Apple is updating macOS to restrict 'Full Disk Access' permissions, requiring explicit user confirmation before apps can access sensitive data. This move follows complaints that Meta’s AI agent, Muse, accessed private messages and personal information without proper consent.
Apple announced new restrictions on macOS 'Full Disk Access' permissions to prevent AI agents from accessing sensitive user data without explicit consent. The move follows privacy concerns regarding autonomous AI tools like Meta's Muse, which critics argue can access messages and browsing history beyond their stated opt-in requirements. Apple stated that current permissions allow developers to bypass privacy controls, exposing files, mail, and messages. The company will require 'very explicit user action' to grant such access but has not specified a rollout timeline.
Apple is tightening macOS Full Disk Access permissions to prevent AI agents from accessing sensitive data without clear user consent. The move follows a controversy where Meta’s Muse agent allegedly read private messages, prompting Apple to require 'very explicit user action' for granting such broad access. While developers warn this may hinder power users, Apple cites growing risks from autonomous AI tools.
Apple announced new controls for macOS Full Disk Access (FDA) to prevent AI agents from accessing sensitive data without explicit user consent. The move follows a controversy where Meta’s Muse agent allegedly accessed a user’s messages despite claimed opt-in requirements. Apple stated that some developers are misusing FDA to expose files, mail, and browsing history, posing risks as AI agents become more autonomous. The company will require 'very explicit user action' to grant such permissions but did not specify a rollout timeline or exact technical changes.
Apple is introducing stricter controls for 'Full Disk Access' on macOS to mitigate privacy risks from autonomous AI agents. The change requires explicit user consent before granting apps sweeping access to files, messages, and browsing history, following concerns that tools like Meta's Muse accessed data without clear permission.
Apple is introducing stricter controls for 'Full Disk Access' on macOS to prevent AI agents from accessing sensitive user data without explicit consent, citing privacy risks from increasingly autonomous software.
A critical vulnerability in the macOS version of ChatGPT, discovered by Objective-See Foundation researchers, could have allowed attackers to access sensitive user data and execute commands. The flaw, which required only about ten lines of code to exploit, was patched by OpenAI on September 25, 2026. It highlighted the security risks of granting AI agents broad system permissions.
Microsoft began disabling Exchange Web Services (EWS) by default in Exchange Online on October 1, 2026. This move impacts Apple Mail and Calendar on Mac, which still rely on EWS for syncing Microsoft 365 work accounts. While the rollout is phased, EWS will be permanently shut down on April 1, 2027. Apple is working with Microsoft to migrate to the Microsoft Graph API in a future macOS 27 update, but no specific timeline has been confirmed.
A new variant of the MacSync macOS stealer uses public iCloud calendar events to hide command payloads, adding a Finder-disguised backdoor and server-side decryption to evade static analysis.
A zero-day in Meta's Muse AI lets attackers hijack the assistant by manipulating its cloud-based transcription endpoint, enabling any locally run app or terminal command to obtain the Muse authentication token and take full control of the account; security researcher Patrick Wardle demonstrated PoCs that could write files or snap photos, highlighting risky design choices around cloud dictation and broad app privileges. Amazon has begun blocking Muse on its site, and questions about Muse’s security and privacy remain despite Meta’s public statements.
Apple's macOS 27 Golden Gate adds about 50 features across Siri AI, the system UI, and apps—from a Spotlight-powered, conversational Siri experience and new visual refinements to full‑resolution Shared Albums, resizable iPhone Mirroring windows, real-time widgets, and smarter organization in Finder and Mail. It also brings Photos editing boosts (save video frames, reframing, image extension), a dedicated Siri app for past conversations, natural-language shortcuts and reminders, enhanced Safari workflows, and broader Apple Intelligence integration. Intel Rosetta support ends in this release, and some features vary by language/region with Apple emphasizing AI availability and performance improvements across the Mac ecosystem.
macOS 27 Golden Gate (Apple Silicon only) emphasizes stability and bug fixes while adding 10 practical hacks: dial back Liquid Glass effects for readability; use iOS-style pull-to-refresh across compatible apps; draw in Apple Notes and Freeform with new tools; a dedicated Siri app for timers, reminders, and questions; Visual Intelligence to analyze screen content; AirPlay to your Mac in a resizable window via a Terminal command; automatically organize related tabs in Safari (with optional Show Related Tabs); Describe Extension to generate Safari extensions using AI; hide the 'Ask Siri' item from the right-click menu; and enable keyboard-based navigation of the menu bar using Terminal tweaks.
Apple rolls out macOS 27 Golden Gate with a refreshed Liquid Glass UI, a dedicated Siri AI app and broader Apple Intelligence on-device models, plus Safari upgrades (Notify Me, Describe an Extension, tab grouping, pull-to-refresh), Shortcuts enhancements, and new Photos tools, all while boosting performance and reliability; iPhone Mirroring gains resizable windows but remains EU-limited, Rosetta support ends with this release, and some features require newer Apple silicon (A18 Pro, M1+) and regulatory clearance.
ClickFix has become a mainstream malware delivery method that tricks users into pasting a single malicious command from a fake CAPTCHA overlay on compromised sites, bypassing code-signing and Gatekeeper protections and enabling infections on Windows and macOS; campaigns span Google Sheets-based control and blockchain-hosted infrastructure, with about 5,400 sites involved, but defenders like BlockBlock and uBlock offer mitigations, and researchers urge awareness over user-blaming.
Apple has confirmed macOS 27 Golden Gate will launch on September 14 alongside iOS 27 and other OS updates, introducing a new Siri app, an AI-powered Shortcuts app and extension builder, plus Safari pull-to-refresh, improved iPhone mirroring, and Podcasts video support; a list of compatible Macs ranges from the 2026 MacBook Neo to the Mac Pro (2023), with advanced Siri features limited to Macs with M3 and at least 12GB RAM.