Apple iCloud Mail Arbitrary Email Sender Spoofing

Apple iCloud Mail contained two SMTP submission-service parsing issues that allowed authenticated users to send email as arbitrary icloud.com addresses while passing SPF, DKIM, and DMARC checks...

iCloud Mail: undisclosed vulnerability (ZAI-2026-M7G7R7)

Not disclosed. Details are not yet publicly disclosed...

How A Bug Hunter Forced Apple to Completely Remove A Newly Launched Feature

Recently Apple released a new Feature for iPhone and iPad users, but it was so buggy that the company had no option other than rolling back the feature completely. In November, Apple introduced a new App Store feature, dubbed "Notify" button — a bright orange button that users can click if they...

Sync for iCloud Mail - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Sync for iCloud Mail published at the 'play' market has multiple vulnerabilities...