In 2014, Apple had an iCloud issue with a vulnerability in Apple's Find My iPhone API, which lacked rate-limiting, allowing attackers to perform brute-force pas

In 2014, Apple had an iCloud issue with a vulnerability in Apple's Find My iPhone API, which lacked rate-limiting, allowing attackers to perform brute-force password attacks without restriction. Apple denied that this was the cause of the celebrity photo releases, but they also patched several bugs relating to security and began promoting two-factor authentication. https://www.dailydot.com/debug/apple-icloud-brute-force-attack-march/ https://www.dailydot.com/debug/apple-icloud-brute-force-atta...