With the release of iOS 8 Apple introduces the concept of app extensions to iOS. This is the first time in the history of iOS that Apple allows 3rd party developers to extend Apple's own or other parties' applications. This new feature brings not only new opportunities to developers that were previously only possible on jailbroken iOS devices, but also opens up new attack surfaces and requires modifications to application containers. In this session we will discuss the changes introduced by this new feature and analyse the new attack surface. We will also have a look into other changes introduced with iOS 8 and revisit the application sandbox implementation that was last publicly discussed around the time of iOS 4/5.