Security Bite

9to5Mac

Welcome to 9to5Mac Security Bite, your biweekly deep dive into the ever-evolving world of Apple security. I’m your host Arin Waichulis security writer at 9to5mac, and every other week, we take a bite out of the most critical stories and developments impacting the devices you use every day. Whether you’re an IT professional managing a fleet of Macs or a casual Apple user interested in what lurks around some of the world’s most secure operating systems, this show is for you. On Security Bite we’ll beyond the headlines and sit down with the industry's top security researchers and experts to break down the latest iOS/macOS features and threats so you can stay better informed.

  1. 5d ago

    We need to talk about the changes to Full Disk Access

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. Last week Apple told developers it’s adding new controls to Full Disk Access on the Mac, the permission that lets an app read nearly everything on the user's drive. Speculation on what exactly these changes will be have gone parabolic. So, in this solo episode I walk through what exactly Full Disk Access is, what Apple said is changing, what prompted it, and what we still don't know. Let me know your thoughts in the comments. Links Security Bite: The last 24 hours at Meta were “not-a-musing” Full Disk Access on Mac: Here’s what Apple must, and must not, do Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Amazon Music Pocket Casts RSS Feed Security Bite is 9to5Mac’s weekly deep dive into the world of Apple security. Each week, Arin Waichulis unpacks new threats, privacy concerns, vulnerabilities, and more, shaping an ecosystem of over 2 billion devices. Every other week on the Security Bite Podcast, he sits down with experts in the field to break down the most pressing topics.

  2. Oct 1

    The new era of bug hunting with OpenHack's Ananay Arora

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. This week, I sat down with Ananay Arora, founder and CEO of OpenHack, a Y Combinator startup building an "always-on AI security engineer" for finding vulnerabilities on Mac (and everywhere else). We get into how it works, what's going on with Apple's Security Bounty Program, and how to land your first CVE. I hope you enjoy! Links Apple’s baffling bug bounty changes finally make sense Check out OpenHack Follow today's guest Ananay on X and LinkedIn Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Amazon Music Pocket Casts RSS Feed Security Bite is 9to5Mac’s weekly deep dive into the world of Apple security. Each week, Arin Waichulis unpacks new threats, privacy concerns, vulnerabilities, and more, shaping an ecosystem of over 2 billion devices. Every other week on the Security Bite Podcast, he sits down with experts in the field to break down the most pressing topics.

  3. Sep 9

    What's hitting Macs so far in 2026, plus OBTS v9 preview (Part 2)

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. This is part two of my conversation with Patrick Wardle of Objective-See and Kseniia Yamburh of Moonlock Lab. In part one, we got into Apple's bug bounty program and the AI slop problem. This time, Kseniia walks through what's actually hitting Macs in 2026 based on Moonlock's mid-2026 threat report, and Patrick previews Objective by the Sea v9, the largest Apple security conference (and the only one). Links Apple caps security bug reports amid surge in AI-generated findings Apple’s baffling bug bounty changes finally make sense Follow Patrick Wardle on X and LinkedIn Check out Objective-See and upcoming #OTBS v9 conference Follow Kseniia on X Check out Moonlock’s mid-2026 macOS threat report Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Amazon Music Pocket Casts RSS Feed

  4. Sep 1

    Why Apple's making big changes to its bug bounty program (Part 1)

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. This episode of the Security Bite Podcast will be two parts. In this first half, I sit down with Patrick Wardle from Objective-See and Kseniia Yamburh from Moonlock Lab to discuss changes to Apple's Bug Bounty Program. In the second part coming next week, we will continue talking about what the macOS threat landscape looks like right now and the upcoming Objective by the Sea conference. The largest Apple security conference (and the only one). Links Apple caps security bug reports amid surge in AI-generated findings Apple’s baffling bug bounty changes finally make sense Follow Patrick Wardle on X and LinkedIn Check out Objective-See and upcoming #OTBS v9 conference Follow Kseniia on X Check out Moonlock’s mid-2026 macOS threat report Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Amazon Music Pocket Casts RSS Feed

  5. Aug 7

    Why scammers love FaceTime now

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. Apple recently issued a warning to iPhone users in a support article, noting that scammers are increasingly using FaceTime to impersonate banks and steal user data. In this episode, I'm joined by Clayton LiaBraaten, Senior Executive Advisor at Truecaller, to break down how these impersonation scams actually develop, why a live video call feels so trustworthy, and what we can all do to stop them. Links ‘Screen Unknown Senders’ iOS 27 filters your Messages for spam Call screening in iOS 27 screens unknown numbers Check out Truecaller's free scam checker tool Follow Clayton LiaBraaten on LinkedIn Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Amazon Music Pocket Casts RSS Feed

  6. Jul 28

    Data brokers are the biggest threat to privacy

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. Data brokers are quietly building detailed profiles on all of us, and this week I'm joined by Miguel Fornés of Incogni to talk about where that information comes from, who's buying it, and why this threat is getting increasingly more dangerous under AI. Show links found here. Links Incogni's free digital footprint checker AI companies and data brokers even resort to fake forms to keep selling our data Law proposed to ban AI companies from selling your health data Check out Incogni's research lab with the latest studies and surveys Follow Miguel Fornes on LinkedIn Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Amazon Music Pocket Casts RSS Feed

  7. Jun 16

    WWDC26 security and privacy rundown, BIG changes coming for users and admins

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. In this episode, I break down some of the notable new security and privacy changes Apple announced at WWDC26 last week. Siri AI was the headline reveal, but we also got a new iPhone recovery mode, small but meaningful Find My privacy changes, an agentic AI Passwords feature in iOS 27, and tighter parental controls across both operating systems. I also dig into the privacy architecture behind all the new Apple Intelligence features, and what all these changes mean for admins once you factor in managed devices and work accounts. Links Apple’s most impressive agentic AI feature yet is hiding in the Passwords app Read more in the Security Bite column Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Overcast Pocket Casts RSS Feed

5
out of 5
3 Ratings

About

Welcome to 9to5Mac Security Bite, your biweekly deep dive into the ever-evolving world of Apple security. I’m your host Arin Waichulis security writer at 9to5mac, and every other week, we take a bite out of the most critical stories and developments impacting the devices you use every day. Whether you’re an IT professional managing a fleet of Macs or a casual Apple user interested in what lurks around some of the world’s most secure operating systems, this show is for you. On Security Bite we’ll beyond the headlines and sit down with the industry's top security researchers and experts to break down the latest iOS/macOS features and threats so you can stay better informed.

You Might Also Like