Apple Fixed a Bug with ‘Sign in with Apple’ That Could Have Allowed Account Hijacking
https://wccftech.com/apple-fixed-a-bug-with-sign-in-with-apple-that-could-have-allowed-account-hijacking/
Apple recently fixed a security vulnerability with its 'Sign in with Apple' framework that would have allowed hackers to bypass authentication and access other user's accounts. The issue was reported by researcher Bhavuk Jain, who received $100,000 from Apple as part of its bug bounty program.
Apple introduced 'Sign in with Apple' as a privacy-focused alternative to Facebook and Google authentication methods, which are used by countless apps and services around the world. The feature optionally hides a user's email addresses to ensure that privacy is maintained.