Apple Tightens macOS Full Disk Access Amid AI Privacy Concerns

Apple has announced steps to tighten controls around the macOS setting called Full Disk Access (FDA) due to security risks posed by artificial intelligence (AI) agents. Some developers are using FDA in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users' full knowledge¹.

The FDA setting allows applications to read or modify any file outside their designated containers; it was originally intended for professional video editing software but its broad scope enables malicious actors or poorly designed agents to silently collect user data. Similar concerns led Microsoft to restrict background learning in Windows 10’s early years after privacy researchers demonstrated the system could be used as an untrusted proxy server without explicit consent from users accessing websites that use third‑party trackers such as Google Analytics (GA).

Starting with the release of macOS Monterey in December 2023, developers seeking full‑disk read/write permissions must now declare how they intend this elevated privilege is utilized within each app's manifest file before submission into App Store review process. This change will increase scrutiny over future mobile operating system updates targeting machine intelligence capabilities across all platforms globally.

Security specialists note that many “AI agents” are essentially glorified scripting engines with broad permissions, and the predictable PRNG used in Rejetto HFS recalls the Heartbleed vulnerability where a similar weakness allowed attackers to extract server secrets. The FDA’s lax controls have created an analogous risk for user data on Macs, prompting Apple’s policy shift¹.

For users, the move means greater transparency about what apps can access on their devices. Developers may face stricter compliance requirements and potential pushback, but the change aims to curb silent data harvesting by AI agents. Industry experts predict increased scrutiny over future updates and anticipate further regulatory pressure on tech companies to protect consumer digital asset ownership rights¹.

In practice, Mac OS users should stay informed about which apps request FDA privileges and consider disabling or uninstalling those that do not require such extensive access. Patching promptly remains essential as vulnerabilities like CVE-2026-61500 illustrate how weak cryptographic primitives can expose systems to session forgery and remote code execution¹.

Apple’s decision signals a broader trend toward tighter privacy safeguards amid growing concerns around AI‑driven data collection. Users benefit from enhanced control over personal information while developers must balance functionality against heightened security demands.