Security news
Apple Tightens macOS Full Disk Access Controls for AI Agents
The company announces measures to restrict how artificial intelligence agents access system data.
Apple has announced plans to implement stricter controls over the Full Disk Access (FDA) setting on macOS. This change is driven by growing security concerns related to the increasing use of artificial intelligence agents on the platform.
The update aims to address risks posed by developers who may utilize FDA permissions in ways that endanger user privacy. According to reports, some applications are accessing system data without sufficient transparency or user awareness.
Current FDA permissions allow software to read and write data across the entire file system. This includes access to personal files, email content, instant messages, and browsing history. The concern is that users may not fully understand the extent of this exposure when granting such broad permissions.
Apple states that some developers are exploiting these wide-ranging permissions. By doing so, they can expose comprehensive user data without the user's full knowledge or explicit consent for each specific data type. This lack of granularity in permission requests presents a significant privacy vulnerability.
The initiative reflects Apple’s ongoing effort to balance feature functionality with robust security standards. As AI integration becomes more common in desktop operating systems, the potential attack surface for privacy violations expands. Stricter controls are necessary to ensure users remain in control of their data.
This move comes amid broader industry scrutiny of how operating systems manage access rights for third-party applications and automated agents. The goal is to prevent unauthorized or excessive data collection by software entities running on user devices.
Apple’s announcement highlights a shift towards more granular permission models. By tightening FDA controls, the company aims to provide clearer boundaries for what AI agents can access. This ensures that user data remains protected against potential misuse by overly permissive application code.
See what applies to your environment.
Use the Ncerio CVE feed to move from general intelligence to affected products.
