The iPhone and Mac security Apple spent 5 years building? AI broke it in 5 days.
The iPhone and Mac security Apple spent 5 years building? AI broke it in 5 days.
https://www.cultofmac.com/news/apple-macbook-pro-mie-claude-mythos-ai-exploit
Publish Date: 2026-05-18 17:00:00
Source Domain: www.cultofmac.com
Anthropic’s Mythos AI helped indie hackers bypass Apple’s Memory Integrity Enforcement, a hardware security system used in the M5 processors that power the latest MacBook Pros.
Apple spent five years developing MIE, but the hacking team at Calif, a small security startup based in Palo Alto, California, said it used Mythos Preview to find bugs in the M5 chip — and built a working exploit in just five days.
Apple’s most secure security system meets AI
Apple’s efforts to make the Mac virtually invulnerable to cyberattacks utilize custom silicon, memory protections and other methods to make the computers secure. However, the arrival of agentic AI is rapidly changing the rules of the cybersecurity arms race.
An alarming example: Anthropic’s Mythos AI helped researchers uncover and weaponize a privilege-escalation exploit against Apple’s latest M5-powered Macs in less than a week, something that once would have taken elite hackers months to accomplish.
The episode underscores a growing fear inside Silicon Valley. The same AI systems being built to defend software may also supercharge the discovery of the vulnerabilities that break it.
What Apple’s Memory Integrity Enforcement does
Apple’s Memory Integrity Enforcement works by tagging every memory allocation with a secret code. If anything attempts to access this part of the memory without the right tag, the hardware will block it and log an event.
Apple implemented its MIE system in the iPhone 17 as well as its M5 chips. The company’s own research suggests that MIE can disrupt every publicly known exploit chain, including the newly leaked Coruna and Darksword exploit kits.
Researchers at Apple spent five years building MIE. And a three-person team at Calif broke it in just five days.
Calif says the exploit is a data-only kernel local escalation chain targeting macOS 26.4.1. In other words, it starts with a normal user account and ends up giving the attacker…
