With iOS 26.2 Release, Apple Reverses Course on Shutdown.log
ID: 7dc4d573-83f4-5e96-a012-d77408f11e6a
STIX ID: report--7dc4d573-83f4-5e96-a012-d77408f11e6a
Feed Name: iVerify Blog
Threat Score
iVerify reports that iOS 26 originally overwrote shutdown.log entries, destroying historical forensic traces used to detect Pegasus and Predator spyware; Apple reverted the behavior in iOS 26.2 and patched related CVEs in 26.3, but devices already upgraded may have lost crucial IoCs. The post urges updates, emphasizes limited visibility for iOS research, and advocates for a dedicated iOS security API and alternative detection tools.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
