Our takeApple will begin scanning publicly shared iCloud links for harmful content, ending end-to-end encryption for those shares. If you rely on link encryption for sensitive files, consider alternatives like encrypted email or secure file transfer.Security Resilience desk
Sources (2)
- hackernews · hackernews
- the420_in · the420_in
What this means for you — Security leader:Public iCloud links shared as "Anyone with the link" will be scanned server-side for harmful content starting in iOS 27.3 / macOS 27.3; this removes end-to-end encryption for those specific shares.
What this means for you — Lean IT orgs:If you share iCloud photos or files using the "Anyone with the link" option, Apple will now scan that content for harmful material. Use password-protected or restricted sharing instead if you need to keep it private.
What this means for you — MSP:Advise clients to review iCloud sharing settings; public "Anyone with the link" shares lose E2EE and will be scanned server-side starting with the 27.3 releases.
What this means for you — Researcher:This is a deliberate policy change that trades E2EE for content scanning on public iCloud links; it applies only to shares explicitly set to "Anyone with the link."