Apple has released an update to XProtect Remediator for all macOS from Catalina onwards, to version 163. The previous version was 157, or 159 for Golden Gate. As usual, Apple doesn’t release information about what security issues this might add or change.
XProtect Remediator doesn’t change the list of scanner modules. The Bastion rules add Signal and Keybase to Rule 2 coverage, and add five new rules, 25-29, covering immediate reporting of access to CoreLocation, audiohald, replayd and cmio registerassistantservice, and input monitoring with IOHIDLibUserClient, and screencapture execution.
You can check whether these updates have been installed by opening System Information via About This Mac, and selecting the Installations item under Software.
A full listing of security data file versions is given by SilentKnight and SystHist for El Capitan to Tahoe available from their product page. If your Mac hasn’t yet installed this update, you can force it using SilentKnight or at the command line.
