Privacy is a growing concern in today’s world. Follow along with all our coverage related to privacy, security, what Apple and other companies are doing to keep your information safe, and what steps you can take to keep your information private.
9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform.Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.
In this week’sSecurity Bite, I’m taking it back over 20 years to the launch of Gmail in 2004–because that’s how long its little-known plus addressing (aliasing) feature has quietly existed. It was originally created to help with filtering and keeping inboxes tidy long before spam became what it is today. Google never really promoted it, so most people still don’t realize it’s a thing. But over the years, it’s become popular among privacy-minded folks to track which online services, subscriptions, etc., are selling email addresses to other companies or leaking them.
At least five VPN apps in the App Store were found to have links to the Chinese military, according to a new report today. Three of them have racked up more than a million downloads.
A subsidiary of one of the Chinese companies behind the apps is currently hiring for a role in “monitoring and analysing platform data,” with a familiarity with American culture listed as a job requirement …
Apple has been fined $162M by France’s competition regulator for the way App Tracking Transparency is implemented, stating that this is an abuse of the company’s powers.
This bizarre ruling follows a complaint by a group of trade associations representing advertisers who are no longer able to access user data to serve personalized ads …
The Meta AI chatbot is finally rolling out to European countries from this week, and will be accessible in Instagram, WhatsApp, Facebook, and Messenger. However, the headline feature of Ray-Ban Meta smart glasses will not be available.
Apple has been running a variety of ads over the past year pushing Safari as the privacy-friendly browser choice for iPhone, iPad, and Mac users. But in iOS 18.4 beta 1, there’s a new Safari feature that may accidentally undercut that message—despite offering solid utility.
Update 3/19/25: Added information about a change in iOS 18.4 beta 4 below.
The long wait for a smarter Siri is to get even longer, with some indications that the new features we were originally expecting in iOS 18.4 may now be pushed back to iOS 19.
Apple hasn’t provided any real explanation, but two theories have so far been put forward, and now a developer and data analyst has suggested that security concerns may be a third reason – and by far the biggest problem …
So Apple standing up to the UK government’s attack on ADP might not seem a big deal – but I’d argue that it’s way more important than it might seem, for three reasons …
The UK’s privacy watchdog has announced a “major investigation” into the child protection measures of three popular apps: TikTok, Reddit, and Imgur.
The Information Commissioner’s Office (ICO) said that it has previously succeeded in bringing about child protection changes on X, Sendit, BeReal, Daily Motion, and Viber …
Apple introduced app privacy labels to help people better understand what data an app may collect, including what data is linked to them or used to track them across the web. When released back in 2020, the labels set a precedent in the industry and were a major first step in raising awareness of privacy-invasive apps. It was now easy for users to compare something like Signal, which collects virtually no data at all, and Facebook Messenger, which gobbles up anything it can use to sell advertising or better its services. The feature set out to help users make informed downloads.
However, in recent years, I have seen a growing conversation around whether these entirely self-reported labels located further down on the application’s App Store page still impact the user’s decision before hitting “Get” to install.
9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform.Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.
Apple has been under investigation by authorities in France for nearly two years over App Tracking Transparency, a privacy feature that lets iPhone users decide whether their activity can be tracked by advertisers or not. You’ve likely seen many of the ‘Ask App Not to Track’ pop-ups. Now, per a new Reuters report, the case is about to wrap up and looks set to end unfavorably for Apple.
In a world in which privacy is a hot-button issue, we might have expected Brits to be outraged that their government was responsible for Apple withdrawing Advanced Data Protection from the UK. In reality, it’s gone largely unremarked.
A new Bloomberg piece suggests that’s because people care far less about privacy than they claim. While I do think there’s some truth to that, it’s not the primary reason …
NSO’s Pegasus spyware is one of the most frightening privacy threats an iPhone owner can face. Without you taking any action at all, it’s able to completely take over your phone, accessing almost all of the personal data stored on it, and some versions have been able to activate cameras and microphones.
Pegasus exploits zero-day vulnerabilities – security holes Apple doesn’t yet know about – but the iPhone maker has another way to fight back …
It was discovered last year that location data for US military and intelligence personnel serving overseas was being sold by a Florida-based data broker, but the source of that sensitive data was unclear at the time.
It’s now been claimed that the data was captured by a variety of mobile apps with revenue-sharing agreements with a Lithuanian ad-tech company, and then resold by an American company …
Multiple security flaws have been found in the DeepSeek iOS app, which is still one of the most popular downloads in the App Store after topping the charts when it first launched.
It’s being reported that the British government secretly ordered Apple to create a security backdoor into all content uploaded by iCloud users anywhere in the world.
Apple is certain to refuse the demand, leading to the possibility of a similar privacy stand-off to the one seen between the iPhone maker and the FBI back in the San Bernardino shooter case …
So-called macOS Stealers – malware that seeks to extract personal data like passwords and credit card numbers from your machine – is expected to be significantly more prevalent this year.
A new annual report on the state of malware says that Mac owners could be at almost as much risk as Windows PC users this year …
A Grubhub security breach has exposed personal data for both customers and drivers, says the company, after an “incident” involving a third-party contractor.
The company has not revealed the exact scale of the security fail, but has admitted that the personal data includes names, email addresses, phone numbers, and partial credit card numbers …
A Meta policy document describes the company’s fears that it could accidentally develop an AI model which would lead to “catastrophic outcomes.” It describes its plans to prevent the release of such models, but admits that it may not be able to do so.
Among the capabilities the company most fears are an AI system that could break through the security of even the best-protected corporate or government computer network without human assistance …
A zero-click WhatsApp spyware attack was made against 90 journalists and other “civil society members,” said Meta, which managed to detect the incident.
A zero-click attack means that victims don’t need to tap on a link or take any action in order for their devices to be compromised – simply receiving the message is enough …
If you’re using the Microsoft Defender VPN on Mac or iPhone as part of your Microsoft 365 subscription, there’s bad news. The company has revealed in a support document that the privacy feature will cease to work at the end of this month …
DeepSeek privacy concerns have led to investigations being opened in both the US and Europe, and seen the app removed from the App Store in Italy. It seems likely the same will happen in other countries.
Italian’s privacy regulator questioned whether the app complied with GDPR, a tough privacy law that applies across 30 different countries …
Security researchers have discovered two flaws present in all current iPhones, iPads, and Macs – as well as many earlier ones. The vulnerabilities, known as SLAP and FLOP, could potentially allow an attacker to see the current contents of your open web tabs.
The flaws were introduced in the A15 and M2 chips, and are also found in subsequent ones, up to and including the latest version of each device …
A judge has limited FBI powers to trawl through data obtained from tech giants like Apple, Google, and ISPs under FISA (the Foreign Intelligence Surveillance Act).
Separately, a Cloudflare privacy flaw has been identified in one of Apple’s IT service providers, which could have exposed the rough location of millions of web and app users before it was fixed …