Do Son Apple tightens macOS Full Disk Access in macOS 27.3, requiring manual app authorization to prevent AI agents from accessing sensitive personal user files.
Full Disk Access
Discover why Apple is restricting Full Disk Access for macOS AI agents like Meta Muse to protect user privacy and secure the operating system sandbox.
A critical flaw (CVSS 9.8) in macOS file copy APIs allows apps to bypass sandboxing and TCC protections to access protected user data. A PoC is public.
A critical flaw (CVE-2025-24103) in macOS InstallAssistant allows a normal user to bypass TCC, exposing private data. A PoC is public, urging users to update to 15.3.