Apple released iOS and iPadOS updates to fix CVE-2026-28950, a logging bug that allowed deleted message notifications to be retained and later recovered. The flaw appears to have been used by law enforcement to extract Signal chats in the Prairieland case, and Signal confirmed the patch removes inadvertently preserved notifications. #CVE-2026-28950 #Signal #Apple #FBI #Prairieland #Antifa
Keypoints
- Apple issued iOS 26.4.2, iPadOS 26.4.2, iOS 18.7.8, and iPadOS 18.7.8 to address CVE-2026-28950.
- The vulnerability was a logging issue that caused notifications marked for deletion to be retained on the device.
- Reports indicate the FBI exploited the issue to recover Signal messages from a device connected to the Prairieland case.
- The updates improve data redaction so inadvertently preserved notification previews are deleted.
- The security fixes are available for a wide range of iPhone and iPad models from iPhone XR/XS and 5th-gen iPad mini to iPhone 16 series and iPad Pro 13-inch (M4).
Read More: https://www.securityweek.com/apple-patches-ios-flaw-allowing-recovery-of-deleted-chats/