernel-level security monitor into iOS to stop exploits by monitoring stuff like process injection, an app's code signature going invalid, memory that isn't backed by any file and more.
It can do more than watching only, as opening a file, launching a program, changing memory permissions or reaching into another process stops in the kernel and waits for it to answer allow or deny.
It turned up in a public comparison of the iOS 27.0 release against the 27.2 beta, which added three new kernel extensions, one of them a trimmed-down port of the endpoint security engine Apple built for Macs.
Source: com.apple.iokit.EndpointSecuritySE, absent from iOS 27.0 (24A437), present in the 27.2 beta (24B5084k), with its user-space library alongside it.
Published at
2026-09-18 07:12:24 UTCEvent JSON
{
"id": "be2f131178a944f0b61f8a29317f54f2ed5d01b6676b5b2bdaf51de5d8ccff89",
"pubkey": "4d7842051782e0d3feb034d150adc2b6bae4ee3b49786793bffa468b6f5b96b3",
"created_at": 1789715544,
"kind": 1,
"tags": [
[
"client",
"Primal iOS"
]
],
"content": "⚡️⚙️‼️ TECH - Apple is doubling down on security and has quietly built a kernel-level security monitor into iOS to stop exploits by monitoring stuff like process injection, an app's code signature going invalid, memory that isn't backed by any file and more.\n\nIt can do more than watching only, as opening a file, launching a program, changing memory permissions or reaching into another process stops in the kernel and waits for it to answer allow or deny.\n\nIt turned up in a public comparison of the iOS 27.0 release against the 27.2 beta, which added three new kernel extensions, one of them a trimmed-down port of the endpoint security engine Apple built for Macs.\n\nSource: com.apple.iokit.EndpointSecuritySE, absent from iOS 27.0 (24A437), present in the 27.2 beta (24B5084k), with its user-space library alongside it. \n\nhttps://blossom.primal.net/1bb70ad8afc8031da0cb8f6e67a0a088cf1c2abec966fe29c9a14739131973ea.jpg\nhttps://blossom.primal.net/5f4cba92d3ba0ed00575d8ce361871ab4eead889c93c987fa63d702a4b4cde8b.jpg",
"sig": "0390de488ecb13d392c4c159b01c234302b651ef36dcb01c68915294d2c0b501fa8d5e6e899a290039d582eb49cedbce510e611fd345d1fbdc0c643e35489c3e"
}
