Technology
Apple fixes Passwords app vulnerability enabling Wi-Fi attacks
Do you remember Apple’s “Privacy. That’s iPhone” marketing campaigns? If you’re not aware, the company likes to portray its products as being synonymous with privacy. However, the recent wave of security vulnerabilities affecting iPhones and Macs suggest Apple’s products may not be as secure as advertised.
A recent security blunder only reinforces this point. Security researchers discovered that Apple’s built-in password manager app, Passwords, was vulnerable to phishing attacks for nearly three months after launch. This meant an attacker on the same Wi-Fi network as you, like at an airport or coffee shop, could redirect your browser to a lookalike phishing site to steal your login credentials.
Stay protected & informed! Get security alerts & expert tech tips – sign up for Kurt’s The CyberGuy Report now.
A person holding an iPhone (Kurt “CyberGuy” Knutsson)
What you need to know
Security researchers at Mysk, noticed that Apple’s Passwords app, introduced with iOS 18 in September 2024, had a significant security flaw that left users vulnerable to phishing attacks for nearly three months.
The app used unencrypted HTTP connections instead of the more secure HTTPS to fetch logos and icons displayed alongside stored passwords. This allowed attackers on the same network, such as public Wi-Fi at a coffee shop or airport, to intercept these requests and potentially redirect users to phishing sites designed to steal login credentials.
The issue remained unresolved from iOS 18’s launch in September 2024 until Apple fixed it in December 2024, leaving users exposed for nearly three months. If someone opened the Passwords app and tapped a link, like “Change Password,” while connected to an insecure network, an attacker could intercept the request and redirect them to a fraudulent site mimicking a legitimate one, such as a fake Yelp login page. Since the app did not enforce HTTPS, users might not notice the switch, putting their sensitive information at risk.
A woman on her iPhone (Kurt “CyberGuy” Knutsson)
HOW TO PROTECT AN IPHONE & IPAD FROM MALWARE IN 2025
Apple has fixed the issue now
Apple addressed the problem after security researchers from Mysk reported it in September 2024. The iOS 18.2 update, released in December, patched the vulnerability by enforcing HTTPS for all network communications within the Passwords app, making it much harder for attackers to intercept or redirect traffic.
If you’re using an iPhone or iPad with the Passwords app, ensure your device is updated to iOS 18.2 or later. This ensures you’re protected from this vulnerability. If you haven’t updated yet and used the app on public Wi-Fi between September and December 2024, consider changing passwords for any accounts you accessed during that period, just to be safe.
How to update the software on your iPhone
Follow the steps to update your iPhone or iPad:
- Tap on Settings
- Tap on General
- Tap on Software Update
- If an update is available, it will give you the option to download and install
Software update (Kurt “CyberGuy” Knutsson)
YOUR IPHONE HAS A HIDDEN FOLDER EATING UP STORAGE SPACE WITHOUT YOU EVEN KNOWING
6 ways you can stay safe from hackers targeting your passwords
Apple’s recent security blunder with the Passwords app highlights the importance of taking steps to protect your digital identity. Here are some ways you can stay safe from hackers targeting your passwords.
1) Use a reliable password manager: Apple apps are generally more secure than third-party options, but the Passwords app clearly wasn’t. The fact that the security vulnerability existed for three months before Apple fixed it proves that Apple needs to put more emphasis on keeping customer data secure. I’d suggest opting for a reliable password manager instead of relying on Apple’s offering. Get more details about my best expert-reviewed password managers of 2025 here.
2) Enable two-factor authentication (2FA): It’s good to have a password manager, but you know what’s even better? 2FA. Adding an extra layer of security with 2FA can prevent hackers from accessing your accounts, even if they steal your password. Use authentication apps like Google Authenticator, Microsoft Authenticator or hardware security keys instead of SMS-based codes, which are vulnerable to SIM-swapping attacks.
3) Avoid public Wi-Fi for sensitive activities and use a VPN: Hackers can exploit unsecured public networks to intercept your login credentials. If you must access sensitive accounts on public Wi-Fi, use a VPN to encrypt your internet traffic and prevent attackers from snooping on your data. VPNs will protect you from those who want to track and identify your potential location and the websites that you visit. A reliable VPN is essential for protecting your online privacy and ensuring a secure, high-speed connection. For the best VPN software, see my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android and iOS devices.
4) Beware of phishing attacks and install strong antivirus software: You can have all the protection in the world but a phishing email or SMS can still cause havoc. Hackers often use fake login pages to trick you into entering your credentials. Always verify URLs before entering login details, avoid clicking on suspicious links in emails or messages. The best way to safeguard yourself from malicious links is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.
5) Keep your devices updated: Regularly update your devices and software to ensure you have the latest security patches.
6) Regularly monitor all your accounts: Monitor your accounts for suspicious activity and report any unusual transactions or login attempts to Apple.
APPLE RELEASES EMERGENCY SECURITY UPDATE FOR SERIOUS VULNERABILITY
Kurt’s key takeaway
Three months is a long time for a security flaw in a password manager to go unpatched, especially from a company that presents itself as a leader in privacy and security. This incident highlights a troubling reality. Apple’s security measures are not infallible, and even built-in system apps can expose users to serious risks. While the fix eventually arrived, it should not have taken this long for such a fundamental issue to be addressed. If Apple wants to maintain its privacy-first image, it needs to do better by ensuring more rigorous security testing before launch.
Do you think Apple is doing enough to stay ahead of evolving cyber threats or are there additional steps the company should take to protect its users? Let us know by writing us at Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Alert: Malware steals bank cards and passwords from millions of devices.
Ask Kurt a question or let us know what stories you’d like us to cover.
Follow Kurt on his social channels:
Answers to the most-asked CyberGuy questions:
New from Kurt:
Copyright 2025 CyberGuy.com. All rights reserved.
Technology
Tenways’ compact e-bike twists and folds to go flat
Tenways just launched its new CGO Compact electric bike in Europe that’s designed to fit into tight spaces like car trunks, apartment hallways, and train compartments.
To achieve this, the CGO Compact is fitted with small 20-inch wheels, folding pedals, and a handlebar fitted with a twistable stem to create a slim, wall-hugging profile. The adjustable steering column and low-step through frame also make it suitable for a wide range of rider heights, so it could be a good shareable e-bike for families. And its MIK HD rear carrier system is good for hauling up to 27kg (almost 60 pounds) around town, with mounting points for additional accessories like a crate or child seat.
Tenways might not be a household name globally, but the Chinese e-bike company headquartered in the Netherlands is making a name for itself in Europe thanks to aggressive pricing, sleek designs, and over 1,500 shops and service centers. And while the CGO Compact’s €1,999 (about $2,365) price tag isn’t cheap, it’s well below the €2,681 average for European e-bikes.
The company does sell e-bikes in the US, but the CGO Compact is only for sale in Europe as of today. It features a 250W rear-hub motor connected to a Gates Carbon belt drive for maintenance-free propulsion. It promises a range of up to 100km from its 500Wh removable battery, but its single-speed drivetrain produces only 45Nm of torque so it’s best suited for relatively flat cities. If your commute does stray from asphalt then the suspension seat post should help absorb bumps. There’s also an integrated torque sensor to ensure the smooth delivery of pedal-assisted power, and Tektro hydraulic disc brakes should keep any sudden stops under control.
The CGO Compact lives up to its name regarding size, but it’s not all that lightweight. Stripped down it weighs 19.8kg (almost 44 pounds), or 22.1kg (almost 49 pounds) with all the accessories you’ll want in wet urban environments. That makes it heavier than many full-sized e-bikes, even from Tenways, and less versatile than the excellent 20-inch Brompton G foldable which also weighs less but costs more than twice as much.
Technology
Fox News AI Newsletter: Trump activates ‘tech force’
President Donald Trump’s administration is tasking an AI “tech force” to modernize systems. (Stefani Reynolds/Bloomberg via Getty Images)
NEWYou can now listen to Fox News articles!
Welcome to Fox News’ Artificial Intelligence newsletter with the latest AI technology advancements.
IN TODAY’S NEWSLETTER:
– Inside Trump administration’s AI tech force designed to modernize government
– Elon Musk slams Anthropic AI models as ‘misanthropic’ and ‘evil’ in scathing social media post
– AI power players pour cash into competitive primaries as 2026 midterms heat up
‘TECH FORCE’: Inside Trump administration’s AI initiative designed to modernize government – FOX Business reports on the Trump administration’s latest initiative to overhaul federal efficiency, detailing an internal AI “tech force” tasked with modernizing antiquated government systems and streamlining operations.
TECH ALLIANCE: War Department to partner with OpenAI to integrate ChatGPT, GenAI for military use – The Department of Defense is reportedly strengthening its technological arsenal through a strategic partnership with OpenAI, aiming to integrate ChatGPT and generative AI capabilities into military operations to maintain a strategic edge.
SCATHING POST: Elon Musk slams Anthropic AI models as ‘misanthropic’ and ‘evil’ – Tech billionaire Elon Musk took to social media to unleash a scathing attack on rival AI firm Anthropic, characterizing their models as “misanthropic” and “evil” in a post that highlights the intensifying ideological rift within Silicon Valley.
Elon Musk, chief executive officer of Tesla Inc., during the US-Saudi Investment Forum at the Kennedy Center in Washington, DC, US, on Wednesday, Nov. 19, 2025 (Stefani Reynolds/Bloomberg via Getty Images)
POWER PLAYERS: AI execs pour cash into competitive primaries as 2026 midterms heat up – With the 2026 midterm elections on the horizon, deep-pocketed investors and executives from the artificial intelligence sector are pouring cash into competitive primaries, hoping to shape the regulatory landscape for the booming technology.
OPINION: AI raises the stakes for national security — here is how to get it right – In this opinion piece, OpenAI’s Chris Lehane argues that the rapid advancement of artificial intelligence has dramatically raised the stakes for American national security, outlining a strategic framework to ensure the U.S. maintains its dominance without compromising safety.
OPINION: The 2028 election will be a referendum on our future in an AI-dominated world – As technology accelerates, this op-ed contends that the 2028 presidential election will serve as a critical referendum on humanity’s future, forcing voters to decide how the nation should navigate an increasingly AI-dominated world.
Children forming deep emotional connections with AI companions is raising questions among parents. (StockPlanets/Getty Images)
BATTLE FOR DOMINANCE: AI wars begin in new Super Bowl commercials – The battle for artificial intelligence dominance has moved to the advertising stage, as tech giants unleash a wave of new Super Bowl commercials designed to capture the public imagination and assert their position in the “AI wars.”
BOT TO THE FUTURE: Humanoid robots are getting smaller, safer and closer to home – Recent advancements in robotics are making humanoid machines smaller, safer, and more viable for domestic use, suggesting that a future where robots assist with daily household tasks is getting closer to reality.
MOYA’S DEBUT: ‘Warm-skinned’ AI robot with camera eyes is seriously creepy – A new development in robotics featuring “warm skin” and camera eyes has sparked a mix of fascination and unease, with many observers describing the lifelike yet artificial creation as “seriously creepy.”
Moya’s humanlike appearance is intentional, from her warm skin to subtle facial details designed to feel familiar rather than mechanical. (DroidUp)
DIGITAL DANGER: AI companions are reshaping teen emotional bonds – A growing trend of teenagers forming deep emotional connections with AI companions is raising questions among parents and psychologists about the long-term impact of synthetic relationships on social development and mental health.
Subscribe now to get the Fox News Artificial Intelligence Newsletter in your inbox.
FOLLOW FOX NEWS ON SOCIAL MEDIA
Facebook
Instagram
YouTube
X
LinkedIn
SIGN UP FOR OUR OTHER NEWSLETTERS
Fox News First
Fox News Opinion
Fox News Lifestyle
Fox News Health
DOWNLOAD OUR APPS
Fox News
Fox Business
Fox Weather
Fox Sports
Tubi
WATCH FOX NEWS ONLINE
Fox News Go
STREAM FOX NATION
Fox Nation
Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future with Fox News here.
Technology
A surprise God of War prequel is out on the PS5 right now
To close out its February 2026 State of Play presentation, Sony revealed God of War Sons of Sparta, a new prequel 2D side scroller in the God of War franchise, and announced that it’s out right now on PlayStation 5.
”God of War Sons of Sparta is a 2D action platformer with a canon story set in Kratos’ youth during his harsh training at the Agoge alongside his brother Deimos,” Sony says. Over the course of the game, Kratos will “learn deadly skills using his spear and shield, as well as harness powerful divine artifacts known as the Gifts of Olympus to take on a wide array of foes.”
Sony’s Santa Monica Studio collaborated on the game with Mega Cat Studios. It costs $29.99, with a Digital Deluxe version available for $39.99.
Sony also announced that it’s working on a remake of the original God of War trilogy, with TC Carson set to return as the voice of Kratos. However, the project is “still very early in development, so we ask for your patience as it will be a while before anything else can be shared,” according to Sony. “When we can come back with an update, we aim to make it a big one!”
-
Politics1 week agoWhite House says murder rate plummeted to lowest level since 1900 under Trump administration
-
Alabama6 days agoGeneva’s Kiera Howell, 16, auditions for ‘American Idol’ season 24
-
Politics1 week agoTrump unveils new rendering of sprawling White House ballroom project
-
San Francisco, CA1 week agoExclusive | Super Bowl 2026: Guide to the hottest events, concerts and parties happening in San Francisco
-
Ohio1 week agoOhio town launching treasure hunt for $10K worth of gold, jewelry
-
Culture1 week agoAnnotating the Judge’s Decision in the Case of Liam Conejo Ramos, a 5-Year-Old Detained by ICE
-
Culture1 week agoIs Emily Brontë’s ‘Wuthering Heights’ Actually the Greatest Love Story of All Time?
-
News1 week agoThe Long Goodbye: A California Couple Self-Deports to Mexico