It looks like a normal email but has the word “Ad” in small letters. When you click it, it opens a link, rather than rendering email content in another pane.
It’s a pretty tacky design, in my opinion, even if it was only serving “legitimate” ads.
I don’t like that Apple feels emboldened to demand that laws be repealed. I don’t recall if Apple has done this in the past but it’s a shift in tone that makes me uncomfortable.
For me, improvement means no hallucination, but that only seems to have gotten worse and I'm interested to find out whether it's actually solvable at all.
This behaviour always made me feel a bit suspicious about airplay but I reassured myself that Apple surely had it locked down. But these 17 CVEs show that my trust was misplaced.
Yes, it is pretty serious. The video demo shows that HTTP calls for password reset links can be redirected to a malicious website: https://youtu.be/VUSB3FK1dKA?feature=shared