# Apple tightens macOS Full Disk Access over AI agent risks | QANATONE > Apple is making it harder to grant apps access to the whole disk on macOS, saying always-on AI agents have made that permission far riskier. Kaynak: https://www.qanatone.com/en/haber/apple-tam-disk-erisimi-ajanlar/ --- [News](https://www.qanatone.com/en/haber/) # Apple tightens macOS Full Disk Access over AI agent risks 2 Oct 2026 3 min read News · Infrastructure Apple is making it harder to grant apps access to the whole disk on macOS, saying always-on AI agents have made that permission far riskier. ## What happened On October 2 Apple said it will add controls to macOS Full Disk Access, the setting that lets an app read nearly all files, mail, messages and other apps' data. Apple said the setting was designed for backups, but AI agents have increased the risks of that level of access, so it will only be grantable through very explicit user action. ## Why now The move came days after a journalist claimed Meta's Muse app for Mac read their private messages, which Meta disputed, and amid the spread of always-on agents such as Muse and OpenAI's Dots. Apple said the risks of such access will grow substantially as agents become more capable and autonomous. **1 permission** that opens almost all of a Mac's data to an app ## What the permission is macOS normally gates access per folder and data type. Full Disk Access bypasses all of it, including Mail, Messages and Safari data. A compromised or misdirected agent holding it puts all of that at risk. ## Why agents want it An agent is only as useful as the data it can read, so developers reach for one broad permission. That also exposes unrelated data, and an agent steered by hidden instructions in a web page or email (prompt injection) would hand that access to an attacker. ## A first at OS level This is one of the first operating-system changes aimed squarely at AI agent risk, and similar steps on Windows and Android are expected. Agent makers will have to design for narrower permissions. ## Who it affects Backup, security and system tools genuinely need broad access and will see an extra step. Agent makers will have to justify why they ask for so much, and users will need to treat permission prompts as real decisions. ## What it means for your business Audit which apps hold Full Disk Access on company Macs, set a written policy for AI agent access, keep sensitive data out of general folders, and brief staff on why permission prompts now matter. ## More articles [News · Science ### Meta's Muse Spark co-authors six mathematics papers 2 Oct 2026 · 3 min](https://www.qanatone.com/en/haber/meta-muse-spark-matematik-makaleleri/)[News · Search ### Judge throws out two antitrust suits over Google AI Overviews 1 Oct 2026 · 3 min](https://www.qanatone.com/en/haber/ai-overviews-davalari-reddedildi/)[Data · Performance ### We tested award-winning agency sites: most fail on mobile 1 Oct 2026 · 4 min](https://www.qanatone.com/en/haber/ajans-sitelerinde-gozden-kacan-hiz/)[News · Policy ### Fund probe arrests reach 58 as regulator opens refund accounts 1 Oct 2026 · 1 min](https://www.qanatone.com/en/haber/fon-sorusturmasi-iade-hesabi-tutuklama/)[News · Policy ### California subpoenas OpenAI over agents that escaped testing 1 Oct 2026 · 3 min](https://www.qanatone.com/en/haber/kaliforniya-openai-celp/)[News · Models ### Tavus's Griffin passed as human in 48% of video calls 1 Oct 2026 · 3 min](https://www.qanatone.com/en/haber/tavus-griffin-video-turing-testi/)[News · Models ### Anthropic measures open model GLM-5.3's cyber offence skills 30 Sep 2026 · 1 min](https://www.qanatone.com/en/haber/anthropic-glm-5-3-siber-yetenek/)[News · Science ### Anthropic: robots can do most physical tasks but cost too much 30 Sep 2026 · 1 min](https://www.qanatone.com/en/haber/anthropic-robot-is-analizi/)