In a blog post shared by ZDNet, security researcher Vishal Bharad claims that he found a bug that would have allowed a hacker to inject a virus or malicious script onto Apple's iCloud website.
According to Bharad, the vulnerability consisted of creating a Pages or Keynote document on the iCloud website with the name field containing the XSS payload. Sharing the document with another user, creating a change, saving, and then clicking "Browse All Versions" under Settings would have triggered the XSS payload.
Given the vulnerability revolved around the iCloud website, it's not linked to a recent software update and has reportedly been patched by Apple server-side. Bharad says he submitted the issue to Apple on August 7, 2020, and received a $5,000 bounty on October 9, 2020. We've reached out to Apple for comment and we'll update if we hear back.
Wednesday November 4, 2026 11:12 am PST by Juli Clover
Apple says it will start checking public iCloud links for harmful content in iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3.
Images in iCloud Photos and files in iCloud Drive shared using the "Anyone with the link" option will be "made accessible to Apple" for a content check. Apple doesn't define harmful content, but it could mean malware, malicious files, and/or child sexual abuse...
Thursday November 5, 2026 12:59 am PST by Tim Hardwick
Apple is launching five new products on Friday, November 6, following pre-orders that opened last week, including its first touchscreen MacBook Pro models.
The following new products will be available from today:
iPad mini with OLED display and A20 Pro chip
iMac with M6 chip
14-inch MacBook Pro with M6 chip
14-inch MacBook Pro with OLED touchscreen
16-inch MacBook Pro with OLED...
Friday November 6, 2026 3:27 pm PST by Juli Clover
When the iPhone Duo launched, we shared a list of some of the fun apps developers created for the new form factor. Two weeks out, developers are continuing to come up with fresh ideas, so we thought we'd share some of our favorites.
Games
Marbles Unhinged ($2.99) - Marbles Unhinged is a marble maze designed for the Duo. When you fold it, the floor turns into a ramp. If you stand the top...
