XProtect and MRT Updates for macOS.

Note: Applies only to macOS 15 Sequoia.

Apple has just released updates to XProtect and YARA definitions. (24-September-2024)

1. XProtect (XProtectPlistConfigData) has been updated to version 5275 as of 24-September-2024.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 145 as of 03-Sepptember-2024.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following undocumented macOS Software Update Tool command could hasten any of the above applicable pending software update(s):

% softwareupdate -ia --include-config-data
% sudo xprotect update (macOS 15 Sequoia)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

 

Apple has just released updates to XProtect and YARA definitions. (01-October-2024)

1. XProtect (XProtectPlistConfigData) has been updated to version 5276 as of 01-October-2024.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 145 as of 03-Sepptember-2024.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following undocumented macOS Software Update Tool command could hasten any of the above applicable pending software update(s):

% softwareupdate -ia --include-config-data
% sudo xprotect update (macOS 15 Sequoia)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% xprotect version. (macOS 15 Sequoia)
% xprotect status

 

Apple has just released updates to XProtect and YARA definitions. (08-October-2024)

1. XProtect (XProtectPlistConfigData) has been updated to version 5277 as of 08-October-2024.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 145 as of 03-Sepptember-2024.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following undocumented macOS Software Update Tool command could hasten any of the above applicable pending software update(s):

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15 Sequoia)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% xprotect version (macOS 15 Sequoia)
% xprotect status (macOS 15 Sequoia)

 

Apple has just released updates to XProtect and YARA definitions. (15-October-2024)

1. XProtect (XProtectPlistConfigData) has been updated to version 5278 as of 15-October-2024.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 145 as of 03-Sepptember-2024.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following undocumented macOS Software Update Tool command could hasten any of the above applicable pending software update(s):

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15 Sequoia)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% xprotect version (macOS 15 Sequoia)
% xprotect status (macOS 15 Sequoia)

 

Apple has just released updates to XProtect Remediator. (16-October-2024)

1. XProtect (XProtectPlistConfigData) remains at version 5278 as of 15-October-2024.
2. XProtect Remediator (XPR) (XProtectPayloads) has been updated to version 147 as of 16-October-2024.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following undocumented macOS Software Update Tool command could hasten any of the above applicable pending software update(s):

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15 Sequoia)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% xprotect version (macOS 15 Sequoia)
% xprotect status (macOS 15 Sequoia)

 

Apple has just released an update to XProtect for all macOS. (05-November-2024)

1. XProtect (XProtectPlistConfigData) has been updated to version 5279 as of 05-November-2024.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 147 as of 16-October-2024.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following undocumented macOS Software Update Tool command could hasten any of the above applicable pending software update(s):

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15 Sequoia)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% xprotect version && xprotect status (macOS 15 Sequoia)

 

Apple has just released updates to XProtect and YARA definitions. (12-November-2024)

1. XProtect (XProtectPlistConfigData) has been updated to version 5282 as of 12-November-2024.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 147 as of 16-October-2024.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following undocumented macOS Software Update Tool command could hasten any of the above applicable pending software update(s) and activation:

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15 Sequoia)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% xprotect version && xprotect status (macOS 15 Sequoia)

 

Apple has just released updates to XProtect and YARA definitions. (19-November-2024)

1. XProtect (XProtectPlistConfigData) has been updated to version 5283 as of 19-November-2024.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 147 as of 16-October-2024.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following undocumented macOS Software Update Tool command could hasten any of the above applicable pending software update(s) and activation:

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15 Sequoia)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% xprotect version && xprotect status (macOS 15 Sequoia)

Edit: added the “Yara definitions” reference and the underlying BBC was cleaned up.

 

Apple has just released updates to XProtect, XProtect Remediator and Yara definitions. (17-December-2024)

1. XProtect (XProtectPlistConfigData) has been updated to version 5284 as of 17-December-2024.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 149 as of 17-December-2024.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following macOS Software Update Tool commands could hasten any of the above applicable pending software update(s) and activation:

Update(s) Check:

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15.0 to 15.1.1 Sequoia)
% sudo xprotect update --prerelease (macOS 15.2 Sequoia and above)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% sudo xprotect check && xprotect version && xprotect status (macOS 15.x Sequoia)

Edit: Revise optional updates/checks.

 

Apple has just released updates to XProtect, and Yara definitions. (05-February-2025)

1. XProtect (XProtectPlistConfigData) has been updated to version 5287 as of 05-February-2024.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 149 as of 17-December-2024.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following macOS Software Update Tool commands could hasten any of the above applicable pending software update(s) and activation:

Update(s) Check:

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15.0 to 15.1.1 Sequoia)
% sudo xprotect update --prerelease (macOS 15.2 Sequoia and above)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% sudo xprotect check && xprotect version && xprotect status (macOS 15.x Sequoia)

 

Apple has released an update to XProtect for all macOS, and Yara definitions. (26-February-2025)

1. XProtect (XProtectPlistConfigData) has been updated to version 5288 as of 26-February-2024.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 149 as of 17-December-2024.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following macOS Software Update Tool commands could hasten any of the above applicable pending software update(s) and activation:

Update(s) Check:

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15.0 to 15.1.1 Sequoia)
% sudo xprotect update --prerelease (macOS 15.2 Sequoia and above)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% sudo xprotect check && xprotect version && xprotect status (macOS 15.x Sequoia)

 

Apple has just released updates to XProtect, XProtect Remediator, Bastion, and YARA Rules.. (04-March-2025)

1. XProtect (XProtectPlistConfigData) has been updated to version 5289 as of 04-March-2025.
2. XProtect Remediator (XPR) (XProtectPayloads) has been updated to version 151 as of 04-March-2025.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following macOS Software Update Tool commands could hasten any of the above applicable pending software update(s) and activation:

Update(s) Check:

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15.0 to 15.1.1 Sequoia)
% sudo xprotect update && sudo xprotect update --prerelease (macOS 15.2 Sequoia and above)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% sudo xprotect check && xprotect version && xprotect status (macOS 15.x Sequoia)

 

Apple has just released an update to XProtect, and YARA Rules. (11-March-2025)

1. XProtect (XProtectPlistConfigData) has been updated to version 5290 as of 11-March-2025.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 151 as of 04-March-2025.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following macOS Software Update Tool commands could hasten any of the above applicable pending software update(s) and activation:

Update(s) Check:

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15.0 to 15.1.1 Sequoia)
% sudo xprotect update && sudo xprotect update --prerelease (macOS 15.2 Sequoia and above)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% sudo xprotect check && xprotect version && xprotect status (macOS 15.x Sequoia)

 

Apple has just released an update to XProtect, and YARA Rules. (25-March-2025)

1. XProtect (XProtectPlistConfigData) has been updated to version 5291 as of 25-March-2025.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 151 as of 04-March-2025.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following macOS Software Update Tool commands could hasten any of the above applicable pending software update(s) and activation:

Update(s) Check:

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15.0 to 15.1.1 Sequoia)
% sudo xprotect update && sudo xprotect update --prerelease (macOS 15.2 Sequoia and above)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% sudo xprotect check && xprotect version && xprotect status (macOS 15.x Sequoia)

 

Apple has just released an update to XProtect, and YARA Rules. (01-April-2025)

1. XProtect (XProtectPlistConfigData) has been updated to version 5292 as of 01-April-2025.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 151 as of 04-March-2025.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following macOS Software Update Tool commands could hasten any of the above applicable pending software update(s) and activation:

Update(s) Check:

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15.0 to 15.1.1 Sequoia)
% sudo xprotect update && sudo xprotect update --prerelease (macOS 15.2 Sequoia and above)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% sudo xprotect check && xprotect version && xprotect status (macOS 15.x Sequoia)

 

Apple has just released an update to XProtect, and YARA Rules. (08-April-2025)

1. XProtect (XProtectPlistConfigData) has been updated to version 5293 as of 08-April-2025.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 151 as of 04-March-2025.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following macOS Software Update Tool commands could hasten any of the above applicable pending software update(s) and activation:

Update(s) Check:

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15.0 to 15.1.1 Sequoia)
% sudo xprotect update && sudo xprotect update --prerelease (macOS 15.2 Sequoia and above)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% sudo xprotect check && xprotect version && xprotect status (macOS 15.x Sequoia)

 

Apple has just released an update to XProtect, and YARA Rules. (15-April-2025)

1. XProtect (XProtectPlistConfigData) has been updated to version 5295 as of 15-April-2025.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 151 as of 04-March-2025.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following macOS Software Update Tool commands could hasten any of the above applicable pending software update(s) and activation:

Update(s) Check:

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15.0 to 15.1.1 Sequoia)
% sudo xprotect update && sudo xprotect update --prerelease (macOS 15.2 Sequoia and above)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% sudo xprotect check && xprotect version && xprotect status (macOS 15.x Sequoia)

 

Apple has just released an update to XProtect, and YARA Rules. (22-April-2025)

1. XProtect (XProtectPlistConfigData) has been updated to version 5296 as of 22-April-2025.
2. XProtect Remediator (XPR) (XProtectPayloads) remains at version 151 as of 04-March-2025.
3. The Malware Removal Tool (MRT) (MRTConfigData) remains at version 1.93 since 26-September-2023.

Although periodically checked by macOS, manually running the following macOS Software Update Tool commands could hasten any of the above applicable pending software update(s) and activation:

Update(s) Check:

% softwareupdate -ia --include-config-data (macOS 10.15 Catalina through macOS 14.7 Sonoma)
% softwareupdate -ia --include-config-data && sudo xprotect update (macOS 15.0 to 15.1.1 Sequoia)
% sudo xprotect update && sudo xprotect update --prerelease (macOS 15.2 Sequoia and above)

Versions Check:

% defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/XProtect.app/Contents/Info.plist CFBundleShortVersionString; defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

% sudo xprotect check && xprotect version && xprotect status (macOS 15.x Sequoia)