{
  "id": "8fd5d832fdd1",
  "url": "https://blog.calif.io/p/first-public-kernel-memory-corruption",
  "title": "First public macOS kernel memory corruption exploit on Apple M5",
  "note": "First known exploit of Apple's silicon memory protection in the M5 chip.\n\n> The latest flagship example is MIE (Memory Integrity Enforcement), Apple's hardware-assisted memory safety system built around ARM's MTE (Memory Tagging Extension). It was introduced as the marquee security feature for the Apple M5 and A19, specifically designed to stop memory corruption exploits, the vulnerability class behind many of the most sophisticated compromises on iOS and macOS.\n> \n> Apple spent **five years** building it. Probably billions of dollars too. According to their research, MIE [disrupts](https://security.apple.com/blog/memory-integrity-enforcement/) every public exploit chain against modern iOS, including the recently leaked Coruna and Darksword exploit kits.\n\nMythos played a key role here:\n\n> We didn't build the chain alone. Mythos Preview helped identify the bugs and assisted throughout exploit development.\n> \n> Mythos Preview is powerful: once it has learned how to attack a class of problems, it generalizes to nearly any problem in that class. Mythos discovered the bugs quickly because they belong to known bug classes. But MIE is a new best-in-class mitigation, so autonomously bypassing it can be tricky. This is where human expertise comes in.\n> \n> Part of our motivation was to test what's possible when the best models are paired with experts. Landing a kernel memory corruption exploit against the best protections **in a week** is noteworthy, and says something strong about this pairing.\n\nThe bolding is mine. Apple spent five years creating this defensive structure and this small team armed with Mythos found a vulnerability in five days. We can, and probably should, look on the bright side that going forward every company building stuff like this will be using Mythos (or better) on their solutions before they are released. So we should raise the bar materially that solutions are secure.\n\nThere has to be a finite number of security vectors. Maybe we end up in a great place after uncovering these issues.",
  "voice": "mixed",
  "saved": "2026-05-15T02:14:45Z",
  "host": "blog.calif.io",
  "kind": "page",
  "tags": [],
  "record": "https://links.thingelstad.xyz/links/8fd5d832fdd1/",
  "markdown": "https://links.thingelstad.xyz/links/8fd5d832fdd1.md",
  "issues": [
    {
      "number": 348,
      "slug": "348",
      "title": "Agents as Collaborators",
      "date": "2026-05-17T11:00:00Z",
      "section": "Notable",
      "position": 1,
      "url": "https://weekly.thingelstad.com/archive/348/",
      "page": "https://links.thingelstad.xyz/issues/348/"
    }
  ],
  "connections": {
    "same_host": {
      "count": 0,
      "page": "https://links.thingelstad.xyz/hosts/blog.calif.io/",
      "nearest": []
    },
    "same_week": {
      "count": 17,
      "nearest": [
        {
          "id": "97db363fb1a0",
          "title": "Claude for Legal",
          "url": "https://github.com/anthropics/claude-for-legal",
          "record": "https://links.thingelstad.xyz/links/97db363fb1a0/"
        },
        {
          "id": "a27820a51fc1",
          "title": "You Need AI That Reduces Maintenance Costs",
          "url": "https://www.jamesshore.com/v2/blog/2026/you-need-ai-that-reduces-your-maintenance-costs",
          "record": "https://links.thingelstad.xyz/links/a27820a51fc1/"
        },
        {
          "id": "6bd8437741ec",
          "title": "Claude AI recovers an 11 yrs old BTC wallet holding 400k USD",
          "url": "https://www.tomshardware.com/tech-industry/cryptocurrency/bitcoin-trader-recovers-usd400-000-using-claude-ai-after-losing-wallet-password-11-years-ago-bot-tried-3-5-trillion-passwords-before-decrypting-an-old-wallet-backup",
          "record": "https://links.thingelstad.xyz/links/6bd8437741ec/"
        },
        {
          "id": "568e7916e830",
          "title": "For thirty years I programmed with Phish on, every day. In 2026, the music is out of phase with the work.",
          "url": "https://christophermeiklejohn.com/ai/personal/phish/flow/agents/2026/05/03/rift.html",
          "record": "https://links.thingelstad.xyz/links/568e7916e830/"
        },
        {
          "id": "f2ae79fae892",
          "title": "Love Letter to IndieWebClub",
          "url": "https://rasagy.in/sketchnotes/love-letter-to-indiewebclub",
          "record": "https://links.thingelstad.xyz/links/f2ae79fae892/"
        }
      ]
    },
    "mentions": [
      {
        "id": "d9c5a8f928e2",
        "title": "Memory Integrity Enforcement: A complete vision for memory safety in Apple devices - Apple Security Research",
        "url": "https://security.apple.com/blog/memory-integrity-enforcement/",
        "record": "https://links.thingelstad.xyz/links/d9c5a8f928e2/"
      }
    ],
    "mentioned_by": [],
    "saved_twice": []
  },
  "elsewhere": {
    "wayback": "https://web.archive.org/web/*/https://blog.calif.io/p/first-public-kernel-memory-corruption"
  }
}