Apple @ Work: Why the ClickFix campaign means it is time to kill the 90 day update deferral

A new macOS ClickFix campaign tricks users into pasting malicious Terminal commands via fake CAPTCHA or update prompts.

The attack can steal passwords, Keychain data, and browser session cookies, undermining MFA and enterprise account security.

Apple’s newer Terminal warning helps block this tactic, but only if users receive the update in time.

The article argues that 90-day macOS deferrals are too long and recommends shortening them to 30–45 days for a better balance of testing and protection.