Home / Technology / iPhone Notification Flaw Exposes Deleted Signal Messages
iPhone Notification Flaw Exposes Deleted Signal Messages
29 Apr
Summary
- FBI accessed deleted Signal messages through iPhone notification logs.
- An iOS update now patches the vulnerability used by law enforcement.
- The exploit targeted incoming messages logged before notification expiry.
Law enforcement agencies have demonstrated the ability to recover deleted Signal messages from iPhones by leveraging a vulnerability in iOS's notification logging system. Even when messages were set to disappear and the Signal application was uninstalled, previews of incoming messages remained accessible in the notification database.
This method did not involve breaking Signal's encryption but rather analyzing the phone's built-in notification logs. It's important to note that this technique primarily allowed for the extraction of incoming messages, as outgoing messages are not typically logged in notifications. The FBI's success suggests the targeted iPhone was likely unlocked or in an 'After First Unlock' (AFU) state.
Apple has addressed this security concern by releasing iOS version 26.4.2, which rectifies the issue by ensuring notification logs are adequately purged after notifications expire. Users are advised to update their iPhones to benefit from this enhanced privacy protection.
