Apple Patches Hide My Email Flaw That Leaked Real Addresses in Mail Logs
Apple has fixed a critical privacy flaw in its Hide My Email service that could expose users' real email addresses through mail…
Tag: Apple
iCloud+ Subscription Required for Hide My Email Feature
iCloud+ is Apple's paid cloud storage service that includes the Hide My Email feature. The privacy flaw affected iCloud+ subscribers.
ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password
Group-IB has identified a new macOS infostealer, ClickLock Stealer, that uses a coercive technique to force victims to enter their login password.…
WhatsApp-to-Host Attack Chain Exploits Three OpenClaw Flaws for Code Execution
Security researcher Chinmohan Nayak has detailed a WhatsApp-to-host attack chain leveraging three now-patched vulnerabilities in the OpenClaw personal AI assistant. The flaws,…
Apple Accounts Linked to Scattered Spider Suspect
Prosecutors linked Apple accounts to Peter Stokes, the alleged Scattered Spider hacker, using IP address matches from the Windows device ID.
Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker in Jewelry Retailer Breach
U.S. prosecutors have linked an alleged member of the Scattered Spider cybercriminal group to a May 2025 intrusion at a luxury jewelry…
European Parliament Member Investigating Spyware Was Hacked With Pegasus
A new report from the Citizen Lab reveals that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly…
PWNYOURHOME: Zero-Click Exploit
PWNYOURHOME is a zero-click exploit in Apple's HomeKit smart home software, used to deliver Pegasus spyware. It was addressed by Apple in…
282 iOS AI Apps Leak API Keys and OpenAI Proxy Access in Network Traffic Study
Researchers at Wake Forest University tested 444 AI chatbot apps for iPhone and found that 282 of them (nearly two-thirds) exposed paid…
macOS: Operating System Targeted by ClickLock Stealer
macOS is the target operating system for ClickLock Stealer, which exploits user interaction and system processes to steal credentials and sensitive data.