惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Microsoft Security Blog
Microsoft Security Blog
J
Java Code Geeks
GbyAI
GbyAI
aimingoo的专栏
aimingoo的专栏
L
LangChain Blog
I
InfoQ
D
Docker
F
Fortinet All Blogs
Y
Y Combinator Blog
Martin Fowler
Martin Fowler
月光博客
月光博客
B
Blog
Engineering at Meta
Engineering at Meta
T
Tailwind CSS Blog
罗磊的独立博客
博客园_首页
G
Google Developers Blog
Stack Overflow Blog
Stack Overflow Blog
Recent Announcements
Recent Announcements
D
DataBreaches.Net
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
B
Blog RSS Feed
IT之家
IT之家
V
V2EX

www.infosecurity-magazine.com

Just Three Ransomware Gangs Accounted for 40% of Attacks Last Month Google Chrome Rolls Out Protection Against Infostealers Targeting Session Cookies STX RAT Targets Finance Sector With Advanced Stealth Tactics Bitcoin Depot Reports $3.6m Crypto Theft After System Breach Atomic Stealer MacOS ClickFix Attack Bypasses Apple Security Warnings Middle East Hack-for-Hire Operation Traced to South Asian Cyber Espionage Group Governance Gaps Emerge as AI Agents Drive 76% Increase in NHIs Google Warns of New Threat Group Targeting BPOs and Helpdesks Google API Keys Quietly Gain Access to Gemini on Android Devices Critical Vulnerability in Ninja Forms Exposes WordPress Sites Anthropic Launches Project Glasswing to Use AI to Find and Fix Critical Software Vulnerabilities US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers Claude Discovers Apache ActiveMQ Bug Hidden for 13 Years Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT Assets Russian APT28 Hackers Hijack Routers to Steal Credentials, UK Security Agency Warns GPU Rowhammer Attack Enables Privilege Escalation and Full System Compromise GrafanaGhost Exploit Bypasses AI Guardrails for Silent Data Exfiltration Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI Storm-1175 Exploits Flaws in High-Velocity Medusa Attacks Fortinet Releases Emergency Patch After FortiClient EMS Bug Is Exploited New Phishing Platform Used in Credential Theft Campaigns Against C-Suite Execs New 'Storm' Infostealer Remotely Decrypts Stolen Credentials NCSC Issues Security Alert Over Hackers Targeting WhatsApp and Signal Accounts Apple Expands iOS 18 Security Updates Amid DarkSword Threat Researchers Observe Sub-One-Hour Ransomware Attacks GitHub Used as Covert Channel in Multi-Stage Malware Campaign Most CNI Firms Face Up to £5m in Downtime from OT Attacks Google Introduces Android Dev Verification Amid Openness Debate New Venom Stealer MaaS Platform Automates Continuous Data Theft Chinese Hackers Target European Governments in Espionage Campaigns
Apple Expands RCS Encryption and Memory Protections in iO...
2026-02-17 · via www.infosecurity-magazine.com

A new developer beta of iOS and iPadOS introducing support for end-to-end encryption (E2EE) in Rich Communications Services (RCS) messages has been released by Apple.

The update, available in iOS and iPadOS 26.4 Beta, allows encrypted RCS conversations between compatible Apple devices, with a broader rollout planned for iOS, iPadOS, macOS and watchOS in a future software update.

RCS Encryption Enters Beta Testing

"End-to-end encryption is in beta and is not available for all devices or carriers," Apple clarified. "Conversations labeled as encrypted are encrypted end-to-end, so messages can't be read while they're sent between devices."

At present, encrypted RCS messaging can only be tested on Apple devices and does not extend to Android.

The move follows the GSM Association's formal announcement last year backing E2EE for RCS messaging.

Supporting the standard will require Apple to adopt RCS Universal Profile 3.0, which is based on the Messaging Layer Security (MLS) protocol.

Expanded Memory Protections and Security Defaults

Beyond messaging, the beta introduced an update to Memory Integrity Enforcement (MIE). Applications can now opt in to the full protections of MIE, moving beyond the previously available Soft Mode.

Apple first unveiled the security feature in September 2025 as a defense against sophisticated mercenary spyware and described it as providing always-on memory safety protection across critical attack surfaces, including the kernel and more than 70 userland processes, without performance trade-offs.

Read more on RCS encryption: Google Introduces New AI-Powered Scam Detection Features for Android

Separately, a report from MacRumors indicated that iOS 26.4 is expected to enable Stolen Device Protection by default for all iPhone users. The feature requires Face ID or Touch ID authentication for sensitive tasks such as accessing stored passwords and credit cards when away from familiar locations.

Stolen Device Protection also introduces:

  • A one hour delay before allowing Apple Account password changes

  • Biometric authentication requirements for key security actions

The delay is designed to give users time to mark a device as lost if it is stolen.

The iOS and iPadOS 26.4 SDK is bundled with Xcode 26.4, available via the Mac App Store, and includes additional developer-facing updates, bug fixes and known issue documentation across areas such as SwiftUI, StoreKit and networking.

Image credit: Poetra.RH / Shutterstock.com