Loading story…
Apple introduced Apple Reference Image, an opt-in photo-authenticity capability for the iPhone 18 Pro and iPhone 18 Pro Max. In Reference mode, the phones’ new Main camera sensor signs image data at the pixel level during capture; Private Cloud Compute then develops that data into an unalterable reference image intended to serve as a digital negative. The Photos app displays the reference image beside the corresponding photograph, enabling users to compare it against later edits, and APIs for iOS, iPadOS, and macOS 27 will let third-party applications display the reference asset.
The feature arrives with Apple’s iPhone 18 Pro lineup, which runs iOS 27 and is scheduled to be available beginning September 18, 2026. Apple plans to add SynthID support later in 2026 to help identify AI-generated or AI-edited images. Reference Image will not be available at launch in China, while capture will be unavailable at launch in the EU; EU users can nevertheless develop and view existing reference images on Apple operating systems version 27.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Apple announced the opt-in Apple Reference Image photo-authenticity feature for iPhone 18 Pro and iPhone 18 Pro Max. In Reference mode, signed pixel-level sensor data is developed through Private Cloud Compute into an unalterable reference image that users and supported third-party apps can compare with the captured photo; Apple also disclosed launch restrictions for China and EU capture.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
4 references tracked. Mallory keeps watching after this page renders.
helpnetsecurity.com
Open sourcemacrumors.com
Open sourcesupport.apple.com
Open sourceapple.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple announced new *age-assurance* capabilities aimed at complying with expanding child-safety regulations, centered on an updated **Declare Age Range API** that returns an age bracket (e.g., under 13, 16–17) rather than a precise birthdate. In certain jurisdictions (including Australia, Brazil, and Singapore), Apple also plans to **block downloads of 18+ apps** until the user confirms they are an adult via an App Store-managed flow, alongside OS-level family settings intended to enforce age-appropriate restrictions without pushing sensitive identity collection to individual apps and websites. Separately, Apple’s **iOS 26** and **iPadOS 26** (with specific hardware) were reported as receiving **NATO Restricted** approval, enabling use for classified information up to the Restricted level under an “Indigo” configuration listed in NATO’s Information Assurance Product Catalogue. The approval was attributed to platform security features such as encryption, **Face ID**, and **Memory Integrity Enforcement**, with additional emphasis on Secure Enclave capabilities in newer chips; the evaluation reportedly involved Germany’s BSI. A third item provides general guidance on **CUI enclaves** and **NIST SP 800-171** controls for protecting Controlled Unclassified Information on mobile/remote-access workflows, but it does not describe the Apple/NATO certification or Apple’s age-verification tooling as a specific event.
Jun 29, 2026
Apple unveiled four opt-in **Audio Intelligence** capabilities for Apple Watch Series 12 and Apple Watch Ultra 4: Siri Recap, which creates notes from detected conversations; Live Rewind, which displays a transcription of the preceding 15 seconds of speech; automatic Shazam music recognition; and Sound Recognition alerts. The features are expected to enter English-language beta later in 2026, require an Apple Intelligence-capable iPhone, and will initially be unavailable in the European Union. Apple said the watches do not create or retain conventional audio recordings. Sensor-derived audio is isolated in the S11 chip’s Secure Enclave and is inaccessible to the operating system, apps, users, and Apple; raw audio is deleted after processing. Most processing occurs locally, while tasks requiring cloud resources use Private Cloud Compute: for Siri Recap, encrypted conversation audio is transferred to the paired iPhone for local transcription and minimization, then deleted before encrypted distilled text is sent for cloud processing.
Sep 11, 2026
Apple released **iOS 27**, **macOS 27 Golden Gate**, and companion updates for watchOS, visionOS, and tvOS, led by a context-aware Siri AI built on Apple’s AFM 3 models. The assistant can interpret natural-language requests, explain on-screen content, search personal context including emails and messages, and invoke supported apps; Apple also added AI-generated Shortcuts, Safari extensions, photo-editing features, and Liquid Glass interface controls. Private iOS and macOS frameworks reportedly show an architecture for delegating Siri requests to third-party models and potentially replacing Apple’s server-side model, although the currently available interface exposes only ChatGPT and Apple has not opened the relevant entitlement to external developers. The releases also expand child-safety controls through Family Sharing Child Accounts, including **Ask to Browse** approvals for new websites, approved-contact requirements, category-based time allowances, scheduled app access, and Communication Safety detection for violent and graphic material. Apple’s iOS 27 privacy notice additionally offers users an opt-in to contribute Siri interaction audio and transcripts to improve Siri AI and train Apple language models, reversing earlier assurances that private interactions would not be used for foundation-model training. Organizations should assess Siri AI’s access to personal context, external-model integration exposure, and user privacy-consent settings before broad deployment.
Sep 15, 2026