Skip to content
Tech News
← Back to articles

Apple just fixed an iOS flaw exploited by the FBI - here's what happened

read original get Apple iPhone Screen Protector → more articles
Why This Matters

Apple's quick fix in iOS 26.4.2 addresses a critical security flaw that allowed the FBI to access deleted Signal messages through push notifications, highlighting vulnerabilities in encrypted messaging apps. This update underscores the ongoing importance of robust security measures for both consumers and the tech industry, especially as law enforcement seeks ways to bypass encryption. Ensuring such flaws are patched promptly helps protect user privacy and maintains trust in mobile operating systems.

Key Takeaways

Lance Whitney/ZDNET

Follow ZDNET: Add us as a preferred source on Google.

ZDNET's key takeaways

iOS 26.4.2 fixes a flaw that allowed access to deleted texts.

The FBI exploited this flaw to recover messages from a Signal user.

The patch should protect other messaging apps from this weakness.

Many people use the popular Signal app to send and receive encrypted text messages. As an added bonus, you can set all texts to automatically disappear after a certain amount of time. But those protections don't help as much if there's an underlying flaw in your device's operating system. And that's exactly what happened, and why Apple had to fix it.

On Wednesday, Apple released its latest minor update for iOS (and iPadOS). The release notes for iOS/iPadOS 26.4.2 show only one vulnerability patched by the new version. Impacting the notifications service on your iPhone or iPad, the note simply says: "Notifications marked for deletion could be unexpectedly retained on the device."

Also: What is Signal? 7 features that make it a go-to app for private, secure messaging

... continue reading