Loading story…
Apple announced plans to tighten macOS Full Disk Access controls as increasingly capable and autonomous AI agents raise privacy risks. The permission gives applications broad access to sensitive information, including files, mail, messages, and browsing history. Apple warned that some developers use this access without users fully understanding the exposure and said future controls will require very explicit user action to authorize it. The company provided no implementation timeline and did not identify a specific breach or vulnerability in its announcement.
The announcement followed columnist Jason Aten’s allegation that Meta’s Muse app knew the contents of his private messages without permission, a claim Meta disputed. TechCrunch also cited a separate Wired report about a flaw in ChatGPT’s Mac app that could have allowed hackers to access sensitive data. These concerns underscore the need for organizations to review which desktop applications and AI agents hold Full Disk Access, limit grants to justified business requirements, and ensure users understand the scope of the permission while awaiting Apple’s changes.
Track how attackers are adapting to this technology.
4 events from the most recent confirmed update back to the earliest known activity.
Apple announced additional Full Disk Access controls that will require very explicit user action, warning that increasingly autonomous AI agents heighten risks to private data. Apple did not disclose an implementation timeline.
Meta disputed Jason Aten’s claim that Muse had read his private messages without permission.
Inc. columnist Jason Aten reported that Meta’s Muse app knew the contents of his private messages, claiming he had not granted it permission to access them.
Wired reported a flaw in ChatGPT’s Mac app that could have allowed hackers to access sensitive data. The reference did not identify confirmed exploitation.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple executives used WWDC and a subsequent interview to position the company’s AI strategy around practical assistance, privacy, and tight product integration rather than emotionally driven chatbot experiences. Craig Federighi said Siri is designed to help users complete tasks and retrieve information, while Greg Joswiak said Apple is not building AI for its own sake. Apple also highlighted privacy-preserving personalization through on-device processing and **Private Cloud Compute**, alongside security-focused features such as automatic breached-password remediation in the Passwords app and Safari and new child safety controls for highly restricted iPhones. At the same time, reverse engineers reportedly extracted and published Apple’s new AI-driven Siri system prompt from the iOS 27 developer beta, exposing more than 1,300 lines of instructions governing alignment, reasoning, multimodal behavior, and tool use. The leaked materials indicate Siri is designed to disclose limitations, resist adversarial prompt manipulation, avoid anthropomorphic behavior, and rely on structured JSON entities derived from device data such as contacts, email, calendars, and web searches, with actions constrained through deterministic function calls and clarification workflows. The publication of the prompt on public platforms has given AI engineers and security researchers an unusual look at how Apple is implementing the privacy- and safety-focused approach it is publicly promoting.
Jun 29, 2026
Mozilla said an upcoming *Firefox* release will add centralized controls to disable generative-AI capabilities, including a single **“Block AI enhancements”** toggle intended to prevent current and future AI features (and related prompts) from being enabled in the desktop browser. The controls are expected to allow per-feature management of AI functions such as translations, PDF image alt-text generation, AI-assisted tab grouping, link previews, and sidebar chatbot access. Separately, OpenAI announced product changes around its developer and ChatGPT ecosystems, including a Mac-only *Codex* app positioned as a multi-agent “command center” with sandboxing intended to limit file writes and network access, and plans to retire **GPT-4o** and several other ChatGPT models as usage shifts to **GPT-5.2**. In parallel, a security warning highlighted a report alleging two widely used AI coding assistants were **exfiltrating all ingested code to China**, underscoring the need for enterprise controls over AI developer tools, data residency, and code/IP handling.
Jun 29, 2026
Apple quietly changed its security report intake in June 2026 to limit how many active vulnerability submissions some researchers can keep open at once, after a wave of AI-assisted reports increased triage pressure and included many claims the company considered low-quality or nonexistent. The company now requires human validation before confirming submissions, allows researchers to request higher limits, and is also using AI internally to help process incoming reports. Apple’s bug bounty rules already warn that repeated ineligible or theoretical AI-generated submissions can trigger a 180-day suspension or permanent removal from the program. The policy drew attention after Italian security startup **Bynario** said its Atlas platform, using **GPT-5.5**, identified more than 50 possible flaws in the latest macOS release within three weeks, but the cap initially prevented it from submitting all findings. Apple and Bynario both acknowledged that at least one report was valid: **`CVE-2026-43760`**, a macOS Screen Sharing flaw that could allow an authenticated **VNC** user to access protected data and create files with root privileges, later fixed in **macOS Tahoe 26.6**. The dispute has highlighted a broader industry problem as AI speeds up vulnerability discovery faster than vendors and bug bounty platforms can review reports, raising concerns that blunt submission limits could also delay legitimate disclosures.
Aug 6, 2026