Deceptive installers disguised as legit macOS software deliver infostealers that grab passwords, cookies, and crypto wallets. Learn how to detect them.

Feature parity across Windows, macOS, and Linux sounds simple on a product roadmap. Actually building it means reconciling fundamentally different operating systems. Here's how Huntress is approaching it.

An AMOS infostealer alert looked routine until Huntress ruled out every known delivery vector. What they found instead: malware being delivered through ChatGPT and Grok themselves.

A partner reported a potentially malicious Zoom extension. What Huntress found was a full DPRK BlueNoroff intrusion targeting a Web3 company that was weeks in the making and deeply sophisticated.

Macs don't get viruses' was barely true in 2000. It's not true now. Huntress debunks the five most persistent macOS security myths, and what each one is costing the teams that still believe them.

BlackBerry said the new LightSpy upload was an iOS implant. Huntress researchers disagreed — what they found was an unreported macOS variant. Here's the full analysis of what it actually does.

Part one explained TCC. Part two goes deeper into the tccd binary, the database it manages, and what's actually happening under the hood when macOS enforces privacy controls.

Apple's TCC framework controls which apps can access sensitive data on macOS. Huntress explains what it is, how it works, and why it's one of the most important security mechanisms Mac defenders should understand.

macOS malware is evolving fast. Huntress and Patrick Wardle from Objective-See cover the BTM database, current Mac malware trends, and what every defender working in a mixed environment needs to know.

Should Mac users run antivirus? The Huntress Mac Guy tackles the question dividing security teams for years and the answer is more nuanced than 'Macs don't get malware.'

Full disk access prompts pop up constantly on macOS and most users click through without thinking. The Huntress Mac Guy explains what it actually means and why the habit is exactly what attackers want.

Part two of Ask the Mac Guy shifts from why to how, covering the tools worth using and the macOS settings that make your fleet significantly harder to compromise.

Mac security myths are everywhere, from "Macs don't get malware" to "we have more Windows devices so it's not worth protecting." The Huntress Mac Guy breaks down the ones he hears most.

A DMX-inspired deep dive into macOS security: what dmXProtect is, how macOS malware actually runs, and what it takes to stop it before it sets up shop.

Two ways to deploy and manage macOS at scale: MDM and RMM. They're not the same thing, and choosing wrong creates gaps. Huntress breaks down the differences and when each one makes sense.