Skip to main content
Download — FreeNo credit card required

The CoreLock blog covers Mac security topics including antivirus guides, malware detection and removal, privacy permission audits, network monitoring, threat intelligence reports, and macOS security best practices. Written by Hassanain, CoreLock's founder, with hands-on experience in Mac security and privacy engineering. Topics include how to protect your Mac from malware, which apps have camera and microphone access, hidden processes running on macOS, and comparisons with Norton, Malwarebytes, and CleanMyMac.

CoreLock Blog

Security tips, product updates, and privacy guides.

RSS Feed
Security TipsDeep DivesGuidesOpinionPrivacy GuidesPrivacyNewsReviewsComparisonsPerformanceProduct Updates
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Security Tips

Is Someone Remotely Accessing Your Mac? 6 Checks

Check System Settings > General > Sharing for Screen Sharing, Remote Management and Remote Login, then run who and lsof in Terminal. What each one means.

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Security Tips

How to Tell If Your Mac Camera Is Hacked (and What to Do)

Your camera's green light flickered on when you weren't on a call. Here's how to check if your Mac camera is hacked, calmly, with real steps.

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Security Tips

Is My Employer Monitoring My Mac? How to Check

If your employer owns the Mac, it's likely managed. Check Device Management, the Privacy & Security lists and login items to see what is installed.

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Security Tips

Signs Someone Is Watching Your Mac Screen (and How to Stop It)

Most of the time it's nothing, but macOS lets you check. Here's where to look, what each sign means, and which settings to lock down.

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Security Tips

Why Is My Mac Camera Light On? Find the App

The green light means an app is using your Mac's camera right now. Open Control Center to see which app, then check Privacy & Security > Camera.

7 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Deep Dives

What Is Keychain on Mac? How to Keep It Safe

Keychain is the encrypted store on your Mac for passwords, Wi-Fi keys and certificates. How it works, how malware gets in, and 6 ways to protect it.

9 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Guides

What a Free Mac Security Scan Actually Finds

A free Mac security scan checks processes, permissions, and network connections — and it usually surfaces things most people don't know are running on their own machine. Here's what it looks at and what it commonly finds.

7 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Opinion

Is macOS More Secure Than Linux? An Honest Comparison

Developers switching between macOS and Linux often ask which is more secure. The answer depends on what you're protecting against and how much effort you're willing to invest.

9 min read
Privacy Guides

Apple Intelligence Privacy: What's Processed On-Device vs in the Cloud

Apple Intelligence processes some AI features on your Mac and sends others to Apple's servers. Here's exactly what stays local, what goes to the cloud, and what it means for your privacy.

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Guides

How to Check If a Mac App Is Legitimate Before Installing

Downloaded an app from a sketchy website last week? That sinking feeling in your stomach isn't paranoia — it's your instincts telling you something's off....

8 min read
Opinion

Do You Actually Need a VPN on Your Mac?

The VPN industry has convinced half the internet that browsing without one is like walking through a minefield blindfolded. Turn on YouTube, and you'll see...

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Deep Dives

What Is a Zero-Day Vulnerability? A Mac User's Guide

Zero-day vulnerabilities are security flaws that get exploited before Apple can patch them. Here's what they are, why they matter, and what you can do when one hits macOS.

8 min read
Guides

Mac Security Settings for Parents: What Works

Give your child a standard account, then set up Screen Time and Ask to Buy. Which Mac parental controls hold up, and which a teenager can get around.

7 min read
Guides

Claude Code Security on Mac: What Developers Should Know

Claude Code runs in your Terminal with access to your files, network, and system commands. It's an incredible tool — but here's how to use it safely.

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Opinion

Is Your Mac Really Safe from Ransomware?

The short answer is no, your Mac isn't automatically safe from ransomware. But honestly, the real story here is way more interesting than the simple...

7 min read
Privacy Guides

Browser Extensions Are a Bigger Security Risk Than You Think

That Chrome extension you installed three years ago? It might have been sold to a new owner, injected with adware, or is quietly reading every page you visit. Here's what to do about it.

7 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Guides

How to Wipe a Mac Before Selling (Factory Reset)

Back up, then use Erase All Content and Settings in System Settings > General > Transfer or Reset. Older Macs: sign out, then erase from macOS Recovery.

7 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Guides

How to Check for Malware on Mac for Free

Check a Mac for malware free: update macOS so XProtect stays current, review Login Items and LaunchAgents, check Activity Monitor, then run a free scan.

8 min read
Security Tips

7 Mac Security Mistakes Developers Make (And How to Fix Them)

Developers have the most powerful — and most vulnerable — Macs. SSH keys, API tokens, full disk access for Terminal, npm packages running arbitrary code. Here are the mistakes that put you at risk.

8 min read
Privacy

How to Change DNS Settings on Mac for Privacy

Open System Settings > Network, click your connection, then Details > DNS, and add 1.1.1.1 or 9.9.9.9. What a new DNS server hides, and what it doesn't.

7 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Guides

How to Secure Your Mac in Under 5 Minutes

You don't need to be a security expert to protect your Mac. These 7 quick changes take less than 5 minutes and dramatically improve your security.

5 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
News

North Korean Hackers Are Targeting Macs — And They're Getting Better at It

State-sponsored groups like Lazarus and BlueNoroff are actively targeting Mac users with sophisticated malware. Here's how the attacks work and how to protect yourself.

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
News

Mac Malware in 2026: What's Actually Out There

Mac malware isn't what it used to be. While Windows users were getting hammered by ransomware and banking trojans five years ago, Mac users mostly dealt...

8 min read
News

AirBorne: The AirPlay Vulnerability That Lets Attackers Into Your Mac Without a Click

Security researchers found zero-click, wormable vulnerabilities in Apple's AirPlay protocol. Here's what AirBorne means for your Mac and what you should do about it.

7 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Security Tips

How to Check Your Mac for a Keylogger: 6 Checks

Check Input Monitoring and Accessibility in Privacy & Security, then your LaunchAgents, processes and network connections. Six checks, with the commands.

7 min read
Guides

Check a Mac for Unauthorized Network Connections

Open Activity Monitor's Network tab, or run sudo lsof -i -P -n in Terminal, to see which processes are connecting. How to tell normal traffic from odd.

8 min read
Deep Dives

What Is sudo on Mac and When Should You Use It?

sudo runs one Terminal command as the root user after you type an admin password. When a Mac needs it, what it can't override, and which commands to avoid.

7 min read
Security Tips

AirDrop Security: Can Someone Send You Malware via AirDrop?

AirDrop feels like magic until you start thinking about the security implications. You're essentially allowing nearby devices to beam files directly to your...

7 min read
Deep Dives

MCP Security Risks: What Mac Users Need to Know About AI Tool Servers

The Model Context Protocol lets AI agents use tools on your Mac. But MCP servers can access your files, network, and system — with almost no security controls. Here's the full picture.

9 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Reviews

Is CleanMyMac Safe? How to Check It Yourself

Is CleanMyMac safe? Check it yourself in a few minutes: is your copy signed and notarized, which permissions it holds, and what it sends off your Mac.

5 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Security Tips

Mac Infostealers in 2026: What They Steal, How They Spread, and How to Stop Them

Infostealers are the fastest-growing Mac threat in 2026. They target your passwords, cookies, crypto wallets, and Keychain — often in under 30 seconds. Here's what you need to know.

8 min read
Guides

Which App Is Using the Internet on My Mac?

Open Activity Monitor's Network tab to see which apps are sending and receiving data. For more detail, use nettop and lsof in Terminal, or LuLu.

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Deep Dives

Prompt Injection Explained: The #1 Threat to AI Agents on Your Mac

Prompt injection is how attackers hijack AI agents — hidden instructions in emails, web pages, and documents that turn your agent against you. Here's how it works and how to stay safe.

10 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Opinion

Should I Turn On the Mac Firewall? Usually, Yes

Yes, for most people. The Mac firewall blocks unwanted incoming connections, which matters most on public Wi-Fi. How to turn it on and what it won't stop.

6 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Guides

AI Agent Security on Mac: The Complete Guide for 2026

OpenClaw, Claude Code, MCP tools — AI agents are powerful, but they have full access to your Mac. This is the definitive guide to running them safely.

14 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Security Tips

Mac Firewall: Should You Turn It On or Off?

The macOS firewall is probably turned off on your Mac right now. Most people never touch it, and honestly, that's not necessarily wrong. But if you're...

7 min read
Privacy

Is My Mac Sending Data to Apple? What It Sends

Yes: update and app checks, iCloud sync, and analytics if you opted in. What each one sends, how to see it, and the System Settings switches for each.

7 min read
Deep Dives

Malicious OpenClaw Skills: The Supply Chain Attack Targeting Mac Users

Hundreds of malicious skills have been found in the OpenClaw ecosystem. They can execute arbitrary code on your Mac the moment you install them. Here's what's happening and how to stay safe.

9 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Reviews

Is XProtect Enough? XProtect vs Antivirus on Mac

XProtect is the malware scanner built into every Mac, and XProtect Remediator removes known malware. What they catch, what they miss, what antivirus adds.

8 min read
Deep Dives

How to Find Suspicious Network Connections on Your Mac

Your Mac is constantly talking to the internet, even when you think it's just sitting there doing nothing. Some of these conversations are perfectly normal...

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Security Tips

What Is a ClickFix Attack? The Mac Threat You Haven't Heard Of

ClickFix tricks you into running malicious Terminal commands by pretending to fix a problem. It's spreading fast in 2026, and your Mac's built-in security won't stop it.

7 min read
Privacy

What Is Full Disk Access on Mac? Who Needs It

Full Disk Access lets a Mac app read Mail, Messages, Safari data and other protected files. Which apps need it, which don't, and how to check yours.

7 min read
Privacy

Which Mac Apps Have Screen Recording Permission?

Open System Settings > Privacy & Security > Screen & System Audio Recording to see which apps may record your screen. What it allows and what to turn off.

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
News

macOS Sequoia Security Patches in 2026: Every Fix That Matters

Apple has patched hundreds of security vulnerabilities in macOS Sequoia this year. Here's what was fixed, what was exploited in the wild, and what it means for your Mac's security.

8 min read
CoreLock · Illustration

Processes

100 busiest, sorted by CPU

By CPU
CPU34%
Memory67%
Disk52%

Busiest processes

Chrome

18% CPU

1.2 GB

VS Code

12% CPU

890 MB

Slack

4% CPU

340 MB

Stop: available for processes you own.

Comparisons

CleanMyMac vs CoreLock: Cleanup Tool or Security Tool?

CoreLock is a security-first tool, not a cleanup tool. Here is what CoreLock does and does not cover, and what to look for in a Mac optimizer. For CleanMyMac's own features and pricing, see its website.

5 min read
CoreLock · Illustration

Apps

23 apps checked: 18 notarized, 4 signed, 1 unsigned

18

Notarized

4

Signed

1

Unsigned

0

Broken

SafariNotarized

/Applications

VS CodeSigned

/Applications

ZoomNotarized

/Applications

sketch_toolUnsigned

~/Applications

Security Tips

How to Check If a Mac App Is Signed and Notarized

Run codesign -dv and spctl -a -vv in Terminal to see who signed a Mac app and whether Apple notarized it. What the output means and what to do next.

7 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Guides

How to Check Your Mac for Malware in 2026 (Free Methods)

Your Mac might have malware right now and you'd never know. Here are the actual free methods to check — not vague advice, real steps with real tools.

8 min read
Guides

10 Mac Terminal Commands for Security Checks

Ten read-only Terminal commands for Mac security: network connections, user accounts, logins, SIP, Gatekeeper, background services, and what to look for.

8 min read
CoreLock · Illustration

Privacy

What macOS has granted

1 left behind

Camera

4 apps

Zoom
FaceTime
Slack
Unknown AppAPP REMOVED

Microphone

2 apps

Zoom
Discord

Contacts

1 app

Zoom

Files and Folders

3 apps

Terminal
VS Code
Slack
Privacy

Mac Privacy Permissions: How to Check Each App

Open System Settings > Privacy & Security to see which apps can use your camera, mic, screen and files. What each permission means and which to revoke.

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Comparisons

Norton vs CoreLock: A Security Suite or a Visibility Tool?

How CoreLock, a Mac-only visibility tool, differs from an all-in-one security suite such as Norton 360, and who each kind of tool is for. For Norton's own features and pricing, see Norton's website.

5 min read
CoreLock · Illustration

Processes

100 busiest, sorted by CPU

By CPU
CPU34%
Memory67%
Disk52%

Busiest processes

Chrome

18% CPU

1.2 GB

VS Code

12% CPU

890 MB

Slack

4% CPU

340 MB

Stop: available for processes you own.

Performance

Why Is My Mac Running Slow? How to Find the Culprit Process

Your Mac is slow, and it's almost always one process hogging resources. Here's how to find it and fix it in under 2 minutes.

7 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Deep Dives

When AI Agents Go Rogue: 5 Real Incidents and What They Teach Us

AI agents have already leaked private conversations, attempted to drain crypto wallets, and deleted years of email. Here are the real incidents — and what every Mac user should learn from them.

9 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Security Tips

Running OpenClaw on Your Mac? Here's What You Need to Know About Security

OpenClaw gives AI agents full access to your Terminal, files, and network. That's powerful — and risky. Here's how to stay safe while using AI agents on macOS.

10 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Security Tips

How to Check for Spyware on Mac in 2026

Look for device-management profiles you didn't install, apps with Screen Recording or Input Monitoring access, and unknown LaunchAgents. Step by step.

9 min read
Guides

How to Find Hidden Apps on Mac That You Didn't Install

Your Mac probably has apps you never installed — buried in system folders, running as background agents, or invisible to Finder. Here's how to find every one of them.

10 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Guides

How to Protect Your Mac: 12 Steps That Actually Matter in 2026

A practical, no-fluff guide to securing your Mac in 2026. Real terminal commands, real System Settings paths, and honest advice about what's worth your time.

14 min read
Product Updates

CoreLock v0.8.0: The Mac Security and Optimization Tool Your Computer Has Been Missing

v0.8.0 brings one-click remediation, process management, auto-updates, and smarter threat detection. Here's everything new and why it matters for your Mac's security.

10 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Guides

How to Remove Malware From Your Mac [2026]

Skip the generic advice. This step-by-step guide covers manual removal, safe mode scanning, and verifying your Mac is fully clean afterward.

9 min read
Security Tips

9 Mac Security Settings to Change Now [2026]

These 9 macOS settings take 5 minutes to change and close the biggest security gaps Apple leaves open by default. Step-by-step guide included.

7 min read
Privacy

Is Your Mac Sending Data Without Permission?

Some, yes: update and app checks, iCloud sync, analytics if you opted in, and apps' own analytics. How to see what's connecting and turn down the rest.

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Opinion

Do Macs Need Antivirus in 2026? Usually Not

Usually not. XProtect, Gatekeeper and SIP handle known malware and unsigned apps. What they miss, and what to add instead of a traditional antivirus.

8 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Reviews

Best Free Mac Security Tools and Scanners (2026)

The best free Mac security tools in 2026: Apple's built-ins, Malwarebytes Free, BlockBlock, KnockKnock, LuLu and CoreLock. What each covers and misses.

10 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Security Tips

5 Signs Your Mac Has Been Compromised

Unusual CPU spikes, unknown login items, and 3 other warning signs your Mac may be compromised. Includes a step-by-step fix for each one.

6 min read
CoreLock · Illustration

Files

Quick scan: Downloads, Desktop, LaunchAgents

12,847

Files Scanned

2

Flagged

1:34

Duration

suspicious_binary.dmgMalware

Matches a known-malware hash

~/Downloads/suspicious_binary.dmg

install.shScript

Script downloads and runs code (simple heuristic)

~/Desktop/install.sh

12,845 files: no matchNothing flagged
Security Tips

Why Your Antivirus Isn't Enough in 2026

Traditional antivirus software was designed for a different era. Here's why it can't keep up with modern threats and what actually works.

7 min read
CoreLock · Illustration

Privacy

What macOS has granted

1 left behind

Camera

4 apps

Zoom
FaceTime
Slack
Unknown AppAPP REMOVED

Microphone

2 apps

Zoom
Discord

Contacts

1 app

Zoom

Files and Folders

3 apps

Terminal
VS Code
Slack
Privacy Guides

How Many Apps on Your Mac Have Camera Access Right Now?

Most Mac users have no idea how many apps can access their camera. Here's how to check, why it matters, and what to do about it.

6 min read
CoreLock · Illustration

Overview

Last scan: 2 min ago · 6 checks

87of 100

Security Score

CRITICALRunning apps

Risky command line: reverse shell

bash connecting out to port 4444

WARNINGLogin items

Unsigned item in LaunchAgents

Network: no open doorsNothing listening beyond this Mac
Product Updates

What Happens When You Run a Security Scan on a Brand New Mac

You just unboxed a new Mac. It's completely clean, right? We ran a security scan on a fresh install and the results were eye-opening.

5 min read
CoreLock · Illustration

Apps

23 apps checked: 18 notarized, 4 signed, 1 unsigned

18

Notarized

4

Signed

1

Unsigned

0

Broken

SafariNotarized

/Applications

VS CodeSigned

/Applications

ZoomNotarized

/Applications

sketch_toolUnsigned

~/Applications

Security Tips

Mac vs Windows Security 2026: Is a Mac Safer?

Neither is immune. macOS is stricter by default about apps and permissions; Windows has the fuller built-in antivirus. A side-by-side for 2026.

7 min read
CoreLock · Illustration

Network

Open connections, refreshed every 5 seconds

23 open
1 open door

Connections

23

open

Apps

9

connected

Listening

1

beyond this Mac

AppIP addressPortStatus
Chrome
142.250.72.14443ESTABLISHED
Slack
34.226.15.60443ESTABLISHED
unknwn
*5900LISTEN
Spotify
35.186.224.25443ESTABLISHED
Security Tips

Hidden Processes on Mac: Safe vs Suspicious

Your Mac runs hundreds of background processes, and most are normal macOS services. How to tell kernel_task and WindowServer from a process worth checking.

7 min read
CoreLock · Illustration

Processes

100 busiest, sorted by CPU

By CPU
CPU34%
Memory67%
Disk52%

Busiest processes

Chrome

18% CPU

1.2 GB

VS Code

12% CPU

890 MB

Slack

4% CPU

340 MB

Stop: available for processes you own.

Product Updates

Do You Need a Mac Cleaner? A Security View

Mac cleaner apps such as CleanMyMac focus on housekeeping. Here is what to ask about any cleaner's security features, and what a dedicated security tool covers. For CleanMyMac's own features and pricing, see MacPaw's website.

4 min read
CoreLock · Illustration

Privacy

What macOS has granted

1 left behind

Camera

4 apps

Zoom
FaceTime
Slack
Unknown AppAPP REMOVED

Microphone

2 apps

Zoom
Discord

Contacts

1 app

Zoom

Files and Folders

3 apps

Terminal
VS Code
Slack
Privacy Guides

Is Your Mac Recording You? How to Check Now

Step-by-step guide to find every app with camera, microphone, and screen recording access on your Mac. Takes 2 minutes to check.

6 min read

Get notified when we publish

Subscribe to the CoreLock blog for security tips and product updates. No spam, unsubscribe anytime.