Loading story…
NIST has released the initial public draft of Special Publication 800-219 Revision 2, titled "Automated Secure Configuration Guidance From the macOS Security Compliance Project (mSCP)," and opened it for public comment. The draft provides automated security assessment resources and secure baseline guidance for macOS desktops and laptops, along with iOS and visionOS systems, using content from the mSCP GitHub project.
Revision 2 highlights next-generation mSCP improvements, including simpler operating system version and rule management and support for a broader audience. NIST said the public comment period runs from June 22 through August 14, 2026, and the publication also includes a call for patent claims consistent with the agency's Information Technology Laboratory patent policy for patents referenced in ITL publications.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
NIST announced a request for public comments on the initial public draft of Special Publication 800-219 Revision 2, titled "Automated Secure Configuration Guidance From the macOS Security Compliance Project (mSCP)." The draft provides automated security assessment resources and secure baseline guidance for macOS, iOS, and visionOS systems and highlights next-generation mSCP improvements.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple announced new *age-assurance* capabilities aimed at complying with expanding child-safety regulations, centered on an updated **Declare Age Range API** that returns an age bracket (e.g., under 13, 16–17) rather than a precise birthdate. In certain jurisdictions (including Australia, Brazil, and Singapore), Apple also plans to **block downloads of 18+ apps** until the user confirms they are an adult via an App Store-managed flow, alongside OS-level family settings intended to enforce age-appropriate restrictions without pushing sensitive identity collection to individual apps and websites. Separately, Apple’s **iOS 26** and **iPadOS 26** (with specific hardware) were reported as receiving **NATO Restricted** approval, enabling use for classified information up to the Restricted level under an “Indigo” configuration listed in NATO’s Information Assurance Product Catalogue. The approval was attributed to platform security features such as encryption, **Face ID**, and **Memory Integrity Enforcement**, with additional emphasis on Secure Enclave capabilities in newer chips; the evaluation reportedly involved Germany’s BSI. A third item provides general guidance on **CUI enclaves** and **NIST SP 800-171** controls for protecting Controlled Unclassified Information on mobile/remote-access workflows, but it does not describe the Apple/NATO certification or Apple’s age-verification tooling as a specific event.
Jun 29, 2026
Apple published updated security documentation describing changes to its platform protections and a new **Background Security Improvements** mechanism for `iOS`, `iPadOS`, and `macOS`. The support documentation says the feature delivers lightweight security releases for components such as **Safari**, **WebKit**, and other system libraries between full OS updates, beginning with `iOS 26.1`, `iPadOS 26.1`, and `macOS 26.1`. Apple also states that users can manage the setting in **Privacy & Security**, and that applied background fixes can be removed, reverting the device to the baseline software version until the fixes are later incorporated into a standard software update. A separate report on Apple’s updated *Platform Security Guide* says the company refreshed the guide in January 2026 and issued a smaller March 2026 update, adding material on newer protections including the **Mac on-screen camera indicator light** for the *MacBook Neo*. That section reportedly explains how Apple prevents software from disabling or obscuring the camera-use indicator despite the device lacking a traditional hardware camera light. Together, the documents provide substantive product security information rather than reporting a breach or vulnerability disclosure, and they reflect Apple’s ongoing effort to document platform hardening and incremental patch delivery.
Jun 29, 2026
Apple published multiple security release notes and update entries across its platforms, including iOS/iPadOS point releases (e.g., iOS/iPadOS 26.2.1, 18.7.4, 16.7.13, 15.8.6, 12.5.8) and watchOS 26.2.1, with Apple indicating **no published CVE entries** for several of the January 2026 point updates. Apple also refreshed or republished detailed historical security-content pages for older products, including macOS Big Sur 11.7.9 (listing fixes such as **CVE-2023-34425** kernel-privilege arbitrary code execution in Apple Neural Engine, **CVE-2023-32364** sandbox restriction bypass, and other privacy/logic issues), Xcode 14.1 (including multiple *git* issues such as **CVE-2022-29187**, **CVE-2022-39253**, **CVE-2022-39260**, plus an Xcode Server privilege issue **CVE-2022-42797**), and visionOS 2 for Apple Vision Pro (including issues like **CVE-2024-44126** heap corruption from crafted files, **CVE-2024-27876** arbitrary file write via archive unpacking race condition, and additional sandbox/data-access weaknesses). Separately, a vendor blog post warned that **critical WebKit vulnerabilities** could enable remote compromise of iOS devices via a malicious webpage (arbitrary code execution and potential credential/data theft), emphasizing patch latency as a key risk; however, the post does not clearly map its claims to specific Apple CVEs or to the “no published CVE entries” iOS/iPadOS point releases listed on Apple’s security releases page. A Reddit /r/netsec item about a **one-click** vulnerability in *IDIS Cloud Manager (ICM) Viewer* (triggered by clicking an untrusted link) is unrelated to Apple/WebKit and does not align with the Apple security-release content.
Jun 29, 2026