Security Bite

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Last week Apple told developers it’s adding new controls to Full Disk Access on the Mac, the permission that lets an app read nearly everything on the user's drive. Speculation on what exactly these changes will be have gone parabolic. So, in this solo episode I walk through what exactly Full Disk Access is, what Apple said is changing, what prompted it, and what we still don't know.

Let me know your thoughts in the comments.

Links

Security Bite: The last 24 hours at Meta were “not-a-musing”

Full Disk Access on Mac: Here’s what Apple must, and must not, do

Follow Arin on X and LinkedIn

Subscribe to the show

Apple Podcasts

Spotify

Amazon Music

Pocket Casts

RSS Feed

Security Bite is 9to5Mac’s weekly deep dive into the world of Apple security. Each week, Arin Waichulis unpacks new threats, privacy concerns, vulnerabilities, and more, shaping an ecosystem of over 2 billion devices. Every other week on the Security Bite Podcast, he sits down with experts in the field to break down the most pressing topics.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

This week, I sat down with Ananay Arora, founder and CEO of OpenHack, a Y Combinator startup building an "always-on AI security engineer" for finding vulnerabilities on Mac (and everywhere else). We get into how it works, what's going on with Apple's Security Bounty Program, and how to land your first CVE. I hope you enjoy!

Links

Apple’s baffling bug bounty changes finally make sense

Check out OpenHack

Follow today's guest Ananay on X and LinkedIn

Follow Arin on X and LinkedIn

Subscribe to the show

Apple Podcasts

Spotify

Amazon Music

Pocket Casts

RSS Feed

Security Bite is 9to5Mac’s weekly deep dive into the world of Apple security. Each week, Arin Waichulis unpacks new threats, privacy concerns, vulnerabilities, and more, shaping an ecosystem of over 2 billion devices. Every other week on the Security Bite Podcast, he sits down with experts in the field to break down the most pressing topics.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

This is part two of my conversation with Patrick Wardle of Objective-See and Kseniia Yamburh of Moonlock Lab.

In part one, we got into Apple's bug bounty program and the AI slop problem.

This time, Kseniia walks through what's actually hitting Macs in 2026 based on Moonlock's mid-2026 threat report, and Patrick previews Objective by the Sea v9, the largest Apple security conference (and the only one).

Links

Apple caps security bug reports amid surge in AI-generated findings

Apple’s baffling bug bounty changes finally make sense

Follow Patrick Wardle on X and LinkedIn

Check out Objective-See and upcoming #OTBS v9 conference

Follow Kseniia on X

Check out Moonlock’s mid-2026 macOS threat report

Follow Arin on X and LinkedIn

Subscribe to the show

Apple Podcasts

Spotify

Amazon Music

Pocket Casts

RSS Feed

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

This episode of the Security Bite Podcast will be two parts. In this first half, I sit down with Patrick Wardle from Objective-See and Kseniia Yamburh from Moonlock Lab to discuss changes to Apple's Bug Bounty Program.

In the second part coming next week, we will continue talking about what the macOS threat landscape looks like right now and the upcoming Objective by the Sea conference. The largest Apple security conference (and the only one).

Links

Apple caps security bug reports amid surge in AI-generated findings

Apple’s baffling bug bounty changes finally make sense

Follow Patrick Wardle on X and LinkedIn

Check out Objective-See and upcoming #OTBS v9 conference

Follow Kseniia on X

Check out Moonlock’s mid-2026 macOS threat report

Follow Arin on X and LinkedIn

Subscribe to the show

Apple Podcasts

Spotify

Amazon Music

Pocket Casts

RSS Feed

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Apple recently issued a warning to iPhone users in a support article, noting that scammers are increasingly using FaceTime to impersonate banks and steal user data.

In this episode, I'm joined by Clayton LiaBraaten, Senior Executive Advisor at Truecaller, to break down how these impersonation scams actually develop, why a live video call feels so trustworthy, and what we can all do to stop them.

Links

‘Screen Unknown Senders’ iOS 27 filters your Messages for spam

Call screening in iOS 27 screens unknown numbers

Check out Truecaller's free scam checker tool

Follow Clayton LiaBraaten on LinkedIn

Follow Arin on X and LinkedIn

Subscribe to the show

Apple Podcasts

Spotify

Amazon Music

Pocket Casts

RSS Feed