Apple Hearing Study sounds alarm on high rates of tinnitus
Part of the ongoing Apple Hearing Study, a new Apple tinnitus survey reveals the condition's surprising prevalence and characteristics. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Three VR game staples have arrived on Apple Vision Pro
The Apple Vision Pro has picked up three new games including oldie-but-goodie "Job Simulator," its follow-up "Vacation Simulator," and tabletop survival RPG "Demeo."Battle together with friends in "Demeo"Job Simulator, which came out in 2016, asks players to step into the shoes of various jobs, like mechanics, chefs, office workers, and store clerks — but gives players plenty of freedom to complete tasks in any way they wish.Also out for the Apple Vision Pro is the follow-up title Vacation Simulator. Players are tasked with relaxing to the max while participating in all the standard vacation activities, such as snorkeling, snowball fights, whitewater rafting, building sandcastles, and taking hikes. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Top AI tablets: iPad Pro with M4 versus Microsoft's new Surface Pro
Microsoft updated its Surface Pro with more AI smarts as it tries to push forward in the machine learning industry. Here's how the Surfaace Pro compares versus Apple's new iPad Pro.Apple's iPad Pro [left], Microsoft's Surface Pro [right]Microsoft's launch of its Copilot+ PC initiative included two offerings of its own. Alongside a refreshed Surface Laptop, Microsoft also updated its top-end Surface Pro.As part of the update, the Surface Pro now benefits from improved ARM processing, with more of a leaning towards machine learning and similar AI-based tasks for apps. This is an area that Apple has extensive experience in, with the Neural Engine in its M-series and A-series chips performing such tasks for users over the last few years. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple is ‘thinking about’ changing the iPad’s most unique design characteristic
Macworld When Apple unveiled the new iPad Pro and iPad Air at its Let Loose event in early May, the most notable change was the new location for the front camera. Following the 10th-gen iPad’s lead, Apple finally moved the camera to the longer “landscape” edge, making FaceTime calls much more natural when docked. However, while the camera placement is an obvious nod to users favoring the iPad as a landscape device, Apple didn’t change the orientation of the Apple logo on the back of the device, which is the same as it has been since the original iPad launched in 2010. However, a new report from French-language site Numerama (via MacRumors) claims that Apple might be finally ready to go all-in on landscape. In an interview with some of the members of the iPad Pro’s design team, Molly Anderson talked about the possibility of rotating the Apple logo on the back of the device: “I think this could change, I don’t think it’s engraved in stone. We are thinking about it. The iPad has long been a product that is used in portrait mode, but we are increasingly using it in landscape mode. We can’t say it’s fixed.” Since it’s translated from French, it’s not clear if Anderson’s words are as pointed as they seem, but it’s clear that the orientation of the Apple logo is something the iPad design team considered before deciding to keep it in portrait mode. It should be noted that the logo isn’t visible when docked in a Magic Keyboard, as the accessory has its own landscape-aligned Apple logo on the back. However, it is strange that Apple has a landscape camera on its newest iPads but keeps the Apple logo in portrait. Maybe the upcoming iPad mini refresh will fix things, but we’re not holding our breath. Learn more by checking out our iPad Pro and iPad Air superguides. iPad

Read more »

Apple Hearing Study shares preliminary insights on tinnitus
The Apple Hearing Study is sharing new insights on tinnitus in one of the largest surveys to date. Through the study, University of Michigan… The post appeared first on MacDailyNews.

Read more »

Customizing iOS app icons could be more impactful than it seems
Mark Gurman reported over the weekend that customizing iOS app icons will be one of the new features we can expect to see in iOS 18. On the face of it, that seems a relatively minor cosmetic change, but I think it does open the door to using it in rather an impactful way … more…

Read more »

How Generative AI can breathe new life into iPhones, Macs, iPads, Apple Watches, Apple TVs, HomePod, and more
Generative AI, a type of artificial intelligence that can create new data, like text, images, or videos. It works by learning the underlying… The post appeared first on MacDailyNews.

Read more »

OLED MacBook Pro ‘highly likely’ to launch in 2026 – Omdia
Tech analyst Omdia has said that Apple is “highly likely” to launch its first OLED MacBook Pro models in 2026. It was previously reported that Samsung is set to be the exclusive supplier of an OLED screen for a 13-inch MacBook Air, with a more advanced version expected to be used in the MacBook Pro … more…

Read more »

These Beats Studio Buds+ offer impressive noise-canceling for under $100
You can score an open box pair of Beats Studio Buds+ for only $99.99 (regularly $169).  (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

5 tips and tricks to free up disk space and hidden storage on your Mac
As our devices become increasingly more capable and powerful, our Macs can fill up faster than we expect. Follow along for five tips and tricks to free up Mac storage and hidden space including native and third-party advanced options. more…

Read more »

OLED MacBook might be 2 years away
Get ready for a visual treat: an OLED MacBook could be in the works. It's part of Apple phasing out traditional LCDs. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Apple Hearing Study shares initial findings on tinnitus; company shares tips 
University of Michigan researchers have today shared some initial findings from the Apple Hearing Study launched back in 2019 – one of the largest studies of tinnitus ever carried out. The data will help us gain a better understanding of the causes of the condition, in which sufferers experience a constant perception of sound, ranging from high-pitched tones to white noise, as well as methods of mitigating the impact of the condition … more…

Read more »

Apple Hearing Study rings the alarm on tinnitus
The Apple's Hearing Study's latest release details how people suffer from tinnitus, and that most people encounter the ringing in the ears at some point.Apple Hearing StudyThe Apple Hearing Study has regularly released findings from its research, conducted with the University of Michigan. On Tuesday, the researchers released data on tinnitus.Reviewing surveys and assessments from more than 160,000 participants, the team determined that 15% of people experience tinnitus daily. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple’s iPhone sales in China surged 52% YoY in April
According to data from a research firm affiliated the Chinese government, Apple's smartphone shipments in China rose 52% in April… The post appeared first on MacDailyNews.

Read more »

iPhone sales in China rebound thanks to discounts
iPhones sales are rebounding in China, thanks to heavy discounts and consumer preference towards premium phones. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Apple's iPhone 16 screens are ready to go, except for iPhone 16 Pro Max
While most of the screens for the iPhone 16 family are said to be in production, the manufacturers have yet to get approval for the displays that are going into the iPhone 16 Pro Max.iPhone 16 Pro could have a reduced camera bump thanks to new build techniquesIt's not a surprise that iPhone 16 screens are in the manufacturing pipeline already. Apple's regular partners in LG Display and Samsung are making screens for the family of devices.BOE has reportedly been added for the non-Pro lineup, too. Rumor Score: 🤯 Likely Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Torras 360 Spin Stand Case for iPhone 15 Pro Max has a MagSafe-compatible ring stand
The Torras 360 Spin Stand iPhone 15 Pro Max case has a built-in ring stand that folds flat and maintains MagSafe compatibility with military-grade drop protection.Torras iPhone 15 Pro Max case with MagSafe-compatible ring standThere are mountains of phone cases to choose from, so it can be quite difficult to find the perfect one for your use. Torras breaks through the noise with a well-made phone case that has a built-in ring stand with MagSafe charging passthrough and certified military-grade drop protection.The Torras 360 Spin Stand Case for iPhone 15 Pro Max incorporates considerate design choices like a ring stand that folds flat. It is made with premium thermoplastic polyurethane (TPU) material that keeps the protective case fit precise and slimming. Continue Reading on AppleInsider

Read more »

T-Mobile buying US Cellular; says rural coverage will improve
It’s this morning been announced that T-Mobile is buying most of US Cellular, in a deal said to be worth a total of $4.4B. T-Mobile says that the buyout will enable it to provide better rural coverage to its existing customers, and that US Cellular subscribers will get full access to the country’s fastest 5G network … more…

Read more »

Apple published a new Press Release
Apple just published a new Press Release:Apple Hearing Study shares preliminary insights on tinnitus

Read more »

Microsoft's Copilot PC and the M3 Mac killer myth
Microsoft debuted what it thinks is a MacBook Air killer, but just like every other time it tried to kill Apple in the market this century, it's going to fail, badly. Here's why.Microsoft's Copilot+ PC initiative promotes AIAccording to proponents of this myth, Microsoft is out to kill Apple's Macs with a "new" PC it will design and build on its own. Once it arrives, they expect Microsoft to clean up not only the PC market, but also the market for Edge AI software sales, leaving Apple on the sidelines.They're wrong. Again. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple not yet satisfied with iPhone 16 Pro Max screens, as rest enter production
Apple has reportedly given the green light to its three OLED panel suppliers to begin mass production of three of the four iPhone 16 displays. However, the Cupertino company is seemingly not yet satisfied with test production of displays for the iPhone 16 Pro Max … more…

Read more »

MacBook Pro with OLED arrival rumor shifts again, this time back to 2026
A new supply chain report is putting yet another date on the calendar for MacBook Pro with OLED displays, with it now again said to arrive in 2026.MacBook Pro with OLED screen delayed to 2027In a supply chain report more focused on OLED demand for laptops, there is a small tidbit about MacBook Pro and when Apple's flagship will get the display tech. The report includes the iPad Pro, which the report says will triple demand for OLED screens in tablets, and going forward, will influence competitors' strategies to compete with Apple in this particular market.What's of more interest in the report is a prediction for when OLED will arrive on the MacBook Pro. Rumor Score: 🤔 Possible Continue Reading on AppleInsider | Discuss on our Forums

Read more »

iPhone discounts led to a 52% rebound in Chinese sales
Falling sales led Apple to offer significant official iPhone discounts in China, and a new report today suggests that this tactic is paying off. Official government data indicates that Apple successfully turned around its declining sales in the country, with shipments bouncing back with a 52% increase last month … more…

Read more »

Apple’s big AI breakthrough will be something we’ll all use every day
Macworld In less than two weeks, Apple will kick off WWDC with a wide-ranging keynote that previews all of the new features coming in iOS 18 and macOS 15. It’s no surprise that AI will be a big component of the announcements and one of the major new features could be something we all use every day. According to Mark Gurman’s latest Power On newsletter, one of the “standout” features in iOS 18 “will bring generative AI to emojis.” Gurman claims Apple “is developing software that can create custom emojis on the fly, based on what users are texting. That means you’ll suddenly have an all-new emoji for any occasion, beyond the catalog of options that Apple currently offers on the iPhone and other devices.” We reported last week that the Unicode Consortium is considering a handful of new emoji for its next update, including a face with bags under its eyes, a fingerprint, a harp, a leafless tree, and a splatter mark. Apple is certain to include these emojis in one of next year’s iOS 18 updates, but if Gurman’s report is accurate, we won’t need to wait for them—any emoji to express any emotion will be at our fingertips. Generative AI is the same tech behind ChatGPT’s conversational chats and Dall-E’s image creation. Gurman doesn’t get into specifics, but it seems like you’ll be able to type a word or phrase into Messages and a unique emoji will generate an emoji to fit what you want to express. Then we wouldn’t need to wait for Apple to design its own versions of the Unicode Consortium’s annual selections. Also on deck for iOS 18, according to Gurman, is a “revamped” home screen” with the ability to “change the color of app icons and put them wherever they want,” system-wide “smart recaps” that will “provide users with summaries of their missed notifications and individual text messages, as well as of web pages, news articles, documents, notes and other forms of media,” and a partnership with OpenAI to incorporate ChatGPT into the iPhone. Apple will unveil iOS 18 and macOS 15 at a WWDC keynote at 10am PT on June 10. iOS, iPhone, Mac, MacOS

Read more »

A thinner iPhone is a step in the wrong direction
Macworld Would you be surprised to learn there’s lots of AI-related news to talk about this week? Probably not. You probably wouldn’t be surprised if the Macalope said it was all AI-generated. First, there was Sam Altman awkwardly trying to coax Scarlett Johansson into being the voice of ChatGPT. Johansson’s response was very much “Who are you again?” Still, things are going very well in the AI world as Gemini is telling users to eat glue and rocks and Humane is for sale. It’s a real mystery why Apple is so late to this awesome party but there are plenty of rumors about what new AI features iOS 18 will have. Anyway, we’re not going to talk about that stuff. Frankly, the Macalope is a little tired of talking about AI. It’s like we’ve spent months talking about someone’s wack-a-doodle uncle who went off the deep end into conspiracy theories during the pandemic. “You can prevent COVID by taking a tablespoon of battery acid every day! I did my own research! Have some of my glue pizza!” Yeah, let’s talk about iPhone rumors instead. Apple made a big splash with the M4 iPad Pros by making them almost unbelievably thin. Sure, some groused “Who wants the iPad to be thinner?!” Well, everyone who wanted it to be lighter, that’s who. Now, if the rumors are true, it’s set to do the same thing for the iPhone 17, making it thinner and probably lighter by ditching the back glass in favor of aluminum. As the world’s foremost advocate of smaller iPhones over the last 10 years (doing a bang-up job, thanks very much for asking), the Macalope is at least intrigued by these changes. Maybe the Macalope is just talking himself into this as, despite his letter-writing campaigns, multiple sit-ins, and subliminal propaganda schemes directed at Apple executives, it doesn’t look like he’s going to get another iPhone mini. What’s a mythical beast to do? The advantages for those of us who prefer a smaller phone are more related to surface area than thickness or weight. Apple implementing Reachability in iOS was far less a panacea than it was evidence that we were right all along about the problem with larger phones. IDG IDG IDG Still, there may be a path forward through software. To forge a usable substitute for what you call a small phone and we call a reasonably-sized phone using one of those ridiculous monstrosities you use, we’d need to think about cobbling together a specific set of interactions, using iOS features that already exist and some that are rumored to be coming in iOS 18. iOS widgets currently give you the ability to put larger icons on your home screen that have the added benefit of providing information. iOS 18 is rumored to be bringing even more customization options, including more flexible icon placement and the ability to have blank spaces. If that spot in the upper corner of the screen is just too hard to reach without risking dropping your phone in hot lava (the Macalope is assuming you’re a vulcanologist here), put a widget there or, once iOS 18 arrives, leave it blank. You can even just configure your screen with widgets down the far side (whichever side that is for you) and icons you want to interact with down the near side. That still leaves Control Center, Apple’s annoyingly out-of-reach incredibly useful tool access utility. Apple engineer #1: “Hmm, where should we put this thing people are going to want to use all the time?” Apple engineer #2: What’s the hardest spot on the phone for most people to reach?” Apple engineer #1: “Who hurt you, Jeff?” Even on his iPhone 13 mini, which has a relatively easy-to-reach upper right corner, the Macalope has taken to using a triple back tap to trigger Control Center. The Action button also makes it easier to trigger the functions you most often use, but it Control Center could still benefit from easier access. Now the Macalope has to inform you that he lied a bit at the beginning. We are going to talk about AI, but just a little. Those aforementioned iOS 18 AI features include several enhancements that could make interacting with your phone easier and faster. The Macalope’s not holding his breath, but if Siri can make a large phone easier to use, that helps. Still, none of this addresses what the Macalope calls “pants feel” (no, don’t close the tab, we’re keeping it SFW). Big phones are simply bigger. The amazing thing about AirPods is how they took advantage of that little jeans pocket no one uses anymore. Apple shipped a product a lot of people already had a place to put. Large phones, on the other hand, have forced a proliferation of tactical phone pants, those pants that have a special phone pocket on the thigh, because if your pants aren’t saying “I have a large phone!” it’s such a missed opportunity. Might as well have been bandoliers. At the end of the day, does the Macalope want a thinner iPhone? Yes, please. And he can probably find a way to make it work. Of course, a thinner and smaller phone would be the real sweet spot. Just saying. iPhone

Read more »

Apple saw a huge year-over-year iPhone sales recovery in China in April
China's main market research company is out with its latest data, and as the iPhone 16 creeps closer, the iPhone 15 is continuing its recovery in the country.iPhone doing well in China despite shrinking marketThe China Academy of Information and Communications (CAICT) is a research firm closely tied to the Chinese government. Once a month, it publishes data on smartphone sales in the country.The latest round of data is for April. CAICT says that foreign-branded phones in China — which is mostly the iPhone — increased by 52% in April year-over-year, from 2.3 million sales in April 2023 to 3.5 million in April 2024. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple @ Work Podcast: MSPs are leaning into Apple
Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional-grade platform all the solutions necessary to seamlessly and automatically deploy, manage & protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. In this episode of Apple @ Work, I talk with Alcyr Araujo about their new MSP program for Apple MSPs. more…

Read more »

Learn how to play piano at home with Skoove Premium’s interactive lessons
Macworld If you’ve ever wanted to learn an instrument, the best one to begin with is the piano. While you might think you need to take traditional piano lessons to learn, we’re here to let you know that there’s an innovative way to learn piano from home. Meet Skoove Premium, an AI-powered app that offers interactive piano lessons. During the Memorial Day savings event, you can get lifetime access at a special price with code ENJOY20. No matter your piano experience, Skoove (4.5-star rated!) is designed to offer a personalized learning experience. It offers over 400 lessons (updated monthly), extra instructional videos, and access to one-on-one piano instructors for additional help. Its AI technology enhances your piano lessons, recognizing the keys you strike to give helpful playing feedback. Skoove also lets you learn tunes and genres you actually want to play. Discover how to play classical pieces by Bach and Beethoven or pop tunes from Adele and John Legend. The app also lets you learn anywhere, as long as you already have a piano or keyboard (acoustic and digital). Pair your piano or keyboard with your iOS or Android tablet, smartphone, or laptop to begin your piano-playing journey. Just enter code ENJOY20 at checkout to get a lifetime subscription to Skoove Premium Piano Lessons for $119.99. You have until May 31 at 11:59 PM Pacific to score this Memorial Day deal!   Skoove Premium Piano Lessons: Lifetime Subscription Only $119.99 at Macworld StackSocial prices subject to change. Accessories

Read more »

18 new AI features cited for macOS 15, iOS 18, and iPadOS 18
AI will take center stage in Apple’s upcoming operating systems, and per Bloomber’d Mark Gurman, an array of new features will be demoed at Apple’s Worldwide Developers Conference (WWDC) next month. In his latest “Power On” newsletter, Gurman noted that Apple will apparently use AI to perform the following tasks in the operating systems: Apple […] Source

Read more »

Match paint, fabric, and wallpaper shades like a pro with the Nix Mini 2 sensor, now half off
Macworld Ever tried to repaint a wall without knowing the exact shade? Then you know that “close enough” doesn’t cut it. If you want to get an exact match for a particular color, use what the professionals use: a quality color sensor like the Nix Mini 2. This tiny gadget weighs less than an ounce (just 0.6oz), but it’s outfitted with its own highly calibrated LED to block out ambient lighting. Its ultra-precise sensor will then scan surfaces like walls, vinyl, leather, upholstery, etc. Hold it up against the surface that’s struck your fancy, whether it’s a hallway in your home that needs repainting or a uniquely colored restaurant booth. The Nix can instantly detect the exact shade and match it to one of more than 100,000 paint colors sold by national brands or sRGB, HEX, CMYK, or LAB hues. https://youtube.com/watch?v=5FJlXFuSJkY%3Fsi%3D8_GruDnbMlQQaKXs Once it matches, the Nix Mini 2 will send the results to the companion Nix Toolkit app on your phone. You can save those shade scans on the app for future reference and organize a favorite list of color palettes, which makes this sensor a must-have for any creative or designer. Color match your world with the Nix Mini 2, now just $49.97 until May 31 at 11:59 PM Pacific.   Nix Mini 2 Color-Matching Sensor Only $49.97 at Macworld StackSocial prices subject to change. Accessories

Read more »

Stark Industries Solutions: An Iron Hammer in the Cloud
Two weeks before Russia invaded Ukraine in February 2022, a large, mysterious new Internet hosting firm called Stark Industries Solutions materialized and quickly became the epicenter of massive distributed denial-of-service (DDoS) attacks on government and commercial targets in Ukraine and Europe. An investigation into Stark Industries reveals it is being used as a global proxy network that conceals the true source of cyberattacks and disinformation campaigns against enemies of Russia.

Read more »

Why Your Wi-Fi Router Doubles as an Apple AirTag
Apple and the satellite-based broadband service Starlink each recently took steps to address new research into the potential security and privacy implications of how their services geo-locate devices. Researchers from the University of Maryland say they relied on publicly available data from Apple to track the location of billions of devices globally -- including non-Apple devices like Starlink systems -- and found they could use this data to monitor the destruction of Gaza, as well as the movements and in many cases identities of Russian and Ukrainian troops.

Read more »

Patch Tuesday, May 2024 Edition
Microsoft today released updates to fix more than 60 security holes in Windows computers and supported software, including two "zero-day" vulnerabilities in Windows that are already being exploited in active attacks. There are also important security patches available for macOS and Adobe users, and for the Chrome Web browser, which just patched its own zero-day flaw.

Read more »

How Did Authorities Identify the Alleged Lockbit Boss?
Last week, the United States joined the U.K. and Australia in sanctioning and charging a Russian man named Dmitry Yuryevich Khoroshev as the leader of the infamous LockBit ransomware group. LockBit's leader "LockBitSupp" claims the feds named the wrong guy, saying the charges don't explain how they connected him to Khoroshev. This post examines the activities of Khoroshev's many alter egos on the cybercrime forums, and tracks the career of a gifted malware author who has written and sold malicious code for the past 14 years.

Read more »

U.S. Charges Russian Man as Boss of LockBit Ransomware Group
The United States joined the United Kingdom and Australia today in sanctioning 31-year-old Russian national Dmitry Yuryevich Khoroshev as the alleged leader of the infamous ransomware group LockBit. The U.S. Department of Justice also indicted Khoroshev as the gang's leader "LockbitSupp," and charged him with using Lockbit to attack more than 2,000 victims and extort at least $100 million in ransomware payments.

Read more »

Why Your VPN May Not Be As Secure As It Claims
Virtual private networking (VPN) companies market their services as a way to prevent anyone from snooping on your Internet usage. But new research suggests this is a dangerous assumption when connecting to a VPN via an untrusted network, because attackers on the same network could force a target's traffic off of the protection provided by their VPN without triggering any alerts to the user.

Read more »

Man Who Mass-Extorted Psychotherapy Patients Gets Six Years
A 26-year-old Finnish man was sentenced to more than six years in prison today after being convicted of hacking into an online psychotherapy clinic, leaking tens of thousands of patient therapy records, and attempting to extort the clinic and patients.

Read more »

FCC Fines Major U.S. Wireless Carriers for Selling Customer Location Data
The U.S. Federal Communications Commission (FCC) today levied fines totaling nearly $200 million against the four major carriers -- including AT&T, Sprint, T-Mobile and Verizon -- for illegally sharing access to customers' location information without consent.

Read more »

Vulnerability Summary for the Week of April 22, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source & Patch Info abdul_hakeem -- build_app_online Improper Authentication vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This issue affects Build App Online: from n/a through 1.0.19. 2024-04-25 9.8 CVE-2023-51478audit@patchstack.com algolplus -- advanced_order_export_for_woocommerce Improper Control of Generation of Code ('Code Injection') vulnerability in AlgolPlus Advanced Order Export For WooCommerce allows Code Injection.This issue affects Advanced Order Export For WooCommerce: from n/a through 3.4.4. 2024-04-25 9.1 CVE-2024-31266audit@patchstack.com andondesign -- udesign Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign allows Reflected XSS.This issue affects UDesign: from n/a through 4.7.3. 2024-04-25 7.1 CVE-2024-4077audit@patchstack.com ant-media -- ant-media-server Ant Media Server is live streaming engine software. A local privilege escalation vulnerability in present in versions 2.6.0 through 2.8.2 allows any unprivileged operating system user account to escalate privileges to the root user account on the system. This vulnerability arises from Ant Media Server running with Java Management Extensions (JMX) enabled and authentication disabled on localhost on port 5599/TCP. This vulnerability is nearly identical to the local privilege escalation vulnerability CVE-2023-26269 identified in Apache James. Any unprivileged operating system user can connect to the JMX service running on port 5599/TCP on localhost and leverage the MLet Bean within JMX to load a remote MBean from an attacker-controlled server. This allows an attacker to execute arbitrary code within the Java process run by Ant Media Server and execute code within the context of the `antmedia` service account on the system. Version 2.9.0 contains a patch for the issue. As a workaround, one may remove certain parameters from the `antmedia.service` file. 2024-04-22 7.8 CVE-2024-32656security-advisories@github.comsecurity-advisories@github.com bdthemes -- prime_slider_-_addons_for_elementor Missing Authorization vulnerability in BdThemes Prime Slider - Addons For Elementor.This issue affects Prime Slider - Addons For Elementor: from n/a through 3.13.2. 2024-04-22 7.1 CVE-2024-32682audit@patchstack.com bigbluebutton -- greenlight Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue. 2024-04-25 9.1 CVE-2022-36028security-advisories@github.comsecurity-advisories@github.com bigbluebutton -- greenlight Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue. 2024-04-25 9.1 CVE-2022-36029security-advisories@github.comsecurity-advisories@github.com bloompixel -- max_addons_pro_for_bricks Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BloomPixel Max Addons Pro for Bricks allows Reflected XSS.This issue affects Max Addons Pro for Bricks: from n/a through 1.6.1. 2024-04-24 7.1 CVE-2024-32952audit@patchstack.com brocade -- brocade_sannav In Brocade SANnav, before Brocade SANnav v2.3.0, syslog traffic received clear text. This could allow an unauthenticated, remote attacker to capture sensitive information. 2024-04-25 8.6 CVE-2024-4161sirt@brocade.com brocade -- brocade_sannav A vulnerability in Brocade SANnav exposes Kafka in the wan interface. The vulnerability could allow an unauthenticated attacker to perform various attacks, including DOS against the Brocade SANnav. 2024-04-25 7.6 CVE-2024-4173sirt@brocade.com buddyboss_dmcc -- buddyboss_theme Improper Authentication vulnerability in BUDDYBOSS DMCC BuddyBoss Theme allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyBoss Theme: from n/a through 2.4.60. 2024-04-24 9.8 CVE-2023-51477audit@patchstack.com cisco -- adaptive_security_appliance_software A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads. 2024-04-24 8.6 CVE-2024-20353ykramarz@cisco.com cisco -- cisco_ios_xe_software A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. An attacker could exploit this vulnerability by sending a malformed OSPF update to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. 2024-04-24 7.4 CVE-2024-20313ykramarz@cisco.com cisco -- cisco_unified_computing_system_(standalone) A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have read-only or higher privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root. 2024-04-24 8.8 CVE-2024-20295ykramarz@cisco.com cisco -- cisco_unified_computing_system_(standalone) A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to elevate their privileges to root. 2024-04-24 8.7 CVE-2024-20356ykramarz@cisco.com coderevolution -- wp_setup_wizard Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodeRevolution WP Setup Wizard.This issue affects WP Setup Wizard: from n/a through 1.0.8.1. 2024-04-25 8.8 CVE-2024-25917audit@patchstack.com creative_interactive_media -- 3d_flipbook,_pdf_viewer,_pdf_embedder_-_real_3d_flipbook_wordpress_plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder - Real 3D FlipBook WordPress Plugin allows Reflected XSS.This issue affects 3D FlipBook, PDF Viewer, PDF Embedder - Real 3D FlipBook WordPress Plugin: from n/a through 3.62. 2024-04-22 7.1 CVE-2024-32694audit@patchstack.com crushftp -- crushftp A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server. 2024-04-22 10 CVE-2024-4040430a6cef-dc26-47e3-9fa8-52fb7f19644e430a6cef-dc26-47e3-9fa8-52fb7f19644e430a6cef-dc26-47e3-9fa8-52fb7f19644e430a6cef-dc26-47e3-9fa8-52fb7f19644e430a6cef-dc26-47e3-9fa8-52fb7f19644e430a6cef-dc26-47e3-9fa8-52fb7f19644e430a6cef-dc26-47e3-9fa8-52fb7f19644e danswer-ai -- danswer Danswer is the AI Assistant connected to company's docs, apps, and people. Danswer is vulnerable to unauthorized access to GET/SET of Slack Bot Tokens. Anyone with network access can steal slack bot tokens and set them. This implies full compromise of the customer's slack bot, leading to internal Slack access. This issue was patched in version 3.63. 2024-04-26 9.8 CVE-2024-32881security-advisories@github.comsecurity-advisories@github.comsecurity-advisories@github.com debaat -- wp_media_category_management Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DeBAAT WP Media Category Management allows Reflected XSS.This issue affects WP Media Category Management: from n/a through 2.2. 2024-04-24 7.1 CVE-2024-32950audit@patchstack.com dell -- dell_repository_manager_(drm) Dell Repository Manager, versions prior to 3.4.5, contains a Path Traversal vulnerability in API module. A local attacker with low privileges could potentially exploit this vulnerability to gain unauthorized write access to the files stored on the server filesystem with the privileges of the running web application. 2024-04-24 8.8 CVE-2024-28976security_alert@emc.com dgtlmoon -- changedetection.io changedetection.io is an open source web page change detection, website watcher, restock monitor and notification service. There is a Server Side Template Injection (SSTI) in Jinja2 that allows Remote Command Execution on the server host. Attackers can run any system command without any restriction and they could use a reverse shell. The impact is critical as the attacker can completely takeover the server machine. This can be reduced if changedetection is behind a login page, but this isn't required by the application (not by default and not enforced). 2024-04-26 10 CVE-2024-32651security-advisories@github.comsecurity-advisories@github.comsecurity-advisories@github.com eazyplugins -- eazy_plugin_manager Improper Authentication vulnerability in EazyPlugins Eazy Plugin Manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Eazy Plugin Manager: from n/a through 4.1.2. 2024-04-25 9.9 CVE-2023-51482audit@patchstack.com eclipse_foundation -- eclipse_target_management Eclipse Target Management: Terminal and Remote System Explorer (RSE) version

Read more »

Apple WiFi iPads on sale for $50 off MSRP, prices start at only $299
Amazon has Apple's 10th-generation WiFi iPads on sale for $50 off MSRP, starting at only $299. With the discount, Amazon's prices are the lowest we've ever seen for these iPads: - 10" 10th-generation 64GB WiFi iPads: $299.99 $50 off MSRP - 10" 10th-generation 256GB WiFi iPads: $449.99 $50 off MSRP Note that Amazon's prices are dynamic, and the sale price may vary depending on model and color. See their site for the latest information. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Amazon is offering the lowest prices we’ve seen on 15-inch M3 MacBook Airs, take $150-$200 off MSRP today
Amazon is now offering a $150-$200 discount on every configuration and color of Apple's M3-powered 15" MacBook Airs. Prices start at $1149 for models with 8GB of RAM and 256GB of storage: - 15" M3 MacBook Air/8GB/256GB: $1149.99, $150 off - 15" M3 MacBook Air/8GB/512GB: $1349.99, $150 off - 15" M3 MacBook Air/16GB/512GB: $1499, $200 off Their prices are the lowest prices available for new 15" M3 MacBook Airs among Apple's retailers. For the latest sales and deals, see our 15" MacBook Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple is offering huge discounts on 16-inch M3 Pro and M3 Max MacBook Pros, up to $600 off MSRP Certified Refurbished
Apple has a full line of 16" M3 Pro and M3 Max MacBook Pros available, Certified Refurbished, starting at $2119 and ranging up to $600 off MSRP. Each model features a new outer case, shipping is free, and an Apple 1-year warranty is standard. These models are the cheapest 16-inch M3 Pro and M3 Max MacBook Pros currently available for sale at Apple: - 16" M3 Pro MacBook Pro (18GB/512GB/Black): $2119 save $380 - 16" M3 Pro MacBook Pro (36GB/512GB/Black): $2459 save $440 - 16" M3 Pro MacBook Pro (18GB/512GB/Silver): $2119 save $380 - 16" M3 Pro MacBook Pro (36GB/512GB/Silver): $2459 save $440 - 16" M3 Max MacBook Pro (14-Core/36GB/1TB/Black): $2969 save $530 - 16" M3 Max MacBook Pro (16-Core/48GB/1TB/Black): $3399 save $600 - 16" M3 Max MacBook Pro (14-Core/36GB/1TB/Silver): $2969 save $530 - 16" M3 Max MacBook Pro (16-Core/48GB/1TB/Silver): $3399 save $600 See our 16" MacBook Pro Price Tracker for the latest prices & deals from Apple's retailers, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple is offering huge discounts on 16-inch M3 Pro and M3 Max MacBook Pros, up to $600 off MSRP Certified Refurbished
Apple has a full line of 16" M3 Pro and M3 Max MacBook Pros available, Certified Refurbished, starting at $2119 and ranging up to $600 off MSRP. Each model features a new outer case, shipping is free, and an Apple 1-year warranty is standard. These models are the cheapest 16-inch M3 Pro and M3 Max MacBook Pros currently available for sale at Apple: - 16" M3 Pro MacBook Pro (18GB/512GB/Black): $2119 save $380 - 16" M3 Pro MacBook Pro (36GB/512GB/Black): $2459 save $440 - 16" M3 Pro MacBook Pro (18GB/512GB/Silver): $2119 save $380 - 16" M3 Pro MacBook Pro (36GB/512GB/Silver): $2459 save $440 - 16" M3 Max MacBook Pro (14-Core/36GB/1TB/Black): $2969 save $530 - 16" M3 Max MacBook Pro (16-Core/48GB/1TB/Black): $3399 save $600 - 16" M3 Max MacBook Pro (14-Core/36GB/1TB/Silver): $2969 save $530 - 16" M3 Max MacBook Pro (16-Core/48GB/1TB/Silver): $3399 save $600 See our 16" MacBook Pro Price Tracker for the latest prices & deals from Apple's retailers, updated daily. The post first appeared on MacPrices.net.

Read more »

Memorial Day Sale: Apple’s 24-inch M3 iMacs for $150 off MSRP
Amazon is offering a $150 discount on Apple's new M3-powered 24" iMacs as part of their Memorial Day Sales. Prices start at $1149 for models with 8GB of RAM and 256GB of storage: - 24" M3 iMac/8-core GPU/8GB/256GB: $1149.99, $150 off - 24" M3 iMac/10-core GPU/8GB/256GB: $1349.99, $150 off - 24" M3 iMac/10-core GPU/8GB/512GB: $1549.99, $150 off Their prices are currently the lowest available for new iMacs among Apple's retailers. The post first appeared on MacPrices.net.

Read more »

Memorial Day Savings: 16-inch MacBook Pros on sale for $200-$300 off Apple’s MSRP
Apple 16" MacBook Pros with M3 Pro and M3 Max CPUs are in stock and on Memorial Day Weekend sale for $200-$300 off MSRP at B&H Photo. Their prices are among the lowest currently available for these models. B&H offers free 1-2 day shipping to most US addresses: Space Gray models: - 16" M3 Pro MacBook Pro (18GB/512GB): $2299, $200 off MSRP - 16" M3 Pro MacBook Pro (36GB/512GB): $2699, $200 off MSRP - 16" M3 Max MacBook Pro (36GB/1TB): $3249, $200 off MSRP - 16" M3 Max MacBook Pro (48GB/1TB): $3699, $300 off MSRP Silver models: - 16" M3 Pro MacBook Pro (18GB/512GB): $2299, $200 off MSRP - 16" M3 Pro MacBook Pro (36GB/512GB): $2599, $300 off MSRP - 16" M3 Max MacBook Pro (36GB/1TB): $3249, $200 off MSRP - 16" M3 Max MacBook Pro (48GB/1TB): $3999, $0 off MSRP For the latest prices and sales, see our 16" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Amazon has 14-inch M3 MacBook Pros on sale for $150-$200 off MSRP for Memorial Day
Amazon has 14-inch M3 MacBook Pros in stock and on sale for $150-$200 off MSRP as part of their Memorial Day Weekend sales. Shipping is free. Note that Amazon's stock tends to come and go: - 14" M3 MacBook Pro (8GB RAM/512GB SSD/Space Gray or Silver): $1449, $150 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD/Space Gray): $1599, $200 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD/Silver): $1649, $150 off MSRP Their price are among the lowest available for new 14" M3 MacBook Pros from any Apple retailer. For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple retailers offer MacBook Airs starting at only $699 this Memorial Day Weekend
Our Apple award-winning MacBook Air Price Trackers are continually updated with the latest information on prices, bundles, and availability for 13" M3, M2, and M1 MacBook Airs and 15" M3 and M2 MacBook Airs from Apple's authorized online retailers. We include prices for new as well as Apple Certified Refurbished models, along with any open-box MacBooks that might be available. Current Memorial Day Weekend sales range up to $200 off MSRP for new MacBook Airs and clearance models starting at only $699: - 15" MacBook Air Price Tracker - 13" MacBook Air Price Tracker The post first appeared on MacPrices.net.

Read more »

Apple retailers offer MacBook Airs starting at only $699 this Memorial Day Weekend
Our Apple award-winning MacBook Air Price Trackers are continually updated with the latest information on prices, bundles, and availability for 13" M3, M2, and M1 MacBook Airs and 15" M3 and M2 MacBook Airs from Apple's authorized online retailers. We include prices for new as well as Apple Certified Refurbished models, along with any open-box MacBooks that might be available. Current Memorial Day Weekend sales range up to $200 off MSRP for new MacBook Airs and clearance models starting at only $699: - 15" MacBook Air Price Tracker - 13" MacBook Air Price Tracker The post first appeared on MacPrices.net.

Read more »

Apple retailers offer MacBook Airs starting at only $699 this Memorial Day Weekend
Our Apple award-winning MacBook Air Price Trackers are continually updated with the latest information on prices, bundles, and availability for 13" M3, M2, and M1 MacBook Airs and 15" M3 and M2 MacBook Airs from Apple's authorized online retailers. We include prices for new as well as Apple Certified Refurbished models, along with any open-box MacBooks that might be available. Current Memorial Day Weekend sales range up to $200 off MSRP for new MacBook Airs and clearance models starting at only $699: - 15" MacBook Air Price Tracker - 13" MacBook Air Price Tracker The post first appeared on MacPrices.net.

Read more »

Apple now selling iPhone 14 models starting at $619, Certified Refurbished
Apple has unlocked Certified Refurbished iPhone 14 models in stock starting at $619 and ranging up to $230 off original MSRP. Apple includes a standard one-year warranty and new outer shell with each iPhone, and shipping is free. According to Apple, "Each product is backed with our standard one-year warranty and is eligible for AppleCare to extend the coverage further with the same 1-year warranty as a brand new iPhone, all manuals and accessories, a new battery and outer shell, as well as a new white box." The current models are available (note that colors may vary, and stock can change at any time): - 128GB iPhone 14: $619 save $110 - 256GB iPhone 14: $699 save $130 - 512GB iPhone 14: $869 save $160 - 128GB iPhone 14 Pro: $759 save $140 - 256GB iPhone 14 Pro: $849 save $150 - 512GB iPhone 14 Pro: $1019 save $180 - 1TB iPhone 14 Pro: $1189 save $210 - 128GB iPhone 14 Pro Max: $849 save $150 - 256GB iPhone 14 Pro Max: $929 save $170 - 512GB iPhone 14 Pro Max: $1099 save $200 - 1TB iPhone 14 Pro Max: $1269 save $230 Keep an eye on our iPhone Price Tracker for the latest prices & deals on iPhones and plans from Apple and its carriers, updated daily. We currently track deals from 18 wireless carriers. The post first appeared on MacPrices.net.

Read more »

Apple now selling iPhone 14 models starting at $619, Certified Refurbished
Apple has unlocked Certified Refurbished iPhone 14 models in stock starting at $619 and ranging up to $230 off original MSRP. Apple includes a standard one-year warranty and new outer shell with each iPhone, and shipping is free. According to Apple, "Each product is backed with our standard one-year warranty and is eligible for AppleCare to extend the coverage further with the same 1-year warranty as a brand new iPhone, all manuals and accessories, a new battery and outer shell, as well as a new white box." The current models are available (note that colors may vary, and stock can change at any time): - 128GB iPhone 14: $619 save $110 - 256GB iPhone 14: $699 save $130 - 512GB iPhone 14: $869 save $160 - 128GB iPhone 14 Pro: $759 save $140 - 256GB iPhone 14 Pro: $849 save $150 - 512GB iPhone 14 Pro: $1019 save $180 - 1TB iPhone 14 Pro: $1189 save $210 - 128GB iPhone 14 Pro Max: $849 save $150 - 256GB iPhone 14 Pro Max: $929 save $170 - 512GB iPhone 14 Pro Max: $1099 save $200 - 1TB iPhone 14 Pro Max: $1269 save $230 Keep an eye on our iPhone Price Tracker for the latest prices & deals on iPhones and plans from Apple and its carriers, updated daily. We currently track deals from 18 wireless carriers. The post first appeared on MacPrices.net.

Read more »