Apple is getting pushy

[FatLouie]

Apple is doing what is reasonable to try and keep the average user safe. I think you are making much more out of this than need be. If you don’t want to update, don’t. Ignore the badge and move on with your life.

Utter nonsense. It is not Apple's responsibility, or its place, to constantly beg me to update. I don't care to be reminded, as I know damn good and well what is available.

As for protecting its users, well, that is more utter nonsense. They may, might, maybe fix a bug or something in an update, but they damn well add more to the queue, now don't they?

I was never one to drink the Kool-Aid.

 

[throAU]

I noticed a notification just now. I was thinking there was an important incremental update with security fixes. Nope, it's just Apple really wanting me to update to 26.2. Apple, I am aware that I'm not running the latest version of MacOS. I don't want it!
View attachment 2595476
View attachment 2595474

Its to do with a big security issue:

WebKit​

Available for: macOS Tahoe

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.

Description: A use-after-free issue was addressed with improved memory management.

WebKit Bugzilla: 302502
CVE-2025-43529: Google Threat Analysis Group

i.e., safari opens a page, zero clicks, you're owned.

If you're not going to Tahoe, get off Safari and use something maintained.

About the security content of macOS Tahoe 26.2 - Apple Support

This document describes the security content of macOS Tahoe 26.2.

support.apple.com

 

[Paddle1]

Its to do with a big security issue:



i.e., safari opens a page, zero clicks, you're owned.

If you're not going to Tahoe, get off Safari and use something maintained.

About the security content of macOS Tahoe 26.2 - Apple Support

This document describes the security content of macOS Tahoe 26.2.

support.apple.com

Safari updates are not tied to the OS like they are on iPhone. https://support.apple.com/en-us/125892

 

[ForkHandles]

Neat information, but that's way more complicated than I care to get over a notification I don't want. Right next to the "Upgrade Now" button should be a "Ignore This Update" button.

Is it more or less complicated than getting onto social media and having a conversation with strangers about it?

 

[BillyJoeJimBob]

Block all softwareupdated connections, block SoftwareUpdateNotificationManager, SoftwareUpdateLauncher, block mesu.apple.com specifically for nsurlsessiond but you could apply it globally. I have also blocked systemmigrationd from accessing
swcdn.apple.com and swscan.apple.com, as LS tells me those are for OS updates.

Might need to block mobileassetd as well, for gdmf.apple.com. I already have it blocked as that's what's used for AI.
I should note that I have disabled all of the default LS rules that trust iCloud/macOS services, so I manually approve or deny any connection, even system. I basically just blocked everything that looked like a software update checker.

---

No, you have to take a look at your potential attack vectors. Someone could, theoretically, craft an exploit that can get you from the wide web through your router to your computer. This relies on either you exposing ports through your router, or your router being insecure. So, make sure you have your router up-to-date, and don't forward ports unless you're certain you trust the service running on that port. Additionally, have a firewall. One that's set to block incoming connections. The section above talks about Little Snitch, but there are free options including the built-in macOS one, as well as LuLu. In order to successfully attack you someone would have to go through your router, exploit a vulnerability in your network stack, then likely combine that with other vulnerabilities.

Otherwise, you're vulnerable to the software you download and open. Don't download untrusted software. You can upload software to virustotal, it will tell you if it detects any viruses. It's mostly basic computer security. Use an adblocker (this is even recommended by the FBI).

Most macOS malware these days tends to be more of the info-stealer variety, rather than the deep-penetrating software we've seen in the past. So, of course, use password managers, 2FA, etc. And yes, you are far more vulnerable to Social Engineering style attacks nowadays.

I consider Little Snitch to be malware, since it is so incredibly difficult to remove. Then again, I consider any app that is impossible or incredibly difficult to remove to be malware or spyware. (cough) "News" and "Notification Center"

 

[whatnot]

Little Snitch is the way. My Mac has no idea what Tahoe even is, and likely never will. Good riddance.

can the same be achieved with Lulu by any chance, which is what I use to block updates for all my other apps?..

 

[maflynn]

Tbh, I was going to rail against apple for being so naggy, but I just can't get worked up over a little red circle on the notifications icon. I think apple is a lot less annoying then Microsoft is when it comes to software updates/upgrades.

I think many of us can remember a situation where it wasn't just nagging but in the middle of work, windows decided it needed to update and you sat there for 20 minutes dead in the water.

I'll take Apple's approach, though I do like some of the suggestions offered here.

 

[JulianStaples]

Feel like it used to be worse than that. I remember getting pop-up notifications in Big Sur on my 2013 MBP every couple of weeks advising that I upgrade to Monterey for the best macOS experience.

Monterey wasn't compatible with the 2013 MBP.

 

[ignatius345]

Ahem... 26.2 also contains security updates.

So does Sequoia 15.7.3. You don't have to go to the lastest OS release to get security updates. They push them out to previous OS versions for years.

 

[serpico007]

Apple is being sneaky with their updates. My Mac Mini M1 is on the previous version of MacOS and if I scroll down to view updates, there is a checkbox default to Tahoe 26.2 but not the current OS update. Very sneaky.

 

[dmr727]

Tbh, I was going to rail against apple for being so naggy, but I just can't get worked up over a little red circle on the notifications icon.

Some of us are more OCD about notifications than others - I don't have unread emails either.

I removed the System Settings app from my Dock just so I don't have to look at it.

 

[maflynn]

I don't have unread emails either.

LOL,
I have > 1700 emails, and over 400 unread texts

 

[Howard2k]

So does Sequoia 15.7.3. You don't have to go to the lastest OS release to get security updates. They push them out to previous OS versions for years.

I don't think that's totally true. Although they're mostly up to date they may not get some patches in the same timely fashion, or not at all.

Apple clarifies security update policy: Only the latest OSes are fully patched

New document confirms what security researchers have observed for a few years.

arstechnica.com

I'm still running Sequoia all the same.

 

[!!!]

I consider Little Snitch to be malware, since it is so incredibly difficult to remove. Then again, I consider any app that is impossible or incredibly difficult to remove to be malware or spyware. (cough) "News" and "Notification Center"

I mean, do you consider the fact that Apple has set up macOS to tell them about every app you launch, and when you launch them, to be spyware? They even went as far as saying they'd add an option to disable this "feature", yet that was quietly buried.

I have not found it difficult to remove, so I do not understand what your issue is.

can the same be achieved with Lulu by any chance, which is what I use to block updates for all my other apps?..

I don't know, I only ever used it in a basic form before I bought LS. I'd say try it, report back if it does.

 

[Ethanmenzel]

They’ve been doing this since MacOS Catalina, and I respect it because I’ve seen many people on outdated Macs who don’t even know how to update. For those users, Apple pushing the red dot is important. For people who upgrade regularly but choose not to for valid reasons, it can be annoying, but you can just ignore it like I do.

 

[Eric_WVGG]

I noticed a notification just now. I was thinking there was an important incremental update with security fixes. Nope, it's just Apple really wanting me to update to 26.2. Apple, I am aware that I'm not running the latest version of MacOS. I don't want it!

hey, so, I've got a question

Not wanting to update to Tahoe, I get that. I wish I could stay on Sequoia, but I need XCode up to date. Otherwise I'd probably stay back.

But not wanting to upgrade from 26.0 or 26.1… that I don't get. They are fixing huge bugs on these releases.

By staying on 26.0 (or whatever), you're picking one of the worst versions of Tahoe. Why?

 

[richard13]

So does Sequoia 15.7.3. You don't have to go to the lastest OS release to get security updates. They push them out to previous OS versions for years.

I didn't say you had to be. The person I was addressing seemed to be implying that 26.2 was just a feature release, which it isn't. But re-reading his response it could be construed differently.

 

[Pete_202]

This just happened to me. The notification wasn't there before despite the Tahoe update being available in software update. Tahoe is a mess and I am not 'upgrading' to it.
Just removed preferences from dock to get rid of the nagging notification. Can always get to them through the Apple menu.

 

[TechnoMonk]

Ditto.

I hate it when people tell you they did a thing but then don't give you the details how. Like, how is that helpful?

Hot air until you realize little snitch is collecting and calling all kinds of IPs outside of your network. It’s in the name Little snitch, expect them to snitch. I cleaned up little snitch I used for years before they got shady.

 

[bogdanw]

The Defere 90 profile makes Tahoe disappear, tested today

https://forums.macrumors.com/threads/defer-tahoe-for-90-days.2465304/

 

[TechnoMonk]

Tbh, I was going to rail against apple for being so naggy, but I just can't get worked up over a little red circle on the notifications icon. I think apple is a lot less annoying then Microsoft is when it comes to software updates/upgrades.

I think many of us can remember a situation where it wasn't just nagging but in the middle of work, windows decided it needed to update and you sat there for 20 minutes dead in the water.

I'll take Apple's approach, though I do like some of the suggestions offered here.

I must not have lot of time to worry about this. Don’t even remember when I was staring at settings icon. I just search and go directly to setting I need.

 

[TechnoMonk]

hey, so, I've got a question

Not wanting to update to Tahoe, I get that. I wish I could stay on Sequoia, but I need XCode up to date. Otherwise I'd probably stay back.

But not wanting to upgrade from 26.0 or 26.1… that I don't get. They are fixing huge bugs on these releases.

By staying on 26.0 (or whatever), you're picking one of the worst versions of Tahoe. Why?

I don’t upgrade Mac OS major version until March/April of any version. I rather upgrade to .3 or higher version than base .0 release

 

[ThomasJL]

Tim Cook wants people to upgrade to the latest macOS in order to slow down the oldest Macs that can still run it, in hopes that those people will be frustrated with the slow speed and then spend more money to buy new Macs. Cook likes the strategy of planned obsolescence. There’s a reason why he removed user-upgradable RAM and user-upgradable SSDs from literally all Macs: he wants Macs to become obsolete sooner than normal so customers can unnecessarily spend more money to buy new Macs. Cook is filled with corporate greed.

 

[Cape Dave]

Ahem... 26.2 also contains security updates.

Which would mean that apple is trying to rick us, right? I want security updates but..... WHOOPS, I got Tahoe! Hmmmm, yeah, the hell with that.

 

[Cape Dave]

I noticed a notification just now. I was thinking there was an important incremental update with security fixes. Nope, it's just Apple really wanting me to update to 26.2. Apple, I am aware that I'm not running the latest version of MacOS. I don't want it!
View attachment 2595476
View attachment 2595474

We are in the same boat. I was just discussing this with ChatGPT last night. It has some great ideas, but I have not gotten that horrid 1 to be gone yet I will though. And I agree it is simple apple being pushy because they know it sucks so bad that no one wants it.