Apple has just released an update to XProtect Remediator security software for Catalina or later, bringing it to […]
XProtect
App launch security is built in multiple layers, and not all check are run on every launch of an app. Syspolicy plays a key role, CDHashes are now central, and XProtect scans can make checks on large apps slow.
At first, I thought the new XProtect version should be 5272, but some updated without that version changing. Then I stumbled across a secret way to update. Not a good omen for the release of Sequoia.
Three malicious apps – Atomic Stealer, Genieo and XCSSET – against macOS 14.6.1, with full security, SIP disabled, and Gatekeeper disabled.
Apple has just released an update to XProtect for all versions of macOS from El Capitan or so, […]
If you thought spctl disabled Gatekeeper assessments, and disabling SIP had little effect, then you might like to think again.
Details of security checks including Gatekeeper, XProtect and notarization, performed when launching an app in full security.
Apple has just released an update to XProtect Remediator security software for Catalina or later, bringing it to […]
While other Macs had happily updated XProtect’s data in the normal way, my Sequoia beta system told me it was out of date, and refused to find an updater. Then I recalled an old tweet.
How to update XProtect from a version number of 0 to 5271 in a single command, with the aid of a new version of SilentKnight.
The Eclectic Light Company 