A flaw in Apple's Hide My Email service can reportedly allow almost anyone to uncover the real email address behind a generated alias, and Apple has failed to address it for more than a year since it was first reported. 404 Media is withholding the technical specifics of the vulnerability because it remains exploitable, but the publication verified the issue this week using one of its own Hide My Email addresses. In tests with volunteers by the researcher who discovered the flaw, 100% of Hide My Email addresses were found to be exploitable. Tyler Murphy, co-founder of EasyOptOuts, discovered the issue and responsibly reported it to Apple in June 2025, along with instructions to replicate it. Apple acknowledged the report a month later and said it was investigating. Murphy said: Apple Hide My Email is leaking email addresses that are supposed to be hidden. We reported the issue and replication instructions to Apple over a year ago. We don't know why it hasn't been fixed, but we don't feel comfortable waiting any longer. Hide My Email users deserve to know that it may be possible for attackers to discover their hidden email addresses. Free, publicly accessible people-search sites make it easy to link an email address to other personal details, so people relying on Hide My Email for safety may be at risk. In March 2026, Apple told Murphy it had "addressed the reported issue in a recent system change," but Murphy found the flaw had not in fact been closed. He provided further information, and Apple replied again to say it was still investigating. In May, Apple once more said the issue remained under investigation and asked Murphy not to disclose it publicly until the inquiry was complete. Murphy proposed that Apple suspend the creation of new Hide My Email addresses as an interim measure to limit customer risk, but there is no indication that suggestion was acted on. By the end of May, Apple said it expected to address the issue in a security update "expected in the coming weeks." Hide My Email is an iCloud + feature that lets users generate random alias email addresses, primarily for use when signing up to services or corresponding with third parties. It is designed to protect a user's real email address from spam, data breaches, and unwanted identification. Murphy noted that numerous people-search databases are freely available online and can tie an email address to a person's other personal details, meaning anyone depending on Hide My Email for their safety may be more exposed than they realize. Last month, it emerged that Apple's decision to move Hide My Email to a dedicated "private.icloud.com" domain appears to have the consequence of making it easier for platforms that want to block ‌iCloud‌ aliases to do so. Tag: Apple Mail This article, " Apple Hide My Email Vulnerability Exposes Real Email Addresses " first appeared on MacRumors.com Discuss this article in our forums
Nanoleaf today launched the Smart Multicolor Ceiling Light, an affordable Matter-compatible lighting product. With a dual-sided design, there's a main downlight and an upward backlight for a layered lighting glow. Each side can be controlled individually for bright light or an ambient lighting option. The light has 196 LEDs inside, with up to 2600 lumens. White light ranges from 2200K to 6500K, supporting tones that change throughout the day to match natural light. Nanoleaf says it was built with RG0 Low Blue Light technology to reduce blue light hazard and eye strain. There are 28 color zones, and millions of colors are supported for gradients. According to Nanoleaf, the Multicolor Ceiling Light has a Color Rendering Index of 95, offering "vivid-natural looking colors." The light measures 13.8 inches, and it is 1.18 inches thick. It is a hard-wired light that's meant to be installed with a standard light switch, though it also works with the Nanoleaf Sense+ Wireless Smart Switch. Nanoleaf's new light supports Matter over Wi-Fi, so it can connect to a HomeKit setup for use with Siri and the Home app. It also works with the Nanoleaf app, which offers hundreds of color scenes and support for music pairing. For multi-color lighting scenes with gradients, the Nanoleaf app is required because ‌HomeKit‌ doesn't support that. The Nanoleaf Smart Multicolor Ceiling Light can be purchased from Amazon.com or the Nanoleaf website for $80. Tags: HomeKit , Nanoleaf This article, " Nanoleaf's New $80 Smart Ceiling Light Works With Matter and HomeKit " first appeared on MacRumors.com Discuss this article in our forums