It emerged Tuesday that a serious HTTP bug in Apple’s Passwords app left users vulnerable to phishing attacks for an astonishing three months after its debut last year.
A fix for the vulnerability was included in the iOS 18.2 software update, which rolled out on December 11 last year. But sources indicate that the bug had been there, unpatched, since the launch of iOS 18.0 (and the Passwords app itself) on September 16.
Read more at Macworld.com