Skip to content
Thoughtful, detailed coverage of everything Apple for 36 years
and the TidBITS Content Network for Apple professionals

Category: Security

Adam Engst 16 comments

Why Full Disk Access Matters—and What Apple Should Fix

Full Disk Access is a blunt instrument with a lousy interface for users and developers alike. Here’s what Apple should fix, which apps legitimately need it, and which ones you can safely remove from your list.

Adam Engst 80 comments

Apple Plans to Tighten Full Disk Access Controls

Apple has signaled forthcoming changes to Full Disk Access in macOS, seemingly in response to risks from AI agents like Meta’s Muse accessing users’ files, mail, messages, and browsing history. How important is Full Disk Access to your Mac use?

Adam Engst 8 comments

Glenn Fleishman Condemns Stalker-Enabling AirTag Silencer

ElevationLab’s AirTag Silencer lets anyone disable the safety alerts that help stalking and domestic violence victims detect hidden trackers. Glenn Fleishman is calling for an immediate recall.

Adam Engst 8 comments

Apple Patches Zero-Day Exploit Alongside September 2026 OS Fixes

A zero-day CoreGraphics exploit is being used in “extremely sophisticated attacks against specific targeted individuals.” Apple has patched it in iOS 26.7.1 and related updates, while OS 27.0.1 brings largely unspecified bug fixes.

Adam Engst 91 comments

When Should You Upgrade to Apple’s OS 27 Releases?

Apple has released the first versions of its 2027 operating systems—macOS 27 Golden Gate, iOS 27, iPadOS 27, watchOS 27, visionOS 27, tvOS 27, and HomePod Software 27. You might want to upgrade right away, but Adam Engst advises most people to wait at least a little while. Or even longer for macOS.

Adam Engst 11 comments

Comcast Turns Wi-Fi Gateways into Motion Detectors

Comcast is promoting the WiFi Motion feature of its free Xfinity Shield service, which uses Wi-Fi signals to detect movement in your home. It’s opt-in, but the underlying technology could theoretically do far more than Comcast acknowledges—including identifying individuals.

Adam Engst 18 comments

Apple Backpatches Beta Security Fixes into macOS 26.6.2, iOS/iPadOS 26.6.1, and iOS/iPadOS 18.7.10

Four new Apple security updates bring macOS 26.6.2 Tahoe, iOS/iPadOS 26.6.1, and iOS/iPadOS 18.7.10 into sync with fixes from the OS 27 betas. AI-assisted research contributed a notable share of the discoveries.

Adam Engst 31 comments

Apple Fixes Screen Sharing Vulnerability in Tahoe, Sequoia, and Sonoma

Apple has released updates to macOS 26.6.1, 15.7.9, and 14.8.9 to fix a Screen Sharing vulnerability that could let an attacker “on the network” connect without valid credentials. Update soon.

Adam Engst 147 comments

SuperDuper 4’s Radical New Interface Explains Itself as You Use It

SuperDuper 4 might be the first backup app that tells you in plain English exactly what it’s going to do and what it has done. Developer Dave Nanian’s new “narrative” interface embeds documentation directly into the interaction model.

Adam Engst 31 comments

OS 26.6 Delivers Massive Number of Security Fixes

Apple’s latest updates patch an unprecedented number of security vulnerabilities while optimizing the Spotlight index in preparation for OS 27 and fixing bugs affecting Messages screenshots, Intel-based app notifications, and HealthKit data. None of the vulnerabilities is being exploited in the wild.

Adam Engst 30 comments

Simon Willison Breaks Down OpenAI’s Sandbox Escape Incident

An OpenAI model being tested for cybersecurity capabilities decided to cheat rather than solve its assigned test, breaking out of its sandbox and hacking into Hugging Face to steal the answers. Simon Willison calls it “science fiction that happened.”

Adam Engst 46 comments

“Hide My Email” Vulnerability Exposes Real Addresses

Apple’s Hide My Email feature has a vulnerability that does exactly what the name says it shouldn’t: reveal your real email address. Worse, Apple has ignored reports of the flaw for over a year.

Adam Engst 16 comments

26.5.2 Updates Squash Vulnerabilities in macOS, iOS, iPadOS, and Safari

Apple has released macOS 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, and Safari 26.5.2, addressing 29 security vulnerabilities. Most fixes target WebKit, with additional patches for the kernel and other components. No exploits have been reported in the wild.

Adam Engst 1 comment

iOS 26’s Confusing Hidden Folder Drag Behavior

A TidBITS reader thought he had found a bug in iOS 26 that made apps inaccessible. After investigation, the real culprit turned out to be misleading visual feedback when dragging apps to the App Library’s Hidden folder.

Adam Engst 69 comments

WWDC26 Keynote Shows Apple’s Tacit Acknowledgment of External Pressures

Apple spent the entirety of its WWDC26 keynote responding to external pressures, including user complaints about Liquid Glass, community and regulatory worries regarding child safety, and the embarrassment of Siri delays and Apple Intelligence weaknesses.