Another year, another MacDevOpsYVR! This year I had the pleasure of talking about common security pitfalls for MacAdmins when it comes to MDM and Mac management as a whole. This year I brought in a new utility, Project Indago, to help demonstrate oversights in MDM enrollments.

As usual, links to the talk will be posted once they are available, but in the meantime, here are all the juicy slides!

Oh and why not, let’s drop PoCs for a few CVEs too!

If you’re bored, both QNAP Updater and FortiClient still have some goodies to find 👾 (Both are genuinely some of the most concerning (?) software I’ve reversed in a while)