Email line-wrap hyphen bug in Apple Mail can spoof sender domains for phishing
kingslyj · x · 2026-11-07
- A display bug makes mail clients insert a hyphen when a long address wraps, so deliveroo.com can appear as deliv-eroo.com — visually near-identical, exploitable by attackers registering lookalike domains.
- The same issue occurs in Apple Mail. Advice: don't judge trust by reading the sender address; check what the message asks you to do and verify URLs with a link checker.
More from Safety
- Nous Research Releases Arete-27B, a Qwen3.8-27B Post-Trained to Reinforce Western Values — LeviTurk · 2026-11-07
- Detection is unsolvable yet tools can be highly accurate, researcher argues — CamachoCollados · 2026-11-07
- User shares approval email for Anthropic's Cyber Verification Program Defense Access — AIFlow_ML · 2026-11-07
- Only 1 of 7 browsing agents caught by Cloudflare: the agent identity and authorization gap — Pale_Painting_6271 · 2026-11-07
- Inter-AI Morality: New Paper Explores How AI Systems Treat One Another — dadadavid · 2026-11-07
- Researcher blasts Sanders AI bill: it "condemns millions to die with curable diseases" — basedjensen · 2026-11-07