Skip to main content

Privacy

See All Stories

Privacy is a growing concern in today’s world. Follow along with all our coverage related to privacy, security, what Apple and other companies are doing to keep your information safe, and what steps you can take to keep your information private.

DOJ forced Apple to hand over customer call and message data without the required authorization

DOJ did not follow procedure when demanding customer call and message data from Apple | Office of the Inspector General report graphic

An official government report has concluded that the Trump-era Department of Justice (DOJ) did not obtain the required authorizations before demanding customer call and message data from Apple and others.

It also failed to obtain authorization from the Attorney General before imposing a gag order on Apple, preventing it from disclosing the fact that it had been forced to hand over the personal data

Expand Expanding Close

Scan your iPhone for Pegasus spyware using a $1 app

Scan your iPhone for Pegasus spyware using a $1 app (screengrabs shown)

A newly-released app lets you regularly scan your iPhone for Pegasus spyware – which can access almost all the data on a phone – for a one-off cost of just one dollar.

A mobile security firm created the app, which allows you to scan your iPhone or Android phone and send the results to them for analysis – and they’ve so far detected seven phones infected by the spyware …

Expand Expanding Close

Data brokers may be banned from selling your personal data without good reason

Data brokers may be banned from selling your personal data | People in an office working with data

Data brokers may be banned from selling your personal data without legitimate justification, under a new proposal by the Consumer Financial Protection Bureau (CFPB). Back in the summer it was revealed that one of these brokers was hacked, resulting in the compromise of personal data for every person in the US, UK, and Canada.

The proposed change would limit the sharing of sensitive data like your name and social security number by subjecting data brokers to the same rules as credit checking agencies …

Expand Expanding Close

Zoom offers a further $18M for lying to users about video encryption

Zoom offers a further $18M for lying to users about video encryption | Company campus pictured

Popular video conferencing platform Zoom agreed to pay $85M in compensation back in 2021 after it was revealed that the company lied to users about the type of encryption it offered. It has now offered to pay an $18M fine to the Securities & Exchange Commission (SEC) in order to settle an investigation into the same security and privacy issue.

Zoom disclosed the offer in a regulatory filing …

Expand Expanding Close

Yes, the 10 worst passwords still include ‘password’ and ‘secret’

Some six years after virtual private network company NordVPN started searching data breaches for the most-used passwords, things are every bit as bad as when the company started.

Each year, the company searches the dark web for passwords stolen by malware or exposed in security breaches to determine the most commonly-used passwords, and this year’s crop is as depressing as ever …

Expand Expanding Close

The reported Apple smart home camera will combine ultimate privacy with Apple Intelligence

An Apple smart home camera will combine privacy with Apple Intelligence (Xiaomi camera shown on desk with flowers in vase)

Earlier this week Ming-Chi Kuo suggested that we’ll see an Apple smart home camera in 2026, with the company confident it will prove to be a popular accessory, selling in the tens of millions per year.

Given Apple’s habit of minimizing the number of products it makes, if the report is accurate the company must feel there’s good reason to enter a crowded product category, and I think an Apple camera will likely differentiate itself in two ways: privacy, and Apple Intelligence

Expand Expanding Close

More than 100 million Americans had their health data exposed in a UnitedHealth hack

Patients and doctors were victims of a massive UnitedHealth hack | Doctor using smartphone

A UnitedHealth hack exposed the personal information and health data of more than 100M Americans – the first time the company has put a specific number on the security breach.

A ransomware attack was made on Change Healthcare back in February, but it was only yesterday that the company revealed its “unprecedented magnitude” …

Expand Expanding Close

iPhone Mirroring is currently a privacy and legal risk on work Macs

iPhone Mirroring currently a privacy and legal risk on work Macs | Screengrabs of feature in use

One of the new features of iOS 18 and macOS Sequoia is iPhone Mirroring – but using this with a personal iPhone on a work Mac currently creates a privacy risk for employees, and a legal risk for businesses.

The problem, as cybersecurity company Sevco discovered, is that apps on the iPhone get treated as Mac apps, and that means their presence is included in corporate IT audits …

Expand Expanding Close

Security Bite: The concerning popularity of third-rate VPN apps in Russia

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.


I’m in the midst of traveling to Ukraine this week for OFTWv2.0, and I can’t help but think about the comments on last week’s edition of Security Bite defending the VPN apps that still exist on the App Store in Russia. While almost every app from legitimate providers in the country has been removed, Russian users can still find a surplus of VPN options claiming to offer secure encryption and private browsing. The only question being–really?

Expand Expanding Close

T-Mobile data breaches: Company pays fine and promises to do better

T-Mobile data breaches see company fined | NASA photo of the Earth

A succession of T-Mobile data breaches saw millions of customers have their personal data exposed. The company has now been fined $15.75M, and has agreed to spend the same amount again on upgrading its security.

The Federal Communications Commission (FCC) says that the combination of fine and promised security enhancements represents a model for future handling of such incidents …

Expand Expanding Close

Security Bite: Apple pulls dozens of VPN apps from App Store in Russia

Russia Apple App Store VPN apps

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.


Since Russia’s full-scale assault on Ukraine, Apple has significantly scaled back its operations in the country. It has since suspended all product sales and limited certain services, such as Apple Pay. Despite this, Apple continues to operate a full-fledged App Store in Russia. However, it’s now facing worthy criticism for complying with Russian government requests to remove VPN apps to adhere to local regulations–censorship.

Expand Expanding Close

GAZEploit could work out Vision Pro user passwords from watching their avatars [Fixed]

GAZEploit | Victim and attacker views of the attack in action

Security researchers came up with a pretty wild Vision Pro exploit. Dubbed GAZEploit, it’s a method of working out the passwords of Vision Pro users by watching the eye movements of their avatars during video calls.

They’ve put together a YouTube video (below) to demonstrate how tracking the avatar’s eye movements accurately detects the virtual keys the Vision Pro user is looking at when typing …

Expand Expanding Close

Apple Intelligence servers are really basic, says Craig Federighi – and that’s deliberate

Apple Intelligence servers are really basic | Ok, not quite as basic as this circuit board ...

Apple software SVP Craig Federighi says that the Private Cloud Compute servers used for Apple Intelligence features are really basic – and with good reason.

The exec says it’s one of a number of decisions the company made to ensure that it’s AI cloud servers form a “hermetically sealed privacy bubble” with your iPhone …

Expand Expanding Close

Security Bite: Apple addresses privacy concerns around Notification Center database in macOS Sequoia (Update)

apple security release page

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.


The privacy implications of Notification Center popups are well-known in the security forensics community. Whether a user likes it or not, macOS temporarily keeps a log of every notification received in a single plaintext database. This can include messages from applications like iMessage, Slack, Teams, and virtually anything else.

However, it now appears Apple has moved the Notification Center database in macOS Sequoia to address concerns.

Expand Expanding Close

Manage push notifications

notification icon
We would like to show you notifications for the latest news and updates.
notification icon
You are subscribed to notifications
notification icon
We would like to show you notifications for the latest news and updates.
notification icon
You are subscribed to notifications