Oct. 27, 2025:
The emergence of Pegasus and Predator spyware over the past several years has transformed the landscape of mobile device security.
These advanced malware strainsdeployed by sophisticated threat actors for surveillance and espionagehave repeatedly demonstrated their ability to exploit zero-click vulnerabilities, leaving high-profile individuals and at-risk communities exposed.
But hey, Ive got nothing to hide. What do I need to worry about? Think again.
Critical forensic analysis has long relied on remnants within iOS system logs, particularly the shutdown.log file, to discern traces of such infections even after the malware attempts to erase itself.
With the release of iOS 26, forensic methodologies face an unprecedented setback. iVerify analysts identified that Apples latest OS version now overwrites the shutdown.log file upon each device reboot, instead of appending new log entries.
This seemingly innocuous changewhether intentional or inadvertenthas significant consequences for digital evidence preservation.
Any device updated to iOS 26 that is subsequently restarted will see all prior shutdown.log content erased, destroying potential indicators of compromise linked to Pegasus, Predator, or similar threats.
More:
https://cybersecuritynews.com/ios-26-deletes-pegasus-and-predator-spyware-infection-evidence/
Good reason for iPhone users not to upgrade to iOS 26.