Apple releases iOS 26.4.2 to patch deleted Signal message security flaw
Updated
Updated · CNET · May 1
Apple releases iOS 26.4.2 to patch deleted Signal message security flaw
10 articles · Updated · CNET · May 1
The iPhone and iPad update addresses a bug that let the FBI read Signal messages from retained notification copies even after the app was deleted.
Apple's security note says notifications marked for deletion could be unexpectedly kept on devices, and the fix improves data redaction in iOS and iPadOS 26.4.2.
The flaw surfaced after early April reporting on a defendant's phone, underscoring that seemingly minor Apple updates can close serious privacy gaps.
The FBI read deleted Signal texts from iPhones. What other 'deleted' data is still secretly stored on your device?
Apple fixed this flaw only after public exposure. What other privacy promises are our devices quietly breaking right now?
The FBI says use Signal while exploiting it. Can we trust government advice on our digital security?