Apple released iOS 26.4.2 to address a security flaw that allowed users to retrieve deleted messages from Signal. The problem began when iPhones processed their notification data and experienced a glitch from Signal.
The investigation team, which included FBI agents, managed to retrieve message fragments stored in the system's notification database. Users could not eliminate these remnants because they stayed in the system even after deleting messages and uninstalling the application.
The vulnerability showed that app-based privacy protections did not match the security of system-level storage. iOS continued to retain notification previews in local storage, even though Signal encrypts and deletes messages. Reportedly, external tools could extract this data during device analysis.
The system treated ‘deleted’ messages as removed from storage but kept them accessible. The failure to meet user expectations occurred because the system handled disappearing messaging applications incorrectly. The company has reworked how notifications are stored and deleted. Key highlights of Apple’s update include:
Deleted notifications no longer linger in system databases
Message previews are purged alongside user actions
Data handling within notifications is more tightly controlled
The fix ensures that once users delete content, the system reflects that action more accurately.
Experts suggest that this episode demonstrates how system-level design weaknesses can compromise application security. The tech giant further explained, “Apple’s fix reduces the local risk; users are still advised to limit how much information appears in notifications. Turning off message previews or hiding sensitive content can add an extra layer of protection.”
The new restrictions that platforms implement will shift user attention toward their metadata and additional ways to access information. The iOS message deletion process now allows users to fully delete all messages from their device.
Also read: Apple May Restructure iPhone 18 Lineup With Split Launch