Apple has fixed a critical flaw in its Sign in with Apple feature, which could have been abused by attackers to takeover victims third-party applications. The security researcher, Bhavuk Jain, reported the flaw to Apple via its bug bounty program, and was awarded $100,000 for the find. Apple conducted an investigation of their logs and determined there was no misuse or account compromise due to this vulnerability. Apple has since fixed the flaw, and the researcher has not commented on further details.
Source: https://threatpost.com/apple-100k-bounty-critical-sign-in-with-apple-flaw/156167/