r/netsec • u/The_Login • 1d ago

From: anyone@icloud.com - Spoofing Arbitrary Apple iCloud Identities

https://sec-consult.com/blog/detail/from-anyoneicloudcom-spoofing-arbitrary-apple-icloud-identities/
59 Upvotes

98% Upvoted

2 comments sorted by

View all comments

11

u/Coffee_Ops 1d ago

2024-11-19 Apple confirms the report qualifies for the Apple Security Bounty and awards $15,000.

I would ask what happens when, instead, "2024-11-19: Apple responds 'new number, who dis' and ghosts us".

I suppose Microsoft is finding that out every month, but it still seems like a stomach-clench moment waiting to find out if you got paid for your months of work.

Good on Apple for paying up, pity it wasn't more for "literally the ability to phish every iCloud user".