[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

3 clusters · 125 sources · 3 days · First seen · Last updated

Tech industry tightening data permission controls

Overview

Apple is implementing updates to macOS Full Disk Access (FDA) permissions to mitigate privacy risks posed by increasingly autonomous AI agents. These tools have the potential to access sensitive user data, including files, emails, messages, and browsing history.

The decision follows controversies regarding how third-party applications, specifically AI assistants, utilize high-level system permissions. This includes reports involving Meta’s Muse AI agent, which was accused of accessing private messages without explicit authorization. While Meta has disputed these claims—stating that access to Messages is strictly opt-in and requires both FDA and a specific Messages connector—security experts have argued that granting FDA allows applications to read nearly all non-root files, such as cookies and chat logs.

In a recent development, Amazon has reportedly blocked Meta’s Muse from its platform, citing a need for applications to respect service provider decisions.

Apple’s new policy aims to ensure users are fully informed of the risks before granting such extensive permissions. The company noted that while FDA is necessary for certain applications like backup software, the potential for misuse of system data increases as AI capabilities grow. To address these risks, Apple intends to introduce new controls requiring ‘very explicit user action’ and more explicit, step-by-step confirmation prompts before an application can be granted such extensive system access. This adjustment seeks to prevent developers from exposing user data without clear, informed consent.

In a broader industry context, Google is also addressing data permission vulnerabilities. On Android, hackers have been exploiting Accessibility Services to facilitate banking trojans and overlay attacks. In response, Google is introducing stricter limitations for apps requesting these services in Android 17 under Advanced Protection mode.

Entities

Meta · Apple · macOS · Muse · macOS

Claims

What the coverage asserts, and how many sources carry each claim.

Coverage disagrees

Sources make claims that cannot both be true. CLSTR reports the disagreement; it does not decide who is right.

Timeline

  1. [TECHNOLOGY] 24 sources
    Apple to tighten macOS Full Disk Access controls due to AI agent privacy risks

    Apple is tightening macOS Full Disk Access controls to protect user privacy from autonomous AI agents following reports of Meta’s Muse accessing private messages without explicit authorization.

  2. [TECHNOLOGY] 6 sources
    Apple and Google tighten data permissions to combat malware and AI privacy risks

    Apple and Google are tightening system permissions to prevent malware and AI assistants from accessing sensitive data like private messages and banking credentials via broad accessibility and disk access rights

  3. [TECHNOLOGY] 98 sources
    Apple to tighten macOS Full Disk Access controls due to AI agent risks

    Apple is tightening macOS Full Disk Access controls to protect user privacy against risks from autonomous AI agents that can access sensitive files, messages, and emails.

Sources

1001web.fr · 24-ore.com · 9to5mac.com · actualidadiphone.com · ad-hoc-news.de · agcensus.usda.gov · allgaeuer-anzeigeblatt.de · antaranews.com · appliste.cz · arstechnica.com · au.pcmag.com · begeek.fr · bhaskarhindi.com · bhaskarlive.in · bilkulonline.com · blockchainreporter.net · blog-nouvelles-technologies.fr · borncity.com · chip.cz · classics.itmedia.co.jp · computerworld.com · cryptobriefing.com · cryptopolitan.com · cybernoz.com · danshihack.com · deccanchronicle.com · dev.to · DiePresse.com · dtnext.in · entrevue.fr · epochtimes.de · espiganoticias.net · europesays.com · faz.net · finance.technews.tw · finanzen.ch · forkast.news · fortunegreece.com · game.techbang.com.tw · gamebusiness.jp · games.yahoo.com.tw · gamesite.zoznam.sk · generation-nt.com · generationiphone.fr · giga.de · gigazine.net · gizchina.it · gr.pcmag.com

This summary has been updated 7 times: see revision history