Updated October 2026 to our current guidance. The original reporting date is unchanged.
Your best designer says her Mac takes care of itself. For Apple’s own software, it mostly does. The browser, the PDF tool, and the other apps on it are a different story. Here’s where the line sits, and three things any Mac user can do today.
See the Three Mac Steps ↓About ten minutes per Mac. Nothing to buy.
Someone on your team runs a Mac and answers every warning with four words: it’s a Mac. That isn’t foolish. macOS is well built, it installs Apple’s updates, and it has protections switched on out of the box.
Here is where its job ends. Software Update installs Apple’s fixes. The apps downloaded from a website, like many browsers, PDF tools, and Zoom, update on their own schedule, or not at all. So who has been checking those?
In this article
Hey folks! Picture your best creative, laptop open at the coffee shop. A strange email lands. She waves it off: “I’m on a Mac, I’m fine.” That calm was earned once.
Years back, Macs were a small slice of the market. Crooks chase numbers, so they aimed at the bigger pile of Windows machines. Macs also run on a well-built foundation with a good reputation.
Both reasons have worn thin. Macs are on the desks of owners, executives, and designers now, which means money and access. The target is the person holding the laptop, whatever logo is on the lid.
And well-built code still has flaws that hide for a long time. In April, Anthropic’s Project Glasswing reported a flaw in OpenBSD that had gone unnoticed for 27 years and one in FreeBSD for 17 (Anthropic, April 7, 2026). macOS shares part of its foundation with BSD. Careful code isn’t flawless code. What matters is whether the fixes get installed.
The open door is rarely the operating system. More often it is an app that is a version or two behind: the browser, the PDF tool, Zoom, the design app, the thing you installed once and forgot.
Software Update installs Apple’s own updates. Apps from the App Store update through the App Store. Everything downloaded straight from a website has its own updater, and many people click “later” for months.
Windows works the same way, by the way. Windows Update never touches third-party software. Nobody did anything wrong on either machine. The apps in between belong to nobody unless somebody claims them.
No credit card, no consultant, and any Mac user on your team can do these before lunch.
Before you open anything, guess how many apps are on the Mac and write the number down. Then open the Applications folder and count. Run Software Update, then open each browser, the PDF tool, Zoom, and the rest, and check each one for updates. Remove the apps nobody uses. Most people guess low. If the count surprises you, that’s common. You don’t have to be able to do this. We’ll do it with you.
macOS ships with disk encryption called FileVault, a firewall, and automatic updates. Check that all three are on in System Settings. Add a second sign-in step on email, and stop reusing the same password across sites. None of it costs anything.
Phishing works on any computer, because it fools the person, not the operating system. Treat an unexpected email or a strange link with the same caution on a Mac as anywhere else.
My own father fell for a phishing email. I had 35+ years in cybersecurity behind me, and it still reached him. Scammers got remote access to his computer and started hunting for financial documents. My step-mother noticed something was off. I jumped in from a distance and shut it down before they reached his bank logins.
I have spent 35+ years watching how these attacks work. FBI InfraGard trainer. Dozens of managed clients since 1991. None has had ransomware. In my experience the way in is usually an app nobody updated, and it looks the same on a Mac or a Windows box.
I believe her. A flaw can sit for years before anyone uses it; those BSD flaws sat for 17 and 27. Ten quiet years tell you about the past. The app count tells you about today.
If her apps are already current, step 1 will show her that in about ten minutes.
The Macs get the checklist above. If your office also runs Windows computers, the Reveal Scan counts what is installed on each Windows PC: how many programs are current and how many need updating. It runs on Windows only. Read-only, no credit card needed.
Count What’s on Your Windows PCs →The scan is on us. If you want step-by-step instructions afterward, that’s a paid report, and you’ll see the price before you decide.
If you run it and never speak to us again, that’s a fine outcome.
Want this kind of plain-English security news every week? Sign up for Craig’s Insider Notes at CraigPeterson.com.
Join the owners who get Craig's Insider Notes every week.