Exclusive 20% off at Nomad for 9to5 readers: Leather iPhone 16 cases, Apple Watch bands, more + up to 90% off clearance
Our exclusive holiday sales just for 9to5 readers aren’t done just yet, and today we have a big one – 20% off everything at Nomad. While the brand’s short-lived Black Friday sale did offer deeper deals on select items, just about all of the newer releases were at the same 20% we are offering here today with our exclusive code, including its latest batch of absolutely gorgeous leather iPhone 16 cases, all of its Apple Watch bands, and even the brand new Leather Folio for M4 iPad Pro that just released this week. Believe it or not, our code even works on the already marked down previous-generation gear you’ll find in its sale section – that amounts to an insane 90% off on some gear. Simply apply code 9to52024 at checkout to knock an additional 20% off anything you can find on the site.  more…

Read more »

Apple reportedly canceled another Extreme chip for a future Mac Pro
There’s currently very little reason to buy a Mac Pro over a Mac Studio configured with the M2 Ultra chip. That’s because Apple reportedly canceled plans for an M2 Extreme chip for the top-of-the-line Mac. A new report suggests that history may be about to repeat itself, and that a planned Extreme chip for a future Mac Pro model may also now be in doubt. In the worst case, that could be no true new Mac Pro for years to come … more…

Read more »

Apple exec launches Apple Intelligence in Australia
Apple's Bob Borchers is in Australia for the launch of Apple Intelligence where he says he expects the new features will become a natural part of users' daily life.Apple's Bob Borchers — image credit: EFTMAs Apple releases iOS 18.2, alongside the new update macOS Sequoia 15.2, Apple Vice President of Worldwide Product Marketing, Bob Borchers, has been speaking to local YouTube channel EFTM about why the company thinks it's so important."So the great thing about Apple intelligence is you don't have to go and find it... it's right there when you need it and where it is," said Borchers. "And so in that regard, it's going to be incredibly easy for customers to engage and discover and make use of [and] we think it's going to be just woven into your daily experience." Continue Reading on AppleInsider | Discuss on our Forums

Read more »

iOS 18’s delayed feature rollout impacting iOS 19 development
The delay in rolling out major iOS 18 features is causing Apple engineers to postpone some planned iOS 19 features. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

The Apple Car is dead. Where does that leave Apple’s auto ambitions?
Macworld The ambitious Apple Car project, known internally as Project Titan, was cancelled earlier this year after almost a decade of development. But that much work doesn’t just vanish overnight. What’s left behind? What has become of the employees brought in to work on the project, and the technology they’ve developed? Will Apple divert the resources into new avenues, or is the whole thing a total loss? In this article we look at how Apple is dealing with the aftermath of its car project, what it learned from the failure, and the impact all of this is having on the company and the tech industry at large. Apple’s mysterious fleet By January 2024, Apple had a fleet of 68 autonomous test vehicles and 162 registered drivers. Despite the cancellation of the project, Apple decided not to decommission these vehicles. According to media reports, the test vehicles remain fully registered. However, the number of drivers has been drastically reduced from 172 to 15. The permits are valid until April 30, 2025. Why is Apple holding on to its fleet? One possible explanation is that the company wants to sell intellectual property from the project, and that the vehicles could serve as demonstration units to present the developed technologies to potential buyers. Another possibility is that Apple is archiving the research data obtained in order to use it for future developments. The remaining employees could play a central role in the orderly management of project resources. Shutterstock.com / Joaquin Corbalan P Why did the Apple Car fail? Project Titan was launched in 2014 in a bid to catapult Apple into the automotive industry. The aim was to develop a self-driving electric vehicle that met Apple’s high standards, but despite around $10bn of financial investment and the collaboration of more than 2,000 specialists, the project failed. One of the main reasons was the lack of clear direction. The project repeatedly changed strategy, from an electric vehicle to an autonomous vehicle and back again. These constant realignments led to confusion and frustration within the team. In addition, the technological hurdles were greater than expected. Developing a safe and reliable autonomous vehicle proved to be more complex than Apple originally anticipated. Internal differences of opinion and staff changes exacerbated the problems. The leadership of the project changed several times, and each new leader brought their own vision to the table. External factors, such as challenges in the automotive sector, worries about safety, and the slower-than-expected progress of self-driving technologies, also contributed to the failure. (Read next: Crash of the Titan: The long and winding saga of the Apple Car) A lesson for the entire industry The cancellation of the Apple Car project is not only a setback for Apple, but a worrying signal for the entire industry. It shows that even large tech companies face significant challenges when entering new industries. The automotive industry is complex and requires specialized expertise that cannot easily be transferred from other sectors. Apple is now focusing on other pioneering technologies. The remaining Project Titan employees have been integrated into the Special Projects Group (SPG), which is led by John Giannandrea, the head of Apple’s AI division. Their focus is now on generative artificial intelligence, an area in which Apple wants to become more active. The accumulated knowledge and technologies developed in Project Titan could yet be incorporated into future products. Possible applications include AI-controlled devices or innovative user interfaces. The legacy of the Apple Car could thus live on indirectly in other projects and strengthen Apple’s position in the tech industry. Foundry Apple’s car dream lives on Although the Apple Car project has been discontinued, the company hasn’t given up on its dream of breaking into the automotive industry. With CarPlay 2, Apple plans to significantly expand its presence in vehicles. While CarPlay has long offered a way to integrate several of your iPhone’s apps into your vehicle’s dashboard, the software’s second major iteration takes things to the next level. It enables complete control over all displays in the car, including climate control. CarPlay 2, which was first unveiled at the WWDC 2022 developer conference, offers seamless integration between the iPhone and vehicle systems. By working with several car manufacturers, Apple wants to revolutionize the vehicle user interface. The aim is to create a standardized and user-friendly interface that increases convenience and functionality. For car manufacturers, this represents both an opportunity and a challenge. On the one hand, they benefit from Apple’s expertise in user experience and software integration. On the other hand, they have to relinquish some control. Some manufacturers, such as Porsche and Aston Martin, have already announced that they will fully support CarPlay 2. Others are more cautious and have concerns about data and brand identity. Porsche CarPlay 2 could be Apple’s indirect way of entering the automotive industry without producing its own vehicle. The Apple Car is dead, long live the Apple car! By expanding its software platform, Apple is strengthening its position and creating new opportunities for in-vehicle services and applications. And in this endeavour the experience and technologies from Project Titan could prove to be of great benefit.

Read more »

iOS 18.2: How to create your own custom emoji with Genmoji
Macworld With iOS 18.2, iPadOS 18.2, Apple finally adds image generation capabilities to its Apple Intelligence tools. One of the slickest ways to use the new AI image gen capabilities is to make custom emojis with the new Genmoji feature. All you need is an iPhone or iPad up to date with version 18.2 or later. Here’s everything you need to know about the new feature. What is Genmoji? Genmoji is Apple’s name for its built-in AI-powered emoji generator. Some have taken to calling images of themselves made with the Image Playground app “Genmoji,” but that’s not quite right. Those are not styled like Apple’s emojis, are created in a different way, and are not accessible in the standard emoji picker. To create Genmoji, you’ll need an iPhone 15 Pro or Pro Max, or a new iPhone 16 with iOS 18.2; or an iPad with an A17 Pro or M-series processor with iPadOS 18.2. Macs running at least macOS 15.1 can use a Genmoji that you created on an iPhone or iPad, but can’t yet create new ones. That’s another difference between Genmoji and images created with Image Playground. How to find the Genmoji creator To start making Genmoji, open any app with text input that accepts emojis, such as Messages or Notes. Then launch the emoji picker as you normally would by tapping the smiling emoji in the lower left of the keyboard. Foundry Next, tap the Genmoji icon to the right of the search field. Foundry Describe the emoji you want to create Now for the fun part. To make a new Genmoji, simply type what you want your emoji to look like. It’s best to keep it simple and avoid all but the broadest action verbs. If there aren’t any existing emoji to match your query, you’ll see an option to “Create New Emoji” to make one that matches your prompt. You’ll see a dreamy soap-bubble blob appear and, after a few seconds, fill in with an image result. And you don’t need to be connected to the internet either—Genmoji even works offline. Foundry Swipe through the results and pick a winner You’ll see a spotlighted emoji in the center of the screen, but that isn’t your only option. Swipe left to view other interpretations of your prompt. The AI feature will generate additional images as you keep swiping. Some will be pretty good, others will be far off the mark, but hey you might like them better! Foundry Tap the one you like, and it will insert into your text just as any other emoji would. It will also go into the recent emoji section of your emoji picker, so you can use it again next time. You can also access your saved Genmoji from a Mac there, even though you can’t create a new one yet.

Read more »

Six ways Apple Intelligence levels up with iOS 18.2 and macOS 15.2
Macworld Apple Intelligence isn’t a thing, it’s several things that are being released piecemeal over the course of several iOS/iPadOS/macOS updates. It started with iOS 18.1, but aside from some neat writing tools, the really good stuff didn’t arrive until now. With iOS 18.2, your iPhone has quite a few new useful features and improvements powered by Apple Intelligence, and gives you a much better idea of where Apple is going with its AI vision. The features introduced in iOS 18.1 were just the start; these are all the big ways Apple Intelligence levels up in iOS 18.2 and macOS 15.2. Image playground is Apple’s DALL·E With the iOS/iPadOS 18.2 and macOS 15.2 updates, you’ll find a new app installed on your devices: Image Playground. Like DALL·E and other AI image generators, it allows you to make AI-made images by typing a description or using a variety of selected settings, objects, and modifiers. You can opt to draw in either animation or illustration styles, but it’s very limited in both scope and quality, probably to avoid any potential for trying to trick anyone. But you can select people from your Photos library to use a subject, which is kind of fun. Foundry You can use the Image Playground engine in the Notes app with a new Image Wand too. It can make a new image from a description or surrounding text, or take a rough sketch and flesh it out. Anywhere you can draw an image in Notes, just select the new “Magic Wand” tool at the right and circle the blank area or rough sketch you wish to replace with an AI-generated one. It’s based on the same image generation tools as Image Playground, so it has the same strict limitations and middling quality. But unless you’re an artist, it’s probably going to look nicer than the rough sketch you made with your finger or Apple Pencil. Genmoji is built into the keyboard The next image generation tool built into the latest version of iOS and macOS is called Genmoji, and it will make a new custom image in the style of Apple’s emoji. Just open any app that accepts emoji input, select the emoji picker in the keyboard (or your Mac’s menu), and tap/click the smiling face icon to the right of the emoji search box. Then you can describe the emoji you wish to see and Apple’s image-generation AI will give you several options. Foundry Writing Tools will do what you say The Writing Tools prompt in iOS 18.1 will let you change your selected text to automatically make it more professional, friendly, or concise. Those options are still there, but the Writing Tools interface now includes a text input line where can describe any sort of change you want. Tell Writing Tools to make it into a poem, make it scary, or whatever else you like (within reason of course). Foundry ChatGPT can write anything Also new in the Writing Tools box is a “Compose” button, which lets you type a prompt to compose whatever text you want with ChatGPT. You can include any sort of prompt you would on the ChatGPT site to generate new text. When it’s done, you can use ChatGPT to refine it, with another prompt or by selecting one of ChatGPT’s suggestions. Foundry Visual Intelligence sees the world (if you have an iPhone 16) One of the core functions of the Camera Control button finally comes to iPhone 16 in iOS 18.2. Visual Intelligence can use Siri and ChatGPT to tell you all sorts of things about what you point your camera at. Press and hold the camera button for a second or two to launch Visual Intelligence. Frame what you want information about and press the shutter button (the Camera Control button or the on-screen shutter button). The information you get depends on your subject and takes into account details like your location. If you point it at a restaurant, for example, you might get its Yelp rating, hours of operation, some photos of it, and even the option to make a reservation or order from the menu. For random objects, you’ll usually see two buttons at the bottom of the screen: Ask and Search. Search performs a Google Image Search for similar images. Ask will ask ChatGPT about your image (after prompting you for permission first). A ChatGPT prompt at the bottom of the screen will let you ask specific follow-up questions like “how much does this cost” or “how many calories are in this?” Foundry ChatGPT makes Siri much smarter ChatGPT integration into Siri really makes it a lot more useful. Siri is good at knowing what’s on your calendar or in your text messages and can give you some general information from the internet, but it’s quite limited. ChatGPT knows nothing about what’s on your iPhone, but it knows a basically everything about the world at large (except for recent events). You can ask Siri a question, and if it doesn’t know the answer, it will prompt you to use ChatGPT instead. You can even browse your Photos library and ask all sorts of things about one of your photos or ask about what’s on your screen (websites and such). You’ll always be prompted to send your photo or a screenshot to ChatGPT to get the answer. If you don’t want the prompts before every time Siri asks ChatGPT, open Settings > Apple Intelligence & Siri > ChatGPT and disable the “Confirm ChatGPT Requests” option. You’ll still be prompted before sending images or screenshots, though. If you’re a ChatGPT subscriber you can log in here to get the full benefits of your account. If not, you can still use ChatGPT, even without an account, you’ll just be limited as to how many advanced requests you can make in a 24-hour period. You can even tell Siri to have ChatGPT generate images, which will use OpenAI’s advanced DALL·E 3 engine. Foundry

Read more »

Best cloud or online storage service for Mac and iPhone
Macworld These days cloud storage is all the rage, offering the convenience of access to your digital files without having to clog up your mobile devices’ storage. It’s also particularly useful now that so may of us work from home and need to be able to access our data outside the office. Provided you’ve got internet access, everything is hunky-dory. A good cloud storage solution backs up your important documents, photos, and videos, but it also helps keep all your devices in sync. It’s a great way to make sure your desktop, laptop, phone, and tablet all have instant access to all your digital content. It should also allow you to access and edit documents from a web browser and easily share files and folders with others. Another reason to use a cloud service – or any service that offers offsite back up for your Mac – is that it protects your data if something happens at the location where your Mac and backup are located. PROMOTIONSecure Cloud Storage for Growing Businesses Get ample space for all your files with Google Workspace. Enjoy up to 5 TB of secure cloud storage, plus business versions of Gmail, Calendar, Meet, and more. Now with Gemini for Workspace to boost productivity with AI. Try free for 14 days Owners of Macs, iPads and iPhones will naturally tend to favour iCloud, Apple’s own cloud service, because it’s so well integrated with those devices’ operating systems. Here’s our full guide to using iCloud and here is iCloud’s current pricing structure. However, iCloud only really syncs your data and it isn’t a way to back up your Mac. If you want to back up your Mac to the cloud you need to look at options like Backblaze, Carbonite and Acronis included below and in our guide to the Best Mac backup software. You may only be looking for a way to store a few items so you can access them anywhere, or so you can share them with others, in which case iCloud and other options like Google Drive and Microsoft One Drive could meet your needs. In this article, we round up all the best iCloud alternatives: the cloud storage services for Mac, iPhone and iPad that offer the most appealing combination of price, features, security and reliability. If you use Apple products, we think these are the best cloud storage solutions to which you should subscribe. We are starting with iCloud because Apple’s service is simple to use and mostly intuitive. It’s available on all Apple products and syncs all your data – as long as you have enough iCloud storage. It doesn’t act as a backup for your Mac, but you can access a backup of your iPhone or iPad via iCloud. Read: Time Machine vs iCloud: Do you need to use both and can one back up to the other? Read on to find out what the alternatives offer. Apple iCloud Drive – Best for Apple fans Price When Reviewed: Free (5GB), 99c (50GB), $2.99 (200GB), $9.99 (2TB), $29.99 (6TB), $59.99 (12TB) a month Best Prices Today: Retailer Price Apple (Monthly) $0.99 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket $0.99 at Apple (Monthly) View Apple iCloud here As an Apple user, you’ll have heard of iCloud, but we don’t blame you if you find it confusing. It’s Apple’s own cloud-based storage system, and if you own an iPhone or iPad and have an Apple ID, you’ll already have 5GB free storage. It’s the easiest way for those bought into the Apple ecosystem (users of iPhone, iPad and Mac) to sync contacts, notes, files, photos and more across devices and access them on all their devices. For example, you can use the Files folder on an iPhone or iPad to view all your files stored in the cloud. Because it integrates so seamlessly with all of Apple’s products and services, iCloud really is the best cloud storage solution for someone who is all-in with Apple. And I do mean all-in: All your computers are Macs, your mobile devices are iPhone or iPads, you work in Apple’s productivity software (Pages, Numbers, Notes), and so on. Frustratingly, Apple only provides a paltry 5GB of free iCloud storage, which isn’t so bad if all you want to do is store some Pages and Numbers documents, but is grossly inadequate for photos and videos. Apple is years overdue for increasing this limit (Google offers 15GB free), but at the very least, it should stop counting iOS backups against it. Since the fall of 2021, Apple has offered to “loan” you as much iCloud storage space as you need to backup and restore your data onto a new device, for up to two weeks. It’s a good feature for those buying a new Apple device, but it won’t help you protect your data if your iPhone gets lost/stolen/damaged. From there, it’s $0.99/£0.99 per month for 50GB, $2.99/£2.99 for 200GB, $9.99/£8.99 for 2TB, $29.99/£26.99 for 6TB and $59.99/£54.99 for 20GB. See: iCloud storage plans. You can enable family sharing on the 200GB and above plans—if you do, it doesn’t mean your family members can see all your cloud stuff. It just means your whole family’s iCloud usage will count against the same storage limit. These paid tiers are branded “iCloud+” and include several benefits. There’s iCloud Private Relay, free storage for HomeKit enabled security cameras, a Hide My Email feature, custom domain names for iCloud email accounts, and additional contact options for recovering your account. These are all excellent features that help solidify our view that iCloud is by far the best choice for those who are all-in on Apple devices. The main benefit of paying for more iCloud storage is that nearly all of Apple’s apps can seamlessly sync through it. Photos, productivity apps, Mail, Calendar, and anything you drop into your iCloud Drive folder in Finder on a Mac are immediately available across all your Apple devices. A significant number of iOS apps optionally back up and sync through iCloud, too. If you use non-Mac computers or non-iOS mobile devices from time to time, Apple provides a full suite of web apps at iCloud.com, but they’re sort of mediocre. Apple also provides an iCloud Windows app that syncs data and integrates your iCloud mail with common Windows apps like Outlook, but there are no native productivity apps for Windows or Android: If you want to edit a Pages document, you have to use the web interface. We like using iCloud, but we also pay for it. Most decent cloud services require you to pay a small fee. If you’re a heavy Apple user, you might consider the Apple One service bundle. It’s much more than a cloud storage solution, and thus beyond the scope of this article, but the value offered may tip the scales in iCloud’s favor for you. Read our full Apple iCloud review Google Drive – King of Cloud Price When Reviewed: Free (15GB), $1.99 (100GB), $2.99 (200GB), $9.99 (2TB) a month. If you don't see the 200GB deal select 100GB and upgrade from that. Best Prices Today: Retailer Price Google (monthly) $1.99 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket $1.99 at Google (monthly) View Google Drive here While the idea of using Google’s tools on Apple hardware may make some squirm, it’s deep integration with Google Docs, Sheets, and other popular Google tools means it’s never been easier to share a document with a colleague, collect feedback, and make amendments.  Google’s system, alongside Dropbox and OneDrive, is arguably one of the most common file-sharing options. It’s much more prevalent than, say, iCloud Drive, making it much more useful across multiple platforms. If your workflows and job require any degree of rapid sharing of files back and forth, it’s a perfect fit. Outside of work, Google Photos may also appeal as a nice backup option to have, but it’ll start to eat into your storage pretty quickly. That said, Google Drive does comes with a whopping 15GB of free storage – that’s triple what Apple offers for free on iCloud Drive. 15GB is plenty generous, but you can enjoy 100GB for just $1.99/£1.59 a month, 200GB for $2.99/£2.49, and 2TB for $9.99/£7.99 per month. There’s even a massive 30TB for $150 a month. You can use Google Drive on Mac through a dedicated app, or via the web interface. Whether you’re on Mac, iPhone, iPad, or just about any other platform, Google Drive remains the best option around. Read our full Google Drive review Microsoft OneDrive – Cloud storage home workers Price When Reviewed: Free (5GB), $1.99 (100GB), $6.99 (1TB) a month Best Prices Today: Retailer Price Microsoft (monthly) $1.99 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket $1.99 at Microsoft (monthly) View Microsoft OneDrive here If you need a cloud plan for a family or small team, and you’re already leaning on Microsoft’s Office apps, then OneDrive is a great option. One of the best parts of OneDrive is that it opens up the Office ecosystem, both for Mac and iPhone or iPad. With access to Microsoft mainstays like Word, Excel, and with those apps using OneDrive to sync across platforms, it’s got potential for the workplace – or for families with kids working on school projects. If you’re not keen on Google Docs or Sheets, or Apple’s Pages and Numbers, having Word and Excel documents spread across your devices could be a huge boon. The 5GB base storage is painfully low for free users (although still better than Dropbox’s 2GB). Microsoft clearly wants to nudge you to one of its paid plans. You can spend $99.99/£79.99 per year to get access to Word, Excel, PowerPoint, Outlook and more, with 1TB storage per person for up to six people (6TB total). Alternatively, the Microsoft 365 Personal version with 1TB storage costs $69.99/£59.99 a year, and Microsoft 365 Basic is $19.99/£19.99 a year for 100GB cloud storage. Whichever option you go for, OneDrive is a model citizen when it comes to macOS. The app is lightweight and sits in Finder for you to drag and drop as you see fit. While it’s not as intuitive as Google Drive, if you’re using Microsoft Office to any degree you’ll find a lot to like. Read our full OneDrive review IDrive – Online backup Price When Reviewed: Basic: Free; IDrive Mini: $2.95 (100GB) | $9.95 (500GB) a year; IDrive Personal: $69.65 (5TB) a year Best Prices Today: Retailer Price iDrive (Annually) $2.95 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket $2.95 at iDrive (Annually) View IDrive here. lDrive is another online backup service. However, it differs from both Backblaze and Carbonite in a number of ways. Firstly, it has a free tier – you can back up 5GB without paying anything. After that, though, it’s more expensive than either of its competitors featured here. Currently, the annual charge for the Personal tier is $59.62 (approx £46) for the first year and $79.50/year (approx £61) after that, but that only allows you to backup 5TB of data, while Backblaze and Carbonite allow unlimited data. However, that 5TB can be spread across multiple computers, whereas Backblaze and Carbonite limit you to one computer. Also, if you prefer to restore by having data physically shipped to you, lDrive provides that for free for the first restore each year – though if you’re outside the US you’ll have to pay for the shipping. Like Backblaze, lDrive also allows you to back up external hard drives. Even with external drives backing up, it’s unlikely most people will breach the 5TB limit – bearing in mind that you’re not backing up applications or system files. Features like Rewind and Snapshots allow you to restore from earlier versions of files or snapshots of the complete data set. And all data is encrypted, with the option to set your own private encryption key. lDrive’s user interface makes using it very straightforward. Your Desktop, Documents, Music and Pictures folders are automatically selected for backup, along with the contents of ~/Library/Mail. To add other folders, click ‘Change’ at the bottom of the window – that’s not exactly intuitive. You can add videos to the backup, but locating them in lDrive’s interface takes a great deal of doing. Both scheduling and restoring are straightforward, however. As is choosing a local drive as the destination for a backup in place of lDrive’s servers. lDrive’s free tier and the ability to spread your data allocation in the paid tiers across multiple computers makes it attractive. Overall, though, it’s expensive for a single machine. Read our full IDrive review Box – Best for businesses Price When Reviewed: Free (10GB, limited to 250MB files), $14 (100GB) a month Best Prices Today: Retailer Price Box (monthly) $14 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket $14 at Box (monthly) View Box here One of the best cloud storage options for businesses, Box, has a whole host of excellent tools and is probably the most slick and well-supported cloud-based storage service we’ve tested, but it might go beyond a general consumer’s needs.  Box’s incorporates a host of security options, API calls, and over 1,500 integrations across office mainstays like Slack, Google Workspace, Microsoft Office apps and Zoom, so it’s an easy pick for anyone looking for a “plug-and-play” solution for file-sharing across larger teams. It’s essentially a menu bar app that can pop out into a handy search bar to trawl through anything inside your Box folder, which will also appear in your Finder sidebar. A keyboard shortcut brings up the search bar, so Box is always just a keypress away.  There’s a note section that syncs across devices and a document signing tool that’s very handy if you’re exchanging a lot of contracts. It’s secure, too, with encryption standard across all plans and end-to-end encryption offered via Box KeySafe so users can issue their own encryption keys. The web app is fast and stable (unlike some rivals) making shifting files between folders when away from the Mac much simpler. Box offers a very generous free plan offering 10GB of storage and a 250MB file upload limit, but the next tier up is $14/£11 monthly for individuals ($10/£8 per month if you pay annually), which is a steep increase compared to the likes of Google Drive.  Box nails just about anything you could want from a cloud storage service in 2025. It’s fast, secure, and gets out of the way when you need it to, making it an easy pick for businesses. Read our full Box (Cloud Storage) review Backblaze – A good solution for offsite backup Price When Reviewed: $99 a year, $9 a month Best Prices Today: Retailer Price Backblaze (yearly) $99 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket $99 at Backblaze (yearly) View Backblaze here. Offerings like OneDrive, Google Drive, and even Apple’s own iCloud Drive offer a cloud-based storage area that can also be used to share files between users, usually with a link to a specific spot. Others, like Backblaze a storage service in the strictest term – it takes your data, ferries it off-site, and backs up your Mac to its servers. It’s not for quickly sharing a document or collaborating on a piece of work, it’s for recovering data you may lose if something happens to your local machine. While you could share a file with Backblaze, doing so requires using Backblaze’s separate B2 Cloud Storage service which, admittedly, comes with flexible, pay-as-you-go options. Backblaze backs up the contents of your Documents, Pictures, Movies and Music folders, but excludes your Applications folder. You can view and share backed up files on an iPhone or iPad with the Backblaze mobile app. Backups are incremental so only files that have changed since it last ran are copied. Backups are encrypted and kept for 30 days. When it comes to restoring your data you can restore via Backblaze’s web interface or you can have files sent to you on a USB stick or hard drive for an additional (refundable) fee. A Find My-like Locate your Computer service tracks your Mac’s location to help you find it if it’s stolen. The Mac can tell you its current IP address and show you recently backed-up data. If you need an offsite back up of your Mac, Backblaze’s simplicity and price give it the edge over Carbonite and IDrive. Read our full Backblaze review pCloud – Budget-friendly cloud storage Price When Reviewed: Free (10GB), $4.99 (500GB), $9.99 (2TB) a month Best Prices Today: Retailer Price pCloud Free View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket Free at pCloud View pCloud here pCloud might not be as familiar a name as some of the others on this list, but trust us, it’s one you should definitely learn. The service handles all kinds of files with ease and uses 256-bit AES encryption to ensure that they remain safe while online. The basic tier comes with 10GB of free storage, albeit with the need to unlock 3GB of this via a few tasks, such as informing friend about the joys of pCloud. To be honest, this is not much of a drag, as your friends will probably thank you in the long run. There are no pesky file size restrictions, and 30-day versioning is standard, so if you accidentally delete a file you’ll be able to recover it even after a few weeks. If 10GB isn’t enough then you can move to 500GB for $4.99/£4.99 p/m ($49.99/£49.99 a year right now) or there’s 2TB available for $9.99/£9.99 ($99.99/£99.99 a year right now). Like pretty much all the services in this roundup, there’s a free trial available that lets you see if the service fits your needs. We recommend you give each one a spin, and if you don’t mind a bit of file juggling then you might find that using the combined free tiers of all of them gives you enough storage for all your data needs. Dropbox – the original cloud syncing service Price When Reviewed: Free (2GB), $9.99 a month for a year (2TB, $119.88 paid up front), $11.99 a month (2TB, paid monthly) Best Prices Today: Retailer Price Dropbox (monthly) $9.99 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket $9.99 at Dropbox (monthly) View Dropbox here No discussion of cloud storage solutions would be complete without discussing the company that popularized consumer cloud syncing: Dropbox. Dropbox is the app that kickstarted the cloud storage arms race , but in recent years it has been usurped somewhat.  A stalwart for many modern workflows, Dropbox remains a reliable way to sync data and files to the cloud, but it gets harder to recommend if you are looking to share files with others, as a backup solution, or as a means to access your content from wherever you are. It just doesn’t offer any must-have features and rivals have much more generous free tiers. The paltry 2GB starting offering is way behind Google’s 15GB. The next their up is 2TB for  $11.99/£9.99 per month (billed monthly), or $9.99/£7.99 a month if you pay for a year upfront. It’s a big leap with no options in between.  There is some good. Dropbox offer a sizeable drop-down window so you can see more information about recently uploaded and updated files, compared to the basic menu bar apps of the competition. Features like PDF signing are useful additions. Unfortunately, Dropbox just doesn’t feel as straightforward to use as many other cloud storage services. Read our full Dropbox review Acronis Cyber Protect Home Office Price When Reviewed: From $49.99 a year 1 Mac, no cloud storage; Advanced: $57.99 a year, 1 Mac 50GB cloud storage; Premium: $124.99 a year, 1 Mac, 1TB cloud storage Best Prices Today: Retailer Price $8 View Deal Acronis $39.99 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket $8 at Amazon$39.99 at Acronis View Acronis here. Note December 2024: This review is of Acronis Cyber Protect Home Office, which was previously known as True Image. The latest version of the service reverts to the old name: True Image. We are in the process of reviewing the new version of the software. Cyber Protect Home Office is a personal backup solution that supports backing up your data to a local disk, to Acronis’ cloud-based service, or to a network-attached storage device. The latter makes it a good option for anyone with a NAS that doesn’t support Apple’s Time Machine. You’ll need to set up an account with Acronis to use it, but you can give it a spin without signing up for its paid-for service or even providing payment details, by using the free trial to back up to a local drive or network disk. If backing up files is one part of the data protection equation, then the other is protecting those files, wherever they reside, from cyber-attack, and that’s what Cyber Protect Home Office was designed to do. It will scan existing data for malware, monitor files you interact with online, detect ransomware and cryptojacking attacks, and perform assessments of the vulnerability of your data to being compromised. In addition to the security features, Cyber Protect Home Office allows you to backup Office 365 files to Acronis Cloud, clone your startup disk (either a bootable clone or a compressed image), and synchronise files locally or with cloud storage. It also allows you to create what it calls a Survival Kit – a bootable disk with all your system, or a partition, and file backup. Cyber Protect Home Office is very straightforward to use. Its interface is about as straightforward and friendly as they come. The first time you open it, your Mac is selected as the source. Click the Destination button to choose whether to back up to Acronis Cloud, a local drive or a NAS box. If you don’t want to create an image of your entire Mac, click on the source box to choose files and folders to back up. From here, you can also back up external disks, a mobile device to your Mac, or your social media accounts to Acronis Cloud. Click on the settings icon and you can schedule regular backups, exclude files, encrypt backups or delete old backups. Pricing starts at $49.99/£42.99 per year per computer, but that doesn’t include cloud storage. If you want to use Acronis Cloud, you’ll pay a yearly subscription ranging from for Advanced cover at $57.99/£62.99 for one computer and just 50 GB of cloud storage to $124.99/£106.99 for Premium cover for one computer with 1TB storage. Additional storage costs around £30/$30/year/TB. Acronis Cyber Protect Home Office combines the best of local and online backup tools and offers lots of other features, such as protection from malware and other online threats. It’s not cheap, and the removal of the one-off payment option makes it more expensive to get started. However, it’s comprehensive, easy to use and well-worth considering. Carbonite Safe Price When Reviewed: $71.99 per year (Basic) Best Prices Today: Retailer Price Carbonite $71.99 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket $71.99 at Carbonite View Carbonite here. Carbonite is very similar to Backblaze in that it allows you to back up your Mac to remote servers and recover files when you need to. Like Backblaze, you sign up for an account and download a Mac application, and it automatically selects files to download. Also like Backblaze, Carbonite doesn’t back up applications or system files. One key difference is that Carbonite’s basic plan doesn’t automatically back up the contents of your Movies folder either – although you can select videos manually to be backed up. Neither does Carbonite back up the contents of external drives. Files are protected with 128-bit encryption, but there’s no option to add your own password. Restoring data is done online, using the Carbonite application – the option to ship media containing your data is only available within the US. And you can restore from any backup run within the last 30 days, allowing you to roll back to earlier versions of files. The Carbonite mobile app allows you to view and download files to an iPhone or iPad. Carbonite is very simple to use. In fact, it almost feels too simple. Download the app, install it and launch it, and Carbonite starts backing up your Documents and Pictures folders straight away. In the left-hand sidebar, there’s a list of volumes and the main user folders (Desktop, Documents, Pictures, Movies and Music). By clicking on those you can select files to be backed up or excluded. Restoring files is just as easy. If you want to restore a complete backup, click the Restore option in the sidebar and choose whether to download files to a folder or put them back where they were originally. To restore individual files and folders, navigate to them using the folders in the sidebar and choose the download option. Carbonite, at the time of writing starts at $71.99 (approx £55) per year for a single computer. If you want to back up external drives and back up videos automatically, that jumps to $111.99 (approx £86). That makes it expensive compared to its nearest competitors. Cloud storage for Mac: Prices compared The cloud storage option you should choose depends largely on how much you’re willing to pay. If you want free space, Google crushes the competition with 15GB—Microsoft and Apple both need to up their game. The 100GB for $1.99 level is a good deal for most people and equals the capacity Microsoft gives you with OneDrive. Apple’s iCloud gives you 200GB for $2.99, which is the minimum you’re going to have to spend if you plan to back up iOS devices to the cloud along with photos and videos. Google matches Apple’s price and storage at this level. There’s a $0.99 tier below that, but even 50GB will fill up fast when you’re backing up your iPhone and all its photos and videos.  If you want to spend ten bucks a month, you’ll get 2TB from either Google or Apple, but Microsoft will give you six accounts with 1TB each, plus Office apps. That’s a sweet deal. Dropbox’s 2GB is the worst free tier, and its cheapest paid tier is $11.99 a month and doesn’t even include all of Dropbox’s features. TieriCloudGoogle One DriveMicrosoft One DriveBoxpCloudDropBoxFree5GB15GB5GB10GB10GB2GB50GB99c / 99p100GB$1.99 / £1.59$1.99 / £1,99$4.50 / £5.50200GB$2.99 / £2.99$2.99 / £2.49500GB$4.99 / £4.991TB$6.99 / £5.992TB$9.99 / £8.99$9.99 / £7.99$9.99 / £9.99$9.99 / £7.99 For more advice about the best storage for your Mac take a look at the following: Best SSD for Mac Best hard drive for Mac Best NAS drive for Mac

Read more »

Apple releases macOS 15.2 Sequoia update
Apple’s long-awaited macOS 15.2 Sequoia update landed yesterday, and if you have a Mac featuring an M-series chip, you’re good to go to run it. Here are the new fixes and changes found in the update: Image Playground: ChatGPT support: Additional Apple Intelligence features: All the rest of macOS 15.2’s new features: Photos: Safari: This […] Source

Read more »

Apple releases iOS 18.2, iPadOS 18.2 updates
You’ve been hankering for them and they’re here. On Wednesday, Apple released iOS 18.2 and iPadOS 18.2, the latest version of its mobile operating system updates. The updates, which add a slew of changes and additional Apple Intelligence updates, contain the following new fixes and features: If you’ve had a chance to try either of […] Source

Read more »

Ultimate Apple Charging – Holiday Deals You Can’t Miss!
Macworld As more devices enhance our working and personal lives, so more cables and individual chargers clutter our desks and homes. Put all those away in your drawer because a new flexible series of multi-device chargers promises to not only declutter your working space but speed up charging and boost your productivity. The Baseus Nomos family of chargers brings innovation and efficiency to the muddle of modern-day life for all Apple users, and each one is currently available with huge holiday savings. View Baseus Holiday Deals Baseus Nomo 5-in-1 Desktop Charger Qi2 140W – 33% off Baseus The new lynchpin of your desk should be the super-versatile Baseus Nomos 5-in-1 Desktop Charger Qi2 140W—one of the most compact and flexible charging stations we’ve seen. It has five charging points, including an adjustable 15W wireless iPhone charger that utilizes the latest MagSafe-friendly Qi2 magnetic technology embraced by Apple and other top manufacturers. This can lay flat when not in use or double-up as a charger for your AirPods or other wireless devices. The unique Nomos 5-in-1 beats all other desktop chargers by boasting a 2.6-foot (0.8m) retractable USB-C cable that is hidden from sight when not in use but can power a laptop or other devices at up to 100W. It pulls out and magnetically snaps back in a smooth and quiet operation. Baseus One of the two other USB-C ports is rated at 140W PD 3.1 so can be used to fast-charge a large laptop such as a 16-inch Apple MacBook Pro at full speed. The other USB-C port is rated at 100W. And there’s a powerful 15W USB-A charging port for legacy devices. As if this charger wasn’t smart enough already there’s a detailed display that shows the real-time charging speeds of each output. Unlike most desktop chargers, the Nomos 5-in-1 is highly portable as its power cord is detachable. The unit measures 4.7 x 3.5 x 1.6 inches and weighs just over 1lb. Right now the Baseus Nomos 5-in-1 Desktop Charger Qi2 140W is available at a 33% discount for just $99.99, down from $149.99. It is also available from Amazon. View Deal Baseus Nomos 8-in-1 Charging Station – Qi2 67W – 40% off! Baseus Another travel-friendly Nomos power solution is the super-slim Baseus Nomos 8-in-1 Charging Station Qi2 67W that can power and charge up to eight devices simultaneously. Imagine being able to pull out of your bag an AC power strip with three spare power sockets, as well as three USB-C ports and one 12W USB-A. Two of the USB-C ports are rated high enough to charge a laptop at up 67W. On top of that is an adjustable 15W Qi2 magnetic wireless iPhone charger that can be laid flat for easy portability. Get a great discount on the Baseus Nomos 8-in-1 Charging Station Qi2 67W, which is available at a 40% discount for just $59.99, down from $99.99. It is also available from Amazon. View Deal Baseus Nomos Magnetic Power Bank Qi2 45W 10000mAh – 30% off! Baseus While both the 5-in-1 and 8-in-1 Nomos desktop chargers can be slipped into a bag, the flexible Baseus Nomos Magnetic Power Bank Qi2 45W 10000mAh can be carried in your pocket. Its 10K battery capacity can recharge a phone nearly twice over. This sleek top-end power bank—available in either Black or Silver—features ultimate phone charging speeds, offering the best of both worlds: 15W Qi2 wireless charging plus up to 45W wired charging via its built-in retractable USB-C cable. There’s also a side-mounted USB-C port so that you can charge three devices at the same time: via wireless, USB-C cable and USB-C port. This port is powerful enough to add extra life into even a connected MacBook. As if that isn’t useful enough, the alim airline-approved power bank—measuring just 4.8 inches long and 2.67 inches wide—features a pull-out stand so you can set your charging phone in either landscape or portrait orientations. Right now there is a great deal on the Baseus Nomos Magnetic Power Bank Qi2 45W 10000mAh, which is available at a 30% discount for just $69.59, down from $99.99. It is also available from Amazon. View Deal Baseus Nomos Retractable USB-C Cable – 31% off! Baseus Alongside the two versatile desktop chargers and flexible 10K power bank, the Baseus Nomos Retractable USB-C Cable is another compact charging solution that we would recommend to any digital workplace or home and travel environment. Rated high enough to support 100W laptop charging this durable, tangle-free and easy-to-store 4.9-foot (1.5m) cable is kept desktop- and pocket-friendly by retracting into a compact body. Get yourself a great discount on the Baseus Nomos Retractable USB-C Cable, which is available at a 31% discount for just $19.99, down from $28.99. It is also available from Amazon. View Deal Versatility, efficiency, power and portability Each of the Baseus Nomos power solutions will make your work and home lives cleaner, more flexible and highly efficient, while opening up practical opportunities in portability and travel. Black Friday is the perfect time to reward yourself with one of these charging solutions or spread the efficiency by making a gift that will keep on giving all year round. Check out the Baseus holiday sale View Offers

Read more »

Google Maps rolling out new teal accent color on Android, iOS
Like other first-party apps that lack Dynamic Color theming, Google Maps currently uses a blue accent for buttons and other UI elements, but that looks to be changing to teal.  more…

Read more »

MacBook Air likely to get an upgraded Center Stage camera in 2025
Macworld The 2025 MacBook Air is expected to be a chip upgrade to the M4, but according to a new report, the release will feature another new feature. According to AppleInsider, regulatory documents that they obtained mention a “Front Ultra Wide Camera” for the upcoming MacBook Air. That’s different from the 1080p FaceTime camera in the current M3 MacBook Air, which could mean that the M4 MacBook Air will feature an upgraded camera. With the M4 MacBook Pro and M4 iMac, Apple upgraded the 1080p FaceTime camera to a 12MP Center Stage camera, so it’s not much of a leap to think that Apple will also outfit the M4 MacBook Air with a Center Stage camera as well. There was some speculation that Apple might not upgrade the Air’s camera to differentiate the laptop further from the 14-inch M4 MacBook Pro, but that doesn’t seem to be the case. AppleInsider also points out that references to the upcoming M4 MacBook Air are in the code of the macOS Sequoia 15.2 update that was released on Wednesday. That makes it practically certain that Apple will release the laptop, it’s just a matter of when (probably in the March-April-May timeframe). Apple released the M3 MacBook Air in March of 2024. Get the lowdown on the upcoming M4 MacBook Air.

Read more »

Holiday Deal Hub: Exclusive offers on the best accessories and apps for iPhone, iPad, Mac, and more [Updated]
Welcome to the 2024 9to5Mac Holiday Deal Hub. We have once again secured readers a load of exclusive deals on some of our favorite Apple gear accessory brands ahead of the holidays. Whether you’re looking to get a new leather or stainless steel Apple Watch band under the tree, some of the best iPhone 16 cases you’ll find anywhere, a gorgeous leather MacBook cover for all of the latest releases, or even some EDC upgrades, there’s something for just about everyone here. We are also featuring some sweet home entertainment gear and accoutrements to upgrade your home office as well – this hub will be updated regularly leading up to the big day come month’s end so be sure to check back as we do have some timed exclusive sale events starting later this week as well. more…

Read more »

Dads are going wild over this indestructible titanium pen
Macworld How often do you have a pen when you need one? When pocket real estate is at a premium, a full-sized pen probably isn’t the first thing you grab in the morning.  If you want to make sure you always have a pen, get the ForeverPen™. This little pen earns its name. It’s made of titanium with a unique inkless design that lets you write on almost anything, and look how little it is. Pop this pen on your keychain, especially now that they’re only $23.99 (reg. $40).  Whether you need to jot down a quick note, sign a check, or even write underwater, the ForeverPen is up to the task. Its inkless design means it writes permanently without smudging and works on almost any surface, from paper to plastic. And did we mention it’s made of titanium? That’s not just for looks. You can also use this pen to slice open boxes.  The pen really is mightier than the sword.  Get a ForeverPen™ on sale for $23.99.    ForeverPen™ Tiny Inkless Pen & Multi-Tool – $23.99 See Deal StackSocial prices subject to change. 

Read more »

The most practical gift idea: this laptop docking station that offers 13 adapters in 1
Macworld Are you tired of dragging multiple dongles around just to connect your laptop to a monitor, mouse, or transfer files? You could eliminate your dongle nightmare by upgrading to this 13-in-1 docking station. It might just turn your laptop into a desktop with all its connectivity options, and it’s now only $44.97 (reg. $70). Order it for yourself or as a stocking stuffer by December 15 to get it by the holidays! Rather than rummage through your bag for your arsenal of adapters—or worse, realize you forgot the one you needed—you could have all your connectivity needs met with this singular docking station. Just plug it into your laptop’s USB-C port, and from there, you can have your laptop screen displayed via a projector or TV with its two HDMI ports with 4K@30Hz and a VGA port with 1080p@60Hz. Want to charge your smartphone with your laptop? Use the 100W USB-C port and transfer photos and files with the USB 3.0 connection. Your connection, transfer, and viewing opportunities are nearly endless. Ditch the dongles and adapters for good by grabbing yourself or someone on your shopping list this 13-in-1 docking station, now just $44.97 while supplies last. Purchase on or before December 15 at 11:59 PM Pacific for guaranteed holiday delivery. 13-in-1 Docking Station with Dual HDMI Only $44.97 at Macworld StackSocial prices subject to change.

Read more »

The Information Suggests, in an Aside, That Apple Scrapped Work on a Quad-Max/Double-Ultra M-Series Chip
Reporting from The Information suggests that an M-series tier above Ultra might remain years away.

Read more »

Apple reportedly join forces with Broadcom for AI server chip
Apple is working closely with Broadcom on an AI chip, a move that reportedly led to the cancellation of the M4 Extreme SoC for high-end Macs. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

How to set parental controls on iOS 18 and iPadOS 18
Apple provides parental controls in iOS and iPadOS to set content and behavior restrictions for children's devices. Here's how to get started.Most of the settings for content and privacy restrictions fall under Screen Time. Introduced in iOS 12, Screen Time records how much time a user spends on their device.It can be configured to monitor and limit the time spent on any apps, which is great for checking how much time a child spends gaming or hanging out on social media apps. Additionally, it tracks notifications received. Continue Reading on AppleInsider

Read more »

Congress asking Apple and other big tech what they're doing about deepfakes
Pointed letters from Congress have been sent to tech executives like Apple's Tim Cook, stating concerns over the prevalence of deepfake non-consensual intimate images.Non-consensual intimate images being made with apps on iPhoneThe letters stem from earlier reports about nude deepfakes being created using dual-use apps. Advertisements popped up all over social media promoting face swapping, and users were using them to place faces into nude or pornographic images.According to a new report from 404 Media, the US Congress is taking action based on these reports, asking tech companies how it plans to stop non-consensual intimate images from being generated on their platforms. Letters were sent to Apple, Alphabet, Microsoft, Meta, ByteDance, Snap, and X. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

9to5Mac Daily: December 11, 2024 – iOS 18.2 officially launches, Apple Watch rumors
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. From now through December 31, save 20% on all 9to5Mac Daily Plus, 9to5Mac Happy Hour Plus, and 9to5Mac Pro annual subscriptions with promo code HOLIDAY! Visit 9to5mac.com/join to sign up. more…

Read more »

New Genmoji ad showcases creations that definitely were not made with Apple Intelligence
Apple's latest ad shows off Genmoji, or at least the idea of generating whatever emoji you want with Apple Intelligence, but the creations shown are clearly not representative of the actual tool.These Genmoji aren't quite as fun as the ones shown in Apple's adThe playful ad seems to be overselling the potential results of Genmoji, which released with iOS 18.2. While some could be massaged into existence with trial and error, they never met the clean, animated results shown in the ad.The ad does a great job of selling the idea behind Genmoji, but it may leave viewers disappointed in the real thing. These colorful, sharp, animated creations made by human artists are miles ahead of anything that could be made by Apple's early attempt at AI. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

ChatGPT down for some users; iOS 18.2 integration affected
OpenAI has acknowledged that its popular AI chatbot, ChatGPT, is currently experiencing an outage, making the platform inaccessible to users all over the world. This issue has also impacted the integration with Siri following the public release of iOS 18.2 on Wednesday. more…

Read more »

PSA: There’s another update available for users running the latest iOS 18.2 RC build
As we recently reported, Apple released a second RC build of iOS 18.2 to developers and beta testers before releasing the update to everyone earlier today. Although the RC build is often the same as the one that becomes available to the public, this time beta users have another update to install on their devices. more…

Read more »

Apple promotes the newly launched Genmoji in a fun new iPhone 16 ad
Apple on Wednesday released iOS 18.2 to the public, and the update brings many more Apple Intelligence features to iPhone and iPad, including Image Playground, Genmoji and ChatGPT integrated into Siri. Genmoji is undoubtedly one of the most fun features of the update, and Apple is already promoting it in a new iPhone 16 ad. more…

Read more »

Microsoft Teams for iPad now supports external webcams
Microsoft this week released an update to the Teams app for that adds an important new feature. With the new version, Microsoft Teams users on iPadOS can now connect and use external webcams rather than the iPad’s built-in camera. more…

Read more »

Monument Valley 3 strains our brains with more gorgeous puzzles
Get ready for a mind-bending experience with Monument Valley 3, the latest edition of the beloved puzzle game franchise. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

iOS 18.2: New features for your iPhone (other than AI)
iOS 18.2 is now available to everyone, and the update is headlined by major new Apple Intelligence features. While those Apple Intelligence features are garnering most of the attention, there are other notable features now available on your iPhone. more…

Read more »

Errant reference in macOS 15.2 seems to confirm M4 MacBook Airs for 2025
Software reference could point to a release sooner rather than later.

Read more »

Here are Apple’s full iOS 18.2 release notes
Apple's iOS 18.2 update released Wednesday introduces new features powered by Apple Intelligence, the personal intelligence system… The post appeared first on MacDailyNews.

Read more »

How Cryptocurrency Turns to Cash in Russian Banks
A financial firm registered in Canada has emerged as the payment processor for dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services aimed at Russian-speaking customers, new research finds. Meanwhile, an investigation into the Vancouver street address used by this company shows it is home to dozens of foreign currency dealers, money transfer businesses, and cryptocurrency exchanges -- none of which are physically located there.

Read more »

Patch Tuesday, December 2024 Edition
Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing exploitation involves CVE-2024-49138, a security weakness in the Windows Common… Read More »

Read more »

U.S. Offered $10M for Hacker Just Arrested by Russia
In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as "Wazawaka," a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top ransomware purveyor a year later, offering $10 million for information leading to his arrest. Last week, the Russian government reportedly arrested Matveev and charged him with creating malware used to extort companies.

Read more »

Why Phishers Love New TLDs Like .shop, .top and .xyz
Phishing attacks increased nearly 40 percent in the year ending August 2024, with much of that growth concentrated at a small number of new generic top-level domains (gTLDs) -- such as .shop, .top, .xyz -- that attract scammers with rock-bottom prices and no meaningful registration requirements, new research finds. Meanwhile, the nonprofit entity that oversees the domain name industry is moving forward with plans to introduce a slew of new gTLDs.

Read more »

Vulnerability Summary for the Week of November 25, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Portfolio Management System MCA  A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2024-11-26 7.3 CVE-2024-11744 1000 Projects--Portfolio Management System MCA  A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgot_password_process.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-27 7.3 CVE-2024-11819 1000projects -- beauty_parlour_management_system  A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11646 1000projects -- beauty_parlour_management_system  A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11647 1000projects -- beauty_parlour_management_system  A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11648 1000projects -- beauty_parlour_management_system  A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11649 AbsolutePlugins--Absolute Addons For Elementor  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AbsolutePlugins Absolute Addons For Elementor allows Local Code Inclusion.This issue affects Absolute Addons For Elementor: from n/a through 1.0.14. 2024-11-28 7.5 CVE-2024-52496 Advantech--EKI-6333AC-2G  A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (securityEngineID to local_record.engineid without proper bounds checking. 2024-11-27 3 CVE-2024-36468 Zabbix--Zabbix  When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data. If the server's response is an empty document, then wd- >data in the code below will remain NULL and an attempt to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42328 Zabbix--Zabbix  The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd- >error will be NULL and trying to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42329 Zabbix--Zabbix  In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd- >browser heap pointer is freed by garbage collection. 2024-11-27 3.3 CVE-2024-42331 Zabbix--Zabbix  The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host. 2024-11-27 3.7 CVE-2024-42332 Zabbix--Zabbix  When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element. 2024-11-26 2.2 CVE-2024-22117 Zabbix--Zabbix  When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords. 2024-11-27 2.7 CVE-2024-36464 Zabbix--Zabbix  The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c 2024-11-27 2.7 CVE-2024-42333 Back to top Severity Not Yet Assigned PrimaryVendor -- Product Description Published CVSS Score Source Info autolab--Autolab  Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the download_all_submissions feature. This can allow for leakage of submissions to unauthorized users, such as downloading submissions from other students in the class, or even instructor test submissions, given they know their user IDs. This issue has been patched in commit `1aa4c769` which is not yet in a release version, but is expected to be included in version 3.0.3. Users are advised to either manually patch or to wait for version 3.0.3. As a workaround administrators can disable the feature. 2024-11-25 not yet calculated CVE-2024-53258 BoidCMS--BoidCMS  BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In affected versions a reflected Cross-site Scripting (XSS) vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to inject arbitrary JavaScript code. This code could be used to steal the user's session cookie, perform phishing attacks, or deface the website. This issue has been addressed in version 2.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-25 not yet calculated CVE-2024-53255 bunkerity--bunkerweb  bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated "next" parameter for redirects. Ex. visiting: `/loading?next=https://google.com` while authenticated will cause the page will redirect to google.com. This vulnerability could be used in phishing attacks by redirecting users from a legitimate application URL to malicious sites. This issue has been addressed in version 1.5.11. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-27 not yet calculated CVE-2024-53264 Century Systems Co., Ltd.--FutureNet NXR-G110 series  FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs. 2024-11-29 not yet calculated CVE-2024-50357 Checkmk GmbH--Checkmk  Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions type] may result in an out-of-bounds access. To spot such missed invocations early in the future, checking the validity of link- >type in bpf_link_show_fdinfo() and emitting a warning when such invocations are missed. 2024-11-25 not yet calculated CVE-2024-53099 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queue_lock lock and destroy Commit 76d54bf20cdc ("nvme-tcp: don't access released socket during error recovery") added a mutex_lock() call for the queue- >queue_lock in nvme_tcp_get_address(). However, the mutex_lock() races with mutex_destroy() in nvme_tcp_free_queue(), and causes the WARN below. DEBUG_LOCKS_WARN_ON(lock- >magic != lock) WARNING: CPU: 3 PID: 34077 at kernel/locking/mutex.c:587 __mutex_lock+0xcf0/0x1220 Modules linked in: nvmet_tcp nvmet nvme_tcp nvme_fabrics iw_cm ib_cm ib_core pktcdvd nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc ppdev 9pnet_virtio 9pnet pcspkr netfs parport_pc parport e1000 i2c_piix4 i2c_smbus loop fuse nfnetlink zram bochs drm_vram_helper drm_ttm_helper ttm drm_kms_helper xfs drm sym53c8xx floppy nvme scsi_transport_spi nvme_core nvme_auth serio_raw ata_generic pata_acpi dm_multipath qemu_fw_cfg [last unloaded: ib_uverbs] CPU: 3 UID: 0 PID: 34077 Comm: udisksd Not tainted 6.11.0-rc7 #319 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:__mutex_lock+0xcf0/0x1220 Code: 08 84 d2 0f 85 c8 04 00 00 8b 15 ef b6 c8 01 85 d2 0f 85 78 f4 ff ff 48 c7 c6 20 93 ee af 48 c7 c7 60 91 ee af e8 f0 a7 6d fd 0b e9 5e f4 ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 RSP: 0018:ffff88811305f760 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88812c652058 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffff88811305f8b0 R08: 0000000000000001 R09: ffffed1075c36341 R10: ffff8883ae1b1a0b R11: 0000000000010498 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88812c652058 FS: 00007f9713ae4980(0000) GS:ffff8883ae180000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcd78483c7c CR3: 0000000122c38000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ? __warn.cold+0x5b/0x1af ? __mutex_lock+0xcf0/0x1220 ? report_bug+0x1ec/0x390 ? handle_bug+0x3c/0x80 ? exc_invalid_op+0x13/0x40 ? asm_exc_invalid_op+0x16/0x20 ? __mutex_lock+0xcf0/0x1220 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx___mutex_lock+0x10/0x10 ? __lock_acquire+0xd6a/0x59e0 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx_nvme_tcp_get_address+0x10/0x10 [nvme_tcp] nvme_sysfs_show_address+0x81/0xc0 [nvme_core] dev_attr_show+0x42/0x80 ? __asan_memset+0x1f/0x40 sysfs_kf_seq_show+0x1f0/0x370 seq_read_iter+0x2cb/0x1130 ? rw_verify_area+0x3b1/0x590 ? __mutex_lock+0x433/0x1220 vfs_read+0x6a6/0xa20 ? lockdep_hardirqs_on+0x78/0x100 ? __pfx_vfs_read+0x10/0x10 ksys_read+0xf7/0x1d0 ? __pfx_ksys_read+0x10/0x10 ? __x64_sys_openat+0x105/0x1d0 do_syscall_64+0x93/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? __pfx_ksys_read+0x10/0x10 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? do_syscall_64+0x9f/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9713f55cfa Code: 55 48 89 e5 48 83 ec 20 48 89 55 e8 48 89 75 f0 89 7d f8 e8 e8 74 f8 ff 48 8b 55 e8 48 8b 75 f0 4 ---truncated--- 2024-11-25 not yet calculated CVE-2024-53100 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr- >ia_mode, attr- >ia_uid and attr- >ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0. 2024-11-25 not yet calculated CVE-2024-53101 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: nvme: make keep-alive synchronous operation The nvme keep-alive operation, which executes at a periodic interval, could potentially sneak in while shutting down a fabric controller. This may lead to a race between the fabric controller admin queue destroy code path (invoked while shutting down controller) and hw/hctx queue dispatcher called from the nvme keep-alive async request queuing operation. This race could lead to the kernel crash shown below: Call Trace: autoremove_wake_function+0x0/0xbc (unreliable) __blk_mq_sched_dispatch_requests+0x114/0x24c blk_mq_sched_dispatch_requests+0x44/0x84 blk_mq_run_hw_queue+0x140/0x220 nvme_keep_alive_work+0xc8/0x19c [nvme_core] process_one_work+0x200/0x4e0 worker_thread+0x340/0x504 kthread+0x138/0x140 start_kernel_thread+0x14/0x18 While shutting down fabric controller, if nvme keep-alive request sneaks in then it would be flushed off. The nvme_keep_alive_end_io function is then invoked to handle the end of the keep-alive operation which decrements the admin- >q_usage_counter and assuming this is the last/only request in the admin queue then the admin- >q_usage_counter becomes zero. If that happens then blk-mq destroy queue operation (blk_mq_destroy_ queue()) which could be potentially running simultaneously on another cpu (as this is the controller shutdown code path) would forward progress and deletes the admin queue. So, now from this point onward we are not supposed to access the admin queue resources. However the issue here's that the nvme keep-alive thread running hw/hctx queue dispatch operation hasn't yet finished its work and so it could still potentially access the admin queue resource while the admin queue had been already deleted and that causes the above crash. This fix helps avoid the observed crash by implementing keep-alive as a synchronous operation so that we decrement admin- >q_usage_counter only after keep-alive command finished its execution and returns the command status back up to its caller (blk_execute_rq()). This would ensure that fabric shutdown code path doesn't destroy the fabric admin queue until keep-alive request finished execution and also keep-alive thread is not running hw/hctx queue dispatch operation. 2024-11-25 not yet calculated CVE-2024-53102 Mozilla--Firefox  The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5. 2024-11-26 not yet calculated CVE-2024-11696 Mozilla--Firefox  On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133. 2024-11-26 not yet calculated CVE-2024-11703 msg Suisse AG--EasyTax  A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS. 2024-11-29 not yet calculated CVE-2024-9044 n/a--n/a  FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking. 2024-11-29 not yet calculated CVE-2024-35366 n/a--n/a  FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer 2024-11-29 not yet calculated CVE-2024-35367 n/a--n/a  FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. 2024-11-29 not yet calculated CVE-2024-35368 n/a--n/a  Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included in log entries without restrictions. 2024-11-29 not yet calculated CVE-2024-35371 n/a--n/a  LinkStack 2.7.9 through 4.7.7 allows resourcesviewscomponentsfavicon.blade.php link SSRF. 2024-11-29 not yet calculated CVE-2024-35451 n/a--n/a  A deserialization vulnerability exists in the Stub class of the VarDumper module in Symfony v7.0.3. The vulnerability stems from deficiencies in the original implementation when handling properties with null or uninitialized values. An attacker could construct specific serialized data and use this vulnerability to execute unauthorized code. 2024-11-29 not yet calculated CVE-2024-36610 n/a--n/a  In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic handling or denial of service. 2024-11-29 not yet calculated CVE-2024-36611 n/a--n/a  Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers. 2024-11-29 not yet calculated CVE-2024-36612 n/a--n/a  FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread. 2024-11-29 not yet calculated CVE-2024-36615 n/a--n/a  An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file. 2024-11-29 not yet calculated CVE-2024-36616 n/a--n/a  FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. 2024-11-29 not yet calculated CVE-2024-36617 n/a--n/a  FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. 2024-11-29 not yet calculated CVE-2024-36618 n/a--n/a  moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. 2024-11-29 not yet calculated CVE-2024-36620 n/a--n/a  moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion. 2024-11-29 not yet calculated CVE-2024-36621 n/a--n/a  In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter. 2024-11-29 not yet calculated CVE-2024-36622 n/a--n/a  moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes. 2024-11-29 not yet calculated CVE-2024-36623 n/a--n/a  nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c. 2024-11-29 not yet calculated CVE-2024-36671 n/a--n/a  MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking. 2024-11-29 not yet calculated CVE-2024-45495 n/a--n/a  WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file. 2024-12-01 not yet calculated CVE-2024-45520 n/a--n/a  OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files. 2024-11-27 not yet calculated CVE-2024-46054 n/a--n/a  Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the power(uct_int_t x, uct_int_t n) in src/uct_upstream.c. 2024-11-29 not yet calculated CVE-2024-48406 n/a--n/a  Incorrect access control in Adapt Learning Adapt Authoring Tool

Read more »

Hacker in Snowflake Extortions May Be a U.S. Soldier
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's identity may not remain a secret for long: A careful review of Kiberphant0m's daily chats across multiple cybercrime personas suggests they are a U.S. Army soldier who is or was recently stationed in South Korea.

Read more »

Feds Charge Five Men in ‘Scattered Spider’ Roundup
Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including LastPass, MailChimp, Okta, T-Mobile and Twilio.

Read more »

Fintech Giant Finastra Investigating Data Breach
The financial technology firm Finastra is investigating the alleged large-scale theft of information from its internal file transfer platform, KrebsOnSecurity has learned. Finastra, which provides software and services to 45 of the world's top 50 banks, notified customers of a potential breach after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen from the company. 

Read more »

Vulnerability Summary for the Week of November 11, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Beauty Parlour Management System  A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 7.3 CVE-2024-11100 1000 Projects--Beauty Parlour Management System  A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11257 1000 Projects--Beauty Parlour Management System  A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11258 1000 Projects--Portfolio Management System MCA  A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11256 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47441 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47442 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47443 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-45114 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47450 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47451 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47452 adobe -- indesign  InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49507 adobe -- indesign  InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49508 adobe -- indesign  InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49509 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47426 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47427 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47428 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47429 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47430 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47431 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47432 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47433 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47434 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49515 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49516 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49517 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49518 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49519 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49520 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49525 Adobe--Adobe Commerce  Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction. 2024-11-12 7.7 CVE-2024-49521 Adobe--Animate  Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49526 Adobe--Animate  Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49528 Adobe--Photoshop Desktop  Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49514 adonesevangelista -- agri-trading_online_shopping_system  A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the application's total price calculation logic. This vulnerability causes the total price to be reduced to zero, allowing the attacker to add items to the cart and proceed to checkout. 2024-11-14 7.5 CVE-2024-50968 algolplus--Advanced Order Export For WooCommerce  The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). 2024-11-13 8.1 CVE-2024-10828 amd -- ryzen_ai_software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21974 amd -- ryzen_ai_software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21975 AMD--AMD Cloud Manageability Service Software  Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21939 AMD--AMD Management Console  Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21957 AMD--AMD Management Plug-In for SCCM  Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21938 AMD--AMD Provisioning Console (APC) Software  Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21958 AMD--AMD Ryzen AI Software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 8.8 CVE-2024-21976 AMD--AMD Ryzen Master Monitoring SDK  Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21945 AMD--AMD Ryzen Master Utility for Overclocking Control  Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21946 AMD--AMD Software: PRO Edition  Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21937 AMI--AptioV  APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode. 2024-11-12 7.2 CVE-2024-42442 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 9 CVE-2024-51490 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating controllers. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51484 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating plugins. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51485 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL?-?Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.4 CVE-2024-51486 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51487 angeljudesuarez -- construction_management_system  A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter. 2024-11-13 7.2 CVE-2024-50971 angeljudesuarez -- construction_management_system  A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter. 2024-11-13 7.2 CVE-2024-50972 angeljudesuarez -- tailoring_management_system  A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability affects unknown code of the file /incadd.php. The manipulation of the argument inccat/desc/date/amount leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "inccat" to be affected. But it must be assumed "desc", "date", and "amount" are affected as well. 2024-11-11 9.8 CVE-2024-11074 anisha -- job_recruitment  A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument e_hash leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11076 anisha -- job_recruitment  A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11077 anisha -- job_recruitment  A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 9.8 CVE-2024-11099 anisha -- job_recruitment  A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 8.8 CVE-2024-11127 Anthony Carbon--WDES Responsive Mobile Menu  Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through 5.3.18. 2024-11-16 9.8 CVE-2024-52414 Apache Software Foundation--Apache Airflow  Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially exposing critical data that could be exploited to compromise the security of the Airflow deployment. In version 2.10.3, secrets are now masked in task logs to prevent sensitive configuration variables from being exposed in the logging output. Users should upgrade to Airflow 2.10.3 or the latest version to eliminate this vulnerability. If you suspect that DAG authors could have logged the secret values to the logs and that your logs are not additionally protected, it is also recommended that you update those secrets. 2024-11-15 7.5 CVE-2024-45784 Apache Software Foundation--Apache CloudStack  Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker that can register templates, can use them to deploy malicious instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.18.2.5 or 4.19.1.3, or later, which addresses this issue. Additionally, all user-registered KVM-compatible templates can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run the following command on their file-based primary storage(s) and inspect the output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. However, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives. for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "nn"; doneFor checking the whole template/volume features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "nn"; done 2024-11-12 8.5 CVE-2024-50386 Apache Software Foundation--Apache Traffic Server  Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue. 2024-11-14 9.1 CVE-2024-50306 Apache Software Foundation--Apache Traffic Server  Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-38479 Apache Software Foundation--Apache Traffic Server  Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-50305 Arttia Creative--Datasets Manager by Arttia Creative  Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative.This issue affects Datasets Manager by Arttia Creative: from n/a through 1.5. 2024-11-14 10 CVE-2024-52375 Autodesk--Installer  A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management. 2024-11-15 7.2 CVE-2024-9500 Avigilon--VideoIQ iCVR HD camera  Avigilon - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-45253 axelkeller--GPX Viewer  The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv_file_upload() function in all versions up to, and including, 2.2.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-13 8.8 CVE-2024-10629 ays-pro--Chartify WordPress Chart Plugin  The Chartify - WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other "safe" file types can be uploaded and included. 2024-11-14 9.8 CVE-2024-10571 Baxter--Life2000 Ventilation System  The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedded software via the calibration tool, without having to authenticate to either tool. This could result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 10 CVE-2024-48966 Baxter--Life2000 Ventilation System  The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings that result in unauthorized disclosure of information and/or have unintended impacts on device performance. 2024-11-14 10 CVE-2024-48967 Baxter--Life2000 Ventilation System  The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48970 Baxter--Life2000 Ventilation System  The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form. This could allow an attacker to obtain the password off the ventilator and use it to gain unauthorized access to the device, with clinician privileges. 2024-11-14 9.3 CVE-2024-48971 Baxter--Life2000 Ventilation System  The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-48973 Baxter--Life2000 Ventilation System  The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48974 Baxter--Life2000 Ventilation System  There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clinician Password. An attacker could execute a brute-force attack to gain unauthorized access to the ventilator, and then make changes to device settings that could disrupt the function of the device and/or result in unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-9832 Baxter--Life2000 Ventilation System  Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-9834 BdThemes--Instant Image Generator  Unrestricted Upload of File with Dangerous Type vulnerability in BdThemes Instant Image Generator allows Upload a Web Shell to a Web Server.This issue affects Instant Image Generator: from n/a through 1.5.4. 2024-11-14 10 CVE-2024-52377 Bigfive--CF7 Reply Manager  Unrestricted Upload of File with Dangerous Type vulnerability in Bigfive CF7 Reply Manager.This issue affects CF7 Reply Manager: from n/a through 1.2.3. 2024-11-16 9.9 CVE-2024-52404 Bikram Joshi--B-Banner Slider  Unrestricted Upload of File with Dangerous Type vulnerability in Bikram Joshi B-Banner Slider allows Upload a Web Shell to a Web Server.This issue affects B-Banner Slider: from n/a through 1.1. 2024-11-16 9.9 CVE-2024-52405 BlackBerry--SecuSUITE  A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege. 2024-11-12 7.3 CVE-2024-51721 Boa web server--Boa web server 0.94.14rc21  Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-47916 Bosch Rexroth AG--IndraDrive FWA-INDRV*-MP*  A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages. 2024-11-13 7.5 CVE-2024-48989 Ciprian Popescu--W3P SEO  Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu W3P SEO allows Stored XSS.This issue affects W3P SEO: from n/a before 1.8.6. 2024-11-14 7.1 CVE-2024-51684 Cisco--Cisco BroadWorks  A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An attacker could exploit this vulnerability by sending a high rate of TCP connections to the server. A successful exploit could allow the attacker to cause TCP connection resources to grow rapidly until the Cisco BroadWorks Network Server becomes unusable.Note: To recover from this vulnerability, either Cisco BroadWorks Network Server software must be restarted or the Cisco BroadWorks Network Server node must be rebooted. For more information, see the section of this advisory.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.6 CVE-2023-20125 Cisco--Cisco Cyber Vision  A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.5 CVE-2022-20685 Cisco--Cisco Industrial Network Director  A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device.This vulnerability is due to improper input validation when uploading a Device Pack. An attacker could exploit this vulnerability by altering the request that is sent when uploading a Device Pack. A successful exploit could allow the attacker to execute arbitrary commands as NT AUTHORITYSYSTEM on the underlying operating system of an affected device.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 9.9 CVE-2023-20036 Cisco--Cisco IOS XR Software  A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack.The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root. 2024-11-15 8.8 CVE-2022-20655 Cisco--Cisco Modeling Labs  A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges.This vulnerability is due to the improper handling of certain messages that are returned by the associated external authentication server. An attacker could exploit this vulnerability by logging in to the web interface of an affected server. Under certain conditions, the authentication mechanism would be bypassed and the attacker would be logged in as an administrator. A successful exploit could allow the attacker to obtain administrative privileges on the web interface of an affected server, including the ability to access and modify every simulation and all user-created data. To exploit this vulnerability, the attacker would need valid user credentials that are stored on the associated external authentication server.Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. 2024-11-15 9.1 CVE-2023-20154 Cisco--Cisco Redundancy Configuration Manager  A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container.This vulnerability exists because the debug mode is incorrectly enabled for specific services. An attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled. A successful exploit could allow the attacker to execute arbitrary commands as the root user.The attacker would need to perform detailed reconnaissance to allow for unauthenticated access. The vulnerability can also be exploited by an authenticated attacker.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.1 CVE-2022-20649 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway  A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data.  The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receives when it establishes a connection to a Cisco Unified Communications Manager device. An attacker could exploit this vulnerability by using a man-in-the-middle technique to intercept the traffic between the devices, and then using a self-signed certificate to impersonate the endpoint. A successful exploit could allow the attacker to view the intercepted traffic in clear text or alter the contents of the traffic.Note: Cisco Expressway-E is not affected by this vulnerability.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.4 CVE-2022-20814 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway  A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.  2024-11-15 7.4 CVE-2022-20853 Citrix Session Recording--Citrix Session Recording  Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server 2024-11-12 8.8 CVE-2024-8069 Clarisse K.--Writer Helper  Unrestricted Upload of File with Dangerous Type vulnerability in Clarisse K. Writer Helper allows Upload a Web Shell to a Web Server.This issue affects Writer Helper: from n/a through 3.1.6. 2024-11-16 9.9 CVE-2024-52399 cli--cli  The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0. Developers connect to remote codespaces through an SSH server running within the devcontainer, which is generally provided through the [default devcontainer image]( https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-... https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-configuration/introduction-to-dev-containers#using-the-default-dev-container-configuration) . GitHub CLI [retrieves SSH connection details]( https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/inv... https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/invoker.go#L230-L244 ), such as remote username, which is used in [executing `ssh` commands]( https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L2... https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L263 ) for `gh codespace ssh` or `gh codespace logs` commands. This exploit occurs when a malicious third-party devcontainer contains a modified SSH server that injects `ssh` arguments within the SSH connection details. `gh codespace ssh` and `gh codespace logs` commands could execute arbitrary code on the user's workstation if the remote username contains something like `-oProxyCommand="echo hacked" #`. The `-oProxyCommand` flag causes `ssh` to execute the provided command while `#` shell comment causes any other `ssh` arguments to be ignored. In `2.62.0`, the remote username information is being validated before being used. 2024-11-14 8 CVE-2024-52308 cmorillas1--External Database Based Actions  The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.1. This is due to a missing capability check in the 'edba_admin_handle' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin settings and log in as any existing user on the site, such as an administrator. 2024-11-15 7.5 CVE-2024-10311 cmsMinds--Boat Rental Plugin for WordPress  Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress allows Upload a Web Shell to a Web Server.This issue affects Boat Rental Plugin for WordPress: from n/a through 1.0.1. 2024-11-14 10 CVE-2024-52376 code-projects--Job Recruitment  A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11241 codeSavory--BasePress Migration Tools  Unrestricted Upload of File with Dangerous Type vulnerability in codeSavory BasePress Migration Tools allows Upload a Web Shell to a Web Server.This issue affects BasePress Migration Tools: from n/a through 1.0.0. 2024-11-16 9.9 CVE-2024-52407 craftcms--cms  Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads, unauthorized access to sensitive files, and, under certain conditions, remote code execution (RCE) via Server-Side Template Injection (SSTI) payloads. Note that this will only work if you have an authenticated administrator account with allowAdminChanges enabled. This is fixed in 5.4.6 and 4.12.5. 2024-11-13 8.4 CVE-2024-52291 craftcms--cms  Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions on system notification templates. This function accepts an absolute file path, reads the file's content, and converts it into a Base64-encoded string. By embedding this function within a system notification template, the attacker can exfiltrate the Base64-encoded file content through a triggered system email notification. Once the email is received, the Base64 payload can be decoded, allowing the attacker to read arbitrary files on the server. This is fixed in 5.4.9 and 4.12.8. 2024-11-13 7.7 CVE-2024-52292 craftcms--cms  Craft is a content management system (CMS). Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function FileHelper::absolutePath could lead to Remote Code Execution on the server via twig SSTI. This is a sequel to CVE-2023-40035. This vulnerability is fixed in 4.12.2 and 5.4.3. 2024-11-13 7.2 CVE-2024-52293 creativeinteractivemedia--Real3D Flipbook Lite 3D FlipBook, PDF Viewer, PDF Embedder  The 3D FlipBook, PDF Viewer, PDF Embedder - Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'r3dfb_save_thumbnail_callback' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-16 8.8 CVE-2024-9849 cyberlord92--Login using WordPress Users ( WP as SAML IDP )  The Login using WordPress Users ( WP as SAML IDP ) plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.15.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2024-11-16 7.2 CVE-2024-9887 Dang Ngoc Binh--Audio Record  Unrestricted Upload of File with Dangerous Type vulnerability in Dang Ngoc Binh Audio Record allows Upload a Web Shell to a Web Server.This issue affects Audio Record: from n/a through 1.0. 2024-11-11 10 CVE-2024-51792 Davor Zeljkovic--Convert Docx2post  Unrestricted Upload of File with Dangerous Type vulnerability in Davor Zeljkovic Convert Docx2post allows Upload a Web Shell to a Web Server.This issue affects Convert Docx2post: from n/a through 1.4. 2024-11-16 9.1 CVE-2024-52397 decidim--decidim  Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0. 2024-11-13 7.7 CVE-2024-45594 decidim-ice--decidim-module-decidim_awesome  An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module 0.9.0) allows an authenticated admin user to manipulate sql queries to disclose information, read and write files or execute commands. 2024-11-12 9 CVE-2024-43415 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. 2024-11-12 7.8 CVE-2024-49557 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 2024-11-12 7.8 CVE-2024-49558 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. 2024-11-12 7.8 CVE-2024-49560 Dell--SmartFabric OS10 Software  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution 2024-11-12 7.8 CVE-2024-48837 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39354 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39605 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-47131 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user's password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user's account. 2024-11-11 9.8 CVE-2024-11068 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11062 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11063 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11064 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11065 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web page. 2024-11-11 7.2 CVE-2024-11066 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through this vulnerability and attempt to log in to the device using the default password. 2024-11-11 7.5 CVE-2024-11067 DMC--Airin Blog  Deserialization of Untrusted Data vulnerability in DMC Airin Blog allows Object Injection.This issue affects Airin Blog: from n/a through 1.6.1. 2024-11-16 9.8 CVE-2024-52413 DonnellC--Global Gateway e4 | Payeezy Gateway  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway.This issue affects Global Gateway e4 | Payeezy Gateway: from n/a through 2.0. 2024-11-14 8.6 CVE-2024-52371 DoThatTask--Do That Task  Unrestricted Upload of File with Dangerous Type vulnerability in DoThatTask Do That Task allows Upload a Web Shell to a Web Server.This issue affects Do That Task: from n/a through 1.5.5. 2024-11-14 10 CVE-2024-52374 dotnetzip.semverd_project -- dotnetzip.semverd  Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer. 2024-11-13 9.8 CVE-2024-48510 Elastic--Kibana  A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. A successful attack requires a malicious user to have a combination of both specific Elasticsearch indices privileges https://www.elastic.co/guide/en/elasticsearch/reference/current/defining-roles.html#roles-indices-priv  and Kibana privileges https://www.elastic.co/guide/en/fleet/current/fleet-roles-and-privileges.html  assigned to them. The following Elasticsearch indices permissions are required * write privilege on the system indices .kibana_ingest** The allow_restricted_indices flag is set to true Any of the following Kibana privileges are additionally required * Under Fleet the All privilege is granted* Under Integration the Read or All privilege is granted* Access to the fleet-setup privilege is gained through the Fleet Server's service account token 2024-11-14 9.1 CVE-2024-37285 Eugen Bobrowski--Debug Tool  Missing Authorization vulnerability in Eugen Bobrowski Debug Tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through 2.2. 2024-11-16 10 CVE-2024-52416 Flowcraft UX Design Studio--Advanced Personalization  Deserialization of Untrusted Data vulnerability in Flowcraft UX Design Studio Advanced Personalization allows Object Injection.This issue affects Advanced Personalization: from n/a through 1.1.2. 2024-11-16 9.8 CVE-2024-52411 fortinet -- forticlient  A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts. 2024-11-12 8.8 CVE-2024-36513 fortinet -- forticlient  A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering. 2024-11-12 7.8 CVE-2024-36507 Fortinet--FortiClientWindows  A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages. 2024-11-13 7.8 CVE-2024-47574 Fortinet--FortiManager  A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigDataat least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests. 2024-11-12 7.5 CVE-2024-23666 Fortinet--FortiOS  A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link. 2024-11-12 7.5 CVE-2023-50176 FraudLabs Pro--FraudLabs Pro SMS Verification  Cross-Site Request Forgery (CSRF) vulnerability in FraudLabs Pro FraudLabs Pro SMS Verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through 1.10.1. 2024-11-14 7.1 CVE-2024-51688 FreeBSD--FreeBSD  The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the library was incorrect, in effect ignoring the option. Fetch would still connect to a host presenting a certificate included in the revocation file passed to the --crl option. 2024-11-12 7.5 CVE-2024-45289 GeekRMX--Twitter @Anywhere Plus  Cross-Site Request Forgery (CSRF) vulnerability in GeekRMX Twitter @Anywhere Plus allows Stored XSS.This issue affects Twitter @Anywhere Plus: from n/a through 2.0. 2024-11-14 7.1 CVE-2024-51659 GentleSource--Appointmind  Cross-Site Request Forgery (CSRF) vulnerability in GentleSource Appointmind allows Stored XSS.This issue affects Appointmind: from n/a through 4.0.0. 2024-11-14 7.1 CVE-2024-51679 GeoVision--GV-VS12  Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports. 2024-11-15 9.8 CVE-2024-11120 GitLab--GitLab  An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5 prior to 17.5.2, which could have allowed unauthorized access to the Kubernetes agent in a cluster under specific configurations. 2024-11-14 8.5 CVE-2024-9693 glpi-project--glpi  GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be used to alter another user account data and take control of it. Upgrade to 10.0.17. 2024-11-15 8.1 CVE-2024-40638 gogs--gogs/gogs  A remote command execution vulnerability exists in gogs/gogs versions

Read more »

An Interview With the Target & Home Depot Hacker
In December 2023, KrebsOnSecurity revealed the real-life identity of Rescator, the nickname used by a Russian cybercriminal who sold more than 100 million payment cards stolen from Target and Home Depot between 2013 and 2014. Moscow resident Mikhail Shefel, who confirmed using the Rescator identity in a recent interview, also admitted reaching out because he is broke and seeking publicity for several new money making schemes.

Read more »

Microsoft Patch Tuesday, November 2024 Edition
Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed prior to today.

Read more »

Amazon is selling the Black Titanium Apple Watch Ultra 2 for 10% off MSRP right now
Amazon is offering an $80 (10%) discount on the Black Titanium Apple Watch Ultra 2 as part of their ongoing Holiday sale. With the discount, the Watch is now $719 shipped. That's the lowest price available for this new Ultra 2 Watch: - Black Titanium Apple Watch Ultra 2: $719, $80 off MSRP The same Holiday discount is also available on many other Ultra 2 Watches at Amazon. For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

Holiday Sale: 15-inch M3 MacBook Pros with 16GB of RAM for $200 off MSRP at these Apple retailers
Amazon and Best have Apple's 15-inch M3 MacBook Airs with 16GB of memory...the newest models recently upgraded by Apple..on Holiday sale for $200 off MSRP, with prices available starting at $1099. Sale prices below apply to all colors. (1): Amazon has 15" 16GB M3 MacBook Airs on sale for $200 off MSRP, each including free shipping: - 15" M3 MacBook Air (16GB/256GB): $1099, $200 off MSRP - 15" M3 MacBook Air (16GB/512GB): $1299, $200 off MSRP - 15" M3 MacBook Air (24GB/512GB): $1499, $200 off MSRP (2): Best Buy has 15" 16GB M3 MacBook Airs on sale for $200 off MSRP as well. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 15" M3 MacBook Air (16GB/256GB): $1099, $200 off MSRP - 15" M3 MacBook Air (16GB/512GB): $1299, $200 off MSRP - 15" M3 MacBook Air (24GB/512GB): $1499, $200 off MSRP For the latest sales & prices, see our 15" MacBook Air Price Tracker, updated daily.

Read more »

Clearance 15-inch M3 MacBook Airs available for only $999 with optional free local store pickup
Best Buy has clearance 15" MacBook Airs with M3 CPUs and 8GB of RAM on sale for $300 off original MSRP on their online store this week. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 15" M3 MacBook Air (8GB RAM/256GB SSD): $999 $300 off MSRP - 15" M3 MacBook Air (8GB RAM/512GB SSD): $1199 $300 off MSRP For the latest sales & prices, see our 15" MacBook Air Price Tracker.

Read more »

Clearance 14-inch M3 MacBook Pros available for $500 off original MSRP with optional free local store pickup
Best Buy is offering a $300-$500 discount on clearance 14" M3 MacBook Pros on their online store this week with prices available starting at $1299. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB RAM/512GB SSD): $1299, $300 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD): $1299, $500 off MSRP Yes, that means they have models with 1TB of storage available at the same price as those with 512GB, at least at the time of this post. For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Clearance 14-inch M3 MacBook Pros available for $500 off original MSRP with optional free local store pickup
Best Buy is offering a $300-$500 discount on clearance 14" M3 MacBook Pros on their online store this week with prices available starting at $1299. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB RAM/512GB SSD): $1299, $300 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD): $1299, $500 off MSRP Yes, that means they have models with 1TB of storage available at the same price as those with 512GB, at least at the time of this post. For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Clearance 14-inch M3 MacBook Pros available for $500 off original MSRP with optional free local store pickup
Best Buy is offering a $300-$500 discount on clearance 14" M3 MacBook Pros on their online store this week with prices available starting at $1299. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB RAM/512GB SSD): $1299, $300 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD): $1299, $500 off MSRP Yes, that means they have models with 1TB of storage available at the same price as those with 512GB, at least at the time of this post. For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Holiday Sale: 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP, at Amazon
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Holiday sale this week for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Discount applies to all colors, and shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP This is the lowest price available for a new MacBook with 16GB of RAM among the Apple retailers we track. For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

Holiday Sale: 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP, at Amazon
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Holiday sale this week for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Discount applies to all colors, and shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP This is the lowest price available for a new MacBook with 16GB of RAM among the Apple retailers we track. For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

Holiday Sale: 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP, at Amazon
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Holiday sale this week for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Discount applies to all colors, and shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP This is the lowest price available for a new MacBook with 16GB of RAM among the Apple retailers we track. For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

16-inch M4 Pro MacBook Pros are on Holiday sale this week for $250 off Apple’s MSRP
Amazon is offering a $250 discount on Apple's new 16-inch M4 Pro MacBook Pros as part of their Holiday sales this week. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller, and clip any coupons Amazon may present to you: - 16" M4 Pro MacBook Pro (24GB/512GB): $2249, $250 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2649, $250 off MSRP For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

16-inch M4 Pro MacBook Pros are on Holiday sale this week for $250 off Apple’s MSRP
Amazon is offering a $250 discount on Apple's new 16-inch M4 Pro MacBook Pros as part of their Holiday sales this week. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller, and clip any coupons Amazon may present to you: - 16" M4 Pro MacBook Pro (24GB/512GB): $2249, $250 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2649, $250 off MSRP For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Holiday Sale: Apple Watch SE GPS models for $60 off MSRP
Walmart has the Apple Watch SE, GPS-only, on Holiday sale this week for $60 off MSRP with prices starting at only $189. These are the cheapest new Apple Watch prices available today: - Apple Watch SE 40mm GPS: $189, $60 off MSRP - Apple Watch SE 44mm GPS: $219, $60 off MSRP Sale prices at Walmart are for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available). For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »