Apple Patches iOS Bug Exposing Deleted Signal Messages
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Apple shipped iOS 26.4.2 and iPadOS 26.4.2 on Wednesday, fixing a bug that stored notifications for messages users had already deleted on iPhone and iPad.
- Law enforcement leveraged the flaw to extract deleted Signal messages from devices, with the FBI linked to the forensic technique across multiple reports (TechCrunch, BleepingComputer, AppleInsider).
- Neowin reported the bug was used to recover deleted chats from an alleged Antifa member's iPhone, while Blaze Media tied the same technique to an FBI case against an 'anti-ICE attack squad.'
- Forbes issued an 'Update Now' warning to iPhone users, and Apple's support page published security advisory 127002 documenting the patch.
- Apple also released iOS 18.7.8, giving users on older iOS versions the same notification-retention fix (iPhone in Canada, Forbes).
- Signal's end-to-end encryption was not the weak link — the notifications were previews generated by Apple's OS, meaning messages were exposed even after being deleted inside the app.
Why it matters: For every iPhone and iPad user relying on Signal for genuinely private conversations, updating to iOS 26.4.2 closes a hole that was actively exploited in real investigations — and the bug only got fixed because a forensic case made it public. Apple also backported the patch to iOS 18.7.8, so users on older versions have an off-ramp before support fully shifts to iOS 26.
