Apple iCloud Mail vulnerabilities allowed spoofed sender addresses

Two vulnerabilities discovered in Apple’s iCloud Mail infrastructure allowed authenticated users to send emails that appeared to originate from any @icloud.com address, while still passing crucial email authentication checks like SPF, DKIM, and DMARC.