Apple tightens Mac file access over AI agent risks

Apple says it will add new controls around Full Disk Access, the macOS permission that gives an app wide reach into a user's files, messages, mail and browsing history. The reason it gives is straightforward: AI agents are growing more capable.

The logic is simple. The more an agent can do, the more damage or leakage broad access allows, so the permission is now riskier than it used to be. On an employee's laptop, client correspondence, contracts and exports from accounting systems often sit side by side, and an app with full disk access can reach all of it.

Check which apps and AI tools on your company Macs have Full Disk Access, and switch off whatever the work does not need. Decide who may connect agents to mail and files. It is safer when an agent's rights come from the company structure rather than a laptop checkbox: in 1Cifer each role has its own agent that sees only that role's data.