Apple to scan iCloud 'Anyone with the Link' shares for undefined 'harmful content' from iOS/macOS 27.3, with account penalties
Matéria consolidada. Reúne 5 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 5 fontes trouxeram em 06/11/2026 04:01; os links antigos trazem para cá.
Fontes: securityonline.info ↗ gbhackers.com ↗ thehackernews.com ↗ helpnetsecurity.com ↗ theregister.com ↗
Apple has announced in a support document, published Tuesday, November 3, 2026, that it will check content shared through the iCloud "Anyone with the Link" option for "harmful content" starting with iOS 27.3, iPadOS 27.3, macOS 27.3 and visionOS 27.3. The feature is in beta now, with general availability expected in December 2026 (theregister.com, thehackernews.com). The checks cover photos in iCloud Photos and files in iCloud Drive shared by public link. Apple says such shares are accessible to Apple itself and are not end-to-end encrypted, even when Advanced Data Protection is enabled (helpnetsecurity.com, thehackernews.com). Apple has not defined "harmful content", has not explained how detection works, and has not said whether existing links will be checked. Apple reserves the right to move, refuse, modify, remove or delete flagged content, to block or disable Apple Accounts, to block the associated email address or phone number from creating a new account, and to involve law enforcement. helpnetsecurity.com stresses this is a policy and feature change, not a security vulnerability.
Detalhes técnicos
- Scope: Only items shared with "Anyone with the Link" are affected. Direct person-to-person shares are excluded (theregister.com). "People you choose" shares and direct copies, for example via Messages, are not described as subject to inspection, and neither are private files without a public link (securityonline.info, gbhackers.com).
- Encryption: Public-link shares lose end-to-end encryption. securityonline.info explains that delivering files to unauthenticated browsers requires server-side mediation. This creates an exception to Advanced Data Protection at the level of each individual item, not the account.
- Detection: Apple has not disclosed the mechanism. It has not said whether detection uses hash matching, automation, AI classifiers or human review, whether scanning is on-device or server-side, or what the harmful-content categories are (theregister.com, gbhackers.com, thehackernews.com). gbhackers.com adds that regional availability may vary.
- Interpretation: securityonline.info, citing MacRumors, suggests the mention of law-enforcement referrals points to material such as malware or CSAM. theregister.com warns the vague term could extend to politically sensitive material. Both are interpretation, not Apple statements.
- Process gaps: securityonline.info reports that Apple has published no appeals process for account suspensions, which civil liberties advocates have flagged as a transparency gap.
Remediação
- Avoid "Anyone with the Link" sharing for sensitive material. It bypasses end-to-end encryption and exposes content to Apple moderation and possible law-enforcement referral (theregister.com, thehackernews.com).
- Use "People you choose", direct copies via messaging apps, or Advanced Data Protection-backed storage, which stays unaffected unless a public link is generated (thehackernews.com, securityonline.info).
- Security teams should treat the permission applied to each item (public link versus restricted recipients) as the boundary that matters, not whether Advanced Data Protection is enabled on the account (gbhackers.com).
- Organizations that distribute files through iCloud public links should review their sharing practices before the December 2026 release. Previously created links may also be reviewed (securityonline.info).
Relatos divergentes
- Version number: gbhackers.com says the checks start with iOS/iPadOS/macOS/visionOS 17.3. theregister.com, helpnetsecurity.com, thehackernews.com and securityonline.info all say 27.3. The 27.3 figure is more widely reported and consistent with the rest of the coverage, so 17.3 looks like an error.
- Retroactive scope: thehackernews.com and securityonline.info say Apple has not clarified whether links created before the update will be checked. The remediation advice in securityonline.info nonetheless says previously created public links may be subject to review. This is unconfirmed.
- Rollout status: theregister.com says the feature ships in beta now with general availability in December 2026. thehackernews.com says the rollout is expected in December 2026 and does not mention a beta.
Linha do tempo
-
Apple to Scan Publicly Shared iCloud Links for Harmful Content Starting iOS/macOS 27.3
ler a análise desta fonte ocultar
Apple will begin automatically checking files shared via public iCloud links for prohibited content, starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3. The checks apply only to photos in iCloud Photos and files in iCloud Drive shared using the "Anyone with the link" option, which makes content "made accessible to Apple" for review (macrumors.com). Apple does not define what counts as harmful content, but its mention of law-enforcement referrals suggests the policy targets material such as malware or child sexual abuse material (macrumors.com). Content shared this way loses end-to-end encryption even when Advanced Data Protection is enabled, because delivering files to unauthenticated browsers requires server-side mediation.
Technical Details
The inspection is triggered only by the "Anyone with the link" sharing mode; it does not apply to files shared via the "People you choose" option or sent as direct copies (e.g., through Messages), nor to files kept in private storage without a public link. Apple's support documentation states that if prohibited content is uploaded, Apple reserves the right to move, refuse, modify, remove, or delete the content at any time, and that it may take action against your Apple Account, including blocking or disabling your Apple Account, blocking the ability to create a new Apple Account with the associated email address or phone number, or if necessary, involving law enforcement (macrumors.com). Apple has not clarified whether links created before the update will also be checked (macrumors.com).
Remediation
Users who need to preserve full end-to-end encryption and avoid content inspection should share files only via the "People you choose" option or send direct copies through messaging apps rather than generating public "Anyone with the link" URLs. Organizations and privacy-conscious users relying on iCloud public links for distribution should review their sharing practices ahead of the public release of iOS/macOS 27.3, expected in December 2026, as previously created public links may also be subject to review. Apple has not published specific definitions of prohibited content or an appeals process for account suspensions, which civil liberties advocates have flagged as a transparency gap.
-
Apple to Scan Publicly Shared iCloud Links for Harmful Content Starting iOS 17.3
ler a análise desta fonte ocultar
Apple will begin checking content shared via the "Anyone with the Link" iCloud sharing option for harmful material, starting with iOS 17.3, iPadOS, macOS, and visionOS 17.3 or later. The policy, disclosed in an Apple support document published November 3, 2026, applies only to publicly accessible iCloud Photos and iCloud Drive links, not to private content or data protected by Advanced Data Protection. Apple clarifies that items shared this way lose end-to-end encryption to enable the sharing mechanism, creating an exception even when Advanced Data Protection is enabled at the account level. Enforcement may include removing or modifying flagged content, disabling Apple Accounts, blocking re-registration with the same email or phone number, and involving law enforcement when necessary.
Technical Details
The document does not specify detection technologies, harmful-content categories, hash-matching methods, or whether scanning occurs on-device or server-side. The scope is explicitly limited to the "Anyone with the Link" sharing mode; "People You Choose" and "Send a Copy" options are not described as subject to the same inspection. Regional availability of the feature may vary.
Remediation
Security teams should note that the relevant boundary is the specific sharing permission applied to each item (public link vs. restricted recipients), not simply whether Advanced Data Protection is enabled on the account.
-
Apple to Scan Publicly Shared iCloud Links for Harmful Content Starting iOS 27.3
ler a análise desta fonte ocultar
Apple announced it will begin scanning content shared via public iCloud links—such as iCloud Photos or iCloud Drive files set to "Anyone with the Link"—for harmful content, starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3, expected to roll out in December 2026. The company clarified that enabling this sharing option makes content accessible to anyone with the link, including Apple itself, and explicitly disables end-to-end encryption (E2EE) even when Advanced Data Protection is enabled. Apple has not disclosed what qualifies as "harmful content," whether the scanning will apply retroactively to existing links, or how detection will technically work. The company warned that violating accounts may be blocked, disabled, or reported to law enforcement.
Technical Details
The scanning applies only to publicly shared links ("Anyone with the Link") in iCloud Photos and iCloud Drive, not to private or end-to-end encrypted content by default. Sharing content this way inherently disables E2EE protections, a point Apple emphasized in its support documentation published Tuesday. No details were given on the scanning mechanism, detection criteria, or scope of retroactive application to links created before the update.
Remediation
Users concerned about privacy should avoid using "Anyone with the Link" sharing for sensitive content and rely on more restricted sharing options or end-to-end encrypted storage via Advanced Data Protection, which remains unaffected unless public links are generated.
-
Apple to Scan iCloud 'Anyone with the Link' Shares for Harmful Content, Threatens Account Penalties
ler a análise desta fonte ocultar
Apple announced it will begin checking content shared via the iCloud "Anyone with the link" sharing option for harmful material, starting with iOS, iPadOS, macOS, and visionOS 27.3 or later. The "Share a Link" option, when set to allow anyone with the link, makes content accessible to any holder of the link, including Apple itself, and is not end-to-end encrypted even when Advanced Data Protection is enabled. Apple stated it reserves the right to move, refuse, modify, remove, or delete harmful content at any time, and may block or disable accounts, block associated email addresses or phone numbers from creating new Apple Accounts, and involve law enforcement when necessary. This is a policy and feature change rather than a security vulnerability, with implications for user privacy and content moderation on the platform.
Technical Details
The checks apply specifically to content shared through the "Anyone with the link" option, distinct from restricted sharing to approved individuals. Content shared this way is explicitly excluded from end-to-end encryption protections, meaning Apple can access it for moderation purposes regardless of a user's Advanced Data Protection settings.
-
Apple to Scan Public iCloud 'Anyone with the Link' Shares for Undefined 'Harmful Content'
ler a análise desta fonte ocultar
Apple announced via a support page that starting with iOS/iPadOS/macOS/visionOS 27.3, publicly shared iCloud links ('Anyone with the Link') will be scanned for 'harmful content,' a term the company has not defined. The policy applies only to content shared via public links, not direct person-to-person shares, and Apple notes that enabling this sharing option strips end-to-end encryption even if Advanced Data Protection is active on the account. Apple reserves the right to move, modify, remove, or delete flagged content, disable associated accounts, and involve law enforcement, raising concerns given the lack of transparency on detection methods (human review, automation, or AI) and the vague scope of 'harmful content,' which could extend beyond CSAM or malware to politically sensitive material. The feature ships in beta now, with general availability expected in December 2026.
Technical Details
The scanning applies specifically to iCloud items shared with the 'Anyone with the Link' option, which Apple can access and which removes end-to-end encryption protection from that content. Apple has not disclosed the technical mechanism for detecting 'harmful content,' nor whether automated systems, human moderators, or AI-based classifiers will make removal decisions.
Remediation
Users concerned about content privacy should avoid using the 'Anyone with the Link' public sharing option for sensitive material, since it bypasses end-to-end encryption and subjects content to Apple's moderation and potential law enforcement referral.