Apple reportedly preparing kernel-level EDR watchdog in iOS to spot exploitation signs

matthew_d_green · x · 2026-09-18

Per a report from C2IRIS shared by cryptographer Matthew Green, Apple is preparing a kernel-level endpoint detection and response (EDR) system for iOS. The watchdog, dubbed iokit.EndpointSecuritySE and currently in beta, would monitor deep system telemetry to detect signs of exploitation, raising questions about the tradeoff between security and user control.

Original post →

More from Safety

Safety channel →