[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMFRqZBLy4WTOnn1ESeRdnyxFeCDwtn_qXDV-NP32My8":3},{"article":4,"iocs":48,"watch_terms":49,"solutions":50,"lesson":145},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"9d2bbe98-3777-42c5-b0aa-6f76feab8bab","Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs","apple-fixes-hide-my-email-bug-that-exposed-real-addresses-in-mail-logs-e70e19","Apple has moved to address a security flaw in its Hide My Email service that enabled users' real email addresses to be unmasked, effectively undermining the feature's privacy guarantees. 404 Media reported Tuesday that a fix for the issue was deployed by Apple on July 3, 2026, after more than a year, when it was disclosed to the company by Tyler Murphy, co-founder of EasyOptOuts. Hide My Email","Apple has patched a vulnerability in its Hide My Email service that could expose users' real email addresses in mail logs when emails were rejected as spam. The flaw was reported over a year ago and was fixed on July 3, 2026, after multiple unsuccessful attempts. This fix comes as Apple faces a class-action lawsuit alleging it misled customers about the privacy of the feature.","Apple fixes Hide My Email bug exposing real addresses in mail logs.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F07\u002Fapple-fixes-hide-my-email-bug-that.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEiiIg3Sasyz94bt9uOMqOnkEhZ4APzMbVwOObUmNzIGuYtxHO0wYNBu1LXTGi0Q5mTT6SI_CgqPwCWgejCc7BnclxwtLvDKiUlJR80nzE6dniSdomYMVcQU8Z1BQECtTvevKArxtEsJjB8Zeh2ouEgblz0vOiTDKcXUzpMzW70C56-Xbj-LT1gLp0Mbw99p\u002Fs1600\u002Fapple-email.jpg","2026-07-21T18:46:32+00:00","2026-07-21T22:00:35.970999+00:00",7,[17,20,23],{"name":18,"type":19},"Hide My Email","product",{"name":21,"type":22},"Apple","vendor",{"name":24,"type":19},"iCloud+","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":25,"icon":27,"name":28,"slug":29},null,"Vulnerabilities","vulnerabilities",[31,36,41,43],{"category":32},{"id":33,"icon":27,"name":34,"slug":35},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":37},{"id":38,"icon":27,"name":39,"slug":40},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":42},{"id":25,"icon":27,"name":28,"slug":29},{"category":44},{"id":45,"icon":27,"name":46,"slug":47},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[21,18,24],{"controls":51,"vendors":139},[52,81,110],{"slug":53,"name":54,"problem":55,"products":56},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":82,"name":83,"problem":84,"products":85},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"slug":111,"name":112,"problem":113,"products":114},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",[140],{"slug":141,"name":21,"logo_path":142,"roles":143},"apple","\u002Fvendor-logos\u002Fapple.png",[144],"affected",{"slug":146,"title":147,"body":148,"framework_refs":149,"framework_notes":161},"apples-hide-my-email-bug-leaked-real-addresses-in-mail-logs-for-over-a-year","Apple's Hide My Email Bug Leaked Real Addresses in Mail Logs for Over a Year","A vulnerability in Apple's Hide My Email privacy feature inadvertently exposed users' real email addresses within mail logs whenever messages were rejected as spam, directly undermining the core privacy promise of the service. Critically, the flaw was reported over a year before it was patched, highlighting a dangerously slow remediation lifecycle for a privacy-critical feature. Sensitive personal data appearing in logs is particularly harmful because logs are often stored, replicated, and accessed by multiple parties, widening the exposure surface significantly. This incident illustrates that privacy-enhancing features must be held to the same — if not higher — security standards as other system components, and that delayed patching of known privacy vulnerabilities carries real legal and reputational consequences.",[150,151,152,153,154,155,156,157,158,159,160],"CIS Control 7 – Continuous Vulnerability Management","CIS Control 3 – Data Protection","CIS Control 8 – Audit Log Management","NIST SP 800-53 SI-2 – Flaw Remediation","NIST SP 800-53 AU-3 – Content of Audit Records","NIST SP 800-53 SC-28 – Protection of Information at Rest","NIST Privacy Framework PR.DS-P5 – Data Minimization","GDPR Article 5(1)(f) – Integrity and Confidentiality","GDPR Article 25 – Data Protection by Design and by Default","GDPR Article 33 – Notification of a Personal Data Breach","ITIL Service Transition – Change and Patch Management",{}]