
5.1.0 build 1700 – (December 1, 2025)
Features
- Added Support for IPv6 with subnets
- Support ADX Vision and LLM rules
- Added macOS Log View with debug mode & filtering
- Added ADX Protect device checkin to Reload button
Improvements
- Updated core rules parsing architecture
- Improved license management checks
- Updated UI to support macOS 26 Liquid Glass
- Fixed issue with suspicious IPv6 addresses
- Allow list now supports IPv6
- Updated BlackFog branding
- Improved support for MDM tools
5.0.1 build 1460 – (April 8, 2025)
Features
- Added Chrome Browser support and QUIC protocol
- Added support for Protonmail
- Added Dashboard tile that shows latest rules update and version
- Added Process name to logs and drill downs
- Added Training mode to Enterprise edition
- Added ability to allow Application processes in allow list
- Added support for FrigidStealer ransomware
- Added IPv6 support
- Added IPv4 subnet masking
- Added category filter to events
- Added ability to remotely lock allow, deny and geofencing
Improvements
- Improved Agent startup and shutdown times
- Concurrency and thread safety improvements
- Improved XPC resiliency after crash
- Improved wildcard matching in allow/deny
5.0 build 1380 – (February 13, 2025)
Core
- Rewritten from the ground up in Swift
- Feature parity with Windows
- Renamed core application to BlackFog
- Updated icons for version 5
- Dynamic dashboard tiling
- Adopted MapKit support for Exfiltration view
- Added Dark Mode Support
- Hardened runtime and sandbox support
- Added support for dynamic rule updates
- Allow support for restricted options through console
- Added sliding sidebar view for events
- Integrated agent into System settings as Network > Filters
- Inherit Content filter status into application state
- Reflect protected state in window header
- Added Window > Log view for system events
- Detect all existing Mac models through 2024
- Added auto update capability
Features
- Realtime GeoIP lookups
- Added completely Air gapped packet filtering for failsafe blocking
- Modernized UI with consistent look and feel across platforms
- Support for M Series processes as well as Intel
- Added canary release capability to console
- Multi-threaded network filtering
- Added thread safe cache mapping for high performance blocking
- Added thread controls for systemwide performance increase
- Added many new Mac based threats such as Banshee prevention
- Added Helper menubar application to monitor state
Improvements
- Improvement parsing of inter application communication messages
- Updated JSON parsing and type checking
- Moved rule processing logic to core system agent
3.2 build 169 – (October 11, 2018)
-
Added Fake News Blocking
- Added support for Dark Mode in Mojave (10.14)
- Added hardened runtime support
- Added Full Disk Access support in Mojave (10.14)
- Resolved crash when using El Capitan (10.11)
- Removed block warnings when clicking on Ads shown in Google Search
- Provide foundation for scheduled scanning in next update
- Added App Notarization support for downloadable version
- Improved menubar text in dark mode
- Added Enterprise console setting for Fake News
- Changed Enterprise license handling
- Optimized Touch Bar icon sizing
- Added Turkish translation
- Improved messaging when removing Malware
3.1 build 156 – July 31, 2018
-
Added more than 250 cryptomining blockers
-
Added Facebook blocking capability
-
Added Enterprise settings collection
-
Added Managed domains column to white and black lists
-
Added Safari toolbar Item to reveal status of blocking
-
Added Safari toolbar item to whitelist sites
-
Updated Malware rules for several recent threats
-
Prevent the whitelisting of blacklisted sites
-
Provide warning when sandboxing does not permit deletion
3.0 build 146 – June 14, 2018
- Added Malware scanning and removal for over 1,000 new threats
- Added Enterprise console checkin capability for Enterprise licenses
- Added more than 1,000 new Ad blocks and refined rules
- Added Cryptomining blocker
- Added Malware blocker
- Added checkin timer for Enterprise license
- Added the ability to open Safari Extensions for users to enable
- Added new status options to menubar helper
- Added rating window to App Store edition
- Added automatic update feature
- Added Touch bar support
- Added Helper service for system Malware removal
- Fixed some minor UI issues when saving preferences
- Fixed crash when attempting to load corrupted preferences
- Prevent users from adding blank entries to white list or black list
- Updated core libraries for compatibility with High Sierra
2.6 build 103 – February 14, 2017
- Changed file access mode to conform to Apples new Sandbox rules
- White/Black listing is applied immediately rather than on preference close
- Agent Launch default is set to false so that users are making the choice to turn it on
2.6 build 102 – February 8, 2017
- Initial release for macOS
- High performance Ad blocking and Anti-tracking for Safari
- Removes adware from your system and prevents it from coming back
- Improves browser performance
- Fixes hijacked browsers
- Reclaims drive space from core areas of operating system
- Browser data wipe for Safari, Chrome, Firefox and Opera
- Release available as DMG and App Store editions
- Includes Menubar Agent for auto launch at login
- Double click installation from image
- Requires macOS 10.11.5 or greater with Safari 1o
- Available in English, Dutch and Danish
Share This Story, Choose Your Platform!
Related Posts
The State of Ransomware: April 2026
BlackFog's state of ransomware April 2026 measures publicly disclosed and non-disclosed attacks globally.
BlackFog Q1 2026 Ransomware Report: Only 1 in 9 Ransomware Attacks Made Public as Data Exfiltration Hits 96%
BlackFog Q1 2026 Ransomware Report reveals only 1 in 9 attacks are disclosed as data exfiltration hits 96% worldwide.
2026 Q1 Ransomware Report
BlackFog’s 2026 Q1 Ransomware Report - Ransomware Remains Relentless with Data Exfiltration Holding at 96%
Shadow AI and Governance: Why Traditional Control Is Failing CISOs
Shadow AI and Governance: Why traditional controls are failing CISOs as AI adoption accelerates, increasing risk and reducing visibility.
Ransomware in Energy and Utilities: The Real Story Behind the Attacks
Ransomware in energy and utilities is rising, combining disruption, data theft, and extortion across critical infrastructure.
Oracle Breach: What Happened and Why It Matters
The 2025 Oracle breach exposed millions of records across three separate incidents. Learn how attackers got in, which industries were hit, and how to protect your organization.






