--- title: "Blog" description: "News, product updates, malware analysis, and expert macOS endpoint security guidance from the team behind Santa at North Pole Security." doc_version: "1" last_updated: "2026-06-05" canonical: "https://northpole.security/blog" --- # News from the North Pole News, product updates, malware analysis, and expert macOS endpoint security guidance from the team behind Santa at North Pole Security. [ Releases • May 20, 2026 ## Announcing Santa 2026.4 Santa 2026.4 expands tamper resistance, changes clean sync semantics, adds silenceable device notifications, and continues security hardening. Read post ![Announcing Santa 2026.4](https://northpole.security/images/blog/santa-2026.4-hero.jpg) ](https://northpole.security/blog/santa-20264) [ Releases • April 14, 2026 ### Announcing Workshop 2026.3 Workshop v2026.3 introduces CEL fallback rules, risk engine plugin filters, Santa host metrics, and much more! ![Announcing Workshop 2026.3](https://northpole.security/images/blog/workshop-2026.3-hero.jpg) ](https://northpole.security/blog/workshop-20263)[ Releases • April 10, 2026 ### Announcing Santa 2026.3 Santa 2026.3 adds encryption-aware removable media policies, CEL fallback rules for global enforcement, and significant performance improvements. ![Announcing Santa 2026.3](https://northpole.security/images/blog/santa-2026.3-hero.jpg) ](https://northpole.security/blog/santa-20263)[ Product • March 9, 2026 ### Introducing AI Chat for Workshop Workshop now ships an AI chat that answers natural-language questions about hosts, rules, events, and policies. Bring your own LLM API key. ![Introducing AI Chat for Workshop](https://northpole.security/images/blog/introducing-ai-chat-for-workshop-hero.jpg) ](https://northpole.security/blog/introducing-ai-chat-for-workshop)[ Guides • March 6, 2026 ### Blocking OpenClaw OpenClaw (formerly Clawdbot and Moltbot) is an autonomous AI agent for macOS. Here's how to block every version with layered Santa CEL rules. ![Blocking OpenClaw](https://northpole.security/images/blog/blocking-openclaw-hero-v2.jpg) ](https://northpole.security/blog/blocking-openclaw)[ Product • March 4, 2026 ### Telemetry, Rebuilt Export Santa’s incredible telemetry stream to Workshop and query it directly from the Workshop UI using regular SQL. ![Telemetry, Rebuilt](https://northpole.security/images/blog/telemetry-rebuilt-hero.jpg) ](https://northpole.security/blog/telemetry-rebuilt)[ Releases • March 3, 2026 ### Announcing Workshop 2026.2 Workshop v2026.2 introduces Chat with Workshop, Ancestor-based CEL policies, improved Telemetry export & querying, and much more! ![Announcing Workshop 2026.2](https://northpole.security/images/blog/workshop-2026.2-hero.jpg) ](https://northpole.security/blog/workshop-20262)[ Releases • March 3, 2026 ### Announcing Santa 2026.2 Santa 2026.2 adds process-tree-aware CEL rules, network monitoring and statistics, telemetry export filters, and several quality improvements. ![Announcing Santa 2026.2](https://northpole.security/images/blog/santa-2026.2-hero.jpg) ](https://northpole.security/blog/santa-20262)[ Product • February 3, 2026 ### Announcing Touch ID for Santa Santa now supports Touch ID verification before execution, so CEL rules can require a biometric check for sensitive operations like remote debugging. ![Announcing Touch ID for Santa](https://northpole.security/images/blog/touchid-biometric-authorization-hero.jpg) ](https://northpole.security/blog/touchid-biometric-authorization)[ Releases • January 29, 2026 ### Announcing Santa 2026.1 Santa 2026.1 adds TouchID-gated execution, network mount blocking, a menu bar item for common tasks, co-branding, and many other improvements. ![Announcing Santa 2026.1](https://northpole.security/images/blog/santa-2026.1-hero.jpg) ](https://northpole.security/blog/santa-20261)[ Releases • January 29, 2026 ### Announcing Workshop 2026.1 Workshop 2026.1 adds Package Rules, TouchID-gated execution, network mount blocking, and a range of usability and performance improvements. ![Announcing Workshop 2026.1](https://northpole.security/images/blog/workshop-2026.1-hero.jpg) ](https://northpole.security/blog/workshop-20261)[ Announcements • January 20, 2026 ### Introducing Package Rules Workshop's new Package Rules automate allowlist maintenance for Homebrew, npm, Cargo, and other package managers so developers never get blocked. ![Introducing Package Rules](https://northpole.security/images/blog/introducing-package-rules-hero.jpg) ](https://northpole.security/blog/introducing-package-rules)[ Advent Calendar • December 25, 2025 ### Advent Calendar: 25 Days of macOS Protection Santa Security Advent Calendar: 25 production-ready CEL and FAA rules inspired by real macOS malware like Atomic Stealer, one new rule each day. ![Advent Calendar: 25 Days of macOS Protection](https://northpole.security/images/blog/2025-advent-calendar-hero.jpg) ](https://northpole.security/blog/2025-advent-calendar)[ Announcements • October 30, 2025 ### A Private Sync Protocol for Workshop A new, private sync protocol has been introduced for Workshop customers that allows for faster feature delivery and iteration. ![A Private Sync Protocol for Workshop](https://northpole.security/images/blog/private-sync-protocol-for-workshop-hero.jpg) ](https://northpole.security/blog/private-sync-protocol-for-workshop)[ Announcements • October 9, 2025 ### One Year of North Pole Security Join us as we reflect on North Pole Security's first year, highlighting our achievements, challenges, and the dedicated team behind our success. ![One Year of North Pole Security](https://northpole.security/images/blog/one-year-of-north-pole-security-hero.jpg) ](https://northpole.security/blog/one-year-of-north-pole-security)[ Announcements • July 30, 2025 ### We Raised $4M to Reimagine Endpoint Security North Pole Security closes a $4M seed round led by Andreessen Horowitz to accelerate Workshop, our prevention-first endpoint platform for macOS. ![We Raised $4M to Reimagine Endpoint Security](https://northpole.security/images/blog/north-pole-security-raises-4m-from-andreessen-horowitz-hero.jpg) ](https://northpole.security/blog/north-pole-security-raises-4m-from-andreessen-horowitz) No posts in this category yet. ## Sitemap - [Home](https://northpole.security/index.md) - [Workshop](https://northpole.security/workshop.md) - [Santa](https://northpole.security/santa.md) - [Features](https://northpole.security/features.md) - [Cookbook](https://northpole.security/cookbook.md) - [Docs](https://northpole.security/docs.md) - [Blog](https://northpole.security/blog.md) - [Glossary](https://northpole.security/glossary.md) - [About](https://northpole.security/about.md) - [Contact](https://northpole.security/contact.md)