Apple's Hide My Email feature has a bug that lets attackers unmask the real address behind any alias, and every tested case cracked in minutes. Researcher Tyler Murphy first flagged it in June 2025, but Apple's fixes never stuck.

With over a billion paid subscriptions and two-thirds of iPhone owners on iCloud storage, millions of users relying on this "private" tool for anonymity may be exposed right now.