In a blog post shared by ZDNet, security researcher Vishal Bharad claims that he found a bug that would have allowed a hacker to inject a virus or malicious script onto Apple's iCloud website.
According to Bharad, the vulnerability consisted of creating a Pages or Keynote document on the iCloud website with the name field containing the XSS payload. Sharing the document with another user, creating a change, saving, and then clicking "Browse All Versions" under Settings would have triggered the XSS payload.
Given the vulnerability revolved around the iCloud website, it's not linked to a recent software update and has reportedly been patched by Apple server-side. Bharad says he submitted the issue to Apple on August 7, 2020, and received a $5,000 bounty on October 9, 2020. We've reached out to Apple for comment and we'll update if we hear back.
Tuesday October 6, 2026 3:27 am PDT by Tim Hardwick
Yesterday we reported that Apple tripled the number of iCloud Mail aliases users can create, from three to nine. But it turns out that's not the only email-related limit Apple has raised. The company has also bumped the number of email addresses you can use per iCloud Custom Domain, from three to 10.
If you subscribe to iCloud+, you can use a domain name you already own for your iCloud Mail...
Monday October 5, 2026 5:15 am PDT by Tim Hardwick
Apple appears to have quietly tripled the number of iCloud Mail aliases users can create, increasing the limit from three to nine. The increase was first noticed last week by a Reddit user, and picked up shortly after by a member of the MacRumors forums. MacRumors can confirm the change is live at iCloud.com.
The increased limit has not been mentioned by Apple, so it could conceivably be a...
Some Apple retail employees have been told to warn customers against visiting to purchase an iPhone Duo without a pre-order on Friday, October 23.
Apple Store employees told MacRumors that they have been advised that there will likely be no iPhone Duo stock available for walk-in purchases on launch day. Staff have been instructed to discourage customers without pre-orders from coming in...
Apple's first foldable iPhone, with a book-style design featuring a 5.4-inch outer display and a 7.6-inch inner display with a minimal crease down the middle.