Apple to scan publicly shared iCloud links for harmful content from iOS 27.3, with account bans possible
Apple announced that, starting with iOS 27.3, it will monitor iCloud content shared through public links for "harmful content", and may disable the accounts of users who violate its policy. The change applies only to items shared with the "Anyone with the Link" setting in iCloud Photos and iCloud Drive; content shared with "People you choose" remains end-to-end encrypted and is not visible to Apple. Apple states it reserves the right to move, refuse, modify, remove or delete content, to block or disable an account, to prevent the creation of a new account with the associated email address or phone number, and to involve law enforcement. The policy does not define "harmful content" in practice nor set out a dedicated appeals process, although Apple operates a general appeals page. Bitdefender reports the policy also ships with iPadOS, macOS and visionOS 27.3, currently in developer beta with public release expected in December (bitdefender.com). This is a privacy and platform-policy development rather than a vulnerability or an active threat.
Detalhes técnicos
Creating an "Anyone with the Link" share removes end-to-end encryption from the shared item, even when Advanced Data Protection is enabled on either side, which is what technically enables Apple to inspect the content. Restricted shares keep end-to-end encryption intact.
Remediação
Users and organisations handling sensitive data in iCloud should prefer the "People you choose" sharing mode over open links, review existing public links, and treat any content behind an open iCloud link as readable by Apple and by anyone holding the URL.
Linha do tempo
-
Apple to scan publicly shared iCloud links for harmful content from iOS 27.3, with account bans possible
ler a análise desta fonte ocultar
Apple announced that, starting with iOS 27.3, it will monitor iCloud content shared through public links for "harmful content", and may disable the accounts of users who violate its policy. The change applies only to items shared with the "Anyone with the Link" setting in iCloud Photos and iCloud Drive; content shared with "People you choose" remains end-to-end encrypted and is not visible to Apple. Apple states it reserves the right to move, refuse, modify, remove or delete content, to block or disable an account, to prevent the creation of a new account with the associated email address or phone number, and to involve law enforcement. The policy does not define "harmful content" in practice nor set out a dedicated appeals process, although Apple operates a general appeals page. Bitdefender reports the policy also ships with iPadOS, macOS and visionOS 27.3, currently in developer beta with public release expected in December (bitdefender.com). This is a privacy and platform-policy development rather than a vulnerability or an active threat.
Technical Details
Creating an "Anyone with the Link" share removes end-to-end encryption from the shared item, even when Advanced Data Protection is enabled on either side, which is what technically enables Apple to inspect the content. Restricted shares keep end-to-end encryption intact.
Remediation
Users and organisations handling sensitive data in iCloud should prefer the "People you choose" sharing mode over open links, review existing public links, and treat any content behind an open iCloud link as readable by Apple and by anyone holding the URL.