The hacker group that flagged a vulnerability on an Apple development website, a vulnerability that could have led to phishing attacks against Mac OS X, iPad and iPad developers, says Apple finally fixed the hole that was identified two months ago. The hacker group that flagged a vulnerability on an Apple development website, a vulnerability that could have led to phishing attacks against Mac OS X, iPad and iPad developers, says Apple finally fixed the hole that was identified two months ago.YGN told Apple about the Arbitrary URL Redirect vulnerability and cross-site scripting issue on April 25, warning it could lead to phishing attacks on developers using the website. Apple acknowledged YGN’s information on April 27, but didn’t fix the hole. That frustrated YGN, which let news reporters know it would go public with the information in a short period of time even if Apple didn’t correct the problem. One day after news reports on the situation, Apple fixed the problem.SECURITY TECH: Inventor of SecurID has new authentication system“As Apple has replied that they have fixed the issue, we’ve released the information at our blog,” the YGN Ethical Hacker Group wrote in an email today to Network World. The tactics of the YGN Ethical Hacker Group are controversial because under U.S. law, an unauthorized scan is considered an attack or even a break-in. However YGN, which earlier this year identified security holes in the websites of McAfee and Oracle as well, counters that websites should not be full of known vulnerabilities, especially those in high-profile public view.Read more about wide area network in Network World’s Wide Area Network section. Related content news Top cybersecurity product news of the week New product and service announcements from Coro, Descope, Genetec, Varonis, Cloudbrink, Databarracks, and Security Journey By CSO staff Dec 07, 2023 22 mins Generative AI Generative AI Machine Learning news analysis Attackers breach US government agencies through ColdFusion flaw Both incidents targeted outdated and unpatched ColdFusion servers and exploited a known vulnerability. By Lucian Constantin Dec 06, 2023 5 mins Advanced Persistent Threats Cyberattacks Vulnerabilities news BSIMM 14 finds rapid growth in automated security technology Embrace of a "shift everywhere" philosophy is driving a demand for automated, event-driven software security testing. By John P. Mello Jr. Dec 06, 2023 4 mins Application Security Network Security news Almost 50% of organizations plan to reduce cybersecurity headcounts: Survey While organizations are realizing the need for knowledgeable teams to address unknown threats, they are also looking to reduce their security headcount and infrastructure spending. By Gagandeep Kaur Dec 06, 2023 4 mins IT Jobs Security Practices Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe