Apple Plans Tighter macOS Disk Access Controls as AI-Agent Risks Grow

Summary

Threat Wire reports Apple plans deeper macOS full disk access controls amid AI-agent privacy concerns, alongside reports of AI-related security incidents, bug bounty overload, a GitLab command-execution flaw and a Linux KVM vulnerability.

Key points

Apple plans deeper controls for macOS full disk access, citing risks from increasingly capable and autonomous AI agents.
The host says Google temporarily paused its OSS VRP program after a rise in mostly invalid automated submissions; Curl reportedly ended its program earlier in 2026.
The host reports that attackers used two undisclosed vulnerabilities in the Dutch Institute for Vulnerability Disclosure’s service platform and that volunteer data was exfiltrated; incident response was ongoing.
The host describes reported AI-related activity targeting Australian government systems, the US Department of Education and Library and Archives Canada, while noting that the source of some activity remains unknown.
A GitLab AI gateway flaw rated 9.9 CVSS reportedly allowed command execution on self-hosted GitLab servers; no CVE identifier is provided.
A researcher reportedly found a Linux KVM vulnerability involving micro-VM-to-EC2 host escape, cross-tenant access and remote code execution; a write-up and CVE had not yet been released.

Article Details

Topics: [00:13] Debian CVE disclosures and pressure on bug bounty programs from automated submissions
[01:34] Apple’s planned macOS full disk access controls and AI-agent privacy risks
[03:22] Reported AI-related incidents involving vulnerability disclosure and government organizations
[04:56] PewDiePie’s reported OpenAI bans during AI-model development
[05:12] GitLab AI gateway flaw enabling command execution on self-hosted servers
[05:39] Cloudflare’s planned quantum-resistant certificates and a reported Linux KVM vulnerability