Apple Tightens macOS Full‑Disk Access Controls Amid Growing AI‑Agent Risks
What Happened – Apple announced that upcoming macOS releases will require users to explicitly grant “Full Disk Access” to applications. The change is driven by concerns that increasingly capable AI agents could misuse this permission to read files, emails, messages and browsing history without clear user consent. No rollout date or technical details were provided.
Why It Matters for Trust & Control Assurance
- Demonstrates the need for continuous monitoring of privileged permissions — a core element of an access‑control assurance program.
- Highlights the importance of documenting user consent and evidence of least‑privilege enforcement for audit readiness.
- Aligns with the Access Control objective in the Verisq Common Framework, which maps to many standards (e.g., NIST CSF 2.0, ISO 27001).
Who Is Affected – Enterprises that deploy macOS devices, especially those in regulated sectors (finance, health, government) where endpoint data privacy is critical.
Recommended Actions
- Inventory all macOS endpoints and catalog applications that currently hold Full Disk Access.
- Update internal policies to require documented justification and periodic review before granting this permission.
- Enable continuous monitoring of permission changes and retain evidence for audit trails.
Technical Notes – The control change targets a macOS permission model that bypasses standard sandboxing APIs. No specific CVE or vulnerability is disclosed; the risk stems from AI‑driven agents exploiting the permission to exfiltrate data. Source: Help Net Security