Apple ‘Hide My Email’ Vulnerability Exposes Users’ Real Email Addresses

Apple’s Hide My Email feature has an unpatched vulnerability that can reveal the real email address behind anonymized relay aliases. Researcher Tyler Murphy (EasyOptOuts) and 404 Media validated the issue and say they reported it to Apple more than a year ago, but no fix or mitigations have been provided; exploitation requires no elevated privileges and could enable deanonymization, targeted phishing, and spam for affected iCloud+ users.