Unit 42 researchers identified a previously unknown forensic artifact in macOS Tahoe 26 that records user interactions with system menus. This artifact could be valuable for digital investigations and incident response activities. The discovery expands the understanding of macOS data sources available to forensic analysts.

Why it matters in Western Canada: Western Canadian organizations using macOS across government, healthcare, and post-secondary institutions may benefit from this forensic intelligence for internal investigations and security audits, particularly those subject to privacy regulations like FIPPA.

---

Summary generated from the original advisory. Read the full source: unit42