Loading story…
Apple unveiled an Apple Intelligence feature for iOS 27 that can automatically change passwords for compromised or weak accounts in Safari and the Apple Passwords app. Instead of only warning users that a credential is weak, duplicated, or exposed in a breach, the new capability can take users directly through remediation by generating a strong replacement password and saving it to their password vault. Apple said the feature is designed with a privacy-first architecture that combines on-device processing with Private Cloud Compute.
When a user reviews compromised credentials, they can tap a single Fix option and Safari will handle the reset flow on supported sites by signing in, navigating to the password-change page, creating a unique high-entropy password, and storing it automatically, with progress surfaced through Live Activities in Notification Center. Apple positioned the feature as a way to address the common problem of users ignoring breach alerts, helping reduce password reuse and lowering the risk of credential-stuffing attacks when the update ships later this year.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
Apple made the iOS 27 developer beta available following its WWDC announcement. The beta includes the new Apple Intelligence-powered password-management capability that can automatically change weak or compromised passwords on supported websites.
At WWDC 2026, Apple announced that macOS 27 Golden Gate will run only on Apple silicon Macs, ending Intel Mac eligibility for major OS upgrades. Apple said Intel Macs will continue receiving security updates through 2029.
Apple said the automatic password remediation capability is planned to arrive with iOS 27 later in 2026. The feature is designed to let users trigger an automated password reset flow with minimal interaction.
Apple announced at WWDC 2026 a new Apple Intelligence-powered feature for Safari and the Apple Passwords app that can automatically change weak or compromised passwords to strong ones. The company said the privacy-focused capability will split processing between on-device models and Private Cloud Compute.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
9 references tracked. Mallory keeps watching after this page renders.
macrumors.com
Open sourceghacks.net
Open sourcescworld.com
Open sourcezdnet.fr
Open sourcesecurityonline.info
Open sourcehelpnetsecurity.com
Open sourceghacks.net
Open sourcetheregister.com
Open sourcebleepingcomputer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
*1Password* introduced a new **phishing protection** capability aimed at stopping users from entering credentials into fraudulent lookalike sites, particularly when users bypass autofill and instead **copy/paste** passwords. The feature checks whether the site a user is interacting with matches the saved login’s expected URL; if it does not, 1Password can warn the user before credentials are submitted, adding deliberate friction to reduce “momentary lapse” credential theft. Reporting highlights that phishing kits and AI-assisted site creation are making realistic fake login pages easier to produce at scale, increasing the likelihood of users being tricked into credential entry. 1Password’s approach is to detect URL mismatches (e.g., typosquatted domains) and present an explicit warning/confirmation step when a user attempts to paste credentials into a site that doesn’t align with the vault record; pairing this with **multi-factor authentication (MFA)** is recommended to further reduce account takeover risk.
Jun 29, 2026
Apple released **iOS 26.4** and **iPadOS 26.4**, making **Stolen Device Protection** enabled by default and shipping **34 security fixes** across components including **Audio**, **iCloud**, **Mail**, **Printing**, **Siri**, and the **iOS kernel**. The update now requires biometric authentication to view saved passwords and disable Lost Mode on an iPhone, strengthening protections against device theft and account takeover. Apple also issued corresponding `26.4` updates for **watchOS**, **macOS**, **tvOS**, and **visionOS**. Alongside the security changes, Apple added several user-facing features across its platforms, including AI-generated **Playlist Playground** playlists in Apple Music, an **Ambient Music** widget, offline song recognition in Control Center, native **HLS** video episode support in Podcasts, average bedtime tracking in Health, and support for third-party AI chatbots in CarPlay once providers update their apps. The release also fixes a long-running keyboard accuracy bug, while the widely rumored upgraded Siri was not included in this version.
Jun 29, 2026
A new report from password manager 1Password highlights that weak or compromised passwords remain a significant security risk for organizations, with employee password practices worsening despite increased awareness. Survey data from over 5,000 workers across multiple countries reveals that a majority of employees, including IT professionals, continue to reuse passwords, rely on default credentials, or share passwords via insecure channels, exacerbating the threat landscape for businesses. The report underscores that even as companies move toward passwordless authentication, the transition is gradual and current credential management practices are not keeping pace with evolving threats. In response to these challenges, technology vendors are accelerating the adoption of passwordless solutions. Microsoft has released Edge version 142.0, introducing cross-platform passkey synchronization, allowing users to securely reuse passkeys across devices and browsers. This feature, which requires a dedicated PIN for access, aims to enhance both security and usability, reducing reliance on traditional passwords. The move reflects a broader industry trend toward passkeys and multi-factor authentication as default options, with major platforms like Google and Meta also embracing passwordless technologies to mitigate the risks associated with password-based authentication.
Jun 29, 2026