In a blog post shared by ZDNet, security researcher Vishal Bharad claims that he found a bug that would have allowed a hacker to inject a virus or malicious script onto Apple's iCloud website.
According to Bharad, the vulnerability consisted of creating a Pages or Keynote document on the iCloud website with the name field containing the XSS payload. Sharing the document with another user, creating a change, saving, and then clicking "Browse All Versions" under Settings would have triggered the XSS payload.
Given the vulnerability revolved around the iCloud website, it's not linked to a recent software update and has reportedly been patched by Apple server-side. Bharad says he submitted the issue to Apple on August 7, 2020, and received a $5,000 bounty on October 9, 2020. We've reached out to Apple for comment and we'll update if we hear back.
Tuesday October 6, 2026 3:27 am PDT by Tim Hardwick
Yesterday we reported that Apple tripled the number of iCloud Mail aliases users can create, from three to nine. But it turns out that's not the only email-related limit Apple has raised. The company has also bumped the number of email addresses you can use per iCloud Custom Domain, from three to 10.
If you subscribe to iCloud+, you can use a domain name you already own for your iCloud Mail...
Monday October 5, 2026 5:15 am PDT by Tim Hardwick
Apple appears to have quietly tripled the number of iCloud Mail aliases users can create, increasing the limit from three to nine. The increase was first noticed last week by a Reddit user, and picked up shortly after by a member of the MacRumors forums. MacRumors can confirm the change is live at iCloud.com.
The increased limit has not been mentioned by Apple, so it could conceivably be a...
Friday October 30, 2026 3:20 pm PDT by Joe Rossignol
In a memo shared with Apple Stores and Apple Authorized Service Providers this week, and later obtained by MacRumors, Apple provided technicians with guidance on how to diagnose and address the iPhone Duo's inner display cracking issue.
If a customer reports the issue, Apple advised technicians to inspect the iPhone Duo and repair or replace it in accordance with their standard procedures....
