In a blog post shared by ZDNet, security researcher Vishal Bharad claims that he found a bug that would have allowed a hacker to inject a virus or malicious script onto Apple's iCloud website.
According to Bharad, the vulnerability consisted of creating a Pages or Keynote document on the iCloud website with the name field containing the XSS payload. Sharing the document with another user, creating a change, saving, and then clicking "Browse All Versions" under Settings would have triggered the XSS payload.
Given the vulnerability revolved around the iCloud website, it's not linked to a recent software update and has reportedly been patched by Apple server-side. Bharad says he submitted the issue to Apple on August 7, 2020, and received a $5,000 bounty on October 9, 2020. We've reached out to Apple for comment and we'll update if we hear back.
Tuesday October 6, 2026 3:27 am PDT by Tim Hardwick
Yesterday we reported that Apple tripled the number of iCloud Mail aliases users can create, from three to nine. But it turns out that's not the only email-related limit Apple has raised. The company has also bumped the number of email addresses you can use per iCloud Custom Domain, from three to 10.
If you subscribe to iCloud+, you can use a domain name you already own for your iCloud Mail...
Monday October 5, 2026 5:15 am PDT by Tim Hardwick
Apple appears to have quietly tripled the number of iCloud Mail aliases users can create, increasing the limit from three to nine. The increase was first noticed last week by a Reddit user, and picked up shortly after by a member of the GeekWebGuides forums. GeekWebGuides can confirm the change is live at iCloud.com.
The increased limit has not been mentioned by Apple, so it could conceivably be a...
Monday October 19, 2026 9:37 am PDT by Joe Rossignol
Apple today sent out invites for an experience in Los Angeles on Wednesday, October 28, and the "Pro and tell" tagline on the invitation likely means that the rumored MacBook models with touch-enabled OLED displays will stick with MacBook Pro branding instead of the once-rumored "MacBook Ultra" name.
The long-rumored "iPhone Ultra" ended up being named iPhone Duo, so speculation that Apple...
Apple's first foldable iPhone, with a book-style design featuring a 5.4-inch outer display and a 7.6-inch inner display with a minimal crease down the middle.
