This post was originally published on this site

Apple says it fixed a vulnerability that could expose real addresses behind Hide My Email on or around July 3, but we reproduced the flaw two weeks after the company’s claimed repair date.

iPad screen showing iCloud settings with a centered Hide My Email popup dialog, including a blue mail icon, explanatory text, and blurred fields for generating and labeling a private email addressApple’s Hide My Email service

The company told 404 Media that it deployed a patch on July 3, 2026, and fully resolved the vulnerability. AppleInsider successfully reproduced the behavior on July 17.

Our test found that a sender who possessed a specific Hide My Email alias could reveal the real address behind it with much technical knowledge.

We’ve reached out to Apple about the matter. We will update when we hear back from the company on the matter.

Continue Reading on AppleInsider | Discuss on our Forums