The FBI claimed to have the ability to access messages on iPhones even after they were deleted, as per reports of reading deleted Signal messages on an iPhone by US authorities. This development raised concerns online, prompting Signal CEO Meredith Whittaker to weigh in. Apple has now rolled out a security update for iPhones and iPads, likely addressing this issue.
In an official statement, Apple announced the release of iOS 26.4.2 and iPadOS 26.4.2 updates intended to fix a bug where deleted notifications could persist on the device unexpectedly. While Apple did not directly reference the aforementioned report in its statement.
Reports suggest that the FBI successfully retrieved deleted Signal messages from an iPhone using forensic tools, citing copies of the content stored in the device’s push notification database. This data was reportedly retained on the device for up to a month despite the original messages being deleted.
Signal CEO Meredith Whittaker emphasized the importance of ensuring that notifications for deleted messages do not remain in any operating system notification database. Signal is known for its privacy-centric messaging platform positioning itself as an alternative to apps like WhatsApp.
Apple’s response to the situation involved releasing a security patch for iPhones and iPads. The company refrained from specifically acknowledging the reported FBI incident, stating that they do not disclose or discuss security issues until investigations are completed and patches are available.
The bug, identified as CVE-2026-28950, was addressed through enhanced data redaction. Apple did not disclose whether this vulnerability had been exploited in attacks or provide details on the duration for which notification data was stored or recoverable.
Following the update, Signal expressed gratitude toward Apple for their swift action and understanding of the significance of such security concerns. Signal reassured its users that no additional action was required post the installation of the update.
Apple has advised users to promptly install the new security patch. The iOS 26.4.2 update is compatible with iPhone 11 and newer models, while iPadOS 26.4.2 is suitable for devices like iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. Older iPhone and iPad models have also been provided with fixes through the iOS 18.7.8 and iPadOS 18.7.8 updates.