Back to today’s briefing

Story perspectives

Apple’s Hide My Email Fix Disputed, Vulnerability Persists

7/2/2026

37 3 Full Breakdown

Summary

Story summary

Tyler Murphy warned Apple in June 2025 that a Hide My Email vulnerability let attackers expose users’ real email addresses, with tests showing 100 % of disposable addresses were exploitable.
Apple said it fixed the bug in March 2026, though Murphy claimed the flaw persisted and a May 2026 investigation barred him from disclosing details.
A summer update will change the alias domain to “private.icloud.com,” potentially lowering the feature’s value.

1 of 1

Story summary

Tyler Murphy warned Apple in June 2025 that a Hide My Email vulnerability let attackers expose users’ real email addresses, with tests showing 100 % of disposable addresses were exploitable.
Apple said it fixed the bug in March 2026, though Murphy claimed the flaw persisted and a May 2026 investigation barred him from disclosing details.
A summer update will change the alias domain to “private.icloud.com,” potentially lowering the feature’s value.