[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6NlebPgt9RZwRwT5RWp_rctfxDzMA1fyyBcOwGN8vSk":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":17,"status":18,"created_at":19,"published_at":20,"article":21,"tags":25,"podcasts":38,"controls":39},"9b8fc2c6-ae8f-4299-8463-ea1e10232681","ios-notification-logging-flaw-exposed-deleted-signal-messages-to-forensic-recovery","ef1f9f79-5ae6-43aa-a1b2-4eb204a7b243","iOS Notification Logging Flaw Exposed Deleted Signal Messages to Forensic Recovery","Apple's iOS contained a critical vulnerability (CVE-2026-28950) that retained deleted push notifications in a forensic-accessible database, undermining user expectations of data deletion. The FBI successfully recovered supposedly deleted Signal message content from a defendant's iPhone by accessing this notification database. This incident demonstrates how seemingly minor system functions like notification handling can create unexpected data persistence risks that compromise user privacy and security.","**Immediate actions:**\n- Apply iOS 26.4.2 and iPadOS 18.7.8 updates immediately to all organizational devices\n- Review and audit notification settings on all mobile devices to minimize sensitive data exposure\n- Implement mobile device management policies that enforce automatic security updates\n\n**Long-term improvements:**\n- Establish regular security assessments of mobile device data retention practices\n- Develop data lifecycle policies that address temporary system files and caches\n- Train users on privacy implications of push notifications for sensitive applications\n\n**Detection measures:**\n- Monitor mobile device compliance with latest security patches through MDM solutions\n- Implement regular forensic audits to identify unintended data retention on corporate devices",[12,13,14,15,16],"CIS Control 7 - Continuous Vulnerability Management","NIST SP 800-124 - Guidelines for Managing the Security of Mobile Devices","GDPR Article 17 - Right to Erasure","CIS Control 3 - Data Protection","NIST MP-6 - Media Sanitization",{},"published","2026-04-23T11:09:41.369765+00:00","2026-04-23T11:09:41.142+00:00",{"id":7,"url":22,"slug":23,"title":24},"https:\u002F\u002Fthehackernews.com\u002F2026\u002F04\u002Fapple-patches-ios-flaw-that-stored.html","apple-patches-ios-flaw-that-stored-deleted-signal-notifications-in-fbi-forensic--cdcc7f","Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case",[26,32],{"id":27,"name":28,"slug":29,"description":30,"color":31},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",{"id":33,"name":34,"slug":35,"description":36,"color":37},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",[],[40,43],{"slug":29,"name":41,"problem":42},"Automated patch management","Known holes get closed in days, not months.",{"slug":44,"name":45,"problem":46},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control."]