CyberNew CyberNew
Threat Intelligence & APT SecurityWeek 1 week ago

Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks

CN
CyberNew Threat Research Desk
• Original Reporting: SecurityWeek
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Client Endpoints & Operating Systems
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"Apple has announced tightened Full Disk Access controls in macOS in light of the risks posed by continuously evolving AI agents. Apple introduced Full Disk Access in macOS Mojave (10.14) to provide users with control over applications’ access to the entire system. The feature can be toggled on or off from Apple menu > System Settings > Privacy & Security . By default, macOS restricts applications..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Data protection

Apple has announced tightened Full Disk Access controls in macOS in light of the risks posed by continuously evolving AI agents.

Apple introduced Full Disk Access in macOS Mojave (10.14) to provide users with control over applications’ access to the entire system. The feature can be toggled on or off from Apple menu > System Settings > Privacy & Security.

By default, macOS restricts applications from accessing system-protected areas and sensitive user data. Granting an application Full Disk Access waives these protections, allowing that software to read or modify private files, including a user’s mail, messages, and browsing history.

Improperly managed Full Disk Access permissions may result in malicious applications gaining access to sensitive information, and Apple is now planning tightened controls around it, as AI agents and modern applications are increasingly requesting Full Disk Access.

According to Apple, some applications are using Full Disk Access in ways that could put users at risk by exposing their files, mail, messages, and browsing history without users’ full knowledge and understanding.

“For communication apps, this can also compromise the privacy of the people users are communicating with,” Apple said on Friday.

Advertisement. Scroll to continue reading.

Written By Ionut Arghire

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from SecurityWeek.

Primary Advisory →