attack uncovers bugs in how more than a dozen programs implement email’s creaky protocol. Haddouche says he contacted all of the affected firms months ago to warn them about the vulnerabilities he’s found. Yahoo Mail, Protonmail and Hushmail have already fixed their bugs, while Apple and Microsoft have told Haddouche they’re working on a fix, he says.