Apple Passwords App Bug Left Users Vulnerable to Phishing Attacks for Months Before Being Fixed

Quick Summary:

The vulnerability was first discovered by developer Mysk's security researchers and reported in September.Apple's iOS 18.2 security release notes described the bug like so: Impact: A user in a privileged network position may be able to leak sensitive information Description: This issue was addressed by using HTTPS when sending information over the network.

Apple fixed a bug in its Passwords app with December's iOS 18.2 update that had left users vulnerable to phishing attacks in the three months since the launch of iOS 18.

According to an Apple security update spotted by 9to5Mac, the Passwords app was sending unencrypted requests for the logos and icons associated with users' stored passwords.

---

More Pictures

---

Read Quick SummarySave Time

or

Article Details

Author / Journalist: Tim Hardwick

Category: Technology

Markets: United States

Topics: Rumors Mac IOS IPhone Apple IPad

Source Website Secure: Yes (HTTPS)

News Sentiment: Neutral

Fact Checked: Legitimate

Article Type: News Report

Published On: 2025-03-19 @ 02:10:28 (21 hours ago)

News Timezone: GMT +8:00

News Source URL: macrumors.com

Language: English

Article Length: 907 words

Reading Time: 6 minutes read

Sentences: 54 lines

Sentence Length: 17 words per sentence (average)

Platforms: Desktop Web, Mobile Web, iOS App, Android App

Copyright Owner: © MacRumors

News ID: 27169868

View Article Analysis

About MacRumors

Main Topics: Technology

Official Website: macrumors.com

Update Frequency: 2 posts per day

Year Established: 2000

Headquarters: United States

News Last Updated: 15 hours ago

Coverage Areas: United States

Ownership: Independent Company

Publication Timezone: GMT +8:00

Content Availability: Worldwide

News Language: English

RSS Feed: Available (XML)

API Access: Available (JSON, REST)

Website Security: Secure (HTTPS)

Publisher ID: #119

Publisher Details

Frequently Asked Questions