Cybersecurity Roundup: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
SecurityWeek's weekly roundup covers two iCloud flaws that let attackers spoof any icloud.com sender (Apple paid a $15,000 bounty), Poper Blocker harvesting ChatGPT, Claude and Gemini conversations from 2 million users, and China-aligned TA419 phishing AI policy experts. Microsoft's 2026 report says phishing rose from 7% to 23% of initial access vectors.
- iCloud bugs let attackers send mail from arbitrary icloud.com addresses, passing SPF, DKIM and DMARC
- Apple paid a $15,000 bounty; first flaw reported May 2024, fully fixed only in December 2025
- Poper Blocker, a Chrome adblocker with 2M+ users, collects browsing history and AI chat conversations
- Microsoft: phishing rose from 7% to 23% of initial access vectors, with ~72,000 CVEs expected this year
Read next
Security