News

Lawsuit claiming that Apple tricks customers to paying for extra iCloud storage won’t proceed

The U.S. Court of Appeals for the Ninth Circuit has upheld a lower court’s dismissal of a lawsuit alleging that Apple illegally deceived customers into paying for iCloud storage, reports Law360 (a subscription is required to read the article). The court was apparently...

Apple TV+’s “Shrinking” is one of the American Film Institute’s 10 best TV shows of 2024

Apple TV+’s “Shrinking” has made the American Film Institute’s list of the 10 best TV shows of 2024. You can the find complete AFI lists here. Co-created by Jason Segel, Bill Lawrence and Brett Goldstein, the first two seasons of “Shrinking” are now...

More MacTech News

Opinion

Analyst predicts features of the iPhone 17, iPhone 18, and iPhone 19

Talk about a powerful crystal ball! In a new Medium post, analyst Ming-Chi Kuo offers his predictions for the iPhone 17, iPhone 18, and iPhone 19 that will likely arrive in 2025, 2026, and 2027. He says the high-end iPhone 17 model is expected to feature an upgraded...

More Opinion

Scanners

Saturday December 07
08:00 am
Conquer spreadsheets to presentations — own Microsoft Office 2024 for life | Macworld
Conquer spreadsheets to presentations — own Microsoft Office 2024 for life
Macworld Whether you’re juggling work deadlines, managing personal budgets, or cramming for exams, having tools that make organization effortless is non-negotiable. Enter Microsoft Office 2024, the productivity suite trusted by millions to get the job done, on sale for $119.97 through December 8. This lifetime license includes must-have apps: Word, Excel, PowerPoint, and OneNote. Draft professional documents, analyze data, take notes, and create presentations that leave an impression — all with tools that run seamlessly on your Mac or PC. With its user-friendly interface and reliable performance, it’s designed to meet the needs of anyone balancing a busy schedule. The 2024 version comes loaded with new features to make life easier, including enhanced collaboration tools for remote work and improved templates that save you time. Outlook’s smarter email filtering keeps your inbox organized, while Excel’s new data analysis tools simplify complex projects. Best of all, this is a one-time purchase — no monthly fees, no subscriptions. Upgrade your workflow today and get more done with less hassle. For $119.97 until December 8 at 11:59pm Pacific, get a lifetime license to Microsoft Office 2024 for Mac or PC (reg. $149). Microsoft Office 2024 Home for Mac or PC: One-Time Purchase – $119.97 See Deal StackSocial prices subject to change.
Read more »
08:00 am
Don’t let Apple Intelligence FOMO get to you — just use ChatGPT to automate your life | Macworld
Don’t let Apple Intelligence FOMO get to you — just use ChatGPT to automate your life
Macworld Feeling left out because your iPhone doesn’t support Apple Intelligence? Same. But until we upgrade, we can just use ChatGPT to write our emails and answer our questions. Our only problem is that it’s a bit more advanced, so we might have to learn how to use ChatGPT. Step right up because we found this set of e-courses revealing its best tricks. Grab lifetime access for only $29.99 (reg. $790) during Cyber Week! ChatGPT works on any iPhone, no matter how old, and certain models are free to all users. Just pull up the website and ask for almost anything. The tricky part is phrasing your prompts efficiently to get good responses, which is where these ChatGPT training courses come in. The bundle includes 12 courses and 25 hours of content on customizing prompts and tailoring requests with specific, creative techniques. You might use ChatGPT for anything from fixing the new Photos app to editing a picture with AI. Fill some of that Apple Intelligence FOMO with a tutorial on how to use ChatGPT on iPhone, now $29.99 during Cyber Week (reg. $790). ChatGPT & Automation E-Degree – $29.99 See Deal StackSocial prices subject to change.
Read more »
06:55 am
Best Buy slashes M3 Pro MacBook Pro to $1,499 (all-time low price) | AppleInsider
Best Buy slashes M3 Pro MacBook Pro to $1,499 (all-time low price)
Best Buy's weekend flash sale delivers a $500 price cut on Apple's M3 Pro MacBook Pro 14-inch, dropping the price to $1,499.Get Apple's M3 Pro MacBook Pro for just $1,499 - Image credit: AppleWrap up your holiday shopping with time to spare when you snap up this blowout $1,499 special at Best Buy. Save $500 off the original MSRP on the standard M3 Pro MacBook Pro spec in your choice of Space Black or Silver. This configuration sports the M3 Pro chip with an 11-core CPU and 14-core GPU. It also has 18GB of RAM and 512GB of storage, making it a well-rounded machine for a variety of users, from students to busines professionals.Get the deal at Best Buy Continue Reading on AppleInsider | Discuss on our Forums
Read more »
04:12 am
The best Apple deals: Huge savings on Macs, iPads, AirPods, and more! | Macworld
The best Apple deals: Huge savings on Macs, iPads, AirPods, and more!
Macworld Whether you’re looking to gift an Apple product or just pick one up for yourself, we’ve scoured the web for the best prices on everything from Macs to MacBooks, iPads to iPhones, Apple Watches to Apple TVs, and more. And with Black Friday Apple rarely discounts its own products–even during its annual Black Friday shopping event, which will run from Friday, November 28, to Monday, December 1, 2025, it traditionally elects to give out gift cards rather than actual price reductions. It also offers year-round discounts to students, including a Back To School event where students can get up to $150 in gift cards when purchasing certain Apple products. There’s also the Apple Refurbished Store where you can sometimes grab a bargain. But if you want a new Apple device right now, other stores often offer up Apple discounts worth grabbing. In this article, you’ll find real-time pricing at all major retailers for Apple’s current lineup, and we’ve also highlighted some of the top discounts each week. Plus, for even more deals, we’ve linked to our dedicated deals round-ups for each product category. Use the table of contents to jump to the best deals right now for the Apple product you want—including the new iPhone 16, Apple Watch Series 10, AirPods 4, iPad mini, and all the M4 Macs, which were announced this fall. Best AirPods deals Foundry New AirPods were announced by Apple in September 2024. We aren’t seeing any deals on the new AirPods 4 yet, but they will be listed here as soon as we see any discounts. There are new colors for the AirPods Max to look out for too. Following the launch of new AirPods, the AirPods 2nd-gen and AirPods 3rd-gen were discontinued, however, we expect to continue to see deals on those products until stock runs out. U.S. Amazon, AirPods Pro 2 (USB-C case): $170 ($79 off, MSRP $249) Amazon, AirPods 4: $119 ($10 off, MSRP $129) Amazon, AirPods 4 with ANC: $139 ($14 off, MSRP $179) Amazon, AirPods Max (USB-C): $529 ($20 off, MSRP $549) Amazon, AirPods Max (Lightning): $469 ($80 off; MSRP $549 – Clearance) U.K. Argos, AirPods (3rd gen, Magsafe): £139 (£40 off, RRP was £179 – Clearance) Amazon, AirPods (3rd gen, Lightning): £129 (£40 off, RRP was £169 – Clearance) Argos, AirPods 2nd gen: £109 (£10 off, RRP was £129 – Clearance) Argos, AirPod Max, Lightning, 2020: £429 (£70 off, RRP was £499 – Clearance) See our dedicated round-up of the best AirPods deals Best iPhone and accessory deals Dominik Tomaszewski / Foundry In the U.S. specific iPhone deals are hard to come by apart from carrier offers for new signups and trade-ins. We recommend checking Verizon, AT&T, and T-Mobile’s sites if you’re looking to change carriers or add a new line. Apple also offers trade-ins and carrier deals through its website. We also recommend that you look at our round-up of iPhone 14 deals as well as iPhone 15 deals for U.S. readers, and with the arrival of the iPhone 16 we will be tracking Where to get the best iPhone 16, Plus, Pro, and Pro Max deals in the U.S. In the U.K., we frequently see Apple-certified resellers discount unlocked iPhones. Look for money off at Amazon, Currys, and Very. We are recording all the best prices of iPhone 15 in the U.K. separately and we are tracking the best deals for the iPhone 16, Plus, Pro, and Pro Max separately. It is possible to find discounts on most iPhones in the UK, including older/discontinued handsets, including the following deals, but remember Apple has reduced pricing in the U.K. for the new range of handsets, so the discounts may not be as good as they look. Amazon, iPhone 15, 128GB, £681 (£18 off, RRP now £699) Amazon, iPhone 15 Plus, 128GB, £793.61 (£5 off, RRP now £799) Amazon, iPhone 15 Pro, 128GB, £899 (RRP was £999 – Clearance) Amazon, iPhone 15 Pro, 256GB, £999 (RRP was £1,099 – Clearance) Amazon, iPhone 15 Pro Max, 256GB, £1,099 (RRP was £1,199 – Clearance) Amazon, iPhone 14: £549 (£50 off, RRP now £599) Amazon, iPhone SE (64GB): £379 (£50 off, RRP £429) Amazon, iPhone SE (128GB): £429 (£50 off, RRP £479) Amazon, iPhone 13 (128GB): £449 (RRP was £499 – Clearance) Argos, iPhone 13 mini (128GB): £499 (£150 off, RRP was £649 – Clearance) Also see our dedicated round-up of the best iPhone deals and: iPhone 16 & iPhone 16 Pro deals (US) and iPhone 16 & iPhone 16 Pro deals (UK) iPhone 15 & iPhone 15 Pro deals (US) and iPhone 15 & iPhone 15 Pro deals (UK) iPhone 14 & iPhone 14 Pro deals iPhone 13 deals Best iPhone SE deals Best iPad deals Dominik Tomaszewski/IDG You can save a decent amount on most iPads, from time to time we do see really good discounts, especially on the larger capacity models. U.S. Amazon, 10th-gen iPad (256GB): $430 ($60 off, MSRP $499) B&H Photo, iPad mini (A17 Pro, 128GB): $459 ($40 off, MSRP $499) Amazon, 11-inch M2 iPad Air (128GB): $549 ($50 off, MSRP $599) Amazon, 13-inch M2 iPad Air (128GB): $739 ($60 off, MSRP $799) Best Buy, 11-inch M4 iPad Pro (256GB, 8GB RAM): $899 ($100 off, MSRP $999) Amazon, 13-inch M4 iPad Pro (256GB, 8GB RAM): $1,194 ($105 off, MSRP $1,299) U.K. Amazon, 10th-gen iPad (64GB): £308.97 (£20 off, RRP £329) Amazon, 10th gen iPad (256GB): £449 (£30 off, RRP £479) John Lewis, 9th gen iPad (64GB): £279 (RRP was £369) Amazon, 11-inch iPad Air (M2, 128GB): £559.97 (£39 off, RRP £599) Amazon, 11-inch iPad Air (M2, 512GB): £843.97 (£55 off, RRP £899) Amazon, 13-inch iPad Air (M2, 128GB): £749 (£50 off, RRP £799) Amazon, 13-inch iPad Air (M2 512GB): £1,031.97 (£67 off, RRP £799) KRCS: iPad mini A17 Pro, 128GB: £489 (£10 off, RRP is £499) KRCS: iPad mini A17 Pro, 256GB: £587 (£12 off, RRP is £599) KRCS: iPad mini A17 Pro, 512GB: £783 (£16off, RRP is £799) Amazon, 11-inch M4 iPad Pro (512GB, Wi-Fi): £1,149 (£50 off, RRP £1,199) John Lewis: 13-inch M4 iPad Pro (256GB, Wi-Fi): £1,249 (£50 off, RRP £1,299) See our dedicated round-ups of the best iPad deals below Best iPad 10.9-inch deals Best iPad Air deals Best deals iPad Pro deals Best iPad mini deals Best Apple Watch deals Jason Cross/IDG The Apple Watch Series 10 arrived in September 2024. It’s going to be a while until we start to see discounts, but when we do you’ll find them here. The arrival of the Series 10 marks the end of the Apple Watch Series 9, which Apple discontinued. The Apple Watch SE and Apple Watch Ultra 2 haven’t been updated and remain on sale. U.S. Amazon, Apple Watch Series 10 (42mm): $330 ($69 off with coupon, MSRP $399) Amazon, Apple Watch Series 10 (46mm): $379 ($69 off with coupon, MSRP $429) Amazon, Apple Watch SE 2 (40mm): $189 ($60 off, MSRP $249) Amazon, Apple Watch SE 2 (44mm): $219 ($60 off, MSRP $279) Amazon, Apple Watch Ultra 2: $700 ($99 off, MSRP $799) U.K. Argos, Apple Watch Series 9 (41mm): £299 (RRP was £399 – Clearance) Argos, Apple Watch Series 9 (45mm): £329 (RRP was £429 – Clearance) Amazon, Apple Watch Ultra 2 (49mm, GPS + Cellular): £769 (£30 off, RRP £799) Argos, Apple Watch SE (2022): £209, £10 off, RRP £219) See our dedicated round-up of the best Apple Watch deals Best MacBook deals IDG Apple released new 14-inch and 16-inch MacBook Pro models with M4/M4 Pro/M4 Max processors in October 2024. Prices stayed the same, but the new base model now starts with 16GB of RAM. The MacBook Air, while still running on the M3 chip had a Unified Memory update in October 2024 and now ships with 16GB RAM as standard. Beware that some deals on the older models may be as good now that you can get double the memory for the same price and if you are outside the U.S. note that the prices of the new models are now lower than the old models were at launch. U.S. Best Buy, M4 14-inch MacBook Pro, 1TB/16GB RAM, $1,399 ($300 off, MSRP $1,699) Amazon, M4 16-inch MacBook Pro, 512GB/24GB RAM, $2,250 ($249 off with coupon, MSRP $2,499) Amazon, 13-inch MacBook Air, M2 (8-core GPU, 16GB RAM, 256GB) $949 ($50 off, MSRP $999) Amazon, 15-inch MacBook Air, M3 (8-core GPU, 16GB RAM, 256GB) $1,099 ($200 off, MSRP $1,299) Amazon, 15-inch MacBook Air M3 (8-core GPU, 24GB RAM 1TB): $1,500 ($199 off with coupon, MSRP $1699) Best Buy, M3 14-inch MacBook Pro, 512GB/8GB RAM: $1,299 ($300 off, Was $1,599 – Clearance) B&H, M3 Pro 14-inch MacBook Pro, 512GB/18GB RAM: $1,699 ($300 off, Was $1,999 – Clearance) Best Buy, M3 Pro 14-inch MacBook Pro, 1TB/18GB RAM: $2,099 ($300 off, Was $2,399 – Clearance) Best Buy, M3 Max 14-inch MacBook Pro, 1TB, 36GB RAM: $2,899 ($400 off, Was $3,399 – Clearance) Best Buy, M3 Pro 16-inch MacBook Pro, 512GB/18GB RAM: $1,999 ($500 off, Was $2,499 – Clearance) Best Buy, M3 Pro 16-inch MacBook Pro, 512GB/36GB RAM: $2,399 ($500 off, Was $2,899 – Clearance) U.K. KRCS, M4 14-inch MacBook Pro, 512GB/16GB RAM, £1,519.05 (£78 off, RRP £1,599) KRCS, M4 14-inch MacBook Pro, 1TB/16GB RAM, £1,709.05 (£90 off, RRP £1,799) KRCS, M4 Pro 16-inch MacBook Pro, 512GB/48GB RAM, £2,754.05 (£144 off, RRP £2,899) AO, 13-inch MacBook Air, M3 (10-core GPU, 16GB RAM, 512GB) £1,199 (£100 off, RRP £1,299, was £1,499) Amazon, 15-inch MacBook Air, M3 (10-core GPU, 16GB RAM, 512GB) £1,366 (£100 off, RRP £1,499, was £1,699) Amazon, 13-inch MacBook Air, M2 (10-core GPU, 8GB RAM, 512GB) £949 (£150 off, Was £1,099) John Lewis, M3 14-inch MacBook Pro, 1TB/8GB RAM: £1,695 (£204 off, Was £1,899 – Clearance) Amazon, M3 Pro 14-inch MacBook Pro, 512GB/18GB RAM: £1,749 (£350 off, Was £2,099 – Clearance) Amazon, M3 Pro 16-inch MacBook Pro, 512GB/18GB RAM: $2,199 (£400 off, Was £2,599 – Clearance) See our dedicated round-ups of the best MacBook Pro deals and the best MacBook Air deals. Best Mac desktop deals iMacIDG Apple released the M4 iMac and M4/M4 Pro Mac mini in October 2024. All models now start at 16GB RAM and the Mac mini has a completely new design with a smaller case and front-facing ports. Also note that if you are outside the U.S. prices on the new M4 Mac mini and M4 iMac are lower than they were, so the discounts may not be as good as they look when compared to the new models. U.S. Amazon, Mac mini, M4, 16GB RAM, 256GB: $579 ($20 off, MSRP $799) Amazon, Mac mini, M4, 16GB RAM, 512GB: $744 ($55 off, MSRP $799) Amazon, iMac, M4, 16GB RAM, 256GB: $1,199 ($100 off, MSRP $1,299) Amazon, M2 Mac mini, 8GB RAM, 256GB: $499 ($100 off, MSRP $799 – Clearance) Amazon, M3 iMac, 10-core GPU, 8GB RAM, 256GB: $1,304 ($195 off, MSRP was $1,499 – Clearance) U.K. KRCS has already discounted the new iMac and Mac mini: KRCS: M4 Mac mini, 256GB/16GB RAM, £569.05, £29 off RRP £599 KRCS: M4 iMac, 256GB/16GB RAM, £1,234.05 (£64 off RRP £1,299) Amazon: M2 Pro Mac mini, 512GB/16GB RAM: £1,199 (£200 off, RRP was £1,399 – Clearance) Amazon: M2 Mac mini, 256GB/8GB RAM: £469 (£180 off, RRP was £649 – Clearance) Amazon: M2 Mac mini, 512GB/8GB RAM: £637 (£212 off, RRP was £849 – Clearance) Amazon, 24-inch M3 iMac, 8-core GPU, 256GB/8GB RAM: £1,009 (£309 off, RRP was £1,399 – Clearance) Amazon, 24-inch M3 iMac,10-core GPU, 256GB/8GB RAM: £1,299 (£300 off, RRP was £1,599 – Clearance) John Lewis, 24-inch M3 iMac,10-core GPU, 512GB/8GB RAM: £1,493 (£306 off, RRP was £1,799 – Clearance) AO, Mac Studio M2 Max: £1,903 (£196 off, MSRP £2,099) For more Mac deals check out our round-up of the best Mac Studio deals and the best Mac mini deals, plus our dedicated round-up of the best iMac deals.
Read more »
12:08 am
PSA: Select Apple Stores offering personalized holiday bags this weekend | 9 to 5 Mac
PSA: Select Apple Stores offering personalized holiday bags this weekend
As holiday shopping continues, Apple is running a fun promotion at Apple Stores this weekend. At select stores in San Francisco, Miami, Los Angeles, and New York City, live artists will be available to personal gift bags for Apple shoppers… more…
Read more »
Friday December 06
10:52 pm
Amazon's record-low AirPods 4 price is perfect for nailing down stocking stuffers | AppleInsider
Amazon's record-low AirPods 4 price is perfect for nailing down stocking stuffers
The record-breaking AirPods 4 price drop is in stock at Amazon while supplies last, putting the earbuds with Active Noise Cancellation in your hands in just a few days.Grab the lowest price ever on AirPods 4 with ANC.Every model of AirPods is on sale for the holidays, but we're following a fresh price drop on AirPods 4 with Active Noise Cancellation, which are down to $138.99. This is the lowest price ever on the 2024 release, which includes a redesign for added comfort and greater stability. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
10:41 pm
‘Karo’ app for assigning tasks to other people now available on the Mac | 9 to 5 Mac
‘Karo’ app for assigning tasks to other people now available on the Mac
I recently wrote about Karo, a new iPhone app from developer Mustafa Yusuf that helps people create to-do lists and assign tasks to others. Starting today, Mac users can also try out Karo with a native version for macOS. more…
Read more »
10:39 pm
9to5Mac Daily: December 6, 2024 – iOS 18.2 tidbits, more | 9 to 5 Mac
9to5Mac Daily: December 6, 2024 – iOS 18.2 tidbits, more
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. This Black Friday, discover Dreame Technologies’ innovative family of smart home cleaning solutions—designed to revolutionize your cleaning routine! Don’t miss out on groundbreaking deals, plus enjoy an extra 5% off with code DM9to55off at checkout. Experience the future of cleaning today! more…
Read more »
10:35 pm
Apple set to deliver natural language search to Apple Music and Apple TV apps | Mac Daily News
Apple set to deliver natural language search to Apple Music and Apple TV apps
Apple's forthcoming iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, and HomePod 18.2 software updates, Apple has added… The post appeared first on MacDailyNews.
Read more »
09:40 pm
Apple shares hit new all-time intraday high | Mac Daily News
Apple shares hit new all-time intraday high
In Nasdaq trading today, shares of Apple Inc. rose to hit a new all-time closing high. Apple’s all-time intraday high… The post appeared first on MacDailyNews.
Read more »
09:25 pm
MacBooks with 5G cellular might actually happen | Cult of Mac
MacBooks with 5G cellular might actually happen
A 5G MacBook might finally be on the horizon thanks to Apple's plans to introduce its own cellular modem in 2025. (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »
09:13 pm
Apple's ongoing modem push rumored to result in cellular MacBooks | AppleInsider
Apple's ongoing modem push rumored to result in cellular MacBooks
Apple's work to build its own 5G modem could keep MacBook users online without an iPhone, with the prospect of a wider rollout beyond iPhones and cellular iPads.14-inch MacBook ProThe multi-year modem project has the main intention of replacing Qualcomm's modem for an in-house design. However, Apple is considering the possibility of using its modems beyond the currently cellular-equipped product lines.People familiar with the modem effort told Bloomberg of the modem, codenamed "Sinope," which will be more tightly integrated with Apple's other hardware components. This could result in some obvious benefits including a thinner iPhone. Rumor Score: 🤔 Possible Continue Reading on AppleInsider | Discuss on our Forums
Read more »
09:02 pm
Apple’s first 5G modem will kick off a 3-year plan to leave Qualcomm behind | Macworld
Apple’s first 5G modem will kick off a 3-year plan to leave Qualcomm behind
Macworld It has been over five years since Apple purchased Intel’s modem division and patents, and in all that time it hasn’t managed to ship a product. Now, according to a new report from Bloomberg, the company is finally ready to bring its first 5G modem to market. Don’t expect Apple to topple the modem giant Qualcomm, though—at least not for a while. Apple plans to roll out increasingly more capable modems over the next three years. Apple has suffered a lot of setbacks in getting its modem to market, but supposedly has “hundreds” of test phones now across the world, working with carriers to do QA testing, which means it is likely to finally come to market this spring in the iPhone SE. The first modem is code-named Sinope, and supports only sub-6 GHz network frequencies, not the faster mmWave networks. It’s behind Qualcomm’s best in other ways, too: it supports only four-carrier aggregation (Qualcomm’s modems support 6 or more) and tops out at 4 gigabits per second (Gbps) in lab tests, well behind the best Qualcomm modems in today’s iPhones. Of course, real-world performance is far lower, anyway. Along with the iPhone SE this spring, that model is also slated for the new iPhone 17 Air (as some are calling the new mid-range ultra-thin iPhone due for release in the fall of 2025). It will have some advantages over using Qualcomm’s modems—tighter integration with Apple’s processors should reduce power use, and it is said to scan for cellular signals more efficiently and better support connections to satellite networks. In 2026 with the iPhone 18 (and some high-end iPads through 2027), we should see the next modem, code-named Ganymede. It is said to catch up to the current Qualcomm modems with mmWave support and better carrier aggregation, and maximum speeds of 6Gbps. Of course, Qualcomm will have better modems on the market by then, so Apple will still be behind in some ways. The third modem, due for high-end iPhones and iPads starting in 2027, is code-named Prometheus. The report claims that Apple believes it can beat Qualcomm with a combination of better component performance, AI features, and next-gen satellite connectivity.
Read more »
08:23 pm
Download new macOS and Safari splash screen wallpapers | 9 to 5 Mac
Download new macOS and Safari splash screen wallpapers
Apple is adding six new background options for Safari in iOS 18.2 and macOS Sequoia 15.2. Head below to download each one for use anywhere outside of Safari as well as the recently introduced M4 “iMac” wallpapers. more…
Read more »
08:11 pm
Two years into Apple’s 10-year MLS partnership, where do things stand? | Mac Daily News
Two years into Apple’s 10-year MLS partnership, where do things stand?
In June 2022, Apple and Major League Soccer (MLS)announced that the Apple TV app will be the exclusive destination to watch every… The post appeared first on MacDailyNews.
Read more »
08:10 pm
These are the best discounts on Apple's MacBook Air for holiday gift-giving | AppleInsider
These are the best discounts on Apple's MacBook Air for holiday gift-giving
Apple resellers are providing discounts on the ultraportable MacBook Air as holiday shipping deadlines loom, with post-Black Friday sales already resulting in substantial savings of up to $200 off.Best holiday deals on Apple's MacBook Air - Image credit: AppleBoth 13-inch and 15-inch models are on sale this weekend, with prices starting at just $899 for models with 16GB of memory. Check out the savings below and in our Apple Price Guide. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
08:07 pm
Bloomberg: Apple ‘investigating’ bringing cellular to the Mac for the first time | 9 to 5 Mac
Bloomberg: Apple ‘investigating’ bringing cellular to the Mac for the first time
Earlier today, Bloomberg detailed Apple’s multi-year plan to ditch Qualcomm and debut its own modem technology in the iPhone and iPad. In a follow-up report this afternoon, Bloomberg says that Apple is also “investigating the idea of bringing cellular connectivity to the Mac for the first time” as part of these efforts. more…
Read more »
07:50 pm
Inside details on Apple-MLS deal, viewership revealed in new report | 9 to 5 Mac
Inside details on Apple-MLS deal, viewership revealed in new report
Apple and Major League Soccer (MLS) struck a deal starting in 2023 for 10 years of partnership—a huge swing by both parties. Now, two years in, a new report sheds light on how that partnership’s going, including inside looks at viewership numbers and more. more…
Read more »
07:00 pm
HomeKit Weekly: Tis the season to automate all your Christmas decorations with HomeKit | 9 to 5 Mac
HomeKit Weekly: Tis the season to automate all your Christmas decorations with HomeKit
It feels like the year has flown by—just yesterday, we were looking forward to 2024, and now, we are gearing up for the holiday season. For many of us, Christmas brings a chance to add extra magic to our homes. My first foray into HomeKit was automating my Christmas decorations, so it feels only right to usher in the season with my updated guide to creating a smarter, more festive Christmas display. more…
Read more »
06:47 pm
Uber just made its Live Activity a lot better on the Apple Watch | 9 to 5 Mac
Uber just made its Live Activity a lot better on the Apple Watch
With watchOS 11, Apple has brought Live Activities from the iPhone to the Apple Watch, so that users can check for updates in real time directly from the Smart Stack. While watchOS can mirror Live Activities from the iPhone, Uber has now made its Live Activity a whole lot better on the . more…
Read more »
06:30 pm
Apple’s macOS Sequoia 15.2 release notes detail new Apple Intelligence additions | Mac Daily News
Apple’s macOS Sequoia 15.2 release notes detail new Apple Intelligence additions
macOS Sequoia 15.2 is expected to be released on Monday, December 9th and offer some new Apple Intelligence features that were first… The post appeared first on MacDailyNews.
Read more »
06:13 pm
Don’t Throw the Baby Out With the Generative AI Bullshit Bathwater | Daring Fireball
Don’t Throw the Baby Out With the Generative AI Bullshit Bathwater
If I had wanted to write a column about presidential pardons, I’d find ChatGPT’s assistance a far better starting point than I’d have gotten through any general web search. But to quote Reagan: “Trust, but verify.”
Read more »
06:00 pm
Why and how you can install iOS 18.2 on your iPhone today | Cult of Mac
Why and how you can install iOS 18.2 on your iPhone today
Don’t wait: Install the iOS 18.2 release candidate this weekend when you have time to play around with the AI-powered Image Playground. (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »
05:53 pm
What’s new in macOS 15.2? Here are Apple’s full release notes | 9 to 5 Mac
What’s new in macOS 15.2? Here are Apple’s full release notes
The next big update for the Mac is almost here. macOS Sequoia 15.2 is expected to arrive next week, and Apple has published the full release notes for what’s new. Here’s everything that’s coming soon to your Mac. more…
Read more »
05:41 pm
Apple plans to rollout custom modem, displacing Qualcomm, in iPhone SE 4, ‘iPhone Air,’ and iPad | Mac Daily News
Apple plans to rollout custom modem, displacing Qualcomm, in iPhone SE 4, ‘iPhone Air,’ and iPad
Apple is set to introduce its own custom-designed cellular modem chips in 2025, marking a significant step towards reducing reliance… The post appeared first on MacDailyNews.
Read more »
05:40 pm
Apple plans three-year rollout of its self-made iPhone modem, starting with iPhone SE | AppleInsider
Apple plans three-year rollout of its self-made iPhone modem, starting with iPhone SE
Apple's quest to replace Qualcomm modems with its own in the iPhone and other products will take place over three years, with plans set to replace all of them by 2027.An iPhone connection indicatorApple has been working on its own 5G modem designs for a few years, as part of a wider program of bringing the design work in-house. While the introduction of the component in Apple's hardware lineup is expected to happen soon, it may be a more gradual rollout than you'd expect.The initial wave of chips will be used by the iPhone SE, according to a source of Bloomberg. Just as raised in previous reports, this would first take place in 2025, though the initial introductions won't be as technologically advanced as Qualcomm's offering. Rumor Score: 🤔 Possible Continue Reading on AppleInsider | Discuss on our Forums
Read more »
04:57 pm
Apple health VP talks Apple health innovations and smart ring rumors in new interview | 9 to 5 Mac
Apple health VP talks Apple health innovations and smart ring rumors in new interview
Apple fans and tech enthusiasts are in for a treat as longtime YouTuber and Apple reviewer Nikias Molina sits down with Sumbul Desai, Apple’s Vice President of Health, for an exclusive interview. The conversation offers a fascinating look at Apple’s approach to health technology and how it’s making an impact on users’ everyday lives. more…
Read more »
04:53 pm
Gurman: Apple-designed 5G modem coming to 2025 iPhones will be worse than Qualcomm’s | 9 to 5 Mac
Gurman: Apple-designed 5G modem coming to 2025 iPhones will be worse than Qualcomm’s
Apple’s long-in-the-works project to build its own cellular modem is about to see the light of day. As multiple reports have indicated in the past, select 2025 iPhone models will carry the in-house 5G chip—but thanks to a new report, now we know it won’t quite measure up to what Qualcomm’s chip offers. more…
Read more »
04:52 pm
Apple dodges class action lawsuit over iCloud’s 5GB free tier and more | 9 to 5 Mac
Apple dodges class action lawsuit over iCloud’s 5GB free tier and more
A multi-year attempt to establish a class action lawsuit against Apple over iCloud storage has officially been dismissed. In a new court filing this week, the United States Court of Appeals for the Ninth Circuit tossed out the lawsuit and said the plaintiffs failed to make their case. more…
Read more »
04:45 pm
Grab up to 70% off Solo Loop and Braided Solo Loop Apple Watch bands | Cult of Mac
Grab up to 70% off Solo Loop and Braided Solo Loop Apple Watch bands
Woot's big sale on Solo Loop and Braided Solo Loop offers incredibly steep discounts -- but it ends Friday night, so hurry. (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »

Older posts

Saturday December 07
12:07 am
iPhone 17 'Air' Expected to Be ~2mm Thinner Than iPhone 16 Pro | MacRumors
iPhone 17 'Air' Expected to Be ~2mm Thinner Than iPhone 16 Pro
In 2025, Apple is planning to debut a thinner version of the iPhone that will be sold alongside the iPhone 17, ‌iPhone 17‌ Pro, and ‌iPhone 17‌ Pro Max. This ‌iPhone 17‌ "Air" will be about two millimeters thinner than the current iPhone 16 Pro, according to Bloomberg's Mark Gurman. The ‌iPhone 16 Pro‌ is 8.25mm thick, so an ‌iPhone 17‌ that is 2mm thinner would come in at around 6.25mm. At 6.25mm, the ‌iPhone 17‌ Air would be Apple's thinnest ‌iPhone‌ to date. The thinnest ‌iPhone‌ we've seen so far was the ‌iPhone‌ 6, which measured in at 6.9mm. iPhones got thicker with the ‌iPhone‌ X and beyond, as Apple increased thickness to provide more space for the battery, camera lenses, Face ID hardware, and more. Apple will equip the ‌iPhone 17‌ Air with its own custom-designed 5G modem chip, and that chip is smaller than 5G modem chips from Qualcomm. Gurman says that Apple focused on making the chip more integrated with other Apple-designed components to save space within the ‌iPhone‌, and that space savings is what allowed it to create the slimmed down ‌iPhone 17‌ Air without sacrificing battery life, the camera, or the display quality. Prior rumors have also suggested that the ‌iPhone 17‌ Air will be somewhere between 5mm and 6mm thick, and the ~6mm thickness has now been proposed by multiple reliable sources. The ‌iPhone 17‌ Air is expected to have a display that's around 6.6 inches in size, and it will also feature a single-lens rear camera. The ‌iPhone 17‌ Air will be one of three devices that are set to get a custom Apple modem chip in 2025, with Apple also bringing the chip to the iPhone SE early in the year and a low-cost iPad. As Apple improves its modem chip design, the saved space could allow for "new designs" such as a foldable ‌iPhone‌. According to Gurman, Apple is continuing to explore foldable ‌iPhone‌ technology. Apple is aiming to phase out Qualcomm modems across a three-year period as Apple introduces increasingly more powerful modem chips. Eventually, Apple could debut a system-on-a-chip that includes a processor, modem, Wi-Fi chip, and other parts, which would save additional space and allow for tighter integration between hardware components.Related Roundup: iPhone 17This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
Friday December 06
11:48 pm
Anker Recalling Over 70,000 Speakers Due to Fire Hazard | MacRumors
Anker Recalling Over 70,000 Speakers Due to Fire Hazard
Anker this week recalled its Anker Soundcore (A3102) and PowerConf (A3302) speakers because the lithium battery inside can overheat, resulting in a fire hazard. Anker sold approximately 69,000 units in the United States, and 9,764 in Canada. All of the affected speakers were sold through Amazon between March 2023 and October 2023 and have model numbers of A3102016, A3302011, or A3302031. Amazon users who purchased an Anker speaker can check to see if they have an affected model by looking for the SN code on the underside of the device and entering it on the Anker website. Anker and Amazon have contacted known purchasers. There have been 33 reports of incidents where the lithium-ion batteries in the speakers overheated, resulting in smoking and small fires. There has been one minor burn injury associated with one of the malfunctioning speakers. Customers who have a faulty speaker should stop using it, turn it off, and contact Anker for a replacement speaker.This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
11:08 pm
Google Photos Launches 2024 Recap for Reliving Memories | MacRumors
Google Photos Launches 2024 Recap for Reliving Memories
Google today announced the launch of a 2024 Recap for Google Photos, mimicking the popular year-end recaps that Spotify and Apple Music put out. According to Google, the Recap is a collection of memories and a set of interesting insights designed to help users "rediscover the moments that made this year special." The Google ‌Photos‌ Recap highlights memorable photos and videos from the year, pairing them with graphics and cinematic effects. Select users in the United States are able to get a Recap that includes personalized captions generated by the Google Gemini AI model. Recap will also provide tidbits about the year based on images captured, such as longest photo streak, who you took the most photos of, top colors photographed, and who you smiled most with. Recap memories and insights can be shared from Google ‌Photos‌ directly to messaging apps and social media apps. The Recap feature is rolling out to Google ‌Photos‌ users as of today.Tag: Google PhotosThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
10:34 pm
Future Apple Vision Pro Could Have 5G Modem | MacRumors
Future Apple Vision Pro Could Have 5G Modem
An upcoming version of the Apple Vision Pro headset could be equipped with a custom-designed Apple modem chip, according to Bloomberg's Mark Gurman. In a report on Apple's plans for its in-house modem, Gurman said that Apple is "discussing" bringing cellular support to future Vision Pro models. An Apple-designed modem chip is set to debut in 2025 iPhone SE, low-cost iPad, and iPhone 17 "Air" models, and from there, Apple will iterate on the design and expand the technology to other devices. The first version of the modem chip will only have slower sub-6GHz 5G connectivity, but a second-generation model will support the faster mmWave 5G speeds, and a third-generation version in 2027 could match or exceed Qualcomm technology. The first 5G chip from Apple isn't likely to be used in a Vision Pro headset, but the second-generation or third-generation versions could be integrated into the Vision Pro, and also future Macs. Further in the future, Apple could also add its custom modem chip to augmented reality glasses, but that product is still several years away. Apple's ultimate goal is to phase out Qualcomm 5G modem chips, replacing them with its own modem chips. Because cellular connectivity is integral to the iPhone, Apple plans to test its modem technology in lower volume, lower cost products to start with. The first version of the modem chip is smaller and more integrated with other components that are designed by Apple, but it is not as advanced as Qualcomm's 5G modem chips. Apple modem chips coming in 2026 and 2027 will be more advanced, and eventually, Apple could merge its A-series and M-series with its custom modem chips, developing a single component that would be integrated into its products. A second-generation Vision Pro headset could launch as early as 2025, with Apple adding an M5 chip but few design changes, but rumors on the future of the Vision Pro have been unclear with some sources pointing toward a Vision Pro 2, and others suggesting Apple wants to focus on a lower-cost model. Apple is said to be developing a lower-cost version of the Vision Pro that uses more affordable components, and Gurman has said it could come as soon as 2025. Apple analyst Ming-Chi Kuo does not believe that a cheaper Vision Pro will come out until after 2027, however. It is not clear when the Vision Pro could get 5G technology.Related Roundup: Apple Vision ProBuyer's Guide: Vision Pro (Buy Now)Related Forum: Apple Vision ProThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
09:46 pm
TikTok Still On Track for January Ban as Appeals Court Upholds Ruling | MacRumors
TikTok Still On Track for January Ban as Appeals Court Upholds Ruling
Popular social network TikTok did not receive a reprieve from the U.S. Court of Appeals for the District of Columbia Circuit, and it is still facing a ban that is set to be enacted in January, reports The Wall Street Journal. TikTok and several of the social network's users challenged an April bill that is forcing Chinese company ByteDance to sell TikTok. The bill provided ByteDance with a nine-month period to sell TikTok to a company outside of China, and if the sale doesn't happen, TikTok won't be able to be distributed in the United States. TikTok claimed that the bill was unconstitutional because it infringes on free speech, but the court rejected that claim. While the ban is set to go into effect in January, TikTok is likely to appeal to the U.S. Supreme Court, seeking an emergency stay. From there, the Supreme Court will decide whether to hear the case. If TikTok is banned, Google, Apple, and other app distributors will not be able to provide the app for download, nor offer updates to the app. Internet hosting services will also be blocked from supporting the app, giving U.S. users no way to download it. TikTok users will, however, be able to keep using the app so long as it functions. ByteDance does not plan to sell TikTok, and even if the company complied and did so, China would need to approve the sale. The Chinese government has made it clear that it will firmly oppose any sale of the TikTok app. ByteDance says that it would be impossible to give the TikTok source code to a new owner because it would take years for new engineers to become familiar enough with it to perform routine maintenance. U.S. lawmakers want TikTok sold to a non-China company over concerns that the Chinese government could force ByteDance to hand over data from users in the United States, and there have also been suggestions that China could use TikTok to spread political propaganda.Tag: TikTokThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
08:16 pm
Apple 'Investigating' Macs With Cellular Connectivity | MacRumors
Apple 'Investigating' Macs With Cellular Connectivity
Apple is considering bringing cellular connectivity to the Mac lineup for the first time, reports Bloomberg's Mark Gurman. The Cupertino company is said to be "investigating" the possibility of adding a modem chip to a future Mac, but a cellular Mac isn't likely to launch until 2026 or later. Early in 2025, Apple plans to introduce the custom-built 5G chip that it's had in the works for years now. The modem chip will be added to the iPhone SE, low-cost iPad, and iPhone 17 "Air," giving Apple an opportunity to test the technology before rolling it out to flagship devices. From there, Apple's custom 5G modem chip will expand to other iPhones and iPads over a three-year period, and it may also come to the Mac. A Mac with a 5G chip would be able to connect to a cellular network just like a 5G-enabled iPhone or ‌iPad‌, and Wi-Fi or a cellular hotspot would not be required. The first Apple modem chip will be limited to sub-6GHz 5G speeds, but the second-generation version will support faster mmWave technology. Apple is aiming to outcompete Qualcomm with a third-generation model, offering better performance and AI features. Apple ultimately wants to phase out Qualcomm modem chips, replacing them with the modem chips that Apple has designed. Last year, Gurman said that Macs with Apple-designed modem chips would be introduced in 2028 at the earliest, with Apple planning to integrate 5G connectivity into its Apple silicon chips. Macs with 5G connectivity have been rumored for several years, and way back in 2008, Apple considered adding a modem chip to the MacBook Air. Then-CEO Steve Jobs said that Apple decided not to because the modem chip would take up too much room in the case and would lock customers to a specific carrier, but chip technology has come a long way since then. Tag: Apple 5G ModemThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
05:55 pm
Apple's Second 5G Modem for iPhone 18 Pro and iPad Pro Expected to Support mmWave | MacRumors
Apple's Second 5G Modem for iPhone 18 Pro and iPad Pro Expected to Support mmWave
As we wrote about earlier today, Bloomberg's Mark Gurman expects Apple's first 5G modem to debut in a new iPhone SE, an ultra-thin iPhone 17, and low-end iPads in 2025. Towards the end of the report, he also outlined Apple's modem plans for devices launching in 2026 and 2027, and we have summarized that information below. According to Gurman, Apple's second-generation 5G modem will debut in the iPhone 18 lineup in 2026 and in iPad Pro models by 2027. He said this modem will better compete with Qualcomm's modems in current iPhones by adding support for the ultra-fast 5G standard known as mmWave. Overall, he said the second modem will achieve theoretical download speeds of up to 6 Gbps, compared to up to 4 Gbps for Apple's first modem. In 2027, he expects Apple to release its third-generation modem. The company is apparently aiming for this modem to top Qualcomm's modems in terms of performance and AI features, although it remains to be seen if it achieves this feat. Further out, Apple is said to be discussing merging the modem into the iPhone's A-series chip. All in all, this sounds like a natural progression for Apple following its decision to transition away from Qualcomm modems in iPhones. Apple and Qualcomm have had a rocky relationship over the years, but the two companies extended their modem supply agreement for iPhones through March 2027, so Apple still has plenty of time on its side. Apple has been rumored to be working on its own 5G modem since 2018, and it acquired Intel's smartphone modem patents in 2019 to bolster this initiative. Starting with the iPhone SE 4 in March, we should finally see the modem in action.Tags: Apple 5G Modem, iPhone 18, Mark GurmanThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:57 pm
The MacRumors Show: Apple's Foldable iPhone and Smart Home Plans | MacRumors
The MacRumors Show: Apple's Foldable iPhone and Smart Home Plans
On this week's episode of The MacRumors Show, we discuss the rumored launch of Apple's first foldable in 2026 and the company's plans to move aggressively into the smart home market. Subscribe to The MacRumors Show YouTube channel for more videos Earlier this week, display analyst Ross Young reported that Apple is expected to "enter the foldable market" in the second half of 2026. Apple's "dominant position in flagship smartphones" could potentially lead to significant growth for the foldable market in 2026, ultimately leading to a record year for foldables. There have long been rumors suggesting that Apple is developing a foldable iPhone, and several analysts believe that Apple will finally debut a foldable iPhone around September of 2026. The first foldable ‌iPhone‌ could be between 7.9 and 8.3 inches in size, and it may have a "clamshell" design like Samsung's Galaxy Z Flip. A clamshell ‌iPhone‌ would fold in half vertically rather than horizontally, allowing for a full-size ‌iPhone‌ when unfolded, and a smaller, pocketable device when folded. Meanwhile, Apple analyst Ming-Chi Kuo reported that Apple's long-rumored HomePod with a display has been delayed again and is now expected to launch after WWDC 2025, likely in the third quarter of the year. The new smart speaker is expected to feature Apple's A18 processor and a 6-7 inch display, with support for Apple Intelligence, says the analyst. According to Kuo, the delay is primarily attributed to software development challenges, rather than hardware issues. There have been a multitude of rumors about a ‌‌HomePod‌ with a display since 2021, and Apple actually seems to have several products in the works. Kuo's latest report harks back to previous predictions from Bloomberg's Mark Gurman, who suggested Apple was developing several HomePod variants with screens, including one with an iPad-like display and another featuring a screen mounted on a robotic arm. Gurman had indicated these devices were unlikely to launch before 2025. The new ‌HomePod‌ will reportedly emphasize smart home functionality more than current models, suggesting a strategic repositioning of the product line. The idea that Apple is targeting the smart home market follows a recent report by Gurman about Apple developing an all-in-one home management hub with a square-shaped display, thick bezels, and a hemispherical base similar to the iMac G4. We also discuss smart home ecosystems more broadly and the Sonos Ace over-ear headphones as rivals to the AirPods Max. The MacRumors Show also has its own YouTube channel, so make sure you're subscribed to keep up with new episodes and clips: Subscribe to The MacRumors Show YouTube channel! You can also listen to ‌The MacRumors Show‌ on Apple Podcasts, Spotify, Overcast, or your preferred podcasts app. You can also copy our RSS feed directly into your podcast player. If you haven't already listened to the previous episode of The MacRumors Show, catch up for our discussion about the recently leaked design of the iPhone 17 "Air" and ‌iPhone 17‌ Pro. Subscribe to ‌The MacRumors Show‌ for new episodes every week, where we discuss some of the topical news breaking here on MacRumors, often joined by interesting guests such as Kevin Nether, Jon Prosser, Luke Miani, Matthew Cassinelli, Brian Tong, Quinn Nelson, Jared Nelson, Eli Hodapp, Mike Bell, Sara Dietschy, iJustine, Jon Rettinger, Andru Edwards, Arnold Kim, Ben Sullins, Marcus Kane, Christopher Lawley, Frank McShan, David Lewis, Tyler Stalman, Sam Kohl, John Gruber, Federico Viticci, Thomas Frank, Jonathan Morrison, Ross Young, Ian Zelbo, and Rene Ritchie. ‌The MacRumors Show‌ is on X @MacRumorsShow, so be sure to give us a follow to keep up with the podcast. You can also head over to The MacRumors Show forum thread to engage with us directly. Remember to rate and review the podcast, and let us know what subjects and guests you would like to see in the future.Tag: The MacRumors ShowThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:41 pm
Apple's 5G Modem Expected to Debut in iPhone SE 4, iPhone 17 Air, and Low-End iPads Next Year | MacRumors
Apple's 5G Modem Expected to Debut in iPhone SE 4, iPhone 17 Air, and Low-End iPads Next Year
Following more than five years of development, Apple's long-rumored 5G modem will debut in the fourth-generation iPhone SE, the so-called iPhone 17 Air, and low-end iPads next year, according to Bloomberg's Mark Gurman. The new iPhone SE, iPad Air, and entry-level iPad models are expected to launch as early as March, while the iPhone 17 Air should be released in September. In a detailed report about Apple's modem efforts today, Gurman said the chip will be able to achieve theoretical 5G download speeds of up to 4 Gbps, which would be slower than Qualcomm modems in current iPhones. As previously rumored, Gurman said Apple's first 5G modem will not support the ultra-fast 5G standard known as mmWave. Apple has already been secretly testing the new modem on devices deployed to hundreds of employees around the world, according to the report. For now, the modem is not expected to be used in higher-end devices, such as the iPhone 17 Pro models next year. As explained by Gurman, switching away from Qualcomm modems is a risky move for Apple, as the chip manages core functionality like phone calls and cellular data. By testing the modem with lower-end products, Apple can mitigate this risk.Related Roundups: iPad, iPad Air , iPhone 17, iPhone SETags: Apple 5G Modem, Mark GurmanBuyer's Guide: iPad (Caution), iPad Air (Neutral), iPhone SE (Don't Buy)Related Forums: iPad, iPhoneThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:02 pm
Best Apple Deals of the Week: Record Low Prices Hit AirPods 4, Apple Watch Series 10, and More | MacRumors
Best Apple Deals of the Week: Record Low Prices Hit AirPods 4, Apple Watch Series 10, and More
Cyber Week is coming to a close, but you can still find a few great deals on multiple Apple products and related accessories as we head into the weekend. This includes a new best-ever price on AirPods 4 with ANC, all-time lows on Apple Watch Series 10, and more. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. AirPods 4 What's the deal? Take $40 off AirPods 4 with ANC Where can I get it? Amazon Where can I find the original deal? Right here $40 OFFAirPods 4 (ANC) for $138.99 Amazon introduced a huge discount on the AirPods 4 with Active Noise Cancellation this week, and it's still available at just $138.99. That's a $40 discount and a new all-time low price on the latest model of AirPods. Accessories What's the deal? Save on accessories from Anker, Jackery, and more Where can I get it? Amazon and Anker Where can I find the original deal? Right here $135 OFFOura Smart Ring (Gen 3 Heritage) for $314.10 SITEWIDE DEALSAnker Holiday Sale Big holiday sales have been in full swing at multiple retailers online, and this week that included discounts from Anker, Jackery, Oura, Twelve South, and more. You can find all of these sales in our original post, but we've collected a few of the best below. Oura Smart Ring - $314.10 with on-page coupon, down from $449.00 Twelve South HiRise 3 Deluxe - $119.99, down from $149.99 Jackery Explorer 100 Plus with Solar Panel - $169.99 with on-page coupon, down from $229.00 Jackery Solar Generator 240 with Solar Panel - $269.00 with on-page coupon, down from $349.00 Anker Prime Power Bank - $74.99, down from $89.99 AirTag What's the deal? Take $26 off AirTag 4-Pack Where can I get it? Amazon $26 OFFAirTag 4-Pack for $72.99 Amazon has the AirTag 4-Pack for $72.99 this week, down from $99.00. This is a solid second-best price on the accessory and it's only about $3 higher compared to the record low price. Apple Watch Series 10 What's the deal? Take $69 off Apple Watch Series 10 Where can I get it? Amazon Where can I find the original deal? Right here $69 OFFApple Watch Series 10 (42mm GPS) for $329.99 $69 OFFApple Watch Series 10 (46mm GPS) for $359.99 Black Friday prices on the Apple Watch Series 10 have stuck around this week, and you'll find multiple case colors and band styles at $69 off both 42 and 46mm sizes on Amazon. Beats What's the deal? Take up to 52% off Beats headphones Where can I get it? Amazon Where can I find the original deal? Right here UP TO 52% OFFBeats Cyber Week Deals One of the few Black Friday deals that stuck around this week was on Beats headphones and speakers. You can get as much as 52 percent off Beats Solo Buds, Studio Buds, Solo 4, and more in Amazon's sale. Samsung What's the deal? Save sitewide on Samsung monitors and more Where can I get it? Samsung Where can I find the original deal? Right here SITEWIDE DEALSSamsung Cyber Week Sale Samsung's Cyber Week sale is reaching its end, but you can still find great deals sitewide on monitors, computers, refrigerators, TVs, and more. If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week. Deals Newsletter Interested in hearing more about top deals as we head into the holidays? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
03:43 pm
Apple Defeats Lawsuit Related to iCloud's Measly 5GB of Free Storage | MacRumors
Apple Defeats Lawsuit Related to iCloud's Measly 5GB of Free Storage
The U.S. Court of Appeals for the Ninth Circuit this week upheld a lower court's dismissal of a lawsuit alleging that Apple illegally deceived customers into paying for iCloud storage, according to a court filing. The decision was reported by Law360. The lawsuit alleged that Apple deceived customers into purchasing iCloud-enabled devices by misleading customers into believing that they can easily keep their iCloud storage usage below the free 5GB limit. In reality, the plaintiffs alleged that users quickly exceed this limit and then must pay for increasingly costly iCloud storage plans. In the U.S., these plans range from 50GB for $0.99 per month to 12TB for $59.99 per month. In the ruling, three Ninth Circuit judges said the plaintiffs failed to establish that it is "virtually impossible" for them to reduce their storage, or that they will inevitably be forced to pay for iCloud storage. In fact, two named plaintiffs were still on the 5GB tier. The judges added that customers have the option to turn off iCloud at any time. The case had been dismissed by a U.S. district court in Northern California back in May 2022, and now the appeal to the Ninth Circuit has been dismissed. Barring the extremely unlikely event that the plaintiffs are able to successfully petition the U.S. Supreme Court to hear the case, the lawsuit is now over. However, Apple is still facing other iCloud-related lawsuits in both the U.S. and U.K., as complaints about the 5GB tier persist. Apple launched iCloud in 2011, and the service has been available with 5GB of storage for free since then. By today's standards, 5GB is a low amount of storage, and Apple not increasing the free limit has long been a point of contention.Tag: iCloudRelated Forum: Apple Music, Apple Pay/Card, iCloud, Fitness+This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
02:39 pm
Get Apple Watch Solo Loop for $19.99 and Braided Solo Loop for $29.99 in New Sale (Up to 70% Off) | MacRumors
Get Apple Watch Solo Loop for $19.99 and Braided Solo Loop for $29.99 in New Sale (Up to 70% Off)
Woot today has a big sale on the Braided Solo Loop and Solo Loop bands for Apple Watch, which have been discounted by up to 70 percent off their original prices. All bands are in brand new condition and come with a one year Apple limited warranty. Note: MacRumors is an affiliate partner with Woot. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. Additionally, if you purchase multiple bands and your order exceeds $39, you can use the code APPLEBANDS to get an extra 15 percent off your order. This sale will end later tonight, or until they sell out, so act soon if you're interested. UP TO 70% OFFApple Watch Bands at Woot Shoppers should note that this sale is focused on colors of the Braided Solo Loop and Solo Loop that Apple has stopped selling, and it doesn't include any of the new band colors. That being said, all of the bands in this sale are in new condition. The entire sale is focused on Solo Loop and Braided Solo Loop Apple Watch bands, so you'll need to know the size that works best for you before you buy. Apple has a measurement tool on its website that you can use to determine your exact size. Solo Loop (Black/White Hues) - $19.99, down from $49.00 Solo Loop (Blue Hues) - $19.99, down from $49.00 Solo Loop (Purple Hues) - $19.99, down from $49.00 Braided Solo Loop (Black/White Hues) - $29.99, down from $99.00 Braided Solo Loop (Blue Hues) - $29.99, down from $99.00 Braided Solo Loop (Red/Orange/Yellow Hues) - $29.99, down from $99.00 Braided Solo Loop (Green Hues) - $29.99, down from $99.00 Braided Solo Loop (Purple Hues) - $29.99, down from $99.00 Braided Solo Loop (Pride) - $29.99, down from $99.00 If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week. Deals Newsletter Interested in hearing more about top deals as we head into the holidays? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
02:30 pm
Microsoft Discontinues iMac Rival Surface Studio 2+ | MacRumors
Microsoft Discontinues iMac Rival Surface Studio 2+
Microsoft has discontinued its Surface Studio 2+, marking the end of the company's only direct competitor to Apple's iMac, leaving a gap in the Windows ecosystem for high-end all-in-one PCs. Microsoft has confirmed to Windows Central that it has ended production of the Surface Studio 2+, a premium all-in-one desktop designed for creative professionals. With remaining stock now limited to retailers and partners, there is likely no successor to the Studio 2+ planned. This effectively ends Microsoft's efforts to compete in the high-end all-in-one market dominated by Apple's ‌iMac‌, a fixture of creative workspaces for decades. First introduced in 2016, the Surface Studio formed an attempt to challenge Apple's hold on the creative professional market. Its standout feature was a 28-inch 4.5K PixelSense touchscreen mounted on a unique hinge that allowed the display to tilt into a flat, drafting-table position. Paired with accessories like the Surface Dial and Surface Pen, the Studio was designed to attract graphic designers, illustrators, and video editors. Despite its innovative design, the Surface Studio struggled to gain significant traction due to its steep price point, which started at $2,999 for the original model, and its reliance on hardware components that were frequently a generation behind current industry standards. It's also notable that Microsoft has discontinued other Surface products such as the Surface Duo and Surface Earbuds. In recent years, Microsoft has pivoted toward productivity-focused hardware, such as its Surface Pro and Surface Laptop lines, and enterprise-oriented services like its Copilot AI tools. Meanwhile, Apple has continued to update the ever-popular ‌iMac‌ with new hardware, most recently with the M4 chip, new color options, a 12-megapixel camera with Center Stage and Desk View, and a nano-texture display option. Microsoft's decision to discontinue the Surface Studio line could leave a void in the Windows all-in-one market. While companies like HP and Lenovo continue to produce all-in-one PCs, none match the Surface Studio's combination of touch capabilities, drafting-table functionality, and premium design. Tags: Microsoft, Microsoft Surface, Microsoft Surface Studio, SurfaceThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
01:55 pm
TSMC 2nm Chip Production Hits 60% Yield, on Track for iPhone 18 Pro | MacRumors
TSMC 2nm Chip Production Hits 60% Yield, on Track for iPhone 18 Pro
TSMC has achieved better-than-expected results in trial production of its 2-nanometer chip technology, with yield rates exceeding 60%, according to Taiwanese supply chain sources (via Liberty Times Net). The news suggests the company is well-positioned to begin 2nm mass production in 2025, which could see its use in Apple's iPhone 18 Pro models the following year. The semiconductor manufacturer is reportedly conducting risk trial production at its Baoshan facility in Hsinchu, northern Taiwan, where it has implemented a new nanosheet architecture that promises a significant advancement over the current 3nm FinFET process. The company plans to transfer this production experience to its Kaohsiung plant for mass manufacturing, according to the report. TSMC's progress bodes well for Apple, with a September report from analyst Ming-Chi Kuo and a more recent rumor claiming that Apple's 2026 iPhone 18 Pro models will exclusively feature chips built on TSMC's 2nm process and 12GB of RAM. The standard iPhone 18 models are expected to continue using an enhanced 3nm process due to cost considerations. The 2nm process is said to be generating substantial interest from potential customers, particularly in the AI sector. Indeed, company CEO C.C. Wei has noted unexpectedly high demand for the upcoming 2nm technology, suggesting production at scale will be ramped up as soon as is possible to meet that demand. TSMC's roadmap includes the 2026 introduction of an A16 process (1.6nm-class – not to be confused with Apple's chip nomenclature), which will combine Super Power Rail (SPR) architecture with nanosheet transistors. SPR is expected to provide an 8% to 10% performance increase at the same voltage and complexity, a 15% to 20% power demand decrease at the same frequency and transistor count, and a 7% to 10% chip density increase, depending on the design.This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
01:14 pm
Every Display Upgrade Rumored for Apple's iPhone 17 | MacRumors
Every Display Upgrade Rumored for Apple's iPhone 17
Apple's next-generation iPhone 17 lineup may bring some of the most significant display improvements we've seen in recent years. While the iPhone 17 series isn't expected until late 2025, multiple rumors suggest Apple is working on substantial screen upgrades across its entire smartphone range. From enhanced refresh rates to advanced materials and improved power efficiency, these display changes could mark a notable shift in Apple's iPhone strategy. Here's a look at five major display upgrades reportedly coming to the iPhone 17 lineup. Bigger Displays Apple may introduce a new display size for the standard iPhone 17 in 2025, increasing the screen size from 6.1 inches to 6.3 inches, matching the size of the iPhone 16 Pro. Rumors suggest the Plus model will be discontinued, leaving a single lower-cost option in the lineup. At 6.3 inches, this device would fall between the current 6.1-inch iPhone 15 and the 6.7-inch iPhone 15 Plus in size. If these changes occur, the iPhone 17 lineup could feature a 6.3-inch standard model, a 6.6-inch slim "Air" model, a 6.3-inch Pro model, and a 6.9-inch Pro Max model, offering a range of sizes to suit different preferences. 120Hz ProMotion Across the Lineup Apple intends to expand ProMotion to all iPhone models in 2025, allowing all models to ramp up to a 120Hz refresh rate for smoother scrolling and video content when necessary. Previously, only "Pro" models in Apple's iPhone lineup have had the feature. Notably, ProMotion would also enable the display on the iPhone 17 and iPhone 17 "Air" to ramp down to a more power-efficient refresh rate as low as 1Hz, allowing for an always-on display that can show the Lock Screen's clock, widgets, notifications, and wallpaper even when the device is locked. More Power-Efficient Screens A recent unconfirmed rumor suggests that Apple's upcoming iPhone 17 Pro models may feature a new display technology known as Low-Dielectric TEE (Transmission Electrically Enhanced). The term likely refers to the use of materials with a low dielectric constant in the display's thin-film encapsulation (TFE). While it's not yet clear what this specific innovation offers, incorporating low-dielectric materials can in general reduce signal interference and energy loss, leading to more efficient power usage and potentially longer battery life. Scratch Resistant Anti-Reflective Display The iPhone 17 will feature an anti-reflective display that is more scratch-resistant than Apple's Ceramic Shield found on iPhone 15 models, according to one rumor. The outer glass on the iPhone 17 is said to have a "super-hard anti-reflective layer" that is "more scratch-resistant." It's not clear whether Apple is planning to adopt the Gorilla Glass Armor that Samsung uses in its Galaxy S24 Ultra, but the description of Corning's latest technology matches the rumor. That said, it's worth keeping in mind that the new iPhone 16 Pro models have the latest-generation Ceramic Shield, which has an advanced formulation that is 2x tougher than glass on any other smartphone, according to Apple. Smaller Dynamic Island Apple's iPhone 17 Pro Max will feature a significantly narrower Dynamic Island, thanks to the device's adoption of a smaller "metalens" for the Face ID system, claims Haitong's Jeff Pu. While a traditional iPhone camera has curved lenses that redirect light towards the image sensor, a metalens is a thin and flat lens with microscopic patterns etched onto it that can focus light more precisely. Assuming this results in a narrowed Dynamic Island, it would be the first time that Apple has changed the feature since it debuted on the iPhone 14 Pro in 2022.Related Roundup: iPhone 17This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
12:16 pm
iOS Notification Summaries Lost in Translation? How to Turn Them Off | MacRumors
iOS Notification Summaries Lost in Translation? How to Turn Them Off
With iOS 18.1, Apple has introduced AI-powered notification summarization across all apps, which means your iPhone will automatically condense your alerts to show just the key details. The feature aims to reduce notification overload, but it doesn't always work as advertised. Keep reading to learn how to manage the feature. Image credits: r/AppleIntelligenceFail Powered by Apple Intelligence, the new summarization feature works by analyzing notification content and creating more concise versions that highlight the most important information. By default, it's enabled for compatible apps after you complete the initial setup process in iOS 18.1. While Apple's AI summaries offer convenience, they've also produced some unexpectedly funny results. The system's struggle with emotional context and tone detection has led to some particularly amusing recap fails. As recorded in places like the subreddit r/AppleIntelligenceFail, when the algorithm misinterprets sarcasm, combines unrelated notifications, or fails to grasp logic, the results can be surprisingly entertaining (or not, depending on your sense of humor). Customize or Disable Notification Summaries Whether you've been tickled or confused by summaries, or they just don't appeal to your workflow, fortunately you can disable the feature entirely or customize which apps use the feature. This gives you complete control over how your notifications appear on the Lock Screen and in Notification Center on your iPhone. Open Settings on your iPhone. Scroll down and tap Notifications. Tap Summarize Previews. Toggle off the switch at the top to completely disable Summarize Previews. Alternatively, toggle off the switches for individual apps only. Things to Know About Notification Summaries Turning off summarization doesn't affect other notification settings like grouping or Focus modes. The feature only works on devices that support Apple Intelligence (iPhone 15 Pro and iPhone 16 models, M-series iPads, iPad mini 7, and Macs with Apple silicon). Disabling summaries returns notifications to their standard format immediately. You can re-enable summarization at any time through Settings. Keep in mind that notification summaries are separate from the Notification Summary feature that delivers scheduled batches of notifications at specific times. While they may seem similar, they serve different purposes in helping you manage your notifications more effectively.Tag: Apple IntelligenceThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
11:06 am
Apple Wins Last-Gasp Reprieve From Brazil App Store Changes | MacRumors
Apple Wins Last-Gasp Reprieve From Brazil App Store Changes
A Brazilian federal court has overturned an antitrust ruling that would have required Apple to allow third-party payment systems in the App Store within 20 days. The initial ruling, issued on November 26, came in response to a 2022 complaint from Latin American e-commerce platform MercadoLibre. The regulator had ordered Apple to remove restrictions on alternative payment systems and allow developers to market different payment options for in-app purchases, threatening daily fines of $43,000 for non-compliance. But Judge Eduardo Santos da Rocha Penteado of the 14th Federal Civil Court on Thursday called the original decision by Brazil's competition regulator (Cade) "disproportionate and unnecessary." In his decision, Penteado acknowledged that the measures demanded by Cade would "change, in a sensitive and structural way" Apple's business operations. He said that the technical complexity of the required changes and the global regulatory landscape, particularly similar decisions in the European Union, warranted a more thorough discussion. The decision came hours after reports emerged of Apple appealing the original order, with the company arguing that the required changes were too complex to implement within the given time frame. While the injunction has been overturned, the broader antitrust investigation into Apple's App Store practices will continue. Cade is expected to appeal the court's decision, and Apple could still eventually be required to implement changes to its App Store policies in Brazil. The case follows similar regulatory challenges Apple faces globally, including a recent €1.8 billion fine from the European Commission over music streaming app restrictions. Apple has maintained throughout that the Brazilian regulator's demands would threaten user privacy and security. (Via 9to5Mac.)Tags: Apple Antitrust, App Store, BrazilThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:36 am
AirPods 4 With ANC Drop to $139, Beating Black Friday Deals ($40 Off) | MacRumors
AirPods 4 With ANC Drop to $139, Beating Black Friday Deals ($40 Off)
Amazon has just significantly dropped the price on Apple's AirPods 4 with Active Noise Cancellation to $139.00, a $40 discount from their usual $179.00 pricing. This beats Black Friday pricing by around $25, making this a tremendous opportunity to pick up Apple's latest AirPods at a discount. Note: MacRumors is an affiliate partner with Amazon. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. In addition to Active Noise Cancellation (ANC) on this model, the AirPods 4 also feature a redesigned earbud for increased comfort, the H2 chip for improved audio performance, up to 30 hours of battery life, and an IP54 rating for dust, water, and sweat resistance. $40 OFFAirPods 4 (ANC) for $139.00 We're seeing delivery as soon as overnight for Prime members in some locations, so Amazon appears to have ample stock available. If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week. Deals Newsletter Interested in hearing more about top deals as we head into the holidays? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
12:19 am
OpenAI Launches $200/Month ChatGPT Pro Plan | MacRumors
OpenAI Launches $200/Month ChatGPT Pro Plan
OpenAI today announced the launch of ChatGPT Pro, a $200 per month subscription service that provides unlimited access to OpenAI o1, the company's newest and most advanced large language model. The plan includes unlimited use of OpenAI o1, o1-mini, GPT-4o, and Advanced Voice, along with o1 pro mode, an o1 version that uses more compute to provide better answers to the hardest problems. In the future, ChatGPT Pro will gain "more powerful, compute-intensive productivity features." The OpenAI o1 pro mode takes significantly more compute power to solve complex problems, which is why OpenAI is charging such a high fee. OpenAI says that o1 thinks longer for the "most reliable responses," performing better on ML benchmarks across math, science, and coding. According to OpenAI, ChatGPT Pro is aimed at researchers, engineers, and other individuals who use research-grade intelligence on a daily basis.Tag: OpenAIThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
Thursday December 05
11:24 pm
Meross Debuts $70 Matter-Enabled Smart Thermostat | MacRumors
Meross Debuts $70 Matter-Enabled Smart Thermostat
Smart home company Meross today announced the launch of the Meross Matter Smart Home Thermostat, which can connect to a HomeKit setup using the Matter protocol. At $70 for a limited time, the device is an affordable ‌HomeKit‌ thermostat option. The Smart Thermostat features a minimalist design with a white glass panel that has LEDs that show the temperature and other settings. It requires a C wire for power, and Meross says that it should work with 95 percent of heating and cooling systems in North America, including single and multi-stage furnaces, boilers, air conditioners, heat pumps, and fan coil units. Because the thermostat integrates with ‌HomeKit‌, temperature can be controlled through Siri voice commands, in the Apple Home app, or in the Meross app. There are also touch controls on the device itself. Heating and cooling usage are tracked in the Meross app, and there is an option to save energy costs with a smart schedule that changes the temperature when people are away from home. It can also be used in automations with other ‌HomeKit‌ products. Because the thermostat is Matter-enabled, it can also be controlled by Amazon Alexa, Google Home, and Samsung SmartThings provided an appropriate Matter hub is available. Matter devices are able to be controlled by multiple ecosystems, which is useful in households where not everyone has an Apple device. Meross plans to charge $99.99 for the Smart Thermostat, but it is currently available at a discounted $70 price.Tags: HomeKit, MatterThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
10:42 pm
Former Apple Employees Used Charity Scam to Steal Over $150,000 | MacRumors
Former Apple Employees Used Charity Scam to Steal Over $150,000
Six former Apple employees have been charged with using a charity scheme to defraud Apple out of thousands of dollars, according to the Santa Clara County District Attorney. Apple has a program that will match or double employee donations made to charities, and the employees came up with a plan to make fake donations and collect money from Apple. Ringleader Siu Kei Kwan had five other Apple employees make donations to the American Chinese International Cultural Exchange (ACICE) or Hop4Kids, both of which he was associated with. After Apple matched the donations, the original money was returned to the employees, and the matched money was kept. The employees also wrote off their fake charitable donations on their tax returns, earning them additional money. Between July 1, 2018 and April 6, 2021, the employees collected approximately $152,000 from Apple's program and overreported $100,000 in charitable contributions as tax deductions. Apple detected the fraud and brought it to the attention of the district attorney's office. From Santa Clara District Attorney Jeff Rosen: This case underscores our unwavering commitment to rigorously prosecuting individuals who defraud the tech community and misuse vital charitable programs and state resources. We commend Apple for coming forward and actively collaborating with our Office to uncover this elaborate fraud. We encourage others in the tech community to do the same. It's the holidays. Give - legally - to help the needy, not to help yourself. The six former Apple employees who participated in the scheme have been charged with grand theft, conspiracy to commit felony grand theft, perjury, and tax fraud. Due to the amount of money involved, they face charges under California's aggravated white-collar crime enhancement. If convicted the six are facing jail time, fines, and fees, including restitution for the money they collected.This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
09:38 pm
Festivitas Lets You Add Holiday Lights to Your Mac Desktop | MacRumors
Festivitas Lets You Add Holiday Lights to Your Mac Desktop
If you're looking to get into the holiday spirit, developer Simon Støvring this week released Festivitas, a simple macOS app that lets you customize your Mac desktop with colorful string lights. Festivitas adds lights to the Mac's dock and menu bar. Light size, distance, and cable thickness can be customized, as can the colors and the light changing sequence. When Festivitas is first launched, it requires accessibility features to locate the dock and add the lights. Permissions can be revoked by going to System Settings > Privacy and Security > Accessibility. Festivitas is compatible with Macs running macOS 14.6 and later, and it can be downloaded for four euros, which is equivalent to approximately $4.23.This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
07:48 pm
Here Are Apple's Full Release Notes for iOS 18.2 | MacRumors
Here Are Apple's Full Release Notes for iOS 18.2
Apple seeded the release candidate version of iOS 18.2 today, which means it's going to see a public launch imminently. Release candidates represent the final version of new software that will be provided to the public should no last minute bugs be found, and Apple includes release notes with the RC launch. The iOS 18.2 release notes provide a look at all of the new features that are coming in the update, including Apple Intelligence additions that will be limited to newer iPhones, and changes that will be available to all iPhone users. Apple's full iOS 18.2 release notes: Apple Intelligence (All iPhone 16 models, iPhone 15 Pro, iPhone 15 Pro Max) Image Playground - A new app that lets you use concepts, descriptions, and people from your photo library to create fun, playful images in multiple styles - Swipe through previews and choose from as you add concepts to your playground - Choose from animation and illustration styles when creating your image - Create images in Messages and Freeform, as well as third party apps - Images are synced in your Image Playground library across all your devices with iCloud Genmoji - Genmoji allows you to create a custom emoji right from the keyboard - Genmoji are synced in your sticker drawer across all your devices with iCloud ChatGPT support - ChatGPT from OpenAI can be accessed right from Siri or Writing Tools - Compose in Writing Tools allows you to create something from scratch with ChatGPT - Siri can tap into ChatGPT when relevant to provide you an answer - A ChatGPT account is not required and your requests will be anonymous and won't be used to train OpenAI's models - Sign in with ChatGPT to access your account benefits, and requests will be covered by OpenAI's data policies - Image Wand turns sketches and handwritten or typed notes into images in Notes - Describe your change in Writing Tools allows you to suggest how you'd like something rewritten, for example as a poem - Camera Control (iPhone 16, iPhone 16 Plus, iPhone 16 Pro, iPhone 16 Pro Max) - Visual Intelligence with Camera Control helps you instantly learn about places or interact with information simply by pointing your iPhone at the object, with the option to tap into Google Search or ChatGPT - Camera Control two-stage shutter lets you lock focus and exposure in Camera when light pressing the Camera Control Mail - Mail Categorization sorts your messages to help you prioritize the most important messages - Digest view groups all of the messages from one sender into a single bundle for easy browsing Photos - Video viewing improvements, including the ability to scrub frame-by-frame and a setting to turn off auto-looping video playback - Improvements when navigating Collections views, including the ability to swipe right to go back to the previous view - Recently Viewed and Recently Shared album history can be cleared - Favorites album appears in the Utilities collection in addition to Pinned Collections Safari - New background images to customize your Safari Start Page - Import and Export enables you to export your browsing data from Safari and import browsing data from another app into Safari - HTTPS Priority upgrades URLs to HTTPS whenever possible - File Download Live Activity shows the progress of a file download in the Dynamic Island and on your home screen This update also includes the following improvements and bug fixes: - Voice Memos supports layered recording, letting you add vocals over an existing song idea without the need for headphones -- then import your two-track projects directly into Logic Pro (iPhone 16 Pro, iPhone 16 Pro Max) - Share Item Location in Find My helps you locate and recover misplaced items by easily and securely sharing the location of an AirTag or Find My network accessory with trusted third parties, such as airlines - Natural language search in Apple Music and Apple TV app lets you describe what you're looking for using any combination of categories like genres, moods, actors, decades, and more - Favorite Categories in Podcasts allows you to choose your favorite categories and get relevant show recommendations that you can easily access in your Library - Personalized Search page in Podcasts highlights the most relevant categories and editorially curated collections tailored to you - Sudoku for News+ Puzzles provided in three difficulty levels and available for News+ subscribers - Support for the Hearing Test feature on AirPods Pro 2 in Cyprus, Czechia, France, Italy, Luxembourg, Romania, Spain, United Arab Emirates, and United Kingdom - Support for the Hearing Aid feature on AirPods Pro 2 in United Arab Emirates - Pre-market price quotes in Stocks lets you track NASDAQ and NYSE tickers prior to market open - Fixes an issue where recently captured photos do not appear immediately in the All Photos grid - Fixes an issue where Night mode photos in Camera could appear degraded when capturing long exposures (iPhone 16 Pro, iPhone 16 Pro Max) Some features may not be available for all regions or on all Apple devices. For information on the security content of Apple software updates, please visit this website: https://support.apple.com/100100Apple is expected to release iOS 18.2 on Monday, December 9. It will be accompanied by iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2, HomePod Software 18.2, and visionOS 2.2.Related Roundups: iOS 18, iPadOS 18Related Forums: iOS 18, iPadOS 18This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
07:08 pm
watchOS 11.2 Lets You Pause iPhone Video With Camera Remote App | MacRumors
watchOS 11.2 Lets You Pause iPhone Video With Camera Remote App
In watchOS 11.2, Apple has added a useful new feature that's designed to allow you to pause video that you're recording on the iPhone using the Camera Remote app on the Apple Watch. The Camera Remote app has been available since the Apple Watch initially launched, and while there was an option to start and stop video recording, there wasn't an option to pause video and restart it. When a video recording is in progress, there is now a pause button on the left side of the Camera Remote interface. Tapping it pauses a video, and then tapping the red record button restarts the video. Apple initially added a feature for pausing video recordings with the ‌iPhone‌ Camera app in iOS 18, and the watchOS 11.2 update expands that same functionality to the Apple Watch's Camera Remote app. Other new additions in watchOS 11.2 include expanded support for tidal conditions and coastal locations in the Tides app in China. watchOS 11.2 will see a release alongside iOS 18.2 next Monday. Related Roundup: watchOS 11Related Forum: Apple WatchThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
06:54 pm
iOS 18.2 Expands AirPods Pro 2 Hearing Test Feature to Nine Countries | MacRumors
iOS 18.2 Expands AirPods Pro 2 Hearing Test Feature to Nine Countries
The upcoming iOS 18.2 update expands the hearing test feature on the AirPods Pro 2 to nine additional countries, including Cyprus, Czechia, France, Italy, Luxembourg, Romania, Spain, the United Arab Emirates, and the United Kingdom, according to Apple. The feature first launched in the U.S. and select other countries in late October. The five-minute test allows adults to identify if they have hearing loss by measuring their ability to hear different frequencies of sound. After completing the test, the results will show a hearing loss classification and recommended next steps. Apple has a support document with detailed information about the feature. iOS 18.2 also expands the ability to use AirPods Pro 2 as a clinical-grade hearing aid to the United Arab Emirates, according to Apple. All of the hearing health features on the AirPods Pro 2 require firmware version 7B19 or newer. Firmware updates are installed automatically on AirPods while they are charging and in Bluetooth range of an iPhone, iPad, or Mac connected to Wi-Fi. Apple today released the final iOS 18.2 beta version, known as the Release Candidate, and the update should be widely released next week.Related Roundups: AirPods Pro, iOS 18, iPadOS 18Buyer's Guide: AirPods Pro (Neutral)Related Forums: AirPods, iOS 18, iPadOS 18This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »

Older posts

Monday December 02
03:45 pm
Three new ways small and medium-sized businesses can purchase Microsoft 365 Copilot | Office for Mac
Three new ways small and medium-sized businesses can purchase Microsoft 365 Copilot
In today's fast-paced market, agility is the key to success. Small and medium-sized businesses (SMBs) need an AI solution that helps them work smarter. The post appeared first on Microsoft 365 Blog.
Read more »
Tuesday November 19
01:30 pm
Introducing Copilot Actions, new agents, and tools to empower IT teams | Office for Mac
Introducing Copilot Actions, new agents, and tools to empower IT teams
Microsoft 365 Copilot is becoming a daily habit for people around the world—already, nearly 70% of Fortune 500 companies are using it. Dow anticipates that Copilot will save it millions of dollars on shipping operations in the first year; at Bank of Queensland Group, 70% of users are saving two and a half to five hours per week; Eaton is speeding up internal documentation processes by 83%; and Accenture is going big, rolling out Copilot to 100,000 employees. The post appeared first on Microsoft 365 Blog.
Read more »
Thursday November 14
10:00 pm
Price and tax updates for apps, In-App Purchases, and subscriptions | ADC Headlines
Price and tax updates for apps, In-App Purchases, and subscriptions
The App Store is designed to make it easy to sell your digital goods and services globally, with support for 44 currencies across 175 storefronts.From time to time, we may need to adjust prices or your proceeds due to changes in tax regulations or foreign exchange rates. These adjustments are made using publicly available exchange rate information from financial data providers to help make sure prices for apps and In-App Purchases stay consistent across all storefronts. Tax updates as of October:Your proceeds from the sale of eligible apps and In‑App Purchases have been increased in: Nepal: Apple no longer remits Nepal value-added tax (VAT) for local developers and proceeds were increased accordingly. Kazakhstan: Apple no longer remits Kazakstan VAT for local developers and proceeds were increased accordingly. Madeira: Decrease of the Madeira VAT rate from 5% to 4% for news publications, magazines and other periodicals, books, and audiobooks. Exhibit B of the Paid Applications Agreement has been updated to indicate that Apple will not remit VAT in Nepal and Kazakhstan for local developers.Learn more about your proceedsView payments and proceedsDownload financial reportsPrice updates as of December 2: Pricing for apps and In-App Purchases will be updated for the Japan and Türkiye storefronts if you haven’t selected one of these as the base for your app or In‑App Purchases. If you’ve selected the Japan or Türkiye storefront as the base for your app or In-App Purchase, prices won’t change. On other storefronts, prices will be updated to maintain equalization with your chosen base price.Prices won’t change in any region if your In‑App Purchase is an auto‑renewable subscription and won’t change on the storefronts where you manually manage prices instead of using the automated equalized prices.The Pricing and Availability section of Apps has been updated in App Store Connect to display these upcoming price changes. As always, you can change the prices of your apps, In‑App Purchases, and auto‑renewable subscriptions at any time.Learn more about managing your pricesView or edit upcoming price changesEdit your app’s base country or regionPricing and availability start times by country or regionSet a price for an In-App Purchase
Read more »
Thursday November 07
04:00 pm
The latest on AI at work: November 2024 | Office for Mac
The latest on AI at work: November 2024
For Microsoft and our customers, work is changing at the speed of AI. To help you stay ahead, we’ll share monthly highlights of new Microsoft Copilot innovations, plus the latest from our customers on how they’re getting the most value from Copilot. The post appeared first on Microsoft 365 Blog.
Read more »
Monday October 28
03:00 pm
Streamline collaboration with the new chat and channels experience in Microsoft Teams | Office for Mac
Streamline collaboration with the new chat and channels experience in Microsoft Teams
Working together can turn great ideas into reality and bring people together as a team. We’ve been paying attention to our customers’ evolving needs in the AI-powered workplace, which require faster, simpler, and smarter solutions to achieve more. The post appeared first on Microsoft 365 Blog.
Read more »
Thursday October 17
03:00 pm
Microsoft 365 Copilot drove up to 353% ROI for small and medium businesses—new study | Office for Mac
Microsoft 365 Copilot drove up to 353% ROI for small and medium businesses—new study
As a small or medium-sized business (SMB) leader, you’ve likely heard a lot about generative AI and how it’s transforming businesses of all sizes. To better understand how AI is helping businesses grow and compete, Microsoft commissioned Forrester Consulting to study the potential return on investment (ROI) of Microsoft 365 Copilot for SMBs. The post appeared first on Microsoft 365 Blog.
Read more »
Wednesday October 16
04:00 pm
Microsoft named a Leader in the 2024 Gartner® Magic Quadrant™ for Unified Communications as a Service for the sixth year in a row | Office for Mac
Microsoft named a Leader in the 2024 Gartner® Magic Quadrant™ for Unified Communications as a Service for the sixth year in a row
We’re honored to announce that Microsoft has, once again, been recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for Unified Communications as a Service (UCaaS), Worldwide. This is the sixth year we’ve received this recognition and we’re thrilled to be positioned highest in both the ability to execute and furthest on completeness of vision axes. The post appeared first on Microsoft 365 Blog.
Read more »

Reviews & KoolTools

Unbreakable Style: The Best Hardshell Phone Cases on the Market

Are you looking for the ultimate protection for your smartphone? Hardshell phone cases are the answer. These cases are designed to withstand impact. They keep your phone safe from drops and scratches. In a world full of choices, how do you find the best? We have...

Plugable’s 5-in-1 USB Hub expands your MacBook Pro or MacBook Air’s connection options

The new 5-in-1 USB-C hub from Plugable turns two Mac laptop ports into (as the name implies) five, including Ethernet and more. Designed specifically for MacBook Pro and MacBook Air models, the hub (with the moniker AMS-5IN1E) fits flush against the host Mac and adds...

More Reviews & KoolTools

Community and More

MacTech Events and COVID

Due to the pandemic, the regional MacTech Pro events were pushed into 2021 — as early as reasonably possible. This means at best, early in the third quarter of the year. But depending on guidance and public health, it could be later than that. Once there are details,...

More Community

Software & Services Scanners

Wednesday December 04
02:08 pm
U.S. Offered $10M for Hacker Just Arrested by Russia | Krebs on Security
U.S. Offered $10M for Hacker Just Arrested by Russia
In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as "Wazawaka," a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top ransomware purveyor a year later, offering $10 million for information leading to his arrest. Last week, the Russian government reportedly arrested Matveev and charged him with creating malware used to extort companies.
Read more »
Tuesday December 03
01:27 pm
Why Phishers Love New TLDs Like .shop, .top and .xyz | Krebs on Security
Why Phishers Love New TLDs Like .shop, .top and .xyz
Phishing attacks increased nearly 40 percent in the year ending August 2024, with much of that growth concentrated at a small number of new generic top-level domains (gTLDs) -- such as .shop, .top, .xyz -- that attract scammers with rock-bottom prices and no meaningful registration requirements, new research finds. Meanwhile, the nonprofit entity that oversees the domain name industry is moving forward with plans to introduce a slew of new gTLDs.
Read more »
Monday December 02
06:32 pm
Vulnerability Summary for the Week of November 25, 2024 | US-CERT Alerts
Vulnerability Summary for the Week of November 25, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Portfolio Management System MCA A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2024-11-26 7.3 CVE-2024-11744 1000 Projects--Portfolio Management System MCA A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgot_password_process.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-27 7.3 CVE-2024-11819 1000projects -- beauty_parlour_management_system A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11646 1000projects -- beauty_parlour_management_system A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11647 1000projects -- beauty_parlour_management_system A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11648 1000projects -- beauty_parlour_management_system A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11649 AbsolutePlugins--Absolute Addons For Elementor Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AbsolutePlugins Absolute Addons For Elementor allows Local Code Inclusion.This issue affects Absolute Addons For Elementor: from n/a through 1.0.14. 2024-11-28 7.5 CVE-2024-52496 Advantech--EKI-6333AC-2G A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (securityEngineID to local_record.engineid without proper bounds checking. 2024-11-27 3 CVE-2024-36468 Zabbix--Zabbix When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data. If the server's response is an empty document, then wd- >data in the code below will remain NULL and an attempt to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42328 Zabbix--Zabbix The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd- >error will be NULL and trying to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42329 Zabbix--Zabbix In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd- >browser heap pointer is freed by garbage collection. 2024-11-27 3.3 CVE-2024-42331 Zabbix--Zabbix The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host. 2024-11-27 3.7 CVE-2024-42332 Zabbix--Zabbix When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element. 2024-11-26 2.2 CVE-2024-22117 Zabbix--Zabbix When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords. 2024-11-27 2.7 CVE-2024-36464 Zabbix--Zabbix The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c 2024-11-27 2.7 CVE-2024-42333 Back to top Severity Not Yet Assigned PrimaryVendor -- Product Description Published CVSS Score Source Info autolab--Autolab Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the download_all_submissions feature. This can allow for leakage of submissions to unauthorized users, such as downloading submissions from other students in the class, or even instructor test submissions, given they know their user IDs. This issue has been patched in commit `1aa4c769` which is not yet in a release version, but is expected to be included in version 3.0.3. Users are advised to either manually patch or to wait for version 3.0.3. As a workaround administrators can disable the feature. 2024-11-25 not yet calculated CVE-2024-53258 BoidCMS--BoidCMS BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In affected versions a reflected Cross-site Scripting (XSS) vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to inject arbitrary JavaScript code. This code could be used to steal the user's session cookie, perform phishing attacks, or deface the website. This issue has been addressed in version 2.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-25 not yet calculated CVE-2024-53255 bunkerity--bunkerweb bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated "next" parameter for redirects. Ex. visiting: `/loading?next=https://google.com` while authenticated will cause the page will redirect to google.com. This vulnerability could be used in phishing attacks by redirecting users from a legitimate application URL to malicious sites. This issue has been addressed in version 1.5.11. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-27 not yet calculated CVE-2024-53264 Century Systems Co., Ltd.--FutureNet NXR-G110 series FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs. 2024-11-29 not yet calculated CVE-2024-50357 Checkmk GmbH--Checkmk Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions type] may result in an out-of-bounds access. To spot such missed invocations early in the future, checking the validity of link- >type in bpf_link_show_fdinfo() and emitting a warning when such invocations are missed. 2024-11-25 not yet calculated CVE-2024-53099 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queue_lock lock and destroy Commit 76d54bf20cdc ("nvme-tcp: don't access released socket during error recovery") added a mutex_lock() call for the queue- >queue_lock in nvme_tcp_get_address(). However, the mutex_lock() races with mutex_destroy() in nvme_tcp_free_queue(), and causes the WARN below. DEBUG_LOCKS_WARN_ON(lock- >magic != lock) WARNING: CPU: 3 PID: 34077 at kernel/locking/mutex.c:587 __mutex_lock+0xcf0/0x1220 Modules linked in: nvmet_tcp nvmet nvme_tcp nvme_fabrics iw_cm ib_cm ib_core pktcdvd nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc ppdev 9pnet_virtio 9pnet pcspkr netfs parport_pc parport e1000 i2c_piix4 i2c_smbus loop fuse nfnetlink zram bochs drm_vram_helper drm_ttm_helper ttm drm_kms_helper xfs drm sym53c8xx floppy nvme scsi_transport_spi nvme_core nvme_auth serio_raw ata_generic pata_acpi dm_multipath qemu_fw_cfg [last unloaded: ib_uverbs] CPU: 3 UID: 0 PID: 34077 Comm: udisksd Not tainted 6.11.0-rc7 #319 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:__mutex_lock+0xcf0/0x1220 Code: 08 84 d2 0f 85 c8 04 00 00 8b 15 ef b6 c8 01 85 d2 0f 85 78 f4 ff ff 48 c7 c6 20 93 ee af 48 c7 c7 60 91 ee af e8 f0 a7 6d fd 0b e9 5e f4 ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 RSP: 0018:ffff88811305f760 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88812c652058 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffff88811305f8b0 R08: 0000000000000001 R09: ffffed1075c36341 R10: ffff8883ae1b1a0b R11: 0000000000010498 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88812c652058 FS: 00007f9713ae4980(0000) GS:ffff8883ae180000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcd78483c7c CR3: 0000000122c38000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ? __warn.cold+0x5b/0x1af ? __mutex_lock+0xcf0/0x1220 ? report_bug+0x1ec/0x390 ? handle_bug+0x3c/0x80 ? exc_invalid_op+0x13/0x40 ? asm_exc_invalid_op+0x16/0x20 ? __mutex_lock+0xcf0/0x1220 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx___mutex_lock+0x10/0x10 ? __lock_acquire+0xd6a/0x59e0 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx_nvme_tcp_get_address+0x10/0x10 [nvme_tcp] nvme_sysfs_show_address+0x81/0xc0 [nvme_core] dev_attr_show+0x42/0x80 ? __asan_memset+0x1f/0x40 sysfs_kf_seq_show+0x1f0/0x370 seq_read_iter+0x2cb/0x1130 ? rw_verify_area+0x3b1/0x590 ? __mutex_lock+0x433/0x1220 vfs_read+0x6a6/0xa20 ? lockdep_hardirqs_on+0x78/0x100 ? __pfx_vfs_read+0x10/0x10 ksys_read+0xf7/0x1d0 ? __pfx_ksys_read+0x10/0x10 ? __x64_sys_openat+0x105/0x1d0 do_syscall_64+0x93/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? __pfx_ksys_read+0x10/0x10 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? do_syscall_64+0x9f/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9713f55cfa Code: 55 48 89 e5 48 83 ec 20 48 89 55 e8 48 89 75 f0 89 7d f8 e8 e8 74 f8 ff 48 8b 55 e8 48 8b 75 f0 4 ---truncated--- 2024-11-25 not yet calculated CVE-2024-53100 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr- >ia_mode, attr- >ia_uid and attr- >ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0. 2024-11-25 not yet calculated CVE-2024-53101 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: nvme: make keep-alive synchronous operation The nvme keep-alive operation, which executes at a periodic interval, could potentially sneak in while shutting down a fabric controller. This may lead to a race between the fabric controller admin queue destroy code path (invoked while shutting down controller) and hw/hctx queue dispatcher called from the nvme keep-alive async request queuing operation. This race could lead to the kernel crash shown below: Call Trace: autoremove_wake_function+0x0/0xbc (unreliable) __blk_mq_sched_dispatch_requests+0x114/0x24c blk_mq_sched_dispatch_requests+0x44/0x84 blk_mq_run_hw_queue+0x140/0x220 nvme_keep_alive_work+0xc8/0x19c [nvme_core] process_one_work+0x200/0x4e0 worker_thread+0x340/0x504 kthread+0x138/0x140 start_kernel_thread+0x14/0x18 While shutting down fabric controller, if nvme keep-alive request sneaks in then it would be flushed off. The nvme_keep_alive_end_io function is then invoked to handle the end of the keep-alive operation which decrements the admin- >q_usage_counter and assuming this is the last/only request in the admin queue then the admin- >q_usage_counter becomes zero. If that happens then blk-mq destroy queue operation (blk_mq_destroy_ queue()) which could be potentially running simultaneously on another cpu (as this is the controller shutdown code path) would forward progress and deletes the admin queue. So, now from this point onward we are not supposed to access the admin queue resources. However the issue here's that the nvme keep-alive thread running hw/hctx queue dispatch operation hasn't yet finished its work and so it could still potentially access the admin queue resource while the admin queue had been already deleted and that causes the above crash. This fix helps avoid the observed crash by implementing keep-alive as a synchronous operation so that we decrement admin- >q_usage_counter only after keep-alive command finished its execution and returns the command status back up to its caller (blk_execute_rq()). This would ensure that fabric shutdown code path doesn't destroy the fabric admin queue until keep-alive request finished execution and also keep-alive thread is not running hw/hctx queue dispatch operation. 2024-11-25 not yet calculated CVE-2024-53102 Mozilla--Firefox The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5. 2024-11-26 not yet calculated CVE-2024-11696 Mozilla--Firefox On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133. 2024-11-26 not yet calculated CVE-2024-11703 msg Suisse AG--EasyTax A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS. 2024-11-29 not yet calculated CVE-2024-9044 n/a--n/a FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking. 2024-11-29 not yet calculated CVE-2024-35366 n/a--n/a FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer 2024-11-29 not yet calculated CVE-2024-35367 n/a--n/a FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. 2024-11-29 not yet calculated CVE-2024-35368 n/a--n/a Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included in log entries without restrictions. 2024-11-29 not yet calculated CVE-2024-35371 n/a--n/a LinkStack 2.7.9 through 4.7.7 allows resourcesviewscomponentsfavicon.blade.php link SSRF. 2024-11-29 not yet calculated CVE-2024-35451 n/a--n/a A deserialization vulnerability exists in the Stub class of the VarDumper module in Symfony v7.0.3. The vulnerability stems from deficiencies in the original implementation when handling properties with null or uninitialized values. An attacker could construct specific serialized data and use this vulnerability to execute unauthorized code. 2024-11-29 not yet calculated CVE-2024-36610 n/a--n/a In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic handling or denial of service. 2024-11-29 not yet calculated CVE-2024-36611 n/a--n/a Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers. 2024-11-29 not yet calculated CVE-2024-36612 n/a--n/a FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread. 2024-11-29 not yet calculated CVE-2024-36615 n/a--n/a An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file. 2024-11-29 not yet calculated CVE-2024-36616 n/a--n/a FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. 2024-11-29 not yet calculated CVE-2024-36617 n/a--n/a FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. 2024-11-29 not yet calculated CVE-2024-36618 n/a--n/a moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. 2024-11-29 not yet calculated CVE-2024-36620 n/a--n/a moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion. 2024-11-29 not yet calculated CVE-2024-36621 n/a--n/a In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter. 2024-11-29 not yet calculated CVE-2024-36622 n/a--n/a moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes. 2024-11-29 not yet calculated CVE-2024-36623 n/a--n/a nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c. 2024-11-29 not yet calculated CVE-2024-36671 n/a--n/a MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking. 2024-11-29 not yet calculated CVE-2024-45495 n/a--n/a WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file. 2024-12-01 not yet calculated CVE-2024-45520 n/a--n/a OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files. 2024-11-27 not yet calculated CVE-2024-46054 n/a--n/a Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the power(uct_int_t x, uct_int_t n) in src/uct_upstream.c. 2024-11-29 not yet calculated CVE-2024-48406 n/a--n/a Incorrect access control in Adapt Learning Adapt Authoring Tool
Read more »
Wednesday November 27
12:45 am
Hacker in Snowflake Extortions May Be a U.S. Soldier | Krebs on Security
Hacker in Snowflake Extortions May Be a U.S. Soldier
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's identity may not remain a secret for long: A careful review of Kiberphant0m's daily chats across multiple cybercrime personas suggests they are a U.S. Army soldier who is or was recently stationed in South Korea.
Read more »
Thursday November 21
08:13 pm
Feds Charge Five Men in ‘Scattered Spider’ Roundup | Krebs on Security
Feds Charge Five Men in ‘Scattered Spider’ Roundup
Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including LastPass, MailChimp, Okta, T-Mobile and Twilio.
Read more »
Wednesday November 20
01:12 am
Fintech Giant Finastra Investigating Data Breach | Krebs on Security
Fintech Giant Finastra Investigating Data Breach
The financial technology firm Finastra is investigating the alleged large-scale theft of information from its internal file transfer platform, KrebsOnSecurity has learned. Finastra, which provides software and services to 45 of the world's top 50 banks, notified customers of a potential breach after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen from the company.
Read more »
Monday November 18
07:34 pm
Vulnerability Summary for the Week of November 11, 2024 | US-CERT Alerts
Vulnerability Summary for the Week of November 11, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Beauty Parlour Management System A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 7.3 CVE-2024-11100 1000 Projects--Beauty Parlour Management System A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11257 1000 Projects--Beauty Parlour Management System A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11258 1000 Projects--Portfolio Management System MCA A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11256 adobe -- after_effects After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47441 adobe -- after_effects After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47442 adobe -- after_effects After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47443 adobe -- illustrator Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-45114 adobe -- illustrator Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47450 adobe -- illustrator Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47451 adobe -- illustrator Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47452 adobe -- indesign InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49507 adobe -- indesign InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49508 adobe -- indesign InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49509 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47426 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47427 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47428 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47429 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47430 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47431 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47432 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47433 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47434 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49515 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49516 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49517 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49518 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49519 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49520 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49525 Adobe--Adobe Commerce Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction. 2024-11-12 7.7 CVE-2024-49521 Adobe--Animate Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49526 Adobe--Animate Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49528 Adobe--Photoshop Desktop Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49514 adonesevangelista -- agri-trading_online_shopping_system A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the application's total price calculation logic. This vulnerability causes the total price to be reduced to zero, allowing the attacker to add items to the cart and proceed to checkout. 2024-11-14 7.5 CVE-2024-50968 algolplus--Advanced Order Export For WooCommerce The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). 2024-11-13 8.1 CVE-2024-10828 amd -- ryzen_ai_software Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21974 amd -- ryzen_ai_software Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21975 AMD--AMD Cloud Manageability Service Software Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21939 AMD--AMD Management Console Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21957 AMD--AMD Management Plug-In for SCCM Incorrect default permissions in the AMD Management Plugin for the MicrosoftÂ® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21938 AMD--AMD Provisioning Console (APC) Software Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21958 AMD--AMD Ryzen AI Software Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 8.8 CVE-2024-21976 AMD--AMD Ryzen Master Monitoring SDK Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21945 AMD--AMD Ryzen Master Utility for Overclocking Control Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21946 AMD--AMD Software: PRO Edition Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21937 AMI--AptioV APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode. 2024-11-12 7.2 CVE-2024-42442 ampache -- ampache Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 9 CVE-2024-51490 ampache -- ampache Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating controllers. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51484 ampache -- ampache Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating plugins. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51485 ampache -- ampache Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL?-?Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.4 CVE-2024-51486 ampache -- ampache Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51487 angeljudesuarez -- construction_management_system A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter. 2024-11-13 7.2 CVE-2024-50971 angeljudesuarez -- construction_management_system A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter. 2024-11-13 7.2 CVE-2024-50972 angeljudesuarez -- tailoring_management_system A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability affects unknown code of the file /incadd.php. The manipulation of the argument inccat/desc/date/amount leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "inccat" to be affected. But it must be assumed "desc", "date", and "amount" are affected as well. 2024-11-11 9.8 CVE-2024-11074 anisha -- job_recruitment A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument e_hash leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11076 anisha -- job_recruitment A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11077 anisha -- job_recruitment A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 9.8 CVE-2024-11099 anisha -- job_recruitment A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 8.8 CVE-2024-11127 Anthony Carbon--WDES Responsive Mobile Menu Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through 5.3.18. 2024-11-16 9.8 CVE-2024-52414 Apache Software Foundation--Apache Airflow Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially exposing critical data that could be exploited to compromise the security of the Airflow deployment. In version 2.10.3, secrets are now masked in task logs to prevent sensitive configuration variables from being exposed in the logging output. Users should upgrade to Airflow 2.10.3 or the latest version to eliminate this vulnerability.Â If you suspect that DAG authors could have logged the secret values to the logs and that your logs are not additionally protected, it is also recommended that you update those secrets. 2024-11-15 7.5 CVE-2024-45784 Apache Software Foundation--Apache CloudStack Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker that can register templates, can use them to deploy malicious instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.18.2.5 or 4.19.1.3, or later, which addresses this issue. Additionally, all user-registered KVM-compatible templates can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run the following command on their file-based primary storage(s) and inspect the output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. However, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives. for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "nn"; doneFor checking the whole template/volume features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "nn"; done 2024-11-12 8.5 CVE-2024-50386 Apache Software Foundation--Apache Traffic Server Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue. 2024-11-14 9.1 CVE-2024-50306 Apache Software Foundation--Apache Traffic Server Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-38479 Apache Software Foundation--Apache Traffic Server Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-50305 Arttia Creative--Datasets Manager by Arttia Creative Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative.This issue affects Datasets Manager by Arttia Creative: from n/a through 1.5. 2024-11-14 10 CVE-2024-52375 Autodesk--Installer A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management. 2024-11-15 7.2 CVE-2024-9500 Avigilon--VideoIQ iCVR HD camera Avigilon - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-45253 axelkeller--GPX Viewer The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv_file_upload() function in all versions up to, and including, 2.2.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-13 8.8 CVE-2024-10629 ays-pro--Chartify WordPress Chart Plugin The Chartify - WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other "safe" file types can be uploaded and included. 2024-11-14 9.8 CVE-2024-10571 Baxter--Life2000 Ventilation System The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedded software via the calibration tool, without having to authenticate to either tool. This could result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 10 CVE-2024-48966 Baxter--Life2000 Ventilation System The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings that result in unauthorized disclosure of information and/or have unintended impacts on device performance. 2024-11-14 10 CVE-2024-48967 Baxter--Life2000 Ventilation System The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48970 Baxter--Life2000 Ventilation System The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form. This could allow an attacker to obtain the password off the ventilator and use it to gain unauthorized access to the device, with clinician privileges. 2024-11-14 9.3 CVE-2024-48971 Baxter--Life2000 Ventilation System The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-48973 Baxter--Life2000 Ventilation System The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48974 Baxter--Life2000 Ventilation System There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clinician Password. An attacker could execute a brute-force attack to gain unauthorized access to the ventilator, and then make changes to device settings that could disrupt the function of the device and/or result in unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-9832 Baxter--Life2000 Ventilation System Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-9834 BdThemes--Instant Image Generator Unrestricted Upload of File with Dangerous Type vulnerability in BdThemes Instant Image Generator allows Upload a Web Shell to a Web Server.This issue affects Instant Image Generator: from n/a through 1.5.4. 2024-11-14 10 CVE-2024-52377 Bigfive--CF7 Reply Manager Unrestricted Upload of File with Dangerous Type vulnerability in Bigfive CF7 Reply Manager.This issue affects CF7 Reply Manager: from n/a through 1.2.3. 2024-11-16 9.9 CVE-2024-52404 Bikram Joshi--B-Banner Slider Unrestricted Upload of File with Dangerous Type vulnerability in Bikram Joshi B-Banner Slider allows Upload a Web Shell to a Web Server.This issue affects B-Banner Slider: from n/a through 1.1. 2024-11-16 9.9 CVE-2024-52405 BlackBerry--SecuSUITE A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege. 2024-11-12 7.3 CVE-2024-51721 Boa web server--Boa web server 0.94.14rc21 Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-47916 Bosch Rexroth AG--IndraDrive FWA-INDRV*-MP* A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages. 2024-11-13 7.5 CVE-2024-48989 Ciprian Popescu--W3P SEO Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu W3P SEO allows Stored XSS.This issue affects W3P SEO: from n/a before 1.8.6. 2024-11-14 7.1 CVE-2024-51684 Cisco--Cisco BroadWorks A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An attacker could exploit this vulnerability by sending a high rate of TCP connections to the server. A successful exploit could allow the attacker to cause TCP connection resources to grow rapidly until the Cisco BroadWorks Network Server becomes unusable.Note: To recover from this vulnerability, either Cisco BroadWorks Network Server software must be restarted or the Cisco BroadWorks Network Server node must be rebooted. For more information, see the section of this advisory.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.6 CVE-2023-20125 Cisco--Cisco Cyber Vision A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.5 CVE-2022-20685 Cisco--Cisco Industrial Network Director A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device.This vulnerability is due to improper input validation when uploading a Device Pack. An attacker could exploit this vulnerability by altering the request that is sent when uploading a Device Pack. A successful exploit could allow the attacker to execute arbitrary commands as NT AUTHORITYSYSTEM on the underlying operating system of an affected device.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 9.9 CVE-2023-20036 Cisco--Cisco IOS XR Software A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack.The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root. 2024-11-15 8.8 CVE-2022-20655 Cisco--Cisco Modeling Labs A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges.This vulnerability is due to the improper handling of certain messages that are returned by the associated external authentication server. An attacker could exploit this vulnerability by logging in to the web interface of an affected server. Under certain conditions, the authentication mechanism would be bypassed and the attacker would be logged in as an administrator. A successful exploit could allow the attacker to obtain administrative privileges on the web interface of an affected server, including the ability to access and modify every simulation and all user-created data. To exploit this vulnerability, the attacker would need valid user credentials that are stored on the associated external authentication server.Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. 2024-11-15 9.1 CVE-2023-20154 Cisco--Cisco Redundancy Configuration Manager A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container.This vulnerability exists because the debug mode is incorrectly enabled for specific services. An attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled. A successful exploit could allow the attacker to execute arbitrary commands as the root user.The attacker would need to perform detailed reconnaissance to allow for unauthenticated access. The vulnerability can also be exploited by an authenticated attacker.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.1 CVE-2022-20649 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receives when it establishes a connection to a Cisco Unified Communications Manager device. An attacker could exploit this vulnerability by using a man-in-the-middle technique to intercept the traffic between the devices, and then using a self-signed certificate to impersonate the endpoint. A successful exploit could allow the attacker to view the intercepted traffic in clear text or alter the contents of the traffic.Note: Cisco Expressway-E is not affected by this vulnerability.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.4 CVE-2022-20814 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.4 CVE-2022-20853 Citrix Session Recording--Citrix Session Recording Limited remote code execution with privilege of a NetworkService Account accessÂ inÂ Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server 2024-11-12 8.8 CVE-2024-8069 Clarisse K.--Writer Helper Unrestricted Upload of File with Dangerous Type vulnerability in Clarisse K. Writer Helper allows Upload a Web Shell to a Web Server.This issue affects Writer Helper: from n/a through 3.1.6. 2024-11-16 9.9 CVE-2024-52399 cli--cli The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0. Developers connect to remote codespaces through an SSH server running within the devcontainer, which is generally provided through the [default devcontainer image]( https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-... https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-configuration/introduction-to-dev-containers#using-the-default-dev-container-configuration) . GitHub CLI [retrieves SSH connection details]( https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/inv... https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/invoker.go#L230-L244 ), such as remote username, which is used in [executing `ssh` commands]( https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L2... https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L263 ) for `gh codespace ssh` or `gh codespace logs` commands. This exploit occurs when a malicious third-party devcontainer contains a modified SSH server that injects `ssh` arguments within the SSH connection details. `gh codespace ssh` and `gh codespace logs` commands could execute arbitrary code on the user's workstation if the remote username contains something like `-oProxyCommand="echo hacked" #`. The `-oProxyCommand` flag causes `ssh` to execute the provided command while `#` shell comment causes any other `ssh` arguments to be ignored. In `2.62.0`, the remote username information is being validated before being used. 2024-11-14 8 CVE-2024-52308 cmorillas1--External Database Based Actions The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.1. This is due to a missing capability check in the 'edba_admin_handle' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin settings and log in as any existing user on the site, such as an administrator. 2024-11-15 7.5 CVE-2024-10311 cmsMinds--Boat Rental Plugin for WordPress Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress allows Upload a Web Shell to a Web Server.This issue affects Boat Rental Plugin for WordPress: from n/a through 1.0.1. 2024-11-14 10 CVE-2024-52376 code-projects--Job Recruitment A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11241 codeSavory--BasePress Migration Tools Unrestricted Upload of File with Dangerous Type vulnerability in codeSavory BasePress Migration Tools allows Upload a Web Shell to a Web Server.This issue affects BasePress Migration Tools: from n/a through 1.0.0. 2024-11-16 9.9 CVE-2024-52407 craftcms--cms Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads, unauthorized access to sensitive files, and, under certain conditions, remote code execution (RCE) via Server-Side Template Injection (SSTI) payloads. Note that this will only work if you have an authenticated administrator account with allowAdminChanges enabled. This is fixed in 5.4.6 and 4.12.5. 2024-11-13 8.4 CVE-2024-52291 craftcms--cms Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions on system notification templates. This function accepts an absolute file path, reads the file's content, and converts it into a Base64-encoded string. By embedding this function within a system notification template, the attacker can exfiltrate the Base64-encoded file content through a triggered system email notification. Once the email is received, the Base64 payload can be decoded, allowing the attacker to read arbitrary files on the server. This is fixed in 5.4.9 and 4.12.8. 2024-11-13 7.7 CVE-2024-52292 craftcms--cms Craft is a content management system (CMS). Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function FileHelper::absolutePath could lead to Remote Code Execution on the server via twig SSTI. This is a sequel to CVE-2023-40035. This vulnerability is fixed in 4.12.2 and 5.4.3. 2024-11-13 7.2 CVE-2024-52293 creativeinteractivemedia--Real3D Flipbook Lite 3D FlipBook, PDF Viewer, PDF Embedder The 3D FlipBook, PDF Viewer, PDF Embedder - Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'r3dfb_save_thumbnail_callback' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-16 8.8 CVE-2024-9849 cyberlord92--Login using WordPress Users ( WP as SAML IDP ) The Login using WordPress Users ( WP as SAML IDP ) plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.15.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2024-11-16 7.2 CVE-2024-9887 Dang Ngoc Binh--Audio Record Unrestricted Upload of File with Dangerous Type vulnerability in Dang Ngoc Binh Audio Record allows Upload a Web Shell to a Web Server.This issue affects Audio Record: from n/a through 1.0. 2024-11-11 10 CVE-2024-51792 Davor Zeljkovic--Convert Docx2post Unrestricted Upload of File with Dangerous Type vulnerability in Davor Zeljkovic Convert Docx2post allows Upload a Web Shell to a Web Server.This issue affects Convert Docx2post: from n/a through 1.4. 2024-11-16 9.1 CVE-2024-52397 decidim--decidim Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0. 2024-11-13 7.7 CVE-2024-45594 decidim-ice--decidim-module-decidim_awesome An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module 0.9.0) allows an authenticated admin user to manipulate sql queries to disclose information, read and write files or execute commands. 2024-11-12 9 CVE-2024-43415 dell -- smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. 2024-11-12 7.8 CVE-2024-49557 dell -- smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 2024-11-12 7.8 CVE-2024-49558 dell -- smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. 2024-11-12 7.8 CVE-2024-49560 Dell--SmartFabric OS10 Software Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution 2024-11-12 7.8 CVE-2024-48837 Delta Electronics--DIAScreen If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39354 Delta Electronics--DIAScreen If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39605 Delta Electronics--DIAScreen If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-47131 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user's password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user's account. 2024-11-11 9.8 CVE-2024-11068 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11062 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11063 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11064 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11065 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web page. 2024-11-11 7.2 CVE-2024-11066 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through this vulnerability and attempt to log in to the device using the default password. 2024-11-11 7.5 CVE-2024-11067 DMC--Airin Blog Deserialization of Untrusted Data vulnerability in DMC Airin Blog allows Object Injection.This issue affects Airin Blog: from n/a through 1.6.1. 2024-11-16 9.8 CVE-2024-52413 DonnellC--Global Gateway e4 | Payeezy Gateway Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway.This issue affects Global Gateway e4 | Payeezy Gateway: from n/a through 2.0. 2024-11-14 8.6 CVE-2024-52371 DoThatTask--Do That Task Unrestricted Upload of File with Dangerous Type vulnerability in DoThatTask Do That Task allows Upload a Web Shell to a Web Server.This issue affects Do That Task: from n/a through 1.5.5. 2024-11-14 10 CVE-2024-52374 dotnetzip.semverd_project -- dotnetzip.semverd Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer. 2024-11-13 9.8 CVE-2024-48510 Elastic--Kibana A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. A successful attack requires a malicious user to have a combination of both specific Elasticsearch indices privileges https://www.elastic.co/guide/en/elasticsearch/reference/current/defining-roles.html#roles-indices-priv Â and Kibana privileges https://www.elastic.co/guide/en/fleet/current/fleet-roles-and-privileges.html Â assigned to them. The following Elasticsearch indices permissions are required * writeÂ privilege on the system indices .kibana_ingest** The allow_restricted_indicesÂ flag is set to true Any of the following Kibana privileges are additionally required * Under FleetÂ the AllÂ privilege is granted* Under IntegrationÂ the ReadÂ or AllÂ privilege is granted* Access to the fleet-setupÂ privilege is gained through the Fleet Server's service account token 2024-11-14 9.1 CVE-2024-37285 Eugen Bobrowski--Debug Tool Missing Authorization vulnerability in Eugen Bobrowski Debug Tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through 2.2. 2024-11-16 10 CVE-2024-52416 Flowcraft UX Design Studio--Advanced Personalization Deserialization of Untrusted Data vulnerability in Flowcraft UX Design Studio Advanced Personalization allows Object Injection.This issue affects Advanced Personalization: from n/a through 1.1.2. 2024-11-16 9.8 CVE-2024-52411 fortinet -- forticlient A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts. 2024-11-12 8.8 CVE-2024-36513 fortinet -- forticlient A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering. 2024-11-12 7.8 CVE-2024-36507 Fortinet--FortiClientWindows A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages. 2024-11-13 7.8 CVE-2024-47574 Fortinet--FortiManager A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigDataat least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests. 2024-11-12 7.5 CVE-2024-23666 Fortinet--FortiOS A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link. 2024-11-12 7.5 CVE-2023-50176 FraudLabs Pro--FraudLabs Pro SMS Verification Cross-Site Request Forgery (CSRF) vulnerability in FraudLabs Pro FraudLabs Pro SMS Verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through 1.10.1. 2024-11-14 7.1 CVE-2024-51688 FreeBSD--FreeBSD The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the library was incorrect, in effect ignoring the option. Fetch would still connect to a host presenting a certificate included in the revocation file passed to the --crl option. 2024-11-12 7.5 CVE-2024-45289 GeekRMX--Twitter @Anywhere Plus Cross-Site Request Forgery (CSRF) vulnerability in GeekRMX Twitter @Anywhere Plus allows Stored XSS.This issue affects Twitter @Anywhere Plus: from n/a through 2.0. 2024-11-14 7.1 CVE-2024-51659 GentleSource--Appointmind Cross-Site Request Forgery (CSRF) vulnerability in GentleSource Appointmind allows Stored XSS.This issue affects Appointmind: from n/a through 4.0.0. 2024-11-14 7.1 CVE-2024-51679 GeoVision--GV-VS12 Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports. 2024-11-15 9.8 CVE-2024-11120 GitLab--GitLab An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5 prior to 17.5.2, which could have allowed unauthorized access to the Kubernetes agent in a cluster under specific configurations. 2024-11-14 8.5 CVE-2024-9693 glpi-project--glpi GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be used to alter another user account data and take control of it. Upgrade to 10.0.17. 2024-11-15 8.1 CVE-2024-40638 gogs--gogs/gogs A remote command execution vulnerability exists in gogs/gogs versions
Read more »
Friday November 15
04:45 am
An Interview With the Target & Home Depot Hacker | Krebs on Security
An Interview With the Target & Home Depot Hacker
In December 2023, KrebsOnSecurity revealed the real-life identity of Rescator, the nickname used by a Russian cybercriminal who sold more than 100 million payment cards stolen from Target and Home Depot between 2013 and 2014. Moscow resident Mikhail Shefel, who confirmed using the Rescator identity in a recent interview, also admitted reaching out because he is broke and seeking publicity for several new money making schemes.
Read more »
Tuesday November 12
09:59 pm
Microsoft Patch Tuesday, November 2024 Edition | Krebs on Security
Microsoft Patch Tuesday, November 2024 Edition
Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed prior to today.
Read more »
Saturday November 09
07:20 pm
FBI: Spike in Hacked Police Emails, Fake Subpoenas | Krebs on Security
FBI: Spike in Hacked Police Emails, Fake Subpoenas
The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based technology companies.
Read more »
Tuesday November 05
05:10 pm
Canadian Man Arrested in Snowflake Data Extortions | Krebs on Security
Canadian Man Arrested in Snowflake Data Extortions
A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first reported Moucka's alleged ties to the Snowflake hacks on Monday. At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). After scouring darknet markets for stolen Snowflake account credentials, the hackers began raiding the data storage repositories used by some of the world’s largest corporations.
Read more »

Older posts

Friday December 06
11:16 pm
Polar Express is SCARY – The TouchArcade Show #609 | iOS App of Day
Polar Express is SCARY – The TouchArcade Show #609
In this week’s TouchArcade Show we’re all over the map, as usual. We kick things off with my experience going … Continue reading ""
Read more »
09:00 am
United States players get a chance to trail SD Gundam G Generation Eternal next month | 148Apps
United States players get a chance to trail SD Gundam G Generation Eternal next month
Everyone has a favourite game developer, and a contender for me has always been Bandai Namco. Ever since I was a kid they put out some amazing titles; Digimon World, .hack, the Tales of Series, Freedom Wars, I could go on. And I will, with news of the upcoming strategy game SD Gundam G Generation Eternal. [Read more]
Read more »
Thursday December 05
02:00 pm
The massive Lineage franchise expands its grip on the mobile market with the release of Journey of Monarch | 148Apps
The massive Lineage franchise expands its grip on the mobile market with the release of Journey of Monarch
Lineage is one of those series that I have heard a lot about but never really tried, which is ridiculous. The franchise as a whole is astronomically popular, being one of the highest-grossing of all time. Now, NC America is set to expand this empire, with the release of Journey of Monarch. [Read more]
Read more »
Wednesday December 04
01:30 pm
Pre-registrations open for Akatsuki Games futuristic JRPG Tribe Nine | 148Apps
Pre-registrations open for Akatsuki Games futuristic JRPG Tribe Nine
Akatsuki Games Inc has announced the pre-registration for its single-player cyberpunk JRPG Tribe Nine. With input from the creators of the acclaimed Danhanropa series, Tribe Nine takes place in a futuristic city where you either thrive in the brutal Death Game, or you perish. [Read more]
Read more »
Tuesday December 03
09:05 am
It is time to save the holidays as the Christmas Village returns to Runescape | 148Apps
It is time to save the holidays as the Christmas Village returns to Runescape
It's that festive time of year again when both the cold and those infernal songs are inescapable, and there are only two things keeping us sane; those spiced biscuits from Lidl, and holiday events in games. The latest company to cash in is Jagex, with the Christmas Village returning to Runescape from now until January 6th. [Read more]
Read more »
Monday December 02
09:11 am
Project Mugen gets kicked back into the limelight as NetEase reveals a new name change | 148Apps
Project Mugen gets kicked back into the limelight as NetEase reveals a new name change
There are a couple of big names in the mobile sphere that when you hear them mentioned, you immediately perk an ear to learn more. One such situation was back at Gamescom 2023 when NetEase Games burst onto the stage and showed off a mind-blowing trailer for the frustratingly vague titled Project Mugen. [Read more]
Read more »
Friday November 29
09:55 am
Go penguin-wild as Play Together releases its latest seasonal update | 148Apps
Go penguin-wild as Play Together releases its latest seasonal update
If the freezing temperature, frozen cars, and permanent shivering haven’t tipped you off; we are suffering through winter, and the last place any of us want to be is the beach. If you think you do, you are wrong. That is exactly where Play Together is sending you, though, in its latest seasonal update. [Read more]
Read more »
Thursday November 28
11:22 am
PUBG Mobile reveals upcoming collaboration with luggage providers American Tourister because… what? | 148Apps
PUBG Mobile reveals upcoming collaboration with luggage providers American Tourister because… what?
There are many reasons to enjoy a good video game collaboration; from seeing your favourite characters in other media to maybe getting a funky new piece of branded kit. One of the best things about collaboration for me however is finding the weirdest ones and trying to connect the dots. I can’t do that with PUBG Mobiles' latest announcement. [Read more]
Read more »
Wednesday November 27
09:21 am
Days of Music returns to serenede 2024 in Sky: Children of the Light | 148Apps
Days of Music returns to serenede 2024 in Sky: Children of the Light
We all have our favourite pairings, but a universal one must be the combination of video games and music. A good score can elevate a good game to a great one, and Sky: Children of the Light is celebrating the audible miracle with the Days of Music event lasting until December 8th. [Read more]
Read more »
Tuesday November 26
10:06 am
Claim the power of Grayskull for your own as legendary series crosses over with RAID: Shadow Legends | 148Apps
Claim the power of Grayskull for your own as legendary series crosses over with RAID: Shadow Legends
I may be doing the series a disservice, but I feel that more people know He-Man and the Masters of the Universe from that one song meme. It is that, but it is also a hugely popular franchise and one that has entered Plariums’ dark fantasy world of RAID: Shadow Legends. [Read more]
Read more »
Monday November 25
02:00 pm
Grimguard Tactics unveils first major update, introducing a new hero class and trinkets | 148Apps
Grimguard Tactics unveils first major update, introducing a new hero class and trinkets
Since launching last month, Grimguard Tactics has been quietly going about its business, and if you glance at the Google Play and App Store reviews, it's smashing it. Now, however, it is time to lift the lid on the game's first major update, heading to a phone near you on November 28th. [Read more]
Read more »
Friday November 22
09:12 am
Tower of God: New World announces a collab with Teenahe Mercenary complete with four powerful recruits | 148Apps
Tower of God: New World announces a collab with Teenahe Mercenary complete with four powerful recruits
Netmarble has announced a new collaboration between the collectible card game RPG Tower of God: New World and the WEBTOON series Teenage Mercenary. Four characters from the webcomic will make their way over to be recruited, and there will also be a multitude of events to play through for big rewards. [Read more]
Read more »
Thursday November 21
09:54 am
Digital Extremes releases prequel webcomic to get us pumped for Warframe: 1999 | 148Apps
Digital Extremes releases prequel webcomic to get us pumped for Warframe: 1999
Do you like to read stories but are tired of all those bloody words getting in the way? If so, you probably aren’t reading this. I didn’t think that through... But moving on! Digital Extremes has released its much anticipated, by me, free prequel webcomic for Warframe: 1999. [Read more]
Read more »
Wednesday November 20
09:18 am
Solo Leveling: Arise introduces pre-registration for upcoming raid based on popular anime arc | 148Apps
Solo Leveling: Arise introduces pre-registration for upcoming raid based on popular anime arc
Since launching earlier this year, Solo Leveling: Arise has been quite busy with events, commemorating two age milestones and introducing a few new characters. With the impending release of the Jeju Island Raid, the content train is primed to keep rolling, and you can get some extra goodies for pre-registering. [Read more]
Read more »
Tuesday November 19
09:53 am
The 2024 PUBG Mobile Global Championship Group Stages conclude as we prepare for the crucible of the Survival Stage | 148Apps
The 2024 PUBG Mobile Global Championship Group Stages conclude as we prepare for the crucible of the Survival Stage
We have seen the Group Stages of the PUBG Mobile Global Championship conclude recently, after three weeks of dizzying highs, devastating lows, and other such emotions. Capping off the stage with Brute Force, topping Group Green with 187 points, comprised of three wins and an impressive 110 eliminations. [Read more]
Read more »
Monday November 18
09:33 am
Jujutsu Kaisen Phantom Parade hits a double whammy with eight-million-player celebration and a new SSR-character | 148Apps
Jujutsu Kaisen Phantom Parade hits a double whammy with eight-million-player celebration and a new SSR-character
There are many ways to justify success when it comes to gaming; reviews, units sold, revenue and the like. I would also accept smashing eight million global players since releasing around a week ago, a feat that Jujutsu Kaisen Phantom Parade has achieved. To celebrate, you can claim a huge mountain of free gifts. [Read more]
Read more »
Friday November 15
10:44 pm
Remember Payphones? – The TouchArcade Show #608 | iOS App of Day
Remember Payphones? – The TouchArcade Show #608
In this week’s exciting new episode of The TouchArcade Show we kick things off with a lengthy discussion about Eli’s … Continue reading ""
Read more »
11:28 am
Version 1.4 of Wuthering Waves launches with a revamp of an old game mode | 148Apps
Version 1.4 of Wuthering Waves launches with a revamp of an old game mode
Kuro Games has released Version 1.4 of Wuthering Waves, bringing with it a host of additions. When the Night Knocks introduces a fantastically powerful five-star Resonator complete with a companion story, as well as a new take on the Somnoire: Illusive Realms mode. [Read more]
Read more »
Thursday November 14
08:36 am
TiMi Studio Group is taking the reigns in the iconic series with Monster Hunter Outlanders | 148Apps
TiMi Studio Group is taking the reigns in the iconic series with Monster Hunter Outlanders
If you wanted to play Monster Hunter on your mobile then you have a few choices; Stories for some turn-based fun, Puzzles for, well take a guess, and NOW if you need a reason to walk. We all need a nudge. But what about the true Monster Hunter experience? Enter, Monster Hunter Outlanders. [Read more]
Read more »
Wednesday November 13
10:31 am
GoGo Muffin launches its second closed beta test ahead of launch early next month | 148Apps
GoGo Muffin launches its second closed beta test ahead of launch early next month
After making a name for itself in Hong Kong and Taiwan, and then again with its first beta last month, GoGo Muffin is building up a lot of momentum ahead of its release on December 3rd. But first, there will be a week of a second beta test, and anyone can get involved and try out this cosy MMORPG. [Read more]
Read more »
Tuesday November 12
02:00 pm
Explore Motori Mountain and learn about the soul mages in Guardian Tales latest update | 148Apps
Explore Motori Mountain and learn about the soul mages in Guardian Tales latest update
Kakao Games has announced the unveiling of a huge new area in its action RPG Guardian Tales. World 20: Motori Mountain will not only give you somewhere new to explore, but you can also recruit a valuable ally, and take part in a host of events stuffed with some very helpful items. [Read more]
Read more »
Monday November 11
08:58 am
Wake up, get up, and get out there as Persona V Royal returns to Identity V | 148Apps
Wake up, get up, and get out there as Persona V Royal returns to Identity V
I am a massive fan of the Persona series, so much so that I bought a PS Vita just to import the special edition of Persona 4 Golden from Canada and lose many university nights to it. Sadly, I couldn't get into Persona 5, but good news for all those who did! The second crossover with Persona 5 Royal has arrived in Identity V. [Read more]
Read more »
Friday November 08
09:30 pm
They Put the Power Button WHERE!? – The TouchArcade Show #607 | iOS App of Day
They Put the Power Button WHERE!? – The TouchArcade Show #607
In this week’s episode of The TouchArcade Show I give a recap of the past 2 weeks of my life, … Continue reading ""
Read more »
10:13 am
Uncharted Water Origin is making a massive change to its gacha system starting January | 148Apps
Uncharted Water Origin is making a massive change to its gacha system starting January
Right now in Uncharted Waters Origin, you can take part in the exciting-sounding Treasure Exploration 2 season event. Until December 4th you can log in for 14 days total to receive daily rewards, including the 28-day long Dream of El Dorado buff. But, there is more to enjoy in this update. [Read more]
Read more »
Thursday November 07
10:09 am
Old School RuneScape gets a new school facelift for its sixth birthday | 148Apps
Old School RuneScape gets a new school facelift for its sixth birthday
We took a trip to the written world of Gielinor yesterday with the new book and comic, and now we return to the virtual world with Old School RuneScape. It has been six years since mobile players were able to travel back in time to a simpler MMO life, and now we are receiving a suite of revamped features. [Read more]
Read more »

Older posts

Saturday December 07
03:45 am
MXP (Milan) on 2024-12-07 | CloudFlare
MXP (Milan) on 2024-12-07
Dec 7, 03:45 UTCIn progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Dec 7, 03:30 UTCScheduled - We will be performing scheduled maintenance in MXP (Milan) datacenter between 2024-12-07 03:45 and 2024-12-08 06:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network interfaces in this datacentre may become temporarily unavailable.You can now subscribe to these notifications via Cloudflare dashboard and receive these updates directly via email, PagerDuty and webhooks (based on your plan): https://developers.cloudflare.com/notifications/notification-available/#cloudflare-status.
Read more »
12:55 am
Some Zaps experiencing trigger issues | Zapier
Some Zaps experiencing trigger issues
Dec 6, 16:55 PSTInvestigating - As of 12:30 AM UTC, users may see issues with some Zap triggers. Our engineering team is currently investigating the scope of the impact. We appreciate your patience as we work to resolve this issue.
Read more »
Friday December 06
11:52 pm
Increased Durable Objects errors in WNAM | CloudFlare
Increased Durable Objects errors in WNAM
Dec 6, 23:52 UTCInvestigating - Cloudflare is investigating an increased level of errors for customers running Durable Objects. We are working to analyse and mitigate this problem. More updates to follow shortly.
Read more »
08:23 pm
Multiple Deployments: Intermittent SSO log retrieval failure | Duo Security
Multiple Deployments: Intermittent SSO log retrieval failure
Dec 6, 15:23 ESTInvestigating - We are investigating issues with intermittent failures retrieving SSO logs when attempting to view them in the Admin Panel and/or through the Admin API for customers on the deployments below. This does not impact authentication.DUO38DUO47DUO57DUO66DUO67
Read more »
01:20 pm
GoTo Connect – Voice experience not available | GoToMeeting
GoTo Connect – Voice experience not available
Dec 6, 13:20 UTCIdentified - Our engineers have identified the issue and are now actively working towards a resolution. Customers affected by this should reload the GoTo App to correct this issue.We will provide another update shortly.Dec 6, 13:17 UTCUpdate - We are continuing to investigate this issue.Dec 6, 13:15 UTCInvestigating - We are actively investigating reports that some GoTo Connect customers may be not seeing the voice experience within the GoTo App.Our engineers are working to identify the issue and will provide another update shortly.
Read more »
Thursday December 05
11:20 pm
Delayed alert notifications for the EU region. | New Relic
Delayed alert notifications for the EU region.
Dec 5, 23:20 UTCInvestigating - Some customers in the EU region may intermittently experience delayed alert notifications. Data ingest is not impacted at this time.
Read more »
10:16 pm
Issues with Bring Your Own IP (BYOIP) / Bring Your Own IP On-Demand feature | CloudFlare
Issues with Bring Your Own IP (BYOIP) / Bring Your Own IP On-Demand feature
Dec 5, 22:16 UTCIdentified - The issue has been identified and a fix is being implemented.Dec 5, 22:02 UTCInvestigating - Cloudflare is investigating issues with Bring Your Own IP (BYOIP) / Bring Your Own IP (BYOIP) On-Demand feature. We are working to analyse and mitigate this problem. More updates to follow shortly. Impact is restricted to changes in the Bring Your Own IP (BYOIP) configuration and it does not affect any connectivity, security or CDN functionality.
Read more »
09:31 pm
Zap error notification emails delayed | Zapier
Zap error notification emails delayed
Dec 5, 13:31 PSTInvestigating - As of 7:40 am UTC, users may see a delay of up to 3 hours for error notifications regarding failed Zap Runs.Zap Runs and tasks are proceeding as expected.Our team is actively looking into this issue and trying to minimize its impact on your use of our service. We appreciate your patience as we work to resolve this.If you need further assistance, please do not hesitate to reach out to our Support Team: https://zapier.com/app/get-help.
Read more »
07:37 pm
Increased HTTP 503 errors for Workers requests | CloudFlare
Increased HTTP 503 errors for Workers requests
Dec 5, 19:37 UTCIdentified - Cloudflare is investigating increased levels of HTTP 503 errors for Workers requests.
Read more »
06:41 pm
Cloudflare Access Infrastructure SSH applications not emitting command logs | CloudFlare
Cloudflare Access Infrastructure SSH applications not emitting command logs
Dec 5, 18:41 UTCIdentified - Cloudflare is investigating an issue causing SSH Infrastructure Application command logging to not emit command logs. All Access authentication, including infrastructure apps, and all other application type logging are not impacted at this time.
Read more »
06:17 pm
HTTP 500 errors when modifying DNS records, Pages projects, Workers subdomains | CloudFlare
HTTP 500 errors when modifying DNS records, Pages projects, Workers subdomains
Dec 5, 18:17 UTCMonitoring - A fix has been implemented and we are monitoring the results.Dec 5, 18:13 UTCIdentified - The issue has been identified and a fix is being implemented.Dec 5, 18:11 UTCInvestigating - Cloudflare is investigating reports of HTTP 500 errors when modifying or querying DNS records via the Cloudflare API, creating new Pages projects, and creating or changing Workers subdomains.
Read more »
04:11 pm
Issues with Analytics | CloudFlare
Issues with Analytics
Dec 5, 16:11 UTCResolved - Cloudflare is aware of, and investigating an issue with GraphQL-based analytics in the dashboard and API.
Read more »
02:50 pm
Possible Network Congestion in Mumbai (BOM) and Delhi (DEL) | CloudFlare
Possible Network Congestion in Mumbai (BOM) and Delhi (DEL)
Dec 5, 14:50 UTCInvestigating - Cloudflare is observing possible network congestion in Mumbai (BOM) and Delhi (DEL).We are working to mitigate impact to Internet users in this region.
Read more »
02:40 pm
SMS Delivery Delays to MyTel in Myanmar | Twilio
SMS Delivery Delays to MyTel in Myanmar
Dec 5, 06:40 PSTResolved - We are no longer experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. This incident has been resolved.Dec 5, 04:56 PSTMonitoring - We are observing recovery in SMS delivery delays when sending messages to MyTel network in Myanmar. We will continue monitoring the service to ensure a full recovery. We will provide another update in 2 hours or as soon as more information becomes available.Dec 4, 13:31 PSTUpdate - We continue experiencing SMS delivery delays when sending messages to MyTel Network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 24 hours or as soon as more information becomes available.Dec 3, 21:31 PSTUpdate - We continue experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 16 hours or as soon as more information becomes available.Dec 3, 13:37 PSTUpdate - We continue experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 8 hours or as soon as more information becomes available.Dec 3, 09:30 PSTUpdate - We continue experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 4 hours or as soon as more information becomes available.Dec 3, 09:29 PSTUpdate - We continue experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 2 hours or as soon as more information becomes available.Dec 3, 07:35 PSTUpdate - We continue experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 2 hours or as soon as more information becomes available.Dec 3, 06:46 PSTInvestigating - We are experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available.
Read more »
12:56 pm
Customers trying to authenticate to the Pipedrive Integration get an error saying “App is not found”. | Zapier
Customers trying to authenticate to the Pipedrive Integration get an error saying “App is not found”.
Dec 5, 04:56 PSTInvestigating - We are currently investigating an issue with our Pipedrive Integration.Some customers are unable to authenticate to the Pipedrive Integration and are encountering an error displayed as “App is not found”.This issue seems to be affecting users trying to connect to the Pipedrive Integration.The impact of this issue is that affected users are unable to connect to Pipedrive through Zapier at this moment.Please, if you have additional questions or need further assistance, don't hesitate to contact our support team.We appreciate your understanding as we diligently work on resolving this issue. Updates will be provided as we receive more information. Thank you for your patience.
Read more »
12:16 pm
SMS Delivery Delays To and From Hungary, Austria and Czech Republic Via Subset Of Domestic Sender IDs | Twilio
SMS Delivery Delays To and From Hungary, Austria and Czech Republic Via Subset Of Domestic Sender IDs
Dec 5, 04:16 PSTInvestigating - We are experiencing SMS delivery delays to and from Hungary, Austria and Czech Republic subset of domestic Sender IDs. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available.
Read more »
10:35 am
Issues with Page Rules containing Server Side Excludes | CloudFlare
Issues with Page Rules containing Server Side Excludes
Dec 5, 10:35 UTCInvestigating - Cloudflare is aware of, and investigating an issue with Page Rules including Server Side Excludes which may be causing 500 errors on traffic. We are working on resolving the issue. Customers can remove the Server Side Excludes from Page Rules as a workaround in the meantime.
Read more »
09:42 am
Potential Service Interruption | New Relic
Potential Service Interruption
Dec 5, 09:42 UTCUpdate - We are investigating a potential service interruption that may impact some customers. Some customers may be experiencing issues with APM monitoring/tools not displaying data. Please continue to monitor this page for updates.Dec 5, 09:38 UTCInvestigating - We are investigating a potential service interruption that may impact some customers. Please continue to monitor this page for updates.
Read more »
09:22 am
ORD (Chicago) on 2024-12-05 | CloudFlare
ORD (Chicago) on 2024-12-05
THIS IS A SCHEDULED EVENT Dec 5, 09:30 - 12:30 UTCDec 5, 09:16 UTCScheduled - We will be performing scheduled maintenance in ORD (Chicago) datacenter on 2024-12-05 between 09:30 and 12:30 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network interfaces in this datacentre may become temporarily unavailable.You can now subscribe to these notifications via Cloudflare dashboard and receive these updates directly via email, PagerDuty and webhooks (based on your plan): https://developers.cloudflare.com/notifications/notification-available/#cloudflare-status.
Read more »
05:52 am
GoToMyPC – Emergency Maintenance | GoToMeeting
GoToMyPC – Emergency Maintenance
THIS IS A SCHEDULED EVENT Dec 5, 06:00 - 07:30 UTCDec 5, 05:34 UTCScheduled - As part of our commitment to provide exceptional service and reliability to our customers, GoToMyPC will be conducting emergency service maintenance on the following date and time listed below. Our team will be taking all appropriate actions to minimize service interruptions during this event.Date and Time: December 5th, 2024, 6:00 AM UTC to 7:30 AM UTCPurpose: This maintenance is to ensure and maintain system performance and stability.Duration: All maintenance will be performed within the 1-hours and 30-minute maintenance window.What to expect:GoToMyPC customers may not be able to initiate sessions for a 5 minute period during the maintenance window. GoToMyPC sessions that are already in progress will not be impacted.We would like to thank you for your patience and understanding during this time.
Read more »

Older posts

Showcase

Kool Tools: Pegasus3 Symply Edition

Promise Technology and Symply have launched the Pegasus3 Symply Edition, the next generation of the Pegasus desktop RAID storage system. The new system combines 40 Gb/s Thunderbolt 3 performance with Symply's storage management suite. The Pegasus3 Symply Edition is a...

Kool Tools: TimeCache

The Rolling Stones told us that time was on our side (or at least Mick Jagger's side). That's not always true, but with TimeCache (http://www.pandaware.com/timecache/index.html) for Mac OS X from PandaWare we can at least keep track of it. With TimeCache -- now...

Kool Tools: PDF Editor for Mac

Editing PDF files on Mac OS X can be tough, but a product from AnyBizSoft, a Wondershare company focused on PDF solutions, simplifies the process. PDF Editor for Mac, integrates AnyBizSoft's existing PDF to Word conversion technology. It not only enables users to edit...

Kool Tools: Aunsoft’s Video Converter for the Mac

Aunsoft Video Converter for Mac (http://www.aunsoft.com/video-converter-mac/) is a US$35 Mac video converting tool you can use to convert just about any type of video for use on a variety of Apple devices. What's more, it also boasts a several editing features. This...

More Showcase

Scanners “By The Numbers”

Friday December 06
09:55 pm
Take $40 off 4th-generation Apple AirPods this weekend at Amazon | MacPrices.net
Take $40 off 4th-generation Apple AirPods this weekend at Amazon
Amazon has 4th-generation Apple AirPods in stock and on Holiday sale this weekend for up to $40 off MSRP including free shipping. Their prices are among the lowest prices available for new AirPods: - AirPods 4: $119, $10 off - AirPods 4 with ANC: $138.99, $40 off Keep an eye on our AirPods Price Tracker for the latest prices and deals, updated daily.
Read more »
09:55 pm
Take $40 off 4th-generation Apple AirPods this weekend at Amazon | MacPrices.net
Take $40 off 4th-generation Apple AirPods this weekend at Amazon
Amazon has 4th-generation Apple AirPods in stock and on Holiday sale this weekend for up to $40 off MSRP including free shipping. Their prices are among the lowest prices available for new AirPods: - AirPods 4: $119, $10 off - AirPods 4 with ANC: $138.99, $40 off Keep an eye on our AirPods Price Tracker for the latest prices and deals, updated daily.
Read more »
09:46 pm
Holiday Sale: Apple Watch Series 10 models on sale for $50 off MSRP this weekend | MacPrices.net
Holiday Sale: Apple Watch Series 10 models on sale for $50 off MSRP this weekend
Apple retailers have Apple Watch Series 10 models on Holiday sale this weekend for $50 off Apple's MSRP. These are the lowest prices available for Series 10 Watches this weekend: Apple Watch Series 10 (aluminum cases): - Amazon: $50 off MSRP, prices start at $349 - Best Buy: $50 off MSRP, prices start at $349 - Walmart: $50 off MSRP, prices start at $349 Sale prices at Best Buy and Walmart are for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available). For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.
Read more »
02:45 pm
Clearance 14-inch M3 MacBook Pros available starting at only $1199 at Apple, Certified Refurbished | MacPrices.net
Clearance 14-inch M3 MacBook Pros available starting at only $1199 at Apple, Certified Refurbished
Apple has clearance 14" M3 MacBook Pros available, Certified Refurbished, starting at only $1199. Each model features a new outer case, shipping is free, and an Apple 1-year warranty is standard. These models are the cheapest M3 MacBook Pros currently available for sale at Apple: - 14" M3 MacBook Pro (8GB/512GB/Gray): $1199 $400 off MSRP - 14" M3 MacBook Pro (8GB/1TB/Gray): $1359 $440 off MSRP - 14" M3 MacBook Pro (8GB/512GB/Silver): $1199 $400 off MSRP - 14" M3 MacBook Pro (8GB/1TB/Silver): $1359 $440 off MSRP See our 14" MacBook Pro Price Tracker for the latest prices & deals from Apple's retailers, updated daily.
Read more »
02:00 pm
Holiday Sale: $50 off 10th-generation iPads on Walmart’s online store | MacPrices.net
Holiday Sale: $50 off 10th-generation iPads on Walmart’s online store
Walmart has Apple's 10th-generation 64GB WiFi iPads on Holiday sale for $50 off MSRP on their online store. Sale prices for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 10" 10th-gen 64GB WiFi iPads: $299 $50 off MSRP This is the cheapest new iPad for sale among the Apple retailers we track. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.
Read more »
Thursday December 05
04:35 pm
13-inch M2 MacBook Airs on Holiday sale for only $769 at B&H with free 1-2 day shipping | MacPrices.net
13-inch M2 MacBook Airs on Holiday sale for only $769 at B&H with free 1-2 day shipping
B&H Photo has 13" MacBook Airs with M2 CPUs, 8GB of RAM, and 256GB of storage in stock and on sale for $230 off Apple's original MSRP, only $769. Free 1-2 day delivery is available to most US addresses. Their prices are among the lowest currently available for in-stock new M2 MacBook Airs among Apple's retailers: 8-core M2/8-core GPU/8GB RAM/256GB SSD - 13" MacBook Air Space Gray: $769 $230 off MSRP - 13" MacBook Air Silver: $769 $230 off MSRP - 13" MacBook Air Starlight: $769 $230 off MSRP - 13" MacBook Air Midnight: $769 $230 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker.
Read more »
12:50 pm
Apple has clearance 15-inch M2 MacBook Airs available starting at $929, Certified Refurbished | MacPrices.net
Apple has clearance 15-inch M2 MacBook Airs available starting at $929, Certified Refurbished
Apple has clearance, Certified Refurbished, 15" M2 MacBook Airs now available starting at $929 and ranging up to $410 off original MSRP. These are the cheapest 15" MacBook Airs for sale today at Apple. Apple's one-year warranty is included, shipping is free, and each MacBook has a new outer shell. The following standard-configurations are available: - 15" MacBook Air/8-Core M2 CPU, 8-Core GPU/8GB RAM/256GB SSD/Space Gray: $929, $370 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 8-Core GPU/8GB RAM/256GB SSD/Silver: $929, $370 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 8-Core GPU/8GB RAM/256GB SSD/Starlight: $929, $370 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 8-Core GPU/8GB RAM/256GB SSD/Midnight: $929, $370 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 10-Core GPU/8GB RAM/512GB SSD/Space Gray: $1089, $410 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 10-Core GPU/8GB RAM/512GB SSD/Silver: $1089, $410 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 10-Core GPU/8GB RAM/512GB SSD/Starlight: $1089, $410 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 10-Core GPU/8GB RAM/512GB SSD/Midnight: $1089, $410 off original MSRP According the Apple, “You will receive a 'like new' device with genuine Apple replacement parts (as needed) that has been thoroughly cleaned and inspected. Every device will come with all accessories, cables and operating systems. All Apple Certified Refurbished products are packaged in a brand new white box and will be sent to you with free shipping and returns.” Note that stock status may vary, check Apple's site for availability. For the latest sales & prices, see our 15" MacBook Air Price Tracker, updated daily.
Read more »
12:46 pm
Holiday Sale: 14-inch M4 Pro/M4 Max MacBook Pros for $200 off MSRP at B&H | MacPrices.net
Holiday Sale: 14-inch M4 Pro/M4 Max MacBook Pros for $200 off MSRP at B&H
B&H Photo is offering a $200 discount on new 14-inch MacBook Pros with M4 Pro or M4 Max MacBook Pros as part of their ongoing Holiday sales. B&H offers free 1-2 day shipping to most US addresses: - 14" M4 Pro MacBook Pro (24GB/512GB): $1799, $200 off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB): $2199, $200 off MSRP - 14" M4 Max MacBook Pro (36GB/1TB): $2999, $200 off MSRP Their prices are the lowest available today for new 14" M4 Pro/Max MacBook Pros among the Apple retailers we track. For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.
Read more »
Wednesday December 04
03:20 pm
Holiday Sale: 16-inch M4 Pro/M4 Max MacBook Pros for $200-$250 off MSRP at B&H | MacPrices.net
Holiday Sale: 16-inch M4 Pro/M4 Max MacBook Pros for $200-$250 off MSRP at B&H
B&H Photo is offering a $200-$250 discount on new 16-inch MacBook Pros with M4 Pro or M4 Max MacBook Pros as part of their ongoing Holiday sales. B&H offers free 1-2 day shipping to most US addresses: - 16" M4 Pro MacBook Pro (24GB/512GB): $2299, $200 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2699, $200 off MSRP - 16" M4 Max MacBook Pro (36GB/1TB): $3249, $250 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB): $3799, $200 off MSRP Their prices are the lowest available today for new 16" MacBook Pros among the Apple retailers we track. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.
Read more »
03:08 pm
Cheapest iMacs for sale today at Apple: Refurbished 24-inch M3 iMacs for $1019, M1 iMacs for only $969 | MacPrices.net
Cheapest iMacs for sale today at Apple: Refurbished 24-inch M3 iMacs for $1019, M1 iMacs for only $969
Apple has last year's 24-inch M3 iMacs available starting at $1019, Certified Refurbished. Each iMac is in like-new condition and comes with Apple's standard one-year warranty: - 24-inch M3 iMac 8-Core CPU/8-Core GPU (all colors): $1019, original MSRP $1299 - 24-inch M3 iMac 8-Core CPU/10-Core GPU/256GB SSD (all colors): $1189, original MSRP $1499 - 24-inch M3 iMac 8-Core CPU/10-Core GPU/512GB SSD (all colors): $1359, original MSRP $1699 Apple has clearance M1 iMacs available in their Certified Refurbished store starting at $969. These are the cheapest iMacs for sale at Apple: - 24-inch M1 iMac 8-Core CPU/7-Core GPU (all colors): $969 - 24-inch M1 iMac 8-Core CPU/8-Core GPU/256GB SSD (all colors): $1139 - 24-inch M1 iMac 8-Core CPU/8-Core GPU/512GB SSD (all colors): $1299 Details at Apple here. For the latest prices and deals, see our iMac Price Tracker, updated daily.
Read more »
12:38 pm
Apple Watch Series 9 in stock today at Apple starting at $299, Certified Refurbished | MacPrices.net
Apple Watch Series 9 in stock today at Apple starting at $299, Certified Refurbished
Apple has a full line of Certified Refurbished Apple Watch Series 9 models available in their online store starting at $299. Each Watch includes Apple's standard one-year warranty, a new outer case, new band, and free shipping: - 41mm Apple Watch Series 9 GPS: $299 - 45mm Apple Watch Series 9 GPS: $319 - 41mm Apple Watch Series 9 GPS + Cellular: $379 - 45mm Apple Watch Series 9 GPS + Cellular: $399 Note that availability of specific models and colors vary and can change rapidly. Details available at Apple here. For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.
Read more »
12:31 pm
Full size 2nd-generation HomePods in stock at Apple for $249, $50 off MSRP | MacPrices.net
Full size 2nd-generation HomePods in stock at Apple for $249, $50 off MSRP
Apple has Certified Refurbished White and Midnight HomePods available for $249, Certified Refurbished. That's $50 off MSRP and the lowest price currently available for a full-size Apple HomePod today. Shipping is free, and each HomePod includes Apple's standard 1-year warranty. The outer case is new. According to Apple, "Each Apple Certified Refurbished Product: - Undergoes full functionality testing and any defective modules identified in testing are replaced. - Is put through a thorough cleaning process and inspection. - Is repackaged (including appropriate manuals, cables, new boxes). - Includes either the Operating System originally shipped with the unit or, in some cases, a more recent version. - Is placed into a Final QA inspection prior to being added to sellable refurbished stock." For the latest prices & sales, see our HomePod Price Tracker, updated daily.
Read more »

Older posts

Friday December 06
01:59 pm
Apple iPad Holiday Deals at Best Buy from $130 + free shipping | DealNews iPads
Apple iPad Holiday Deals at Best Buy from $130 + free shipping
Best Buy has discounted a selection of new and refurbished iPads, with prices starting from $129.99. We’ve pictured the Apple iPad 10.2″ 256GB WiFi Tablet (2021) for $349.99 (best price we’ve seen). Buy Now at Best Buy
Read more »
Monday December 02
10:00 am
Apple Store Cyber Monday Last Chance Deals: Up to $200 Gift Card w/ purchase + free shipping | DealNews iPads
Apple Store Cyber Monday Last Chance Deals: Up to $200 Gift Card w/ purchase + free shipping
Today’s your last chance to get a gift card worth up to $200 with select Apple Store purchases. MacBooks get the biggest gift cards, as you’d expect, but offers start with $25 gift cards on various iPad accessories. Some highlights: Up to $200 Apple Gift Card w/ MacBook Air M3 13″ or 15″, or M2 […]
Read more »
10:00 am
Apple Store Cyber Monday Last Chance Deals: Up to $200 Gift Card w/ purchase + free shipping | DealNews Laptops
Apple Store Cyber Monday Last Chance Deals: Up to $200 Gift Card w/ purchase + free shipping
Today’s your last chance to get a gift card worth up to $200 with select Apple Store purchases. MacBooks get the biggest gift cards, as you’d expect, but offers start with $25 gift cards on various iPad accessories. Some highlights: Up to $200 Apple Gift Card w/ MacBook Air M3 13″ or 15″, or M2 […]
Read more »
Friday November 29
10:40 am
Apple MacBook Pro M4 Laptops at Best Buy From $1,399 + free shipping | DealNews Laptops
Apple MacBook Pro M4 Laptops at Best Buy From $1,399 + free shipping
These Black Friday doorbuster deals take up to $400 off these new MacBook Pro models, only released earlier this month. 20 builds are on sale in total. Buy Now at Best Buy
Read more »
08:29 am
Apple Store Black Friday Deals: Up to $200 Gift Card w/ purchase + free shipping | DealNews iPads
Apple Store Black Friday Deals: Up to $200 Gift Card w/ purchase + free shipping
Through December 2, you’ll get an Apple Gift Card worth up to $200 with select purchases. MacBooks get the biggest gift cards, as you’d expect, but offers start with $25 gift cards on various iPad accessories. Some highlights: Up to $200 Apple Gift Card w/ MacBook Air M3 13″ or 15″, or M2 13″Up to […]
Read more »
08:29 am
Apple Store Black Friday Deals: Up to $200 Gift Card w/ purchase + free shipping | DealNews Laptops
Apple Store Black Friday Deals: Up to $200 Gift Card w/ purchase + free shipping
Through December 2, you’ll get an Apple Gift Card worth up to $200 with select purchases. MacBooks get the biggest gift cards, as you’d expect, but offers start with $25 gift cards on various iPad accessories. Some highlights: Up to $200 Apple Gift Card w/ MacBook Air M3 13″ or 15″, or M2 13″Up to […]
Read more »
Thursday November 28
04:14 pm
Tablet and E-Reader Deals at Best Buy: Up to 50% off + free shipping | DealNews iPads
Tablet and E-Reader Deals at Best Buy: Up to 50% off + free shipping
Save on tablets from Samsung, Lenovo, Apple, and more. We’ve pictured the Lenovo Tab M9 9″ 32GB Android Tablet for $80 ($60 off). Shop Now at Best Buy
Read more »
04:06 pm
Apple MacBooks & iMac Doorbuster Deals at Best Buy: Up to $500 off + free shipping | DealNews Laptops
Apple MacBooks & iMac Doorbuster Deals at Best Buy: Up to $500 off + free shipping
These Black Friday doorbuster deals drop MacBook Air laptops as low as $749, iMacs as low as $1,199, and MacBooks Pro as low as $1,399. Plus, My Best Buy Total members can save an extra $50 on select models. (My Best Buy Total is a paid membership, which costs $180 annually.) Shop Now at Best Buy
Read more »
Wednesday November 27
09:28 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Blue – G1973LL/A – $1,329.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Blue – G1973LL/A – $1,329.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU - Blue – G1973LL/A $1,329.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 16GB unified memory 512GB SSD¹ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Product page on the Apple Store…
Read more »
09:28 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Purple – G19Q6LL/A – $1,829.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Purple – G19Q6LL/A – $1,829.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Purple – G19Q6LL/A $1,829.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 24GB unified memory 1TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
08:21 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Blue – G19L7LL/A – $2,139.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Blue – G19L7LL/A – $2,139.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Blue – G19L7LL/A $2,139.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 24GB unified memory 2TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
07:55 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Purple – G19Q1LL/A – $1,829.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Purple – G19Q1LL/A – $1,829.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Purple – G19Q1LL/A $1,829.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 8GB unified memory 2TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
07:55 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Silver – G1955LL/A – $1,329.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Silver – G1955LL/A – $1,329.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU - Silver – G1955LL/A $1,329.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 24GB unified memory 256GB SSD¹ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Product page on the Apple Store…
Read more »
07:55 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Blue – G19L4LL/A – $1,989.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Blue – G19L4LL/A – $1,989.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Blue – G19L4LL/A $1,989.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 16GB unified memory 2TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
07:25 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Green – G1960LL/A – $1,179.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Green – G1960LL/A – $1,179.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU - Green – G1960LL/A $1,179.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 8GB unified memory 512GB SSD¹ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Product page on the Apple Store…
Read more »

Older posts

Saturday December 07
6 minutes ago
Part Time – Student – Blue *Apple* Cafe Worker (Spring 2025) – Pennsylvania State University (United States) | Job Search Engine
Part Time – Student – Blue *Apple* Cafe Worker (Spring 2025) – Pennsylvania State University (United States)
…to enhance your work experience. Student openings are available at the Blue Apple Cafe. Employee meal discount during working hours is provided. Job Duties +
Read more »
6 minutes ago
Registered Nurse – *Apple* Hill Surgical Center – PRN Day – WellSpan Health (United States) | Job Search Engine
Registered Nurse – *Apple* Hill Surgical Center – PRN Day – WellSpan Health (United States)
Registered Nurse - Apple Hill Surgical Center - PRN Day Location: WellSpan Health, York, PA Schedule: PRN/Per Diem Schedule PRN (As Needed) Hours: Flexible Hours
Read more »
6 minutes ago
Nurse Anesthetist – *Apple* Hill Surgery Center – WellSpan Health (United States) | Job Search Engine
Nurse Anesthetist – *Apple* Hill Surgery Center – WellSpan Health (United States)
Nurse Anesthetist - Apple Hill Surgery Center Location: WellSpan Medical Group, York, PA Schedule: Full Time At WellSpan Health, our community of 23,000 employees,
Read more »
6 minutes ago
Environmental Services Technician – *Apple* Hill – Evening/Night – WellSpan Health (United States) | Job Search Engine
Environmental Services Technician – *Apple* Hill – Evening/Night – WellSpan Health (United States)
Environmental Services Technician - Apple Hill - Evening/Night Location: WellSpan Health, York, PA Schedule: Part Time Part Time (40 hours Biweekly) Monday - Friday
Read more »
7 minutes ago
Pharmacy Technician Retail – *Apple* Hill – Part Time – Day/Evening – WellSpan Health (United States) | Job Search Engine
Pharmacy Technician Retail – *Apple* Hill – Part Time – Day/Evening – WellSpan Health (United States)
Pharmacy Technician Retail - Apple Hill - Part Time - Day/Evening Location: WellSpan Health, York, PA Schedule: Part Time Schedule: Part Time 20-hours per week
Read more »
7 minutes ago
Medical Assistant – Internal Medicine *Apple* Hill – WellSpan Health (United States) | Job Search Engine
Medical Assistant – Internal Medicine *Apple* Hill – WellSpan Health (United States)
Medical Assistant - Internal Medicine Apple Hill York Location: WellSpan Medical Group, York, PA Schedule: Full Time Full Time Monday - Friday Days General Summary
Read more »
7 minutes ago
Bi-lingual (Spanish) Level 1 *Apple* Support Specialist – CompuCom (United States) | Job Search Engine
Bi-lingual (Spanish) Level 1 *Apple* Support Specialist – CompuCom (United States)
…right people. Our client is currently seeking a qualified Bi-lingual (Spanish) Level 1 Apple Support Specialist to join their team. This role can be hybrid / remote
Read more »
7 minutes ago
Pharmacist (Retail) – *Apple* Hill – Part Time – Day/Evening – WellSpan Health (United States) | Job Search Engine
Pharmacist (Retail) – *Apple* Hill – Part Time – Day/Evening – WellSpan Health (United States)
Pharmacist (Retail) - Apple Hill - Part Time - Day/Evening Location: WellSpan Health, York, PA Schedule: Part Time Schedule: Part-time 20-hours per week Day/Evening
Read more »
7 minutes ago
*Apple* Tier 2 Operations Support Specialist – AIG (United States) | Job Search Engine
*Apple* Tier 2 Operations Support Specialist – AIG (United States)
Apple Tier 2 Operations Support Specialist Status: Full-Time Location Jeffersonville, In Who we are American International Group, Inc. (AIG) is a leading global
Read more »
7 minutes ago
Supply Planner III- *Apple* – DISH Network (United States) | Job Search Engine
Supply Planner III- *Apple* – DISH Network (United States)
…large. **Job Duties and Responsibilities** We are seeking a Supply Planner III for Apple products to join our Retail Wireless Product Team. This critical role is
Read more »
7 minutes ago
Hair Stylist – *Apple* Blossom Mall – JCPenney (United States) | Job Search Engine
Hair Stylist – *Apple* Blossom Mall – JCPenney (United States)
Hair Stylist - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) - Apple Blossom
Read more »
8 minutes ago
*Apple* / Mac Administrator – JAMF Pro – Amentum (United States) | Job Search Engine
*Apple* / Mac Administrator – JAMF Pro – Amentum (United States)
Amentum is seeking an ** Apple / Mac Administrator - JAMF Pro** to provide support with the Apple Ecosystem to include hardware and software to join our team and
Read more »
8 minutes ago
Seasonal Operations Associate – *Apple* Blossom Mall – JCPenney (United States) | Job Search Engine
Seasonal Operations Associate – *Apple* Blossom Mall – JCPenney (United States)
Seasonal Operations Associate - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) -
Read more »

Older posts