Section

Security & Privacy

Security fixes, exploits in the wild, scams aimed at Apple users, and the privacy settings worth changing. Each report names the affected versions and the update that fixes it.

← All articles

Abstract cover art: a panes motif on a warm background

Security & Privacy

29 Sept 20265 min read

Full Disk Access on macOS includes Messages, and an AI agent just proved it

Meta's Muse agent read a writer's Mac Messages database and misdescribed how, and Apple's own documentation explains why one permission allowed it.

Pinkesh Gajera

Abstract cover art: a shield motif on a deep background

Security & Privacy

29 Sept 20264 min read

Apple patches a CoreGraphics flaw it says was used against targeted individuals

Apple released iOS 26.7.1 on 28 September with a single CVE, a CoreGraphics flaw it says may have been exploited against specific targeted individuals.

Pinkesh Gajera

Abstract cover art: a grid motif on an ink background

Security & Privacy

24 Sept 20265 min read

iOS 27.2 beta adds a Restrict Motion Data setting, visible only in China

The second iOS 27.2 beta carries a setting that blocks chosen apps from reading the accelerometer and gyroscope, and it appears only on China App Store accounts.

Pinkesh Gajera

Abstract cover art: concentric orbits around a bright centre

Security & Privacy

21 Sept 20265 min read

Impersonation Risk Detection in iOS 27 hands apps a scam risk level, in the United States only

Apple's new Impersonation Risk Detection lets an app ask iOS 27 whether the person using it is being scammed. It answers with one word, and it is off by default.

Pinkesh Gajera

Abstract cover art: orbiting rings on a cream background

Security & Privacy

18 Sept 20264 min read

Apple asks the Investigatory Powers Tribunal to end the secrecy around the UK encryption order

At a hearing on 17 September, Apple argued the UK should stop refusing to confirm whether it ordered access to encrypted iCloud data. What was and was not decided.

Pinkesh Gajera

Abstract cover art: stacked layers offset across the frame

Security & Privacy

17 Sept 20264 min read

App Tracking Transparency gets a new EU prompt in iOS 27.2, and five countries get no choice

iOS 27.2 adds an alternative tracking prompt in the EU, mandatory in five countries, with yearly re-prompting. What to build and measure before it ships.

Pinkesh Gajera

Abstract cover art: concentric rings around a sealed centre

Security & Privacy

16 Sept 20263 min read

Apple shipped a photo you can prove is real. You cannot check it yet.

Reference Image signs a photo at the sensor. There is no developer API, it is one camera on one phone, and the useful response is small.

Pinkesh Gajera

Abstract cover art: a shield outline over a soft grid

Security & Privacy

16 Sept 20263 min read

Ask to Browse changes how child accounts use your app

New parental controls landed with iOS 27. If your app opens web pages or lets users share media, its behaviour on a child account just changed.

Pinkesh Gajera

Abstract cover art: a shield enclosing a check mark

Security & Privacy

16 Sept 20265 min read

Privacy is becoming a product feature. Build it like one.

Apple is positioning privacy as the thing that distinguishes its AI from everyone else's. Whatever you think of the marketing, it changes what users expect your app to be able to explain.

Pinkesh Gajera

Security & Privacy

16 Sept 20263 min read

App Store age verification is an engineering requirement now, not a legal footnote

Texas SB 2420 took effect in June, and Apple now gates 18+ downloads in Australia, Brazil and Singapore. If your app has an age rating above 4+, the Declared Age Range API is part of your build.

Pinkesh Gajera

Security & PrivacySecurity & Privacy

Full Disk Access on macOS includes Messages, and an AI agent just proved it

Apple patches a CoreGraphics flaw it says was used against targeted individuals

iOS 27.2 beta adds a Restrict Motion Data setting, visible only in China

Impersonation Risk Detection in iOS 27 hands apps a scam risk level, in the United States only

Apple asks the Investigatory Powers Tribunal to end the secrecy around the UK encryption order

App Tracking Transparency gets a new EU prompt in iOS 27.2, and five countries get no choice

Apple shipped a photo you can prove is real. You cannot check it yet.

Ask to Browse changes how child accounts use your app

Privacy is becoming a product feature. Build it like one.

App Store age verification is an engineering requirement now, not a legal footnote

Security & Privacy