DEFION Research Labs
iOS/macOS
iOS/macOSBringing process injection into view(s): exploiting all macOS apps using nib files5 April 2024 • 20 min read
iOS/macOSDon’t Talk All at Once! Elevating Privileges on macOS by Audit Token Spoofing13 October 2023 • 25 min read
iOS/macOSBad things come in large packages: .pkg signature verification bypass on macOS13 January 2023 • 20 min read
iOS/macOSProcess injection: breaking all macOS security layers with a single vulnerability12 August 2022 • 25 min read
iOS/macOSSandbox escape + privilege escalation in StorePrivilegedTaskService21 December 2021 • 20 min read- iOS/macOSAdobe Acrobat privilege escalation8 October 2020 • 15 min read
Contributing to a more secure and resilient digital world
DEFION Research Labs is the advanced research division of DEFION - a place where cutting-edge security research, threat intelligence, and technical curiosity converge. From our dedicated lab environment, our specialists investigate complex security challenges, uncover unknown vulnerabilities, and dissect emerging attack techniques. Our mission is simple, but ambitious: to make the digital world safer and more resilient.
As cyber threats grows in sophistication and scale, we refuse to stand still. We push forward, staying one step ahead of adversaries by analysing undiscovered vulnerabilities, mapping new attack surfaces, and generating insights that strengthen both our clients’ security and society’s digital resilience.
Background: actively powered by DEFION, driven by impact
DEFION Research Labs grew out of DEFION’s earlier internal research initiatives, a space where pentesters and security engineers developed new ideas, explored technologies they were passionate about, and contributed to projects with societal value. These early efforts accelerated innovation inside DEFION and helped our specialists grow beyond their day-to-day assignments.
By 2020, our ambitions had surpassed what part-time research could achieve. To stay ahead of evolving threats, and to meaningfully contribute to the broader security ecosystem, we committed dedicated time, people, and resources to full-scale research and intell gathering.
Projects & Contact
All of our published research projects can be found on this site. We are always working on new research, which will be published here when possible.
If you would like to contact us, you can find our contact details on our contact page. For example if you have an intresting research proposol for us, or if you would like to find out if we would be available to give a presentation at your security conference or event. For tours and visiting we are open for students or fellow researchers.
