About the security content of macOS Tahoe 26.6

#1

Post by andor » Tue, Jul 28, 2026, 9:45 AM UTC

About the security content of macOS Tahoe 26.6
support.apple.com

Re: About the security content of macOS Tahoe 26.6

#2

Post by embedding-shape » Tue, Jul 28, 2026, 9:57 AM UTC

Lots of "in collaboration with Claude and Anthropic Research" mentions, no mentions of other labs. I'd assume Apple already had access to whatever the most powerful model is at the various US-based labs, but perhaps not?

Re: About the security content of macOS Tahoe 26.6

#3

Post by AJRF » Tue, Jul 28, 2026, 9:59 AM UTC

Weird thing to see at number 3 on HN - is there some subtle context I am missing here?

Are we wink winking that it's a lot of fixes?

Re: About the security content of macOS Tahoe 26.6

#4

Post by nizbit » Tue, Jul 28, 2026, 10:06 AM UTC

Collision counts are absurd. CVE-2026-43739 has roughly twenty credited researchers; CVE-2026-43816 has nearly as many. And ai attribution getting credit.

Re: About the security content of macOS Tahoe 26.6

#5

Post by croemer » Tue, Jul 28, 2026, 10:10 AM UTC

AJRF wrote: post #3

Weird thing to see at number 3 on HN - is there some subtle context I am missing here? Are we wink winking that it's a lot of fixes?

I think that's it?

Re: About the security content of macOS Tahoe 26.6

#6

Post by DStiego » Tue, Jul 28, 2026, 10:11 AM UTC

AJRF wrote: post #3

Weird thing to see at number 3 on HN - is there some subtle context I am missing here? Are we wink winking that it's a lot of fixes?

Relevant context might be for example that there are 4 mentions each of Claude by Anthropic and XGPT by ThreatBook, both based on LLMs.

AI attribution might be one reason people are particularly curious.

Re: About the security content of macOS Tahoe 26.6

#7

Post by croemer » Tue, Jul 28, 2026, 10:11 AM UTC

nizbit wrote: post #4

Collision counts are absurd. CVE-2026-43739 has roughly twenty credited researchers; CVE-2026-43816 has nearly as many. And ai attribution getting credit.

One CVE even lists the same person twice!

CVE-2026-64691: Ruslan Dautov, Ruslan Dautov

Re: About the security content of macOS Tahoe 26.6

#8

Post by tombot » Tue, Jul 28, 2026, 10:12 AM UTC

embedding-shape wrote: post #2

Lots of "in collaboration with Claude and Anthropic Research" mentions, no mentions of other labs. I'd assume Apple already had access to whatever the most powerful model is at the various US-based labs, but perhaps not?

Apple isn’t friends with OpenAI anymore

Re: About the security content of macOS Tahoe 26.6

#9

Post by proactivesvcs » Tue, Jul 28, 2026, 10:21 AM UTC

croemer wrote: post #7

nizbit wrote: post #4

Collision counts are absurd. CVE-2026-43739 has roughly twenty credited researchers; CVE-2026-43816 has nearly as many. And ai attribution getting credit.

One CVE even lists the same person twice! CVE-2026-64691: Ruslan Dautov, Ruslan Dautov

One of them lists an anonymous person!

CVE-2026-43744: Mathis Mansière, an anonymous researcher

Re: About the security content of macOS Tahoe 26.6

#10

Post by nkrisc » Tue, Jul 28, 2026, 10:27 AM UTC

proactivesvcs wrote: post #9

croemer wrote: post #7

Earlier quoted context omitted.

One CVE even lists the same person twice! CVE-2026-64691: Ruslan Dautov, Ruslan Dautov

One of them lists an anonymous person! CVE-2026-43744: Mathis Mansière, an anonymous researcher

It reads as if "an anonymous researcher" is describing Mathis Mansière, which is quite humorous.