News.Ycombinator FBI Recovers Deleted Signal Messages from iPhone Notifications
Article Content
- •FBI extracted deleted Signal messages from an iPhone using notification data.
- •Only incoming messages were recoverable; outgoing messages were not stored.
- •Users are advised to disable message previews in notifications for better privacy.
The FBI successfully extracted deleted Signal messages from an iPhone during a trial related to vandalism at the Prairieland ICE Detention Facility in Texas. The messages were retrieved from the device's internal notification storage, despite the Signal app being uninstalled. Testimony revealed that incoming messages could be preserved in the notification database, particularly if message previews were enabled. Only incoming messages were recoverable; outgoing messages were not stored in the same manner. This incident highlights a potential vulnerability in how iOS handles notification data, raising concerns for privacy-focused messaging apps. Security experts emphasize the importance of adjusting notification settings to prevent sensitive information from being stored. The case has drawn attention to the broader implications for privacy and data security on mobile devices. Neither Signal nor Apple provided comments on the notification handling process.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (33)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…