Apple Passwords App Bug Left Users Vulnerable to Phishing Attacks for Months Before Being Fixed
Apple fixed a bug in its Passwords app with December's iOS 18.2 update that had left users vulnerable to phishing attacks in the three months since the launch of iOS 18.
According to an Apple security update spotted by 9to5Mac, the Passwords app was sending unencrypted requests for the logos and icons associated with users' stored passwords.
Without protections of encryption, an attacker on the same Wi-Fi network could redirect a user's browser to a clone phishing site where login details could be stolen. The vulnerability was first discovered by developer Mysk's security researchers and reported in September.
Apple's iOS 18.2 security release notes described the bug like so:
Impact: A user in a privileged network position may be able to leak sensitive information
Description: This issue was addressed by using HTTPS when sending information over the network.
Apple lists the bug in security content updates for the Mac, iPad, and Vision Pro, indicating that this issue was fixed across multiple OSes.
Popular Stories
Apple supplier Pegatron today indirectly confirmed that the standard iPhone 18 model will not be released until next year, according to a new report.
Subscribe to the MacRumors YouTube channel for more videos.
Pegatron held an earnings call for the second quarter of 2026 today. On the call, Taiwan's Economic Daily News said Pegatron indicated that one of its customers will be changing its...
Apple will introduce at least five new devices at its iPhone-centric event next month, and it's also possible we'll get devices waiting on Siri AI like the Apple TV.
iPhone 18 Pro
The iPhone 18 Pro is going to look like the iPhone 17 Pro, but with a smaller Dynamic Island. It's getting some internal updates, including a new Wide camera with a variable aperture for more control over lighting ...
Apple is developing an all-new operating system that is essentially a mix of tvOS, watchOS, and iOS, according to Bloomberg's Mark Gurman.
In a recent report, he said the operating system will feature a grid of icons, widgets, and apps, along with customizable clock faces.
The new software platform is intended for Apple's long-rumored smart home hub. With built-in facial recognition, the...
