Apple notarization is an automated review process for macOS software. Apple scans submitted apps and installer packages for known malware and other security issues, then issues a notarization ticket when the checks pass. Gatekeeper and related macOS controls can use that ticket to reduce warnings and allow normal distribution.
In cyber security, notarization matters because it adds a trust signal, but it is not a guarantee that software is harmless. Attackers may wrap malware in convincing DMG or PKG installers, abuse legitimate-looking packaging, or try to blend malicious code into software that appears routine. In a campaign like the OtterCookie delivery chain, notarization and other trust checks are part of the defender’s baseline, while the real task is validating the installer contents, signatures, and post-launch behavior. Security teams should treat notarization as one layer of defense, not the final decision.