Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks

Apple introduced Full Disk Access in macOS Mojave (10.14) to control application access to system-protected areas and sensitive user data. With the rise of more autonomous AI agents, Apple identified risks where applications might misuse Full Disk Access to expose private files and communications. To mitigate these risks, Apple will introduce additional controls requiring explicit user consent before granting Full Disk Access. This move is intended to enhance user awareness and privacy protection as AI capabilities grow. No specific timeline or technical details about the new controls have been disclosed.

Applications granted Full Disk Access can read or modify sensitive user data such as mail, messages, and browsing history. If these permissions are improperly managed or exploited, users' private information and the privacy of their contacts can be compromised. The growing autonomy and capability of AI agents increase the risk associated with such broad access, potentially leading to unauthorized data exposure.

Apple is developing additional controls to ensure Full Disk Access is granted only with explicit user consent, enhancing privacy protections. Users should continue to manage Full Disk Access permissions carefully via System Settings > Privacy & Security. Since the new controls are not yet released, users should remain vigilant about which applications have Full Disk Access. Patch status is not yet confirmed—check Apple's official advisories for updates on the rollout and remediation guidance.