In iOS 18, Apple spun off its Keychain password management tool into a standalone app called Passwords. A serious HTTP bug left Passwords users vulnerable to phishing attacks for nearly three months.

https://9to5mac.com/2025/03/18/apples-passwords-app-was-vulnerable-to-phishing-attacks-for-nearly-three-months-after-launch/