This seems like the best way to inform them since it's a direct link to submit a bug report, but you can only do it through Safari, and you gotta get it then and there when it happens.
*At the time, I had no idea this was a security issue*. Often times troubleshooting your AppleID keychain or deleting cookies or emptying the caches is just part of the process.
I did report it to the Apple moderators as soon as I saw your screenshot. I felt it was better to minimize any anxiety rather than to cause worry.
Try putting these numbers in Network>TCP/IP>DNS Servers, for the Interface you connect with...
208.67.222.222
208.67.220.220
Then Apply
DNS Servers are a bit like Phone books where you look up a name and it gives you the phone number, in our case, you put in apple.com and it comes back with 17.149.160.49 behind the scenes. 🙂
These Servers have been patched to guard against DNS poisoning, and are faster/more reliable than most ISP's DNS Servers.
That appears to allow making use of a frame to call another page. The 'tojen' page was simply a text file with no code whatever. I saw it before rebooting, and I don't have any of the new extensions installed. Also I'm not using OpenDNS but Virgin Media's own DNS servers.
It is there for me, too, but in Firefox, not in Safari. The only difference today is that the Tojen text is now embedded in the normal Apple header and footer. Yesterday it was just the text.