A claim has been raised that a vulnerability in Apple’s Hide My Email privacy feature could allow a user’s real email address to be traced. Security researcher Tyler Murphy said he found a bug that lets one-time email addresses generated by the feature be used to identify real addresses, and that he reported it to Apple more than a year ago. He said his exploits succeeded in tests, while Apple has not issued an official response.

A data breach at South Korean streaming platform Tving has expanded fears of secondary harm after linked information (CI) was included among leaked items. An unidentified hacker allegedly gained unauthorised access to Tving’s user database and sent customer data outside the company. Authorities including the Ministry of Science and ICT, KISA and the Personal Information Protection Commission have launched investigations, while experts warn CI can enable identity theft when combined with other personal details.