A bug in Apple's Passwords app left users vulnerable to phishing attacks for over three months.The flaw was discovered after security researchers noticed the app using insecure HTTP traffic.The app now uses HTTPS for all connections by default to prevent social engineering attacks.Password managers have become a target for cybercriminals with an increase in malware attacks.