HEADSPACE APP MYSTERIOUSLY REINSTALLING ON iPHONES DAILY

INDUSTRY DESK■ 1 MIN READ

SUN, APR 26, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Users report the Headspace meditation app silently installing itself on iPhones every day around 1pm EST, despite having automatic downloads disabled. The issue has affected multiple iPhone models over the past three days.

Multiple iPhone users have reported finding the Headspace app automatically appearing on their devices daily, even with automatic downloads turned off in settings. The issue began approximately three days ago and occurs consistently around 1pm EST. Affected devices include iPhone 13 Pro, iPhone 12, and iPhone 17 models, suggesting the problem is not device-specific. Users have updated to the latest iOS version without resolving the issue. The cause remains unclear. Possible explanations include a misconfigured app store setting, a bug in iOS, or an issue with Headspace's distribution system. Apple's automatic app reinstallation feature typically only restores previously purchased or downloaded apps—not apps users never installed. Headspace and Apple have not publicly addressed the reports. Users experiencing the issue should check their Apple ID purchase history and disable automatic app downloads in Settings > App Store. Those affected are advised to report the problem to Apple Support.

■ SOURCES

► Hacker News

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P624US CHARGES THREE RUSSIANS FOR BULLETPROOF HOSTING

U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.

5H AGO— Industry Desk

P620CISA ALERTS: SHAREPOINT FLAWS UNDER ACTIVE ATTACK

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.

5H AGO— Security Desk

P615TAILSCALE SSH FLAW ENABLED UNAUTHORIZED ROOT ACCESS

Tailscale disclosed a critical vulnerability in its SSH implementation that allowed attackers to gain root access through insecure argument handling. The flaw has been patched in recent versions.

7H AGO— AI Desk

P614SOCIAL NETWORKS DRIVE MILLIONS TO DEEPFAKE SITES

A new study found that social media platforms referred over 5.7 million visits to nonconsensual deepfake pornography sites between December 2025 and March 2026, with YouTube and X accounting for the majority of traffic.

10H AGO— Industry Desk

◄ BACK TO NEWS

HEADSPACE APP MYSTERIOUSLY REINSTALLING ON iPHONES DAILY

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF