Apple to Scan Publicly Shared iCloud Photos in iOS 17.3
Apple will scan iCloud photos and files shared publicly for harmful content in iOS 17.3.
Stories per day · 30 days
3 RSS
Relatedapple4privacy4content-moderation2apple-policy1content-scanning1harmful-content1link-sharing1policy1
9 stories, newest first · one card per story
Stories tagged #icloud
SEC Consult Research 20261001 :: Arbitrary Email sender spoofing in Apple iCloud mail
SEC Consult disclosed sender spoofing in Apple iCloud Mail SMTP; Apple fixed it, with no CVE assigned.
From: anyone@icloud.com - Spoofing Arbitrary Apple iCloud Identities
SEC Consult showed header smuggling can spoof arbitrary sender addresses on Apple iCloud.
In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
Weekly roundup: iCloud spoofing bugs bypass SPF/DKIM/DMARC, TA419 spies phish AI policy experts, Cloudflare fixes cross-tenant data leak, Poper Blocker harvests AI chats.
Free iCloud Account Could Let Attackers Spoof Any @icloud.com Address and Pass Email Security Checks
Two patched Apple iCloud SMTP parsing flaws let free accounts spoof any @icloud.com address while passing SPF, DKIM, and DMARC checks.
MacSync’s New Infection Chain Shows How Mac Malware Is Becoming More Sophisticated
Kaspersky reports MacSync’s new macOS chain uses native loaders, iCloud staging, an infostealer, and a persistent backdoor.
MacSync info-stealing malware hides malicious commands in an iCloud calendar
Kaspersky says a new MacSync macOS infostealer hides commands in an iCloud calendar and steals credentials and wallets.
MacSync malware uses public iCloud calendars to deliver new payloads
MacSync macOS infostealer now pulls new payloads from public iCloud calendar events and adds a persistent backdoor.
Apple's Two-Tier Encryption in the UK
UK users who enabled Apple's Advanced Data Protection before February 2025 keep E2EE while new users cannot, after a secret Technical Capability Notice.