410: Anticipating WWDC
The Friday before WWDC
Minor patches for macOS and iOS this week.
Sponsor
This issue of MacAdmins.news is exclusively brought to you by Mosyle, where High-Quality Apple Management & Security is made Surprisingly Accessible.
After helping thousands of organizations to migrate from other solutions to Mosyle, we've gained a unique perspective of all the concerns companies face when evaluating the migration of their Apple Management & Security solution. Based on this extensive knowledge, we've created the most comprehensive Migration Program in the Apple’s Management & Security market, addressing the most critical technical, financial, and strategic considerations involved in this pivotal decision. Check our website for more details!
Last Friday before WWDC
Against all expectations, this week had no major Apple announcements, unless you count some nice WWDC wallpapers and the winners of the 2026 Apple Design Awards. The tag lines for the WWDC announcements contain wordplays on "bright" and "glow," which does make one wonder if these are hints on more user interface changes (I don't dare say "improvements") or some thing else entirely?
We will know more next week! And then the week after you can hear a bunch of wonderful people from the Mac Admins community (and myself) talk about the announcements, because WorkBrew is hosting a panel to discuss the WWDC announcements in the context of management and security on June 18! Go sign up!
⚙️ Apple Updates
- macOS Tahoe 26.5.1 (25G80): What's new, no Security notes, Enterprise, IPSW, PKG installer
- iOS 26.5.1: About, no Security notes
Apple has released macOS Tahoe 26.5.1
Howard Oakley:
Apple has just released a patch update to macOS Tahoe to bring it to version 26.5.1.
macOS Tahoe 26.5.1 Update! Everything you need to know.
Mr. Macintosh:
Apple just released the 3rd minor update for macOS Tahoe to the public! Let’s jump in and find out what’s new.
🔐 Security and Privacy
Inside SStar Agent, a cross-platform RAT with an unfinished macOS toolkit
Calvin So, The Iru Blog:
a cluster of Go binaries with a shared deployment identifier and a C2 domain whose naming overlaps with a malware family researchers have been tracking. The samples call themselves "SStar agent"
Fake BlueWallet steals passwords, accounts, and crypto from Macs
Stefan Dasic, Malwarebytes:
A fake website impersonating BlueWallet (a real Bitcoin wallet) is targeting Mac users with a simple but effective attack.
🔨 Support and Tutorials
Office 2019 for Mac Goes Read-Only on 13 July 2026
Adam Engst, TidBITS:
A certificate expiration is forcing Office 2019 into read-only mode
See also Michael Tsai: Bricking Microsoft Office 2019
Anatomy of the Intel Long Tail: What 4,600 Apple Silicon Macs Still Run Through Rosetta
Neil Johnson, Rosetta Check:
the apps you open are only the visible layer. Beneath them is a second, larger world of embedded Intel code: audio plug-ins, printer drivers, video effects, screen savers, browser plug-ins and background helpers that nobody double-clicks and nobody audits.
Endpoint Drift: Why EDR coverage breaks down at scale
Iru Blog:
Your dashboard says every endpoint is covered. Patches show as deployed. Policies look locked down. So why does it feel like something's slipping?
Get more from Get Info and the Finder’s contextual menu
Howard Oakley:
We really should set aside an hour each month to explore lesser-known features in macOS. In today’s exploration I bring you Get Info’s sibling Inspector, exact duplication, a free slideshow, and an Easter Egg.
Managing menubar spacing using a configuration profile on macOS Tahoe
Rich Trouton:
there was a solution for menubar spacing which could be applied using the defaults command line tool.
What Location Services do in macOS
Howard Oakley:
Unlike most of the other items in Privacy & Security settings, Location Services aren’t managed using TCC and tccutil, but by their own service locationd.
🤖 Scripting and Automation
Reporting on Jamf Pro local account permissions
Rich Trouton:
I decided to see if I could write a similar script for reporting on the permissions assigned to Jamf Pro local user accounts.
User Details? Check!: Leveraging Jamf Setup Checklist to populate user details in Jamf Pro
Philip Ross:
Jamf Setup Checklist is a great tool for getting your users ready to go from the moment they're logged in, however sometimes organisations need to populate Jamf Pro inventory fields to ensure device configuration is complete. This post covers an example of how to do just that.
Patcher
Andrew Lerman:
Python package and CLI for patch analysis and reporting on macOS fleets managed by Jamf Pro
♻️ Updates and Releases
- JamfDash 0.5
- Mactracker: 8.2.3 for macOS, 5.0.1 for iOS/iPadOS
- AxM Jamf Sync v.2.2
- MACE v0.2.1-beta
- Jamf Platform Terraform Provider v0.17.0
- loopdown v2.0.3
- jamf-cli v1.18.0
- Munki 7.2 Beta 1
- PPPC-Utility 2.0.0
🎧 Listen
Apple TV Picks, Disclosure Theories, and Practical macOS Admin Tips
Command Control Power:
The hosts discuss Apple TV shows they were late to, including The Morning Show and For All Mankind, and talk about Hail Mary Project, comparing the film’s “E.T.-esque” choices to Andy Weir’s book.
DMARC, BIMI, and Email in 2026
Mac Admins Podcast:
We all have a brand, whether it’s literally a company that we own or a company we represent, or figuratively as one we put out in the world. And if you’re like me, someone who hasn’t put much thought into what having a brand means, and why you should care about protecting it – this episode is for you.
A new era for Jamf
Apple @ Work:
Beth Tschida, the new CEO at Jamf, joins the show to talk about what's next for the company in the AI era.
Payment apps are watching what you say
Lock And Code, Malwarebytes:
we speak with Reitman—who is also the president and a co-founder of the Freedom of the Press Foundation—about the real stories of those who have been financially censored, why financial companies cut off customers for legal speech, and how a single company’s decision can create cascading consequences that feel impossible to fight.