Apple closed my bug report 4 times. MITRE wouldn't let it die.
Found a CWE-602 in Apple News Publisher — client-side eligibility check, one Burp rule, free iCloud account walks out with full Admin access and a signed EULA. Apple closed it four times as "expected behavior." MITRE d
📄
This source provides headlines only. Use the button below to read the complete article on the original site.
📰 Read the original article on r/cybersecurity
Originally published by r/cybersecurity. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.