Apple has released the latest security patch for iPhones and iPads that fixes iPhone Settings bug that could recover deleted messages. The company has rolled out iOS 26.4.2, iPadOS 26.4.2, iOS 18.7.8, and iPadOS 18.7.8 for eligible devices. The update addresses a security flaw that the Federal Bureau of Investigation (FBI) allegedly used earlier this month to extract deleted Signal messages. According to a report by 404 Media, investigators accessed messages even after the Signal app had been deleted from the device. The messages were not retrieved directly from the app, but from the iPhone’s push notification database.With the iOS 26.4.2 and iOS 26.4.2 updates, Apple says it has now fixed the flaw. “For our customers’ protection, Apple doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available,” the iPhone maker said in its document detailing the security content. Here’s what the security foot notes read:iOS 26.4.2 and iPadOS 26.4.2Released April 22, 2026Notification ServicesAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and laterImpact: Notifications marked for deletion could be unexpectedly retained on the deviceDescription: A logging issue was addressed with improved data redaction.CVE-2026-28950
FBI reportedly recovers messages from deleted Signal app
Earlier this month, 404 media reported that testimony in a recent trial involving a group accused of setting off fireworks and damaging property at an ICE detention facility in Texas showed that the FBI was able to recover incoming Signal messages from a defendant’s iPhone, even though the Signal app had already been deleted from the device.The report added that one of the defendants was Lynette Sharp, who had earlier pleaded guilty to providing material support to terrorists. During the trial, FBI Special Agent Clark Wiethorn spoke about the evidence collected.The report stated that even though Signal offers end-to-end encryption, message previews stored in notifications can still be accessed under certain conditions. This means deleting the app didn’t completely erase all evidence of user conversations. Even after the app’s removal, notifications that include message content persisted on the device.
