Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents

Apple has announced plans to implement enhanced security controls for macOS's Full Disk Access permission, citing emerging threats posed by increasingly sophisticated AI agents. The company recognizes that as artificial intelligence systems become more capable and autonomous, the potential for unauthorized access to sensitive user data—including files, messages, email, and browsing history—presents a significant security vulnerability that requires immediate mitigation.

Apple's decision reflects a growing industry concern about the intersection of AI capabilities and system-level access permissions. Full Disk Access has traditionally been granted to certain applications to function properly, but this broad permission creates an exploitable surface for malicious actors. With AI agents becoming more autonomous and sophisticated, even legitimate applications granted this permission could potentially be compromised or weaponized to harvest personal data at scale. Apple plans to introduce granular controls that will limit which data and file types applications can access, even when granted Full Disk Access privileges. This approach aims to maintain functionality for legitimate software while reducing exposure to potential AI-driven data extraction attacks.

• Reduced attack surface: Restricting Full Disk Access limits potential damage from compromised applications or malware
• Developer adjustments required: Software creators will need to adapt their applications to work within more restrictive permission frameworks
• User privacy enhancement: Stricter controls provide stronger protection for sensitive personal information
• Precedent for security design: Other operating systems may adopt similar preventative measures against AI-related threats
• Potential friction: Users may experience reduced functionality for certain applications requiring broader file system access

Apple's proactive stance demonstrates the industry's recognition that AI capabilities represent an evolving threat landscape requiring continuous security innovation. As AI agents integrate deeper into computing ecosystems, foundational security architectures must adapt accordingly. This move positions Apple as a leader in addressing emerging threats while maintaining user privacy—a critical competitive advantage in an era where data security influences consumer trust. The decision also signals that traditional permission models may prove insufficient against future AI-driven risks, necessitating architectural rethinking across the entire technology sector.