# 404 Media

Type: Company

Source: Cyber Intelligence Brief — https://getcyberbrief.com/entity/404-media
Canonical HTML page: https://getcyberbrief.com/entity/404-media

## Timeline

- **2026-06-29**: 404 Media independent verification — 404 Media validates the flaw using its own alias and confirms the vulnerability persists. Publication follows days later after a final failed check.
- **2026-03-03**: Apple claims fix is deployed — Apple notifies EasyOptOuts that the vulnerability has been addressed. Subsequent testing reveals no actual change; exploit remains functional.
- **2025-07-14**: Apple confirms both issues under review — Apple acknowledges receipt and states that both the original and second vulnerability are being examined.
- **2025-07-09**: Second related vulnerability reported — A separate, allied vulnerability in the same feature is disclosed to Apple.
- **2025-06-20**: Additional details shared — EasyOptOuts supplies further information to assist Apple's investigation.
- **2025-06-13**: Reproduction steps submitted — Researchers provide Apple with detailed steps to reproduce the exploit, enabling the vendor to trigger the behavior.
- **2025-06-11**: Initial vulnerability report — EasyOptOuts co-founders Tyler Murphy and Ben report the flaw to Apple, noting that Hide My Email aliases can be reversed to reveal the real inbox.

## Recent coverage (1 stories)

### 1+ year-old Apple Hide My Email flaw unmasked 100% of aliases tested
2026-07-02 08:47:33 · Sentiment: Negative · Impact: 7/10 · Sources: 2

A critical privacy vulnerability in Apple's Hide My Email feature went unaddressed for over a year despite responsible disclosure, leaving users exposed to email unmasking. Cybersecurity researchers from EasyOptOuts found that 100% of tested aliases were reversible, and the flaw remains active as of July 2026. Apple acknowledged the bug, but a claimed March 2026 fix failed, highlighting lapses in vulnerability management.
Full story: https://getcyberbrief.com/story/apple-hide-my-email-vulnerability-year-later

---
This page is a machine-readable summary. Sentiment measures the directional read of each development for this entity, not the tone of the reporting; impact weights consequence, not syndication reach. See https://getcyberbrief.com/guides/methodology for the full editorial methodology.