Recovery Mode Breakdown: Turning macOS Recovery Safari into Root Persistence

A macOS Recovery Mode Safari flaw allowed attackers to write arbitrary files to system partitions. By placing a malicious LaunchDaemon in /Library/LaunchDaemons,…