The Register reports that security researcher Jan Soucek discovered that Apple ignores a key line of code in incoming emails:
What that code means is that emails opened on an iPhone, iPad or iPod can be used by hackers to load any HTML content inside an email.
The flaw lets hackers send an email that looks like it's from a real company, but is actually used to steal your password through a fake form that looks legitimate.
Here's a video explaining the flaw:
We reached out to Apple for comment on this article and will update if we hear back.