- "Castles Made of Sand": The fragility of enforced privacy protections
- "Pre-auth RCE in Apple's Screen Sharing"
- "When PUPs Grow Fangs"
- Abusing the Admin Framework for fun and profit
- "Malware, from the Outside!"
- De-mystifying Endpoint Security Messages
- Let's go apple picking: Scaling macOS bug discovery