Published Saturday, August 01, 2026 at 10:00 AM PT

<strong>BREAKING: macOS Sequoia 15.7.8 Released — Patch Status Unclear</strong>

BLUF: Apple has released macOS Sequoia 15.7.8. Specific CVE details for this version are not yet confirmed in available sources. Related recent macOS updates (Tahoe 26.5.2) patched 155 vulnerabilities including AI-discovered WebKit flaws. macOS fleets should check Apple’s security page and deploy as severity warrants. Active CrashStealer infostealer targeting macOS environments — prioritize patching.

DETAILS

  • Apple released macOS Sequoia 15.7.8; CVE details reference Apple support article 100100 (not yet verified in this alert’s sources)
  • Related macOS Tahoe 26.5.2 (released ~June 29, 2026) patched 155 total vulnerabilities, including WebKit flaws identified via AI-powered analysis
  • Safari 26.5.2 concurrent release addressed critical browser rendering and scripting engine issues
  • Apple publicly stated it is accelerating security update cadence in response to AI-powered threat actors
  • CrashStealer, an active macOS infostealer, uses signed applications to bypass Gatekeeper; patching reduces attack surface

IMPACT

  • All macOS Sequoia users (version 15.x)
  • Scope of exposure depends on finalized CVE list — assume 100+ vulnerabilities based on concurrent release pattern
  • Organizations with macOS fleets face elevated risk if unpatched; Gatekeeper bypass techniques in use in the wild
  • Safari users separately affected; concurrent deployment recommended

RECOMMENDED ACTIONS

  1. Immediate: Check Apple Security Updates page (support.apple.com) for Sequoia 15.7.8 CVE list and severity ratings
  2. Within 48 hours: Deploy to non-critical test macOS systems to verify stability
  3. Within 7 days: Roll out to production fleets; prioritize systems in sensitive roles
  4. Concurrent: Update Safari to 26.5.2 minimum; validate Enterprise SSO/MDM compatibility before fleet push

SOURCES

  • Apple Security Updates (Tahoe 26.5.2, Safari 26.5.2) — June 29, 2026
  • SecurityWeek, 9to5Mac, The Hacker News reporting on 30+ iOS/macOS/Safari flaws
  • CrashStealer threat intelligence — macOS infostealer campaign active

STATUS: Developing — CVE details for Sequoia 15.7.8 specifically not yet in hand. Update this alert when Apple’s support page is accessible.

Recent high-severity events at publish time:

Recent high-severity events