A Mac with Apple silicon is hard to tamper with, and hard to read if it’s stolen. Most Mac infections in 2026 don’t fight those defenses at all. They ask you to do the work: a fake CAPTCHA page says you must “verify” yourself, tells you to paste a line into Terminal, and that line installs a program that steals browser passwords, Keychain data and cryptocurrency wallets. This page covers what macOS protects by default, where that protection ends, and which habits and settings close the gap.
It’s written for Macs running macOS 27 Golden Gate, released on 14 September 2026, which runs only on Apple silicon (M1 and later). If you have an Intel Mac, one section below says what that means. Facts about versions and dates are as of October 2026.
After reading you can check four things on your own Mac in about ten minutes: whether it’s fully updated, whether FileVault is on, which apps hold broad permissions, and whether you’ve ever run a command a website told you to run.
What macOS is in plain terms
macOS is the operating system on Mac laptops and desktops. Apple designs the chip, writes the system software and runs the App Store. Unlike an iPhone, a Mac lets you install software from outside the App Store, and most of the trade-offs on this page come from that freedom.
Picture three ways a program can reach your Mac. You install it from the App Store, where Apple says every app is sandboxed, meaning restricted from reaching other apps’ data. You download an installer from a developer’s website. Or a web page tells you to paste a line into Terminal. macOS runs a different set of checks for each, and the third is the one attackers have moved to.
How macOS protects you
The boot chain
When a Mac with Apple silicon starts, the chip first runs code in read-only memory called the Boot ROM, and each stage then verifies the next. Apple’s documentation says macOS secure boot checks not only the operating system but also the security policy you’ve configured. The default, Full Security, only boots software known to be the latest available at install time. Reduced Security trusts signatures bundled with the system, which allows older macOS versions, and Apple says those inevitably have unpatched vulnerabilities. Permissive Security exists for people who build and sign their own kernels. The policy file is signed by that machine’s Secure Enclave, a separate security processor, and an anti-replay value stops an old, weaker policy from being reapplied. Most people never touch this, and leaving it at Full Security is the sensible default.
Encryption and FileVault
On an Apple silicon Mac, the internal drive is always encrypted. What differs is which key protects it. With FileVault off, the volume key is protected only by a hardware key inside the Secure Enclave, so the encryption mostly guards against someone pulling the drive out. With FileVault on, your login password becomes part of the protection and you need your credentials at startup. Apple’s Platform Security guide says FileVault is on by default on macOS 26.4 and later, and you can opt out. You can check under System Settings > Privacy & Security > FileVault.
Turning FileVault on generates a recovery key of 24 random characters. It appears in that same settings pane and is stored in your keychain, so the Passwords app can show it. If you use iCloud Keychain it syncs with your other passwords. If you don’t, Apple shows the key once, and you need to store it somewhere safe, because it’s how you get back in if you forget your password.
Checks on the software you run
Gatekeeper checks software from outside the App Store the first time you open it. It verifies that the software comes from an identified developer, that Apple has notarized it (scanned it for known malware), and that it hasn’t been altered. Apple says all software on a Mac is checked for known malicious content at first launch, however it arrived. If Apple later learns an app is malicious, it can revoke the developer’s certificate and issue a revocation ticket, and macOS checks for those in the background more often than it updates malware signatures.
XProtect is the built-in antivirus. It uses signature rules that Apple updates automatically, by default checking daily, independent of system updates. When it finds known malware it blocks it, moves it to the Trash and alerts you. Apple notes that notarization works against known files, while XProtect’s rules can catch variants Apple hasn’t seen.
Gatekeeper can be overridden. Until macOS Sequoia (2024), you could Control-click an unsigned app and choose Open. Apple removed that shortcut, and now you have to go to System Settings > Privacy & Security and click the Open Anyway button after reading the warning. That extra step is a speed bump, not a lock, and it’s meant to make you stop and think.
System files and permissions
System Integrity Protection (SIP) makes critical system locations read-only. Apple says it applies to every process, whether sandboxed or running with administrator privileges. The kernel itself gets separate hardware protection on Apple silicon, and on current versions the system volume is sealed and verified at boot.
For your own data, macOS asks before an app reads files in Documents, Downloads, Desktop, iCloud Drive or network volumes. Broader powers, such as full-disk access, accessibility control and automation of other apps, can’t be granted from a pop-up alone. You have to turn them on in System Settings > Privacy & Security. Apple says this is so those powers can’t be used to get around the other protections. Review that list now and then, because each entry is a standing exception.
Terminal and script protections (macOS 26.4 and later)
Apple’s guide says that as app-based protections improved, attackers turned to persuading people to paste commands into Terminal or run scripts. In macOS 26.4 (March 2026), Apple added three layers aimed at that.
A paste warning appears in Terminal, but only when all of these are true: you haven’t opened Terminal in over 30 days, no common developer tools are detected, and the paste came from an app such as a browser, Messages or Mail. The warning fires regardless of what the pasted text says. The second layer, pasteboard command blocking, has XProtect watch what a pasted command does in any terminal app, check network addresses against Apple’s Safe Browsing Service, and block known-bad behavior. The third scans AppleScript and JavaScript for Automation scripts and blocks ones that match known malicious signatures.
The paste warning is built for people who rarely use Terminal, so a developer won’t see it. The protection is real but narrow.
Updates
Apple lists macOS 27.0.1 as the latest version, released 28 September 2026. Since macOS 26.1, Apple can also ship small fixes for Safari, WebKit and system libraries between full updates, called Background Security Improvements. The first went out on 17 March 2026. On a Mac, a Safari fix takes effect when you relaunch Safari, and the rest of the system uses new content after a restart. You can remove one if it causes trouble, which returns the Mac to its last full update.
Intel Macs are a separate case. macOS 27 requires Apple silicon, and TidBITS reported in July 2026 that it drops the last four Intel models that could run macOS 26. Those Macs can stay on Tahoe, and Apple’s security releases page shows Tahoe 26.7.1 shipping on 28 September 2026 alongside 27.0.1. We couldn’t confirm from Apple how long Intel Macs will keep getting fixes, so treat an Intel Mac as one to replace on a schedule you choose rather than at the moment updates stop.
Lockdown Mode
Lockdown Mode is an optional setting for people who could be personally targeted by mercenary spyware, commercial surveillance software aimed at specific individuals. Apple says most people are never targeted by attacks of this kind. On a Mac it blocks most message attachments, restricts some web technologies, blocks incoming FaceTime calls from people you haven’t contacted, and won’t connect to wired accessories while the laptop is locked. You turn it on in System Settings > Privacy & Security > Lockdown Mode, and it needs a restart.
What it protects against, and what it doesn’t
| Threat | What helps | Where it falls short |
|---|---|---|
| Stolen Mac | FileVault, a strong login password, hardware-held keys | With FileVault off, the key is protected only by hardware. A guessable password weakens FileVault |
| Known malware in a downloaded app | App Store review, Gatekeeper, notarization, XProtect | New malware that no signature covers yet. You can click through a Gatekeeper warning |
| Pasted-command attacks (ClickFix) | Terminal paste warning, pasteboard blocking, script scanning (macOS 26.4+) | The warning shows only in narrow conditions, and attackers have already started routing around Terminal |
| Fake password prompts | Nothing technical stops you typing your password into one | The Netskope team found malware that checks the password against macOS in real time |
| Tampered system files | SIP, secure boot, sealed system volume | Reduced and Permissive security modes weaken it |
| An app reading your files | Consent prompts for Documents, Downloads and Desktop | Full-disk access and accessibility are broad. Each one you grant is a standing exception |
| Targeted spyware | Prompt updates, Lockdown Mode | Aimed at few people. Lockdown Mode breaks features |
Two limits sit outside the table. Apple’s malware checks work on files and behaviors it knows about, so a new campaign can run for a while before it’s covered. And a Mac is tied to your Apple Account, so the points about iCloud encryption and recovery in our iOS overview apply here too.
Common myths
“Macs don’t get viruses.” They do, and 2026 produced plenty of examples. Netskope described a campaign in April 2026 that delivers an AppleScript-based infostealer. Unit 42 researchers described another in June that uses a fake CAPTCHA to get a Terminal command run, which downloads a disk image and launches the Atomic macOS Stealer, a program that takes browser credentials, wallet data, Keychain data, messaging app data and documents. Microsoft’s Defender team documented a May campaign using fake “fix your Mac” pages. It relied on deception, not a software flaw.
“Gatekeeper and XProtect will stop anything I run.” They check files at launch and watch for known malware. A command you paste into Terminal is a different route, which is why Apple added Terminal-specific protections in macOS 26.4. Malwarebytes reported in April 2026 that ClickFix operators were already switching to the applescript:// link scheme, which opens Script Editor with a ready-made script and skips Terminal.
“My Mac’s disk is already encrypted, so FileVault doesn’t matter.” The drive is encrypted either way, but without FileVault the key is protected only by the hardware, not your password. FileVault is the setting that makes your login password part of the protection.
What to do
- Update macOS and turn on automatic updates. This includes Background Security Improvements, which follow the automatic-update setting. If you have an Intel Mac, check Apple’s security releases page for your macOS version and plan a replacement.
- Don’t run commands or scripts that a website, email or chat message gives you. If a page tells you to open Terminal and paste something, close the page. Real support rarely starts that way, and every campaign above relied on someone doing exactly this. A “Freed 24.7 GB” or “verify you are human” dialog doesn’t change that.
- Install software from the App Store, or from developers you can name, in notarized form. If Gatekeeper warns you, treat it as a stop sign. Use Open Anyway only for software whose source you can trace.
- Turn on FileVault and keep the recovery key somewhere other than the Mac. Check Settings > Privacy & Security > FileVault, since it may already be on. Use a login password that isn’t short or reused.
- Review permissions. In Privacy & Security, look at Full Disk Access, Accessibility and Screen Recording, and remove anything you don’t recognize. Apple also began prompting weekly in macOS Sequoia for apps that record the screen, so a prompt there is a reason to look, not to click through.
- Turn on Lockdown Mode only if you may be targeted. If you’re unsure whether that’s you, start with threat modeling.
What this page doesn’t cover
We haven’t covered Apple’s telemetry and analytics settings, Apple Intelligence and Siri, Find My and Activation Lock, the firewall, Time Machine backups, managed work Macs, virtual machines, or third-party antivirus products. Each deserves its own page.
Sources
- Gatekeeper and runtime protection in macOS. Apple Platform Security, 2024.
- Protecting against malware in macOS. Apple Platform Security, 2024.
- Terminal and script protections. Apple Platform Security, August 2026.
- Boot process for a Mac with Apple silicon. Apple Platform Security, 2021.
- Volume encryption with FileVault in macOS. Apple Platform Security, January 2026.
- Data Protection overview. Apple Platform Security, August 2026.
- System Integrity Protection. Apple Platform Security, 2021.
- Controlling app access to files in macOS. Apple Platform Security, 2021.
- Background Security Improvements in Apple operating systems. Apple Platform Security, January 2026.
- Lockdown Mode support. Apple Platform Support, October 2025.
- Apple security releases. Apple Support, 2026.
- Apple’s new macOS Sequoia tightens Gatekeeper protections. The Hacker News, 2024.
- macOS Sequoia brings better Gatekeeper, stalkerware protections. BleepingComputer, 2024.
- macOS ClickFix Campaign: AppleScript Stealers & New Terminal Protections. Netskope Threat Labs, 20 April 2026.
- ClickFix finds a new way to infect Macs. Malwarebytes, 10 April 2026.
- New macOS ClickFix attack silently mounts DMGs to push infostealer. BleepingComputer, 23 June 2026.
- ClickFix Campaign Uses Fake macOS Utilities to Deliver Infostealers. RH-ISAC, summarizing Microsoft Defender research of 6 May 2026.
- The real system requirements for macOS 27. TidBITS, 20 July 2026.