Apple has fixed a critical security bug that was storing push notification data from encrypted apps like Signal for up to a month, even after messages were deleted. This vulnerability allowed law enforcement to access supposedly deleted message content through forensic extraction. The fix addresses what Apple described as a 'logging issue' that unexpectedly retained notification data on devices.
Background
Encrypted messaging apps like Signal are widely used by privacy-conscious users who rely on end-to-end encryption to protect sensitive communications from surveillance.
- Source
- Ars Technica
- Published
- Apr 24, 2026 at 12:37 AM
- Score
- 8.0 / 10