9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Last week Apple told developers it’s adding new controls to Full Disk Access on the Mac, the permission that lets an app read nearly everything on the user's drive. Speculation on what exactly these changes will be have gone parabolic. So, in this solo episode I walk through what exactly Full Disk Access is, what Apple said is changing, what prompted it, and what we still don't know.

Let me know your thoughts in the comments.

• Security Bite: The last 24 hours at Meta were “not-a-musing”
• Full Disk Access on Mac: Here’s what Apple must, and must not, do
• Follow Arin on X and LinkedIn

• Apple Podcasts
• Spotify
• Amazon Music
• Pocket Casts
• RSS Feed

Security Bite is 9to5Mac’s weekly deep dive into the world of Apple security. Each week, Arin Waichulis unpacks new threats, privacy concerns, vulnerabilities, and more, shaping an ecosystem of over 2 billion devices. Every other week on the Security Bite Podcast, he sits down with experts in the field to break down the most pressing topics.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

This week, I sat down with Ananay Arora, founder and CEO of OpenHack, a Y Combinator startup building an "always-on AI security engineer" for finding vulnerabilities on Mac (and everywhere else). We get into how it works, what's going on with Apple's Security Bounty Program, and how to land your first CVE. I hope you enjoy!

• Apple’s baffling bug bounty changes finally make sense
• Check out OpenHack
• Follow today's guest Ananay on X and LinkedIn
• Follow Arin on X and LinkedIn

• Apple Podcasts
• Spotify
• Amazon Music
• Pocket Casts
• RSS Feed

Security Bite is 9to5Mac’s weekly deep dive into the world of Apple security. Each week, Arin Waichulis unpacks new threats, privacy concerns, vulnerabilities, and more, shaping an ecosystem of over 2 billion devices. Every other week on the Security Bite Podcast, he sits down with experts in the field to break down the most pressing topics.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

This is part two of my conversation with Patrick Wardle of Objective-See and Kseniia Yamburh of Moonlock Lab.

In part one, we got into Apple's bug bounty program and the AI slop problem.

This time, Kseniia walks through what's actually hitting Macs in 2026 based on Moonlock's mid-2026 threat report, and Patrick previews Objective by the Sea v9, the largest Apple security conference (and the only one).

• Apple caps security bug reports amid surge in AI-generated findings
• Apple’s baffling bug bounty changes finally make sense
• Follow Patrick Wardle on X and LinkedIn
• Check out Objective-See and upcoming #OTBS v9 conference
• Follow Kseniia on X
• Check out Moonlock’s mid-2026 macOS threat report
• Follow Arin on X and LinkedIn

• Apple Podcasts
• Spotify
• Amazon Music
• Pocket Casts
• RSS Feed

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

This episode of the Security Bite Podcast will be two parts. In this first half, I sit down with Patrick Wardle from Objective-See and Kseniia Yamburh from Moonlock Lab to discuss changes to Apple's Bug Bounty Program.

In the second part coming next week, we will continue talking about what the macOS threat landscape looks like right now and the upcoming Objective by the Sea conference. The largest Apple security conference (and the only one).

• Apple caps security bug reports amid surge in AI-generated findings
• Apple’s baffling bug bounty changes finally make sense
• Follow Patrick Wardle on X and LinkedIn
• Check out Objective-See and upcoming #OTBS v9 conference
• Follow Kseniia on X
• Check out Moonlock’s mid-2026 macOS threat report
• Follow Arin on X and LinkedIn

• Apple Podcasts
• Spotify
• Amazon Music
• Pocket Casts
• RSS Feed

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Apple recently issued a warning to iPhone users in a support article, noting that scammers are increasingly using FaceTime to impersonate banks and steal user data.

In this episode, I'm joined by Clayton LiaBraaten, Senior Executive Advisor at Truecaller, to break down how these impersonation scams actually develop, why a live video call feels so trustworthy, and what we can all do to stop them.

• ‘Screen Unknown Senders’ iOS 27 filters your Messages for spam
• Call screening in iOS 27 screens unknown numbers
• Check out Truecaller's free scam checker tool
• Follow Clayton LiaBraaten on LinkedIn
• Follow Arin on X and LinkedIn

• Apple Podcasts
• Spotify
• Amazon Music
• Pocket Casts
• RSS Feed

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Data brokers are quietly building detailed profiles on all of us, and this week I'm joined by Miguel Fornés of Incogni to talk about where that information comes from, who's buying it, and why this threat is getting increasingly more dangerous under AI.

Show links found here.

• Incogni's free digital footprint checker
• AI companies and data brokers even resort to fake forms to keep selling our data
• Law proposed to ban AI companies from selling your health data
• Check out Incogni's research lab with the latest studies and surveys
• Follow Miguel Fornes on LinkedIn
• Follow Arin on X and LinkedIn

• Apple Podcasts
• Spotify
• Amazon Music
• Pocket Casts
• RSS Feed

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Talal from Mysk is back on Security Bite. We get into how and why the App Store logs every tap you make, why researchers are publicly walking away from Apple's bug bounty program, and Loupe, Mysk's new free and open-source app that shows you exactly what iOS's APIs are sharing about you.

• Mysk's broken TCC bug demo
• Check out Loupe and Psylo browser on the App Store
• Follow Mysk on X
• Follow Arin on X and LinkedIn

• Apple Podcasts
• Spotify
• Amazon Music
• Pocket Casts
• RSS Feed

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

In this episode, I break down some of the notable new security and privacy changes Apple announced at WWDC26 last week. Siri AI was the headline reveal, but we also got a new iPhone recovery mode, small but meaningful Find My privacy changes, an agentic AI Passwords feature in iOS 27, and tighter parental controls across both operating systems.

I also dig into the privacy architecture behind all the new Apple Intelligence features, and what all these changes mean for admins once you factor in managed devices and work accounts.

• Apple’s most impressive agentic AI feature yet is hiding in the Passwords app
• Read more in the Security Bite column
• Follow Arin on X and LinkedIn

• Apple Podcasts
• Spotify
• Overcast
• Pocket Casts
• RSS Feed