:

APPLE FIXES BUG THAT LET POLICE ACCESS DELETED SIGNAL CHATS

INDUSTRY DESK2 MIN READ
THU, APR 23, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Apple has patched a vulnerability that retained Signal message data even after users deleted the app, potentially allowing law enforcement to access private communications. Signal confirmed the fix resolves the security issue.

Apple discovered and fixed a bug in iOS that cached Signal chat data in a way that persisted after users uninstalled the messaging app. The cached files could theoretically be accessed by authorities during device searches, creating an unexpected privacy vulnerability for Signal users. Signal, the encrypted messaging platform favored by privacy advocates and journalists, expressed satisfaction with Apple's remediation. The open-source messaging app relies on end-to-end encryption to prevent interception of communications, but the iOS caching issue created a backdoor of sorts—not through Signal's encryption, but through Apple's operating system. The bug affected how iOS managed temporary data and cache files associated with third-party applications. When Signal was deleted, fragments of chat data remained on the device in locations accessible to forensic tools commonly used by law enforcement and intelligence agencies. Apple did not publicly disclose the vulnerability before patching it, which is standard practice for security fixes. The company typically addresses such issues silently through regular iOS updates to avoid alerting bad actors to exploitable gaps. The incident highlights the complex intersection of app security and operating system design. Even when application developers implement strong encryption—as Signal does—the underlying platform can inadvertently undermine those protections through caching, temporary files, or other system-level functions. Signal has long positioned itself as a privacy-first alternative to mainstream messaging apps. The platform has gained particular traction among activists, lawyers, and security professionals who require strong guarantees that their conversations cannot be intercepted or accessed by third parties. For typical Signal users, the patch requires updating to the latest iOS version. No evidence has emerged suggesting the vulnerability was exploited in the wild before being fixed.

■ SOURCES

Ars Technica

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.

YESTERDAYIndustry Desk

Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.

YESTERDAYSecurity Desk

Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.

YESTERDAYIndustry Desk

Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.

YESTERDAYSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.