Apple is facing a new Hide My Email lawsuit, and it does not look good. A proposed class-action suit claims the company sold customers privacy promises it couldn’t deliver on.
The suit says Apple knew about a certain flaw in its address-hiding feature for more than a year, but kept marketing Hide My Email as airtight privacy the whole time.
Apple’s Hide My Email has one job — to keep your real inbox out of other people’s hands. But it isn’t doing that job, and Apple reportedly knew this for more than a year.
If you’ve ever used Hide My Email to sign up for a sketchy app or website, you’ll want to pay attention. A security researcher says he managed to unmask the real email address behind virtually every Hide My Email alias. And Apple hasn’t fixed it yet.
A newly discovered AirDrop vulnerability means someone sitting in the same café as you can silently break AirDrop on your iPhone or Mac, no tap or pairing required. They just send a stream of junk data to your iPhone and AirDrop — alongside AirPlay, Handoff, Universal Clipboard, and Continuity Camera — all go dark for as long as they keep it up.
That’s the core finding from new security research into Apple’s AirDrop protocol. The exploit does not steal any data, but instead lets an attacker shut down AirDrop and Continuity features. For Apple users who use AirDrop regularly, that could be a real annoyance hiding in a real-life vulnerability.
Security researchers have disclosed a new macOS flaw that lets attackers shut down your security software after getting onto your machine — no admin password, no kernel exploit, and almost no trace left behind.
The attack takes advantage of how macOS apps earn each other’s trust, and if you use a Mac at work, it is exactly the type of thing your IT needs to know about.
Still holding onto an iPhone XS, XR or 11 because it gets the job done? There’s now a good reason to upgrade: usbliter8. This security flaw lets anyone with physical access to an older iPhone hijack the startup process, and Apple won’t be able to patch it with a software update.
That’s because it isn’t an iOS bug — the flaw is in the chip’s boot code, the first thing that runs when you turn on the device.
Apple released iOS 18.6.2, macOS Sequoia 15.6.2 and iPadOS 18.6.2 on Wednesday, warning that the updates close security vulnerabilities already exploited by hackers.
While the patches include no new features, they are nevertheless highly recommended for iPhone, Mac and iPad users.
iPhone models that can’t install iOS 14 or iOS 15 can still get protection from the infamous Pegasus spyware thanks to iOS 12.5.5. Apple released this update Thursday for devices as old as the iPhone 5s to close a security hole in active use by hackers.
The same update can also be installed on older iPad and iPod touch models.
Apple keeps a very tight lid on iPhone security, but that might actually benefit very sophisticated hackers, according to some security experts.
This is how Saudi Arabia was allegedly able to hack Jeff Bezos’s iPhone X.
Researchers in Europe have discovered a way to read the contents of encrypted emails sent with iOS and macOS devices. The so-called Efail exploit is significant enough that the Electronic Frontier Foundation calls it an “immediate risk.”
Apple is certainly working on a patches for all its devices, but there are ways to protect your laptop, phone and tablet now.
Apple fans and enthusiastic gadget reviewers will ultimately remember 2017 as the year of a reinvented iPhone. But as the year draws to an end, Apple marketing chief Phil Schiller has a few other things on his mind, such as delays in releasing the company’s first smart speaker and a “bad week” of software bugs and security holes.
Sloppy coding in some popular iOS games allows hackers to give themselves and others thousands of dollars’ worth of in-app purchases for free.
The hole was discovered by developers at DigiDNA, creator of a backup tool called iMazing that allows iPhone and iPad users to access their devices’ hidden file systems. The developers found that the app backup/restore feature in iMazing 1.3 exposes weaknesses in the way games like Angry Birds 2 and Tetris Free handle in-app purchases.
To demonstrate how easy it is to hack in-app purchases using this method, the DigiDNA team tweaked Angry Birds 2 to start the game with 999,999,999 gems — the equivalent of $10,000 of in-game credits.