Damus
FLASH profile picture
FLASH
@flash
⚡️❗️ NEW - Attackers could use iCloud to send email as any icloud[.]com address, including [email protected], while still passing SPF, DKIM and DMARC, the email authentication checks built to stop spoofing.

Researchers found and reported two parsing flaws in Apple's mail servers. An early fix by Apple only blocked the word "admin" and the full patch took 18 months.

Apple paid them $15,000.

43❤️9👀2😂2💯1
FLASH · 4d
🗞️ https://sec-consult.com/blog/detail/from-anyoneicloudcom-spoofing-arbitrary-apple-icloud-identities/
TuvokSeed · 4d
apple is so stupid they will fall very soon this is rediciulous next time it will be magic hackers or something showing a huge cook at apple.com or a manifesto or something
aco · 4d
yeah, but they’re still using the same body as the 1990s. nigerian prince with an icloud gets through but the scam is still just as obvious.