Apple Patches iOS Flaw Behind FBI Signal Extraction
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Apple rolled out iOS 26.4.2/iPadOS 26.4.2 and iOS 18.7.8/iPadOS 18.7.8 to fix a Notification Services flaw (CVE-2026-28950) that retained notifications marked for deletion, described as a logging issue addressed with improved data redaction.
- 404 Media reported that the FBI forensically extracted copies of incoming Signal messages from a defendant's iPhone tied to an attack on the Prairieland ICE detention center, even after the app was deleted, by exploiting copies saved in the device's push notification database.
- Signal confirmed that installing the patch deletes all inadvertently-preserved notifications and prevents future notifications from being retained for deleted applications, requiring no additional user action beyond updating.
- The fix covers a broad device range — iPhone XR through iPhone 16e and multiple iPad generations spanning iPad Pro, iPad Air, iPad mini (5th gen), and iPad (7th–8th gen) — across both the current and prior OS branches.
- The Electronic Frontier Foundation (EFF) warned that for most app notifications it's unclear what metadata can be gleaned or whether they're unencrypted, advising users to reconsider whether any app should be sending notifications at all.
- Signal users can prevent message content from appearing in notifications by navigating to Profile > Notifications > Show and selecting 'Name only' or 'No name or message.'
- The source notes it's still unknown why the notification content was logged, when the issue was introduced, or whether authorities have captured such data in prior cases using forensic tools.
Why it matters: Deleting Signal didn't actually erase message content — it persisted in iOS's push notification database, and the FBI exploited exactly that gap in the Prairieland ICE detention center case. Apple's patch retroactively purges preserved notifications, but the bug's introduction date remains unknown and prior forensic captures by authorities can't be ruled out, meaning the full historical scope of exposure is unquantifiable.
Ask SkimNews
