macOS 26.6 Public Beta 1 Now Available for Mac Users

Apple has released macOS 26.6 public beta 1 for Mac users enrolled in the Apple Beta Software Program. The update arrives just days after the first developer beta and gives public testers early access to Apple’s latest macOS build ahead of its wider release. With WWDC 2026 just around the corner, this update appears to focus more on fixes and stability improvements than major new features.



Apple is expected to unveil macOS 27 during WWDC on June 8, so macOS 26.6 will likely serve as one of the final refinement updates for the current macOS Tahoe cycle. Early reports suggest there are no major user-facing additions in this release.



How to update



If your Mac is already enrolled in Apple's public beta program, follow these steps:




Open System Settings



Go to General



Select Software Update



Click the "i" button next to Beta Updates



Choose macOS Tahoe 26 Public Beta



Click Done



Download and install the update




Users who are not enrolled can join the public beta program through Apple's beta software portal before installing the update.



All the changes



So far, macOS 26.6 public beta 1 appears to be a small update focused mainly on bug fixes and under-the-hood improvements. Release notes currently mention a fix for an issue that could incorrectly identify certain apps as Intel-only in macOS deprecation notifications. Aside from that, no major new features have been discovered yet. Apple is expected to spend the next few weeks polishing macOS 26 while most development efforts shift toward macOS 27 and its upcoming beta cycle.



The public beta carries the same build number as the recently released developer beta, suggesting both versions contain the same set of changes and fixes.



If you've already installed the update, let us know your experience in the comments.

nmap -sV --script vuln -p- <target-network>

tail -f /var/log/suricata/fast.log | grep <cve>

Check Vendor Security Advisory Bulletin

title: Detect Exploitation - macOS 26.6 Public Beta 1 Now Available for Mac Users
id: 2fbe9396-b3a7-4b33-a485-424cab4bbb25
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "macOS 26.6 Public Beta 1 Now A" ascii wide
    condition:
        any of them
}

index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("macOS 266 Public Beta 1 Now Available fo")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count

message: "*macOS 266 Public Beta 1 Now Available fo*"

CommonSecurityLog
| where Message has "macOS 266 Public Beta 1 Now Available fo"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc