Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
Summary: Apple said it will tighten macOS Full Disk Access controls because some developers are using the setting in ways that expose files, mail, messages, and browsing history without users' full knowledge, and it plans updates so that access is granted only through an explicit user action, though no rollout date was given. The announcement follows a report that Meta's Muse agentic tool accessed a journalist's private iMessages after Full Disk Access was granted, and researcher Patrick Wardle's proof-of-concept exploit not-a-mused, which let an unprivileged local process reach the token authenticating users to their Muse account and redirect dictation traffic.
Key Takeaway: Full Disk Access bypasses the controls meant to protect private data, and once an agent holds it, a single unprivileged local process can abuse that trust to capture dictated audio, inject prompts, and reach far more than ordinary malware could.
Read the original at The Hacker News ↗
- Topics
- AI Security
- Mentions
- CVE-2026-100754
- Related
- SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8 Cyber Risks · Nov 15, 2026Pentagon Renames CDAO ‘Super Intelligence Office’ Cyber Risks · Nov 15, 2026186 Fake AI Domains Redirect Users to Click Fix Lures, Browser Malware, and Search Hijackers Cyber Risks · Nov 12, 2026