LIVE · cybersecurity feed
Live wire
security

Apple’s Hide My Email tweak leaves privacy fans fuming

Apple has long marketed itself as the privacy-first tech giant. So why is it making a change to Hide My Email that will make it easier for websites to block anonymous sign-ups - and harder for you to stay private online? Read more in my art

zeroday.news · 43d ago

Apple is changing its Hide My Email feature, a move that privacy advocates argue will diminish its effectiveness. The company plans to shift newly generated aliases from the "@icloud.com" domain to "@private.icloud.com" later this summer.

Hide My Email allows users to create unique, random email addresses that forward messages to their primary inbox. This feature is designed to protect users' personal email addresses from spam, marketing lists, and data brokers by allowing them to sign up for services without revealing their real email. Users can also delete aliases if they wish to stop receiving emails from a particular service.

The core privacy benefit of the previous system was that "@icloud.com" aliases were indistinguishable from regular iCloud email addresses. This made it difficult for websites or apps to determine if an email address belonged to a genuine Apple user or someone using the privacy feature. However, the new "@private.icloud.com" domain explicitly identifies an address as a Hide My Email alias.

This change means that websites and applications that wish to block anonymous sign-ups can now easily reject any email address ending with "@private.icloud.com." This could render the feature less useful for users seeking to sign up anonymously for services that may discourage or block such registrations.

Existing Hide My Email addresses will continue to function as before. However, any new aliases created after the change will be issued on the new domain.

The announcement has drawn criticism from some Apple users, particularly on platforms like Reddit, where users expressed disappointment that the feature's utility for anonymous sign-ups would be significantly reduced.

It is important to note that Hide My Email does not guarantee complete anonymity. Earlier this year, it was reported that Apple provided law enforcement with the account details of a Hide My Email user who allegedly sent threatening messages. This incident serves as a reminder that the feature's privacy protections are not absolute and can be subject to legal requests.

ShareXLinkedInWhatsAppFacebook

More News

view all →
vulnerability

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite. A March 2021 firmware integration error routed seed generation to a deterministic software pseudorandom number generator (PRNG

vulnerabilitycritical

Rails patches critical Active Storage flaw with RCE potential

A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). [...]

malware

Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens

Microsoft says Russian hackers hijacked hotel Wi-Fi portals to spread malware and steal Microsoft 365 tokens from travelers. Microsoft Threat Intelligence disclosed CaptiveCrunch, a campaign it attributes to Storm-2945, an operational sub-cluster of Midnight Blizzard, the Russian SVR-linked group also known as APT29 and Cozy Bear. Since early May 2026, Storm-2945 has been manipulating DNS […]

CVE-2026-48449critical

Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic

Adobe fixed a maximum severity vulnerability in Campaign Classic that could let attackers run code remotely without user interaction. Adobe has addressed a critical vulnerability, tracked as CVE-2026-48449 (CVSS score of 10.0), in Adobe Campaign Classic, the company’s enterprise marketing automation platform. The flaw is caused by incorrect authorization and could allow attackers to execute […]

security

Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments

The funding round was led by SYN Ventures, with participation from existing investors DataTribe and TEDCO. The post Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments appeared first on SecurityWeek.

vulnerabilitycritical

Ruby on Rails Patches Critical Vulnerability

The flaw can be exploited by unauthenticated attackers to read arbitrary files and potentially achieve remote code execution (RCE). The post Ruby on Rails Patches Critical Vulnerability appeared first on SecurityWeek.