Apple Patches iOS Flaw Enabling Deleted Message Recovery

Apple released a software update on April 22, 2026, for iPhones and iPads, addressing a security flaw that enabled law enforcement agencies, including the FBI, to recover content from messages users had deleted or set to disappear automatically. The vulnerability affected devices running iOS 26 and iOS 18, allowing forensic tools to access notification previews stored locally even after the originating app, such as Signal, was removed.

The issue stemmed from iOS's handling of push notifications. When a message arrived, the system generated a lock screen preview containing the text, which was then cached in an internal database on the device. This data persisted for up to a month, regardless of whether the user dismissed the notification or deleted the message within the app. As a result, incoming messages from privacy-focused services like Signal remained recoverable, undermining features designed to automatically erase content after a set period.

Apple described the problem in a security bulletin as a logging issue where "notifications marked for deletion could be unexpectedly retained on the device." The company fixed it through improved data redaction, which also...