Dan Underwood
@underwood.digital
Security Engineering @ Apple, Ex-UK Gov The intersection of technology (device and national security), and liberal arts (public policy)
"Apple told TechCrunch that it has updated the user experience, making it easier for recipients to access important information on what to do next." techcrunch.com/2026/08/13/if-...
If Apple sends you a push notification alerting you to a spyware attack, take it seriously | TechCrunch
Apple now sends out push notifications to iPhone lock screens when the company identifies government spyware targeting someone's devices.
techcrunch.com
I'm hiring for Apple's Secure Design team here in Cupertino - come join us in our mission in securing the features that Apple ships to its customers (such as Siri AI and encrypted RCS) and partner with some of the most talented people in the industry: jobs.apple.com/en-us/details/...
Secure Design Engineer, SEAR - Jobs - Careers at Apple
Apply for a Secure Design Engineer, SEAR job at Apple. Read about the role and find out if it’s right for you.
jobs.apple.com
At the #WWDC26 Privacy & Security Group Lab we answered some great questions from developers, including how we secured features such as Siri AI, and protect users privacy with PCC. There's another chance to ask questions today on the forums at 3pm PDT: developer.apple.com/forums/ac...
Later today at 3pm in Cupertino we have our online Privacy & Security Group Lab! Join and you'll be able to ask us your questions around all of the announcements at #WWDC26 and how you can protect your users. developer.apple.com/videos/pl...
Privacy and Security Group Lab - WWDC26 - Videos - Apple Developer
Join us online for a deep dive into WWDC26 with Apple engineers and designers to ask questions, get advice, and follow the discussion...
developer.apple.com
Agentic tools and features introduce new categories of security risks and vulnerabilities. My team, and one of our partner teams, has put together this superb #WWDC26 session to help developers mitigate these risks - using what we learned while securing Siri AI developer.apple.com/videos/pl...
Secure your app: mitigate risks to agentic features - WWDC26 - Videos - Apple Developer
Explore how to evaluate threats from indirect prompt injection, such as data exfiltration and unintended actions. Discover system...
developer.apple.com
"Now, we are collaborating with Google and NVIDIA to run new Apple Intelligence workloads on Google Cloud, extending our industry-leading PCC privacy commitments to third-party data centers for the first time." #WWDC26 security.apple.com/blog/expan...
Expanding Private Cloud Compute - Apple Security Research
Alongside the next generation of Apple Intelligence, today we’re expanding Private Cloud Compute (PCC) beyond Apple’s data centers. When Apple introduced Private Cloud Compute in 2024, we defined a new frontier for private AI inference, extending the security and privacy of Apple devices into the cloud for those AI workloads more complex than on-device models can handle. Now, we are collaborating with Google and NVIDIA to run new Apple Intelligence workloads on Google Cloud Platform, extending our industry-leading PCC privacy commitments to third-party data centers for the first time.
security.apple.com
Incredibly proud to have been part of this effort and collaboration to enable end-to-end encrypted messaging over RCS for users across the world in iOS 26.5. iMessage continues to offer the best security available to the most users at scale. www.apple.com/newsroom/2026/0...
End-to-end encrypted RCS messaging begins rolling out today in beta
Apple and Google collaborate with the GSMA to roll out end-to-end encrypted RCS messaging in beta, enhancing cross-platform communication security.
apple.com
LLMs will drastically change how software vulnerabilities are discovered (and resolved) across the industry - and in many cases already are. www.anthropic.com/glasswing
Project Glasswing: Securing critical software for the AI era
A new initiative to secure the world’s most critical software and give defenders a durable advantage in the coming AI-driven era of cybersecurity.
anthropic.com
In case you missed it - here's six(!) hours of content from my incredible friends and colleagues today on protecting your apps from memory safety vulnerabilities. It was great to meet up with developers and talk about protecting users! www.youtube.com/live/UZeSyodA...
Fortify your app: Essential strategies to strengthen security | Meet with Apple
Learn to bolster your app’s security and help protect user data in this online activity streaming from the Apple Developer Center Cupertino. Whether you’re hardening an existing app or starting a new project, you’ll learn directly from Apple engineers about how to reinforce your app from the ground up. Learn about the security challenges facing modern apps, and explore a comprehensive suite of tools and technologies designed to help safeguard user data. Discover how you can protect your C and C++ codebases with powerful features like Memory Integrity Enforcement, pointer authentication, and memory bounds safety. Find out how to adopt Swift for your most security-sensitive components, taking advantage of its inherent safety and modern abstractions to write secure, high-performance code. And get guidance on building a clear security roadmap for new and existing projects, from high-level strategy to hands-on implementation. Presentations: Enhance app security with Xcode Protect your app from memory safety vulnerabilities Implement performance-tuned Memory Integrity Enforcement Control flow integrity with Pointer Authentication Eliminate bounds safety vulnerabilities in C and C++ Find security bugs in Swift code with Sanitizers Write a security-sensitive component in Swift To explore additional sessions, appointments, and workshops, view the full schedule of Meet with Apple activities worldwide. https://apple.co/Meet-with-Apple More Apple Developer resources: Video sessions: https://apple.co/VideoSessions Documentation: https://apple.co/DeveloperDocs Forums: https://apple.co/DeveloperForums App: https://apple.co/DeveloperApp
youtube.com
"Following rigorous security testing and extensive evaluation by the German government, iPhone and iPad become the first consumer devices approved for use with classified information in NATO restricted environments" www.apple.com/newsroom/2026/0...
iPhone and iPad approved to handle classified NATO information
Today, Apple announced iPhone and iPad are the first and only consumer devices in compliance with information assurance requirements of NATO nations.
apple.com
My peer team at Apple is hiring! If you're interested in securing cutting edge hardware and collaborating with incredibly skilled engineering teams to deliver great products that people love using then this role may be a good fit. jobs.apple.com/en-us/details/...
Security Reviewer, Secure Design Platform - Jobs - Careers at Apple
Apply for a Security Reviewer, Secure Design Platform job at Apple. Read about the role and find out if it’s right for you.
jobs.apple.com
📢 Announcing hacklore.org 📢 It’s time to retire outdated cyber advice! More than 80 cybersecurity veterans have signed an open letter urging a shift from folklore to guidance that actually helps people avoid the most common attacks. 🔐 Blog: medium.com/@boblord/let... Site: www.hacklore.org
Stop Hacklore!
hacklore.org
We're updating our bounty program with the top award now set at $2 million for zero-click remote exploit chains. In addition - there are increased awards for proximate wireless attacks, WebKit, and Gatekeeper security.apple.com/blog/apple...
A major evolution of Apple Security Bounty, with the industry's top awards for the most advanced research - Apple Security Research
Today we’re announcing the next major chapter for Apple Security Bounty, featuring the industry’s highest rewards — up to $2 million and a maximum payout in excess of $5 million — expanded research categories, and a flag system for researchers to objectively demonstrate vulnerabilities and obtain accelerated awards.
security.apple.com
Did you know that more than half of all iPhones around the world are being used in languages other than English? My team helps make that possible, and we're hiring! Our work is very dynamic and spans the entire localization pipeline, from internal tools to all our OSes. jobs.apple.com/en-us/detail
Localization Software Engineer - Jobs - Careers at Apple
Apply for a Localization Software Engineer job at Apple. Read about the role and find out if it’s right for you.
jobs.apple.com
"The iPhone 17 is probably now the most secure computing environment on the planet that is still connected to the internet,"
Apple's latest iPhone security feature just made life more difficult for spyware makers | TechCrunch
Apple launched a new security feature for iPhone 17 and iPhone Air designed to reduce the effect of memory corruption bugs, and in turn make spyware and zero-days more difficult to hack into iPhones.
techcrunch.com
@rmondello.com Neven got this email from Portland Public Schools that is relevant to your interests. I'll be thinking about it for a while…
iPhone 17, iPhone Air, and iPhone 17 Pro all support Memory Integrity Enforcement bringing a significant advancement in memory safety - including to developers as part of the Enhanced Security feature announced earlier this year at WWDC
Blog - Memory Integrity Enforcement: A complete vision for memory safety in Apple devices - Apple Security Research
Memory Integrity Enforcement (MIE) is the culmination of an unprecedented design and engineering effort spanning half a decade that combines the unique strengths of Apple silicon hardware with our advanced operating system security to provide industry-first, always-on memory safety protection across our devices — without compromising our best-in-class device performance. We believe Memory Integrity Enforcement represents the most significant upgrade to memory safety in the history of consumer operating systems.
security.apple.com
With iOS 26.0, we're introducing support for Wi-Fi Aware via AccessorySetupKit - this makes it easy for users to connect to and set up your accessories securely, and build peer to peer connectivity experiences with DeviceDiscoveryUI! https://developer.apple.com/videos/play/wwdc2025/228 #wwdc25
Supercharge device connectivity with Wi-Fi Aware - WWDC25 - Videos - Apple Developer
Learn how to create peer-to-peer network connections with Wi-Fi Aware. We'll also cover how to share videos in real time, transfer large...
developer.apple.com
We've launched support for developers to build their own security hardened extensions, distribute apps using Pointer Authentication, and access a range of other security mitigations: https://developer.apple.com/documentation/xcode/enabling-enhanced-security-for-your-app #wwdc25
Enabling enhanced security for your app | Apple Developer Documentation
Detect out-of-bounds memory access, use of freed memory, and other potential vulnerabilities.
developer.apple.com
This is a hugely important update for CryptoKit - make sure you check out the session to learn more about what you do (and don’t) need to do as an App Developer to protect against quantum computers.
Frederic Jacobs@fredericjacobs.com · last yr.🆕⚛️🔐 Starting with iOS 26, CryptoKit gets support for quantum-secure cryptography with algorithms such as ML-KEM, ML-DSA and HPKE with X-Wing: developer.apple.com/documentatio...
New post on the Swift blog: we re-wrote the Password Monitoring service for Apple Passwords in Swift and saw huge improvements in memory use and throughput. Some of the details here still blow my mind; it's a fun read. https://www.swift.org/blog/swift-at-apple-migrating-the-password-monitoring-servi
Swift at Apple: migrating the Password Monitoring service from Java
Swift is heavily used in production for building cloud services at Apple, with incredible results. Last year, the Password Monitoring service was rewritten in Swift, handling multiple billions of requests per day from devices all over the world. In comparison with the previous Java service, the updated backend delivers a 40% increase in performance, along with improved scalability, security, and availability.
swift.org
Picked up my Close Your Rings Day pin! (Happy 10th birthday to Apple Watch)
Decided to do the #promosky as I’m looking for more friends (MDNI), especially people to play games with 🙂 🎮 Zelda, Kirby, Skyrim, No Man’s Sky, Stellaris, Civilization 📺 Dragon Prince, Severance, Foundation 📖 Arc of a Scythe, Mistborn 🎨 Used to write so artists are also welcome (🚫 NFT, genAI)
Maybe a catastrophic natural disaster isn't the best way to advertise your features in an app for managing your smart devices LG
CISA has launched guidance on protecting mobile devices given recent threats against telecommunications infrastructure - including the benefit of Lockdown Mode, Private Relay, and the Passwords app
cisa.gov
