macOS 26.3.1 (a)
Apple has just released its first public Background Security Improvement (BSI) for macOS 26.3.1 Tahoe, labelled as BSI (a)-25D771280a.
Available for: iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, macOS 26.3.2
Impact: Processing maliciously crafted web content may bypass Same Origin Policy
Description: A cross-origin issue in the Navigation API was addressed with improved input validation.
This update will NOT show up in Software update. It will only display in System Settings > BSI Updates.
Previously:
1 Comment RSS · Twitter · Mastodon
Color me unimpressed.
-- I needed to do an internet search just to find where the is in Settings. (Hint, it's not called BSI updates, it's called Background Security updates. And it's not a main menu item, instead you need t go to Privacy & Security, scroll all the way to the bottom.)
-- I deliberately turn off all automatic updates. Been doing this for a few years. Still, my iPhone nags me about all releases but at least this leaves the timing of installs *UP TO ME*. Guess what? This one - not part of any updates under, you know, Software Updates - was still turned on. I thought my purchase of hardware meant something more akin to ownership than having things automatically happen without my permission.
I check around 3pm on Mondays and Tuesdays at the Developer site for new downloads. (On occasion I'll check Thursdays too.) This release is not listed. Sigh....
