Hackers can force iOS and macOS browsers to divulge passwords and much more
arstechnica.com
iLeakage is practical and requires minimal resources. A patch isn't (yet) available.