macOS 26.6 RC Is Now Available: Here’s How to Update Your Mac

Apple has released the macOS Tahoe 26.6 Release Candidate for developers and public beta testers. This version arrives after five beta builds and carries build number 25G70. It is expected to closely match the update Apple will release publicly, provided testers do not discover any serious problems.



The macOS 26.6 RC mainly focuses on fixing bugs, improving stability, and preparing compatible Macs for future software updates. Apple has not announced any major user-facing features for this release.



Before installing the update, back up important files using Time Machine or another backup service. Release Candidate software is nearly finished, but unexpected bugs can still affect apps, battery life, or system performance.



How to Install macOS 26.6 RC



Follow these steps to download the update:




Open System Settings on your Mac.



Select General from the sidebar.



Click Software Update.



Click the information button next to Beta Updates.



Choose macOS Tahoe Developer Beta or the available public beta option.



Click Done.



Wait for macOS 26.6 RC to appear.



Click Update Now and follow the onscreen instructions.




Keep your Mac connected to power during the installation. Your Mac will restart, and the process can take several minutes depending on the model and internet speed. Software Update only displays versions compatible with your Mac.



All Changes in macOS 26.6 RC



Apple has not provided a detailed list of major new features for macOS 26.6 RC. The update currently includes the following improvements:




Bug fixes and stability improvements: The update addresses problems reported during the five previous beta versions and improves overall system reliability.



Improved app identification: Apple fixed an issue that incorrectly identified some applications as Intel-only apps, which could cause unnecessary deprecation notices to appear.



Better preparation for future updates: The release may include background system changes that prepare compatible Macs for the next major macOS version.



Developer-related fixes: Apple has marked previously reported ecosystem and HealthKit issues as resolved during the macOS 26.6 testing cycle.




Since this is a Release Candidate, Apple may release another RC build if testers discover an important issue. Otherwise, the same build could become available to all compatible Mac users soon.



If you have already installed macOS 26.6 RC, let us know about its performance, battery life, and any problems you noticed in the comments.

nmap -sV --script vuln -p- <target-network>

tail -f /var/log/suricata/fast.log | grep <cve>

Check Vendor Security Advisory Bulletin

title: Detect Exploitation - macOS 26.6 RC Is Now Available: Here’s How to Update Your Mac
id: 3563061d-f1be-42f5-a5fb-fdde7221d369
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "macOS 26.6 RC Is Now Available" ascii wide
    condition:
        any of them
}

index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("macOS 266 RC Is Now Available Heres How ")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count

message: "*macOS 266 RC Is Now Available Heres How *"

CommonSecurityLog
| where Message has "macOS 266 RC Is Now Available Heres How "
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc