X fixes URL blunder that could enable convincing social media phishing campaigns

A bug in X's iOS app auto-rewrote instances of "Twitter" inside URLs to "X", producing links that displayed legitimate brand domains (e.g., Netflix.com) while actually resolving to the original, potentially malicious domains (e.g., netflitwitter.com). The behavior persisted for at least nine hours before being reversed; although a proactive user registered a lookalike domain to prevent abuse, the flaw could have enabled phishing, credential theft, or malware delivery.