GoKawiil
Tech News
Apple announced plans to introduce additional restrictions on Full Disk Access for Mac applications, a permission allowing apps to access nearly all data on a user’s drive. The company provided details on what is changing and the reasons behind these updates, though some specifics remain unclear. The move aims to enhance security and user privacy on macOS devices.
Dashlane’s Chief Product Officer Christophe Frenet discussed on Apple @ Work how many applications remain unmanaged outside Single Sign-On (SSO) systems. The company is developing Vault Enforcement to address this security gap. The initiative aims to improve app security and management for organizations relying on Dashlane’s solutions.
MacPaw, the company behind CleanMyMac, has released Leebry, a Work AI platform designed to help IT teams manage internal AI deployments. The launch follows MacPaw's 2026 AI at Work report, which found 90% of companies deploy AI tools without auditing their internal knowledge bases, and that 60% of IT leaders see a disconnect between executive expectations for AI and what their teams can actually deliver safely.
In the latest Apple @ Work podcast episode, sponsored by Mosyle, David Acland discussed Orchard, a tool designed to continuously enforce macOS and application updates alongside security settings. The goal, as described, is to keep enterprise Apple devices compliant and ready for audits at all times.
9to5Mac's latest Security Bite roundup finds that ClickFix, a technique tricking victims into pasting Terminal commands themselves, has become the default delivery method for nearly all new Mac stealer malware since the Q1 2026 review. Researchers at Group-IB, Huntress, and Kaspersky have each identified new malware families—including ClickLock, a Go-based stealer, and a MacSync variant disguised as Homebrew—all using this same social-engineering approach. The report notes attackers are adding persistence, backdoors, and infrastructure hidden inside Apple's own services.
Bradley Chambers argues that many SaaS vendors charge extra to unlock single sign-on, leaving roughly 37% of enterprise apps unprotected by SSO according to data he cited from Dashlane's Vault Enforcement research. He contends this pricing practice pushes companies toward weak passwords and increases security risk, and suggests Apple could address the issue through an acquisition.
In the latest Apple @ Work episode, host discusses tailored phishing simulations with Samantha Schwartz and Jack Hirsch of Sublime Security. The conversation focuses on how simulated phishing tests are evolving to reflect increasingly sophisticated, AI-generated attack techniques. The episode is sponsored by Mosyle, which markets itself as a unified Apple device management platform used by over 45,000 organizations.
Apple's iOS 27 update includes a new feature called Impersonation Risk Detection, designed to catch users in the middle of a scam, such as being tricked by a fake bank fraud department into transferring money or resetting a password. Supported apps can query the iPhone during sensitive actions like payments or password changes, prompting the device to analyze interaction patterns, timing, context, and sensor data to assess whether the activity looks legitimate or suspicious.
Dashlane has introduced a new feature called Vault Enforcement, designed to ensure employees continue using company password managers after initial rollout. The tool addresses what Dashlane calls the 'adoption gap,' where usage of a deployed password manager tends to fade months after onboarding as workers revert to manually typing credentials. IT admins can now require use of the vault rather than merely encouraging it.
The latest Apple @ Work podcast episode features Parallels' Dmitry Geynisman discussing the new features and improvements included in Parallels Desktop 27. The episode, sponsored by Mosyle, covers how the virtualization software has evolved for Mac users running Windows and other operating systems.
Bradley Chambers argues that traditional software update cycles, like quarterly patches or annual macOS releases, are becoming obsolete as AI tools help attackers discover vulnerabilities faster. He outlines that IT teams now need a three-part strategy for patch management, starting with retraining end users to accept more frequent, less optional updates.
In part two of a 9to5Mac Security Bite conversation, Moonlock Lab's Kseniia Yamburh outlines the malware families and attack trends actually hitting Macs in 2026, drawing from Moonlock's mid-2026 threat report. Objective-See's Patrick Wardle also previews Objective by the Sea v9, the largest dedicated Apple security conference.