Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case

Apple has released iOS and iPadOS updates to fix a Notification Services vulnerability that unexpectedly retained deleted notifications on devices.

• •CVE-2026-28950 identified as a logging issue where notifications marked for deletion were stored in the push notification database
• •The flaw was discovered after FBI forensically extracted Signal messages from a deleted app using this notification retention bug
• •Fix addresses iPhone 11+ and iPad 3rd generation+ in iOS 26.4.2 and iPadOS 26.4.2, with additional patches for older devices in iOS 18.7.8
• •Users can prevent message content in notifications by selecting "Name only" or "No name or message" in Signal settings
• •Signal users automatically benefit from the fix once they install the patch, with all preserved notifications deleted