Security & Privacy - Blog | macOS Tahoe

Protect your Mac and data with security best practices. Learn about privacy settings, backup strategies, encryption, and system protection.

• Login Keychain Backups Won't Unlock Since macOS 26.4
  Since macOS Tahoe 26.4 a copied login keychain also needs an entropy file in /var/db/SystemKeys. What breaks, what works, and what to do before you erase.
• macOS 26.7.1 and 15.8.1 Zero-Day Patch, Plus 27.0.1: Update Guide
  Apple patched an exploited CoreGraphics zero-day, CVE-2026-86950, in macOS 26.7.1 and 15.8.1. Who needs which update, how to install it, what 27.0.1 fixes.
• Apple Intelligence Report on macOS 27: See What Leaves Your Mac
  Use the Apple Intelligence Report on macOS 27 to see which Siri AI and Writing Tools requests went to Private Cloud Compute, read the JSON, and protect it.
• macOS 27 Blocks Access to Other Apps' Data: What Breaks and How to Fix
  macOS 27 denies apps access to other apps' data without asking and stops loading quarantined LaunchAgents. What breaks, how to grant access, when not to.
• macOS Sonoma's Security Updates End This Month. Here Is What to Do, by Mac.
  When macOS 27 ships in mid-September, Sonoma drops out of Apple's three-version patch window. Which Macs are stranded, which can go to Sequoia or Tahoe, and how to get the right one.
• Same macOS, Different Firmware: Apple Quietly Changed the Sequoia and Sonoma Updates
  Two Macs on Sequoia 15.7.9 can now have different mBoot firmware depending on when they updated. Apple changed the update without changing the build number. Here is how to check yours.
• Apple Is Changing Your Relay Email Domain — and Backed Off Half of It
  Sign in with Apple addresses move to private.icloud.com later this year. Hide My Email stays on icloud.com after Apple reversed course. Here is why.
• ChatGPT Wants Full Disk Access to Read Your iMessages
  OpenAI's Apple Messages plugin needs Full Disk Access, Contacts and Automation on your Mac. Here is what each one really grants, and how to audit it.
• iCloud Private Relay Is Leaking Your Real IP Address
  Researchers found three ways websites can see your real IP even with iCloud Private Relay on. Here is how the leaks work, how to test, and what to do now.
• Fake Mac Crash Report Asking for Your Password? Do Not Type It
  A fake macOS crash reporter is stealing Mac passwords and crypto wallets. Learn to spot a fake password prompt and what to do if you already typed one.
• Passwords App in macOS 27 Can Now Auto-Fix Hacked Logins
  In macOS 27, the Passwords app uses agentic Apple Intelligence to automatically change weak and compromised passwords for you. How it works and the risks.
• App Is Damaged and Can't Be Opened on macOS Tahoe? The Complete Gatekeeper & Quarantine Fix
  Fix the "app is damaged and can't be opened" error on macOS Tahoe 26.5. Gatekeeper, quarantine, notarization, and the new Open Anyway flow explained.