Executive Summary
Apple is tightening controls on macOS Full Disk Access because some developers use it in ways that expose files, mail, messages and browsing history to AI agents without users' full knowledge.
What Happened
Apple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to security risks posed by artificial intelligence (AI) agents. "Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history – without users' full knowledge
Affected Products
- macOS
Vulnerability / Attack Technique
Over-broad file access granted to AI agents
Technical Mechanism
Apps holding Full Disk Access can read everything on the system; agents built into such apps inherit that reach.
AI Security Category
LLM06:2025 Excessive Agency
Part of the AI Agent Excessive Agency topic.
Relevant Frameworks
RealGround Analysis
Broad OS permissions plus an agent equals broad data exposure. RealGround analysis: scope agent access by default rather than relying on the OS to catch it later.
Recommended Controls
- Audit apps with Full Disk Access on managed Macs
- Prefer agents that request folder-level access
Related RealGround Service
AI Agent Business Logic Audit · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/10/apple-plans-tighter-macos-full-disk.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-17.