Apple could make macOS Sonoma more proactive when it comes to scanning for malware, with a malicious behavior-detecting iteration of XProtect seemingly getting closer to going live.
Apple’s XProtect is a set of rules that are used to check apps and code on a Mac for malware. Initial iterations of XProtect checked apps during Gatekeeper checks, with later updates adding a daily check and expanding the types of malware that it could detect.
A third version of the concept appeared in macOS Ventura, but acted in an observer capacity rather than actively dealing with malware issues. Now, it appears that Apple is gearing up this new version to move from observing to reacting.
Read more at AppleInsider.com