Apple adjusts macOS Full Disk Access to curb AI agent misuse

Apple said it is changing macOS privacy settings to prevent third-party app developers from abusing these settings to access message history. The announcement came two weeks after tech columnist Jason Aten said Meta's general-purpose AI agent Muse sent him an unsolicited notification quoting a conversation he had with a colleague in Apple Messages. Aten said he never granted Muse permission to read his messages. Meta CTO David Singleton responded that Muse's Messages integration is opt-in and can only read message content if macOS system-level Full Disk Access is granted and the Messages connector is enabled. macOS security expert Patrick Wardle questioned this claim, noting that from a technical standpoint, an app with Full Disk Access can read any non-root file, including browsing history, browser cookies, and chat logs.