UK — The Register

Apple turns iCloud into spy cloud, will start looking at public share links

SecurityNovember 5, 20261 min read

Apple says it will start checking files shared through public iCloud links for "harmful content." The company has not said what that term means or how the checks will work.

What happened

Apple published a help page saying it will scan iCloud items that people share with "Anyone with the Link." The change is planned for version 27.3 of its iPhone, iPad, Mac, and Vision Pro software. Content shared only with specific people is not part of this plan. Apple says it can move, block, or delete harmful content, and it may close accounts linked to it.

Key facts

The checks apply to iCloud content shared with "Anyone with the Link."
The new software version, 27.3, went to developers in beta on Tuesday.
The general release is expected in December.
Apple says this type of shared content is not end-to-end encrypted, even if Advanced Data Protection is turned on.

Why links are different

End-to-end encryption means only the sender and receiver can read a file. Apple's Advanced Data Protection is an optional feature that offers this for many iCloud files. A public link works differently. Anyone with the link can open the file, so Apple can access it. That is why Apple can scan it.

Why it matters

Many people use public links to share photos, school work, and files. If Apple scans them, users may lose some privacy. Because "harmful content" is not defined, people cannot know exactly what will be removed. Some worry that political pressure could affect what gets deleted. Others think scanning helps stop child abuse images and malware.

What to watch

How Apple defines "harmful content."
Whether people check files with human reviewers, automatic systems, or AI.
How the scanning works in the final release in December.
Whether Apple explains its plans after questions from reporters.

Glossary

iCloud: Apple's online service that stores files, photos, and backups and lets people share them.
Advanced Data Protection: An optional Apple setting that encrypts more iCloud data so only the user can read it.
malware: Harmful software made to damage computers or steal information.

Hackers exploited iOS and Android flaws to infect phones

Hackers possibly linked to the Kremlin used previously patched iOS and Android flaws to attack visitors of multiple websites, including one marking the 250th anniversary of the US Constitution, researchers said. The attackers, assessed with moderate to high confidence as part of Russia's Foreign Intelligence Service, injected JavaScript that profiled devices and delivered payloads aimed at stealing browser cookies and, in some cases, Wi-Fi passwords and mobile device data. Impersonated sites included america250.org, which the attackers proxied through a lookalike domain.

SecurityTechCrunchNov 5

Hackers stole DreamHost customer files and inboxes during months-long attack

Web host DreamHost confirmed that hackers stole customer emails and credentials during a months-long cyberattack that began in August. The company disclosed the breach after an outage lasting several days, during which it reset some customer passwords. DreamHost said attackers exploited an unspecified vulnerability in its file manager and obtained session tokens, and that the number of affected customers is "well under 10%."

SecurityArs TechnicaNov 5

Binance says hackers who stole billions in crypto spent months planning heist

Binance said the hackers behind the theft spent months on the attack, using social engineering and novel malware, and that the campaign began no later than June and ended last Thursday with the compromise of an engineer's laptop. The FBI and TRM Security attributed the heist to North Korean actors, which initially targeted $6.34 billion from Binance wallets. Binance said it has frozen or intercepted $2.85 billion of that sum and has set aside funds to cover the loss.

SecurityITmediaNov 4

Muji's MUJI Card Full Card Numbers, About 1.09 Million Records Possibly Leaked in Unauthorized Access Follow-Up

Ryohin Keikaku said credit card information, names, and addresses that it had initially excluded may also have been accessed by outsiders in the unauthorized access to its MUJI app. Newly identified data includes about 1.09 million member records for the MUJI Card, covering full card numbers, MUJI Card IDs, and birth dates, of which about 345,000 cards remain valid.