4 ms·
> Apple told 404 Media it deployed a patch for the issue on July 3, which the company says has fully resolved the issue. > Now Apple says it has been fixed, we
by lapcat 3mo ago
> Apple told 404 Media it deployed a patch for the issue on July 3, which the company says has fully resolved the issue.
> Now Apple says it has been fixed, we can add that, in simple terms, it required sending a target Hide My Email user a message that got rejected as spam.
I would note that Mac Mail app (I haven't tested iOS Mail) still has an Apple Account email address disclosure vulnerability, though this requires the user to reply to a maliciously crafted email. The vulnerability affects all users of Mail app, even if they don't use Hide My Email! https://lapcatsoftware.com/articles/2026/7/9.html https://lapcatsoftware.com/articles/2026/7/9.html
- philipwhiuk 3mo ago> The vulnerability affects all users of Mail app, even if they don't use Hide My Email! If they don't use "Hide My Email" trivially replying discloses their email?
- deleted 3mo ago[deleted]
- layer8 3mo agoIt will disclose your Apple account address even when you received the email on a different account in the Mail app.