Patrick Wardle says macOS 24.6 adds new Endpoint Security reserved events that act like network auth and notify hooks, enabling firewall and network tooling without Network Extensions.
You can now build macOS firewalls/network tools via Endpoint Security - no Network Ext. needed!
Reversing macOS 24.6’s new ES_EVENT_TYPE_RESERVED_* ES events shows some are network auth/notify hooks
Building a Firewall…via Endpoint Security!?
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security