started · updated
Apple to tighten macOS Full Disk Access controls due to AI agent risks
Apple has announced plans to tighten Full Disk Access controls within macOS to address growing privacy and security risks posed by increasingly autonomous AI agents. This permission, originally designed to allow backup utilities to function without interruption, enables applications to bypass standard macOS security restrictions and access sensitive data, including files, emails, messages, and browsing history.
The decision follows concerns regarding AI applications, such as Meta’s Muse, which have demonstrated the ability to access extensive local data. Reports indicated that Muse could access private communications, leading to heightened scrutiny over how much information autonomous agents can retrieve. Apple noted that as AI agents become more capable and capable of performing multi-step tasks, the potential for unintended data exposure increases.
To mitigate these risks, Apple will introduce more explicit user prompts. These new controls will require users to take a clear, deliberate action before granting high-level system permissions to third-party applications. The company aims to ensure users fully understand the implications of granting such broad access, particularly as AI agents move from simple chatbots to tools that can actively manage system-level tasks.
Entities
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 27 SOURCES] The rise of autonomous AI agents increases the security and privacy risks associated with broad system access. espiganoticias.net · www.1001web.fr · 24-ore.com · www.theverge.com · bhaskarlive.in · +22 more
- [● 7 SOURCES] Meta denied claims of unauthorized message access, stating that Muse requires both Full Disk Access and a Messages connector to be enabled. www.theverge.com · srnnews.com · www.tech360.tv · www.tokenpost.com · cryptobriefing.com · +2 more
- [● 14 SOURCES] Meta's Muse AI agent reportedly accessed private messages on a Mac without explicit user permission. 24-ore.com · www.theverge.com · bhaskarlive.in · www.itmedia.co.jp · mashdigi.com · +9 more
- [● 5 SOURCES] A vulnerability in the ChatGPT Mac application was reported to potentially allow unauthorized access to sensitive data. 24-ore.com · www.mundoconectado.com.br · www.techno-edge.net · www.newsbytesapp.com · espiganoticias.net
- [● 33 SOURCES] Apple will implement stricter controls for the Full Disk Access permission on macOS, requiring more explicit user action. espiganoticias.net · www.1001web.fr · 24-ore.com · www.theverge.com · bhaskarlive.in · +28 more
- [● 8 SOURCES] Full Disk Access was originally designed to allow backup and system utility applications to function by bypassing certain privacy controls. madhyamamonline.com · thetechnologyexpress.com · www.theverge.com · bhaskarlive.in · bilkulonline.com · +3 more
- [● 21 SOURCES] Full Disk Access can expose sensitive data including files, emails, messages, and browsing history. espiganoticias.net · thetechnologyexpress.com · www.theverge.com · bhaskarlive.in · bilkulonline.com · +16 more
- [● 17 SOURCES] Apple will introduce additional controls for macOS Full Disk Access, requiring more explicit user action to grant permission. espiganoticias.net · www.appliste.cz · www.danshihack.com · infokosova.net · madhyamamonline.com · +12 more
- [● 21 SOURCES] The risks of granting broad system access will grow as AI agents become more capable and autonomous. espiganoticias.net · www.appliste.cz · www.danshihack.com · infokosova.net · madhyamamonline.com · +16 more
- [● 19 SOURCES] Full Disk Access was originally intended for backup utilities to function without interruption. www.allgaeuer-zeitung.de · mrmad.com.tw · forkast.news · www.latestly.com · trn.mk · +14 more
- [● 8 SOURCES] Meta disputed claims regarding unauthorized access, stating that Muse's message integration is an opt-in feature. mrmad.com.tw · www.techbang.com · ictk.ch · entrevue.fr · trn.mk · +3 more
- [● 8 SOURCES] Meta’s Muse AI agent reportedly accessed private messages and local databases without explicit user authorization. mrmad.com.tw · forkast.news · www.techbang.com · ictk.ch · entrevue.fr · +3 more