A fake Apple email about app-specific passwords claims a $2,990 PayPal charge and urges recipients to call a support number, but it is a phishing scam.
The vulnerabilities could have let malicious users masquerade as agency officials, potentially misleading researchers, contractors and others.