Skip to playerSkip to main content
Apple’s latest iOS update (26.4.2) fixes a critical security flaw that allowed deleted push notifications to remain accessible on iPhones and iPads – and law enforcement agencies like the FBI reportedly exploited it.

Key takeaways:
✅ Update now if you’re on iPhone 11 or later, or eligible iPad models
✅ Deleted notifications were unexpectedly retained on-device
✅ The FBI used a tool to view local Signal data post-deletion
✅ Signal asked Apple to patch this – and Apple finally did
✅ EFF: Limit notification content on the lock screen for extra privacy

🔒 Worried about your notification privacy?
Go to Settings → Notifications → Signal (or any sensitive app) → disable “Show Previews” or set to “When Unlocked.”

📢 Subscribe for more security and privacy updates.

#iOSupdate #ApplePrivacy #FBI #SignalApp #NotificationFlaw #CyberSecurity

Category

🗞
News
Transcript
00:04Hello and welcome to Global Pulse News.
00:07A new iOS update from Apple closes a security flaw that allowed deleted push notifications
00:14to remain accessible on iPhones and iPads, potentially exposing them to law enforcement.
00:21The update, iOS 26.4.2, introduces improved data redaction.
00:27According to Apple, it fixes an issue where notifications marked for deletion were unexpectedly retained on the device.
00:36The patch is available for iPhone 11 and later models, as well as multiple generations of iPad Pro, iPad Air,
00:45iPad, and iPad Mini.
00:47The vulnerability had been exploited by agencies including the FBI.
00:51A report from 404 Media detailed how the Bureau used a tool to access signal notification data stored locally on
01:01an iPhone even after the user had deleted it.
01:04The Electronic Frontier Foundation notes that such flaws offered one way for law enforcement to bypass Apple's privacy protections.
01:13This is especially significant because since 2023, Apple has required a court order to share notification data.
01:23Signal's CEO, Meredith Whitaker, previously acknowledged the issue on BlueSky.
01:28She stated, and we quote,
01:30Notifications for deleted messages shouldn't remain in any OS notification database.
01:36She added that Signal had asked Apple to address the problem.
01:40At the time, Whitaker advised Signal users to adjust their settings so that push notifications would not display message content
01:49or sender names.
01:51Signal expressed approval on BlueSky, saying it is, quote,
01:55Very happy that today Apple issued a patch and a security advisory.
02:00The Electronic Frontier Foundation warns that notification privacy remains vulnerable in two key areas.
02:07First, in the cloud, where notifications pass through company servers and may be partially logged as metadata.
02:15And second, on the device's local storage, where notifications are received.
02:21While Apple's update is designed to make deleted notifications properly inaccessible,
02:27the EFF adds that limiting the visible content of notifications from the outset is also worth considering.
02:34That concludes this update.
02:36Stay tuned for more technology news.
Comments

Recommended