Apple released macOS Tahoe 26.6 on July 27, 2026. Since then, MSPs have reported that SentinelOne’s Static AI engine is flagging legitimate macOS system processes — including mds, SystemUIServer, loginwindow, and the App Store — as malware on machines running the new build, causing system instability on affected endpoints.

SentinelOne has confirmed the issue and is working on a multi-stage fix, including a global exclusion of the affected hashes, a Live Security Update, and a permanent fix in an upcoming agent release.

If you manage Macs with SentinelOne: hold off on deploying macOS Tahoe 26.6 until this is resolved. If devices have already updated, see the KB article for the current recommended mitigation.

Updated on 6th Aug : This issue has been addressed in the latest macOS agent, i.e., (26.1 SP1) 26.1.3.8805.