Apple Plugs Security Hole That Enabled FBI to Access Deleted Signal Messages on iPhone
Apple has released iOS 16.4.2 and iPadOS 16.4.2 to address a security vulnerability that allowed deleted Signal message notifications to remain on devices, potentially enabling access by authorities like the FBI. The update fixes a data redaction issue related to notification retention without explicitly referencing the FBI incident. Although minor in appearance, the patch highlights the importance of installing timely software updates to protect sensitive data.
Opening excerpt (first ~120 words) tap to expand
Apple has released iOS 26.4.2, a seemingly minor security update for iPhone that turns out to patch a serious security vulnerability that allowed the FBI to read sensitive messages from the Signal messaging app, even after the app had been deleted.In early April, 404 Media reported that the federal organization had extracted the messages from a defendant's phone because the system still contained copies of the notifications that were generated when the texts were sent.Although Apple doesn't specifically call out the FBI incident, the description in the company's security note (which also applies to iPadOS 26.4.2 for iPad models), matches the issue. "Notifications marked for deletion could be unexpectedly retained on the device," the note reads.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at CNET.
Discussion
0 commentsMore from CNET
