News

CIRP: Weighted average retail price of new iPhones at its highest level

According to a report from Consumer Intelligence Research Partners (CIPR), the weighted average retail price of new iPhones sold in the September quarter this quarter is the highest it’s measured. “The September quarter is a confusing one for iPhone analysis,” says...

Apple says new, future products may never be as profitable as its current offerings

Apple is warning investors that its new and future products might never be as profitable as its current products such as the iPhone. The tech giant added the warning in its SEC annual report under the “business risks” section, as reported by the Financial Times. Of...

More MacTech News

Opinion

Analyst predicts features of the iPhone 17, iPhone 18, and iPhone 19

Talk about a powerful crystal ball! In a new Medium post, analyst Ming-Chi Kuo offers his predictions for the iPhone 17, iPhone 18, and iPhone 19 that will likely arrive in 2025, 2026, and 2027. He says the high-end iPhone 17 model is expected to feature an upgraded...

More Opinion

Scanners

Wednesday November 06
52 mins ago
9to5Mac Daily: November 6, 2024 – Apple smart glasses rumors, more | 9 to 5 Mac
9to5Mac Daily: November 6, 2024 – Apple smart glasses rumors, more
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by CardPointers: The best way to maximize your credit card rewards. Save 30% and get a $100 Savings Card today. more…
Read more »
1 hour ago
Touching up paint is tough, but not with a (cheap) RGB color sensor | Cult of Mac
Touching up paint is tough, but not with a (cheap) RGB color sensor
Save time on your next paint job with the Nix Mini 3 RGB color sensor. This compact color sensor can identify colors on most surfaces. (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »
09:45 pm
Best iPad for seniors 2024 | Macworld
Best iPad for seniors 2024
Macworld If you’re an older user looking to pick up an iPad or someone wanting to gift an Apple tablet to Grandad or Grandma, which is the best iPad to choose? There’s a fair selection in the current Apple catalog, from the diminutive iPad mini all the way up to the incredibly powerful (not to mention very expensive) iPad Pro. It can be intimidating, especially as different users have different needs. To help you make sense of it all, here’s our guide to finding the best iPad for seniors. What makes an iPad good for older users? iPad owners don’t magically transform into timid technophobes on their 70th birthdays, and there isn’t one right answer to this question. Any iPad model might turn out to be the right choice for a specific older user, depending on that user’s precise requirements. But there are a few criteria that tend to become more of a factor when our bodies begin to age. Screen size is one element, with eyes not being as strong as they once were. Weight/portability can also become more important; some older users have arthritis, while others find they tire more easily than they used to when using a tablet for extended periods of time. We will also want to think carefully about price versus power and features, since you don’t want to spend lots of money on a device with capabilities you’ll never really use. But, as we say, these can be true for any user, so it’s always best to talk to the person in question about their particular needs if you want to pick the perfect tablet. If you were to put us on the spot, however, we do have some thoughts about the iPads that are most likely to suit an older user. Here’s our selection. Best affordable option: iPad (2022, 10th generation) Pros Affordable A14 Bionic processor Support for Apple Pencil (USB and 1st Gen) Solid performance Cons No Home button Base 64GB storage is quite low Price When Reviewed: From $349 (64GB) | $499 (256GB) (was $449 and $599) Best Prices Today: $299 at Amazon$299 at Best Buy$299.99 at Target At $349, the 10th-gen iPad may well be the cheapest iPad model in Apple’s current lineup, but that doesn’t mean it’s a truly ‘budget’ device in the pejorative sense. For many (perhaps most) people, this iPad will deliver everything you want from a tablet and not cost you a small fortune in the process. Apple’s A14 Bionic chip powers the iPad and it’s ideal for surfing the web, watching streaming services, and shopping online. It’s an older processor–Apple is using more-recent M-series chips in the more-expensive iPad Air and iPad Pro, but it’s a chip that should be supported by Apple for a few more years. For FaceTime calls there’s a 12MP Ultra Wide front camera that offers advanced features such as Center Stage (which allows you to move around on video calls while the iPad tracks you so you don’t disappear out of view) and 1080p video. This iPad was the first to place the camera on the longer side of the iPad, so when you use it, the iPad should be in landscape mode. Why are these features particularly good for seniors? Well, having an excellent video-call experience will allow them to keep in touch with the grandkids, friends or family around the world, without looking grainy or like they’re calling from the early 2000s. The 10.9-inch display is also large enough for eyes that might be starting to diminish, while the touch targets on the screen will be easy to hit with unsteady hands. Of course, many seniors are full of more life and vigor than their grandchildren, and the ability to connect an Apple Smart keyboard and first-gen Apple Pencil makes this a perfect companion for traveling while writing memoirs or creating art. It’s also the only remaining iPad to feature a headphone jack, which could be very useful if the intended recipient hasn’t yet embraced the wireless charms of the AirPods or AirPod Pros. Another major change Apple made with the 10th-gen iPad (in addition to moving the front-facing camera) is that it no longer has a Home button. iPadOS features many great swipe gestures for navigating through apps and menus, and to get to the Home screen, you swipe up from the bottom center of the display. Touch ID is now located on the power button. The 10th-gen iPad comes in these storage options, priced as follows: 64GB: $349/£349 256GB: $499/£499 If you want to add cellular capabilities then those are also available: 64GB (cellular): $499/£499 256GB (cellular): $649/£649 It isn’t just the best choice for older users, but probably for most users. If you prefer an iPad with a Home button, you can probably find a 9th-generation iPad, which is the last one with a Home button, You may be able to find stock at a third-party retailer. Apple sells refurbished iPads in its Certified Refurbished Store (U.S. or U.K.) but the inventory availability fluctuates a lot, so it may not be in stock when you check. Be sure to check back at a later time. Read our full 10th-gen 10.9-inch iPad (2022) review Best lightweight option: iPad mini (A17 Pro) Pros Lightweight Modern design A17 Pro processor Cons Smaller screen size 128GB storage on base model Price When Reviewed: $499 (128GB; Wi-Fi only) | $599 (256GB; Wi-Fi only) | $799 (512GB; Wi-Fi only) Best Prices Today: $478 at Amazon$499 at Apple$499 at Apple United States It’s a sad fact that as we age our bodies can lose some of their strength or gain some conditions that we avoided when younger. If you’re looking for a lightweight iPad, and therefore easier to hold for longer periods, then the iPad mini (A17 Pro) is the one to choose. At around 0.65lbs/293g it’s roughly half the weight of the 10th gen iPad discussed above. This is made possible, as the name suggests, by the smaller display. But the 8.3-inch panel is still an excellent size for the web, not to mention better as an e-reader thanks to being easier to hold. Under the hood, the iPad mini is a powerhouse, with an A17 Pro chip (as seen in the iPhone 15 Pro), 5G capabilities on the LTE models, and powerful cameras with the same Ultra Wide front-facing module as on the 10th-gen iPad. It’s compatible with the Apple Pencil (USB-C) and the Apple Pencil Pro and various Bluetooth keyboards, so you can use it like a small laptop if you want to get stuff done. It’s a lovely package that offers the most portable solution for those who want to take their iPad with them. The iPad mini (A17 Pro) is available in these configurations: iPad mini (A17 Pro, Wi-Fi) 128GB: $499/£499 iPad mini (A17 Pro, Wi-Fi) 256GB: $599/£599 iPad mini (A17 Pro, Wi-Fi) 512GB: $799/£799 iPad mini (A17 Pro, Wi-Fi + cellular) 128GB: $649/£649 iPad mini (A17 Pro, Wi-Fi + cellular) 256GB: $749/£749 iPad mini (A17 Pro, Wi-Fi + cellular) 512GB: $949/£949 Check our guide to the best iPad mini deals to see if you can get one for a lower price. Read our full Apple iPad mini (A17 Pro) review Best all-rounder: iPad (2022, 10th generation) Pros 10.9-inch Liquid Retina Display Modern design Landscape camera Various colors USB-C port Cons Higher price than previous generations 64GB of storage on base modell Price When Reviewed: From $449 Best Prices Today: $449 at Apple The newest device on this list is the 10th generation iPad, which arrived in October 2022 without the Home button design of its forebears and follows the aesthetic established by iPad mini and iPad Air. Although the Home button is gone, this iPad still features Touch ID, it’s just that the sensor is now part of the power button that resides on the top edge of the device. This allows Apple to fit a large 10.9-inch Liquid Retina Display into a chassis that’s almost the same size as the 9th generation iPad, which has a 10.2-inch screen. This increased screen real estate will be attractive to those who prefer larger fonts and should make tapping on-screen buttons a little easier for unsteady hands. One of the main new features, aside from the overall design, is that Apple has finally moved the front-facing camera from the traditional top bezel to the longer side one. This essentially turns it from portrait to landscape, hence the name Landscape Ultra Wide camera. The upside of this is that you can sit the iPad on its longer side when making FaceTime calls, which will have you looking into the middle of the camera rather than it being off to the side. There’s also support for Centre-Stage, so if you move around, the software will keep you in the center of the shot. This makes it the best iPad for FaceTime calls with family. The included A14 Bionic chip, which previously powered the iPhone 12 range (including the Pro models), means there’s plenty of performance available for most. You can use the 1st generation Apple Pencil on this device, and the new USB-C port opens up a world of peripherals you can plug into the iPad. These include keyboards, external storage, and even monitors if you want a pseudo-desktop PC. One drawback of this switch is that owners of a 1st generation Apple Pencil will need to buy an adaptor to be able to charge it from the iPad. If you buy a new Pencil from Apple, the adapter is now included in the box. The iPad comes in four attractive colors (Blue, Pink, Yellow, and Silver). These are the available configurations: 64GB: $349/£349 256GB: $499/£499 64GB (cellular): $499/£499 256GB (cellular): $649/£649 As with the other iPads on this list, you might want to consider opting for the 256GB storage variant, as 64GB can fill up pretty quickly if you like to store photos and videos on the device itself. Apple also offers a new keyboard case called the Magic Keyboard Folio, which is nice but costs an eye-watering $249/£279, so we’d advise looking for cheaper (and often just as good) third-party products instead. See our iPad keyboard roundup. Like the iPad mini the iPad may also get an update in 2024. For more information, take a look at our Everything you need to know about the iPad 10.9-inch (10th Generation) guide. Best performance option: 11-inch iPad Air (2024) Pros M2 processor USB-C port Apple Pencil (2nd Gen) support Smart connector Cons Getting expensive Price When Reviewed: $599 (128GB, Wi-Fi only) Best Prices Today: $551 at Amazon$599 at Apple$599 at Apple United States While it’s true that the iPad Pro models are the most powerful iPads available, for most people they are simply overkill. Also, they come with Pro-level prices, which isn’t great if you’re only going to use them to watch videos and FaceTime the grandkids. For the more discerning user who requires plenty of power but at a reasonable price, the iPad Air is an excellent solution. There’s not much to differentiate the 10th-gen iPad and the 11-inch iPad Air. but, when you look closely, you can see from where the extra expense comes. The two devices are around the same size, and both sport a Liquid Retina display, but the one on the Air is fully-laminated, so there’s no air-gap between the glass and digitizer, which makes it feel like you’re touching the actual pixels and makes using the compatible Apple Pencil (2nd gen) that much smoother. They feature the same 12MP cameras on the back and front on the longer side of the device. But, under the hood the Air has the incredibly powerful M2 processor, which was previously found in the last generation of iPad Pros, not to mention several recent Macs. This takes things to another level. If someone wants to play games, use graphically intensive apps or just wants a really fast user experience, then the M2 delivers that in spades. The iPad Air has often been called the iPad Pro for normal people, and that’s exactly what it is. The USB-C port allows you to connect various external devices, such as storage or monitors, so it can easily transform into a laptop with a processor that’s desktop-class. Apple offers the sleek Magic Keyboard folio case, but at $299/£319 it’s way overpriced, so we’d suggest a third-party Bluetooth keyboard and case as a more frugal option. The iPad Air base configuration has 128GB of storage, twice that of the base 10th-gen iPad. That should be plenty for most people; you can rely on iCloud storage if you’re worried that you’ll run out of space. You can also go with the more expensive 256GB configuration. You can pick up the 11-inch iPad Air in the following configurations: iPad Air (2024, Wi-Fi) 128GB: $599/£599 iPad Air (2024, Wi-Fi) 256GB: $699/£699 iPad Air (2024, Wi-Fi) 512GB: $899/£899 iPad Air (2024, Wi-Fi) 1TB: $1,099/£1,099 iPad Air (2024, Wi-Fi + Cellular) 128GB: $749/£749 iPad Air (2024, Wi-Fi + Cellular) 256GB: $849/£849 iPad Air (2024, Wi-Fi + Cellular) 512GB: $1,049/£1,049 iPad Air (2024, Wi-Fi + Cellular) 1TB: $1,249/£1,249 Also read our roundup of the best iPad Air deals too, so you don’t miss out on any great offers. Read our full Apple iPad Air 11-inch (M2, 2024) review Best luxury option: iPad Pro (2024) Pros Insanely powerful Best iPads money can buy ProMotion displays Cons Very expensive Too much power for most people Price When Reviewed: $999 (Wi-Fi only) Best Prices Today: $999 at Apple$1099 at Best Buy$1,154.49 at Amazon For those to whom money is no object or require the highest-end performance an iPad can deliver, the iPad Pro is the only choice. Recently upgraded to the latest M4 processor, these are devices that absolutely fly. Every appointment is top-notch, from the Ultra Retina XDR display with super-smooth ProMotion technology to the USB-C ports that support Thunderbolt 4. These are Pro devices. With that is the caveat that most people won’t necessarily see these benefits unless they are using pro-level apps that push the device hard. The Pro comes in two sizes, 11-inch and 13-inch, with the latter being an absolute whopper. If you need a large screen then this is as big as it gets. Apple offers a 13-inch iPAd Air that’s cheaper, but its screen isn’t as nice as the Pro, and the Air is actually heavier than the Pro. (Go figure.) To anyone other than a professional designer, animator, or digital specialist who can harness the power of the iPad Pros, these are simply too much and your money would be better spent on the iPad Air. But, if that’s you or you just want a luxury iPad to enjoy, then this is the premium end of the street. The iPad Pro 11-inch (2024) is available in the following configurations: 256GB: $999/£999 512GB: $1,199/£1,199 1TB: $1,599/£1,599 2TB: $1,999/£1,999 If you want 5G cellular capabilities, then these are the options: 256GB (Cellular): $1,199/£1,199 512GB (Cellular): $1,399/£1,399 1TB (Cellular): $1,799/£1,799 2TB (Cellular): $2,199/£2,199 The iPad Pro 13-inch (2024) is available in these configurations: 256GB: $1,299/£1,299 512GB: $1,499/£1,499 1TB: $1,899/£1,899 2TB: $2,299/£2,299 Here are the prices for the cellular-equipped models: 256GB (Cellular): $1,499/£1,499 512GB (Cellular): $1,699/£1,699 1TB (Cellular): $2,099/£2,099 2TB (Cellular): $2,499/£2,499 Check out our roundup of the best iPad Pro deals to see if you can get a good bargain on these flagship devices. For more about how the iPad Pro and iPad Air compare read iPad Air (M2) vs iPad Pro (M4). Read our full Apple iPad Pro 11-inch (M4, 2024) review
Read more »
09:15 pm
Apple's numerous internal projects led to the upcoming API-powered Siri with AI | AppleInsider
Apple's numerous internal projects led to the upcoming API-powered Siri with AI
Siri could soon be able to view and process on-screen content thanks to new developer APIs based on technologies leaked by AppleInsider prior to WWDC.Share content found on screen within apps with Apple Intelligence thanks to upcoming APIsOn Monday, Apple released new documentation to help developers prepare for the arrival of upcoming Siri and Apple Intelligence features. The company's latest developer API reveals that Siri will gain significant contextual awareness and that the virtual assistant will, at some point, be able to use information from the content currently on screen.Siri will undoubtedly become much more useful due to Apple's changes. The company provided a list of examples, which offer some insight as to exactly what the new-and-improved, AI-infused Siri will be able to do in the future. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
09:02 pm
Apple rumored to upgrade its AI cloud computers with the M4 chip starting next year | 9 to 5 Mac
Apple rumored to upgrade its AI cloud computers with the M4 chip starting next year
Apple has developed special computers to process certain Apple Intelligence requests privately in the cloud, and these computers currently run on the M2 Ultra chip. However, it seems that the company already has plans to upgrade its cloud computers with the M4 chip starting next year. more…
Read more »
09:02 pm
Apple less vulnerable to President Trump’s tariffs than ‘many might believe’ – Bernstein | Mac Daily News
Apple less vulnerable to President Trump’s tariffs than ‘many might believe’ – Bernstein
Apple is less vulnerable to increased trade tariffs from President Donald Trump, Bernstein analysts said Wednesday. Bernstein estimated… The post appeared first on MacDailyNews.
Read more »
08:48 pm
New 5K monitor comes with Studio Display specs at half the price | Cult of Mac
New 5K monitor comes with Studio Display specs at half the price
Asus just made waves with its new ProArt Display PA27JCV, launching the 5K monitor at an eye-catching $799 price point. (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »
08:47 pm
Thunderbolt 5: Only Necessary for the Most Demanding Uses | TidBITS
Thunderbolt 5: Only Necessary for the Most Demanding Uses
With the introduction of the first Macs that support Thunderbolt 5, you might wonder what has changed from Thunderbolt 3 and Thunderbolt 4. The answer? Not much—it’s a case of evolution, not revolution. However, Thunderbolt 5 will make a difference for those with video-intensive or high-performance data transfer needs.
Read more »
08:30 pm
How to use iPad in portrait with Sidecar with macOS Sequoia | AppleInsider
How to use iPad in portrait with Sidecar with macOS Sequoia
Apple has finally updated Sidecar to allow you to extend your Mac screen onto an iPad when it's in portrait, not just landscape. For now, though, it's fiddly, but here's how to do it.We've only waited five years for Sidecar to recognise an iPad in portraitFive years after Apple introduced Sidecar with macOS Catalina, it has given it a much-wanted update. Previously Sidecar would only extend a Mac's display onto an iPad in landscape, regardless of what way around the device was being held or mounted.There was a fairly contorted workaround that would make it happen with the use of a third-party app. But now with macOS Sequoia 15.1 and iPadOS 18.1, you can just turn on Sidecar and then physically rotate your iPad. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
07:57 pm
Hidden Mac keyboard shortcuts you might not know | Cult of Mac
Hidden Mac keyboard shortcuts you might not know
Keyboard shortcuts are a great way to speed things up when you’re using a Mac. Here's a Mac keyboard shortcut guide to help you out. (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »
07:45 pm
Apple stock to trade ex-dividend on November 8th | Mac Daily News
Apple stock to trade ex-dividend on November 8th
Apple on October 31st announced a quarterly dividend of $0.25 per share, payable on November 14, 2024, to shareholders of record as of… The post appeared first on MacDailyNews.
Read more »
07:39 pm
Apple CEO Tim Cook congratulates Trump on his second election win | AppleInsider
Apple CEO Tim Cook congratulates Trump on his second election win
Apple CEO Tim Cook has congratulated Donald Trump after winning the 2024 U.S. presidential election, as he re-lays the groundwork for a close working relationship with the returning president.Tim Cook and Donald Trump in a meeting at the White House in 2018Following Tuesday's elections, vote counts have resulted in a win for Donald Trump over Kamala Harris at the ballot box. As President-elect for the second time, Trump is now receiving words of congratulation from world leaders as well as CEOs.In his own message on Tuesday, Apple CEO Tim Cook took to X and congratulated Trump on his victory. "We look forward to engaging with you and your administration to help make sure the United States continues to lead with and be fueled by ingenuity, innovation, and creativity," wrote Cook. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
07:39 pm
Apple’s Passwords app won me over with this one unique feature | 9 to 5 Mac
Apple’s Passwords app won me over with this one unique feature
Apple has offered password management features for years, but never until iOS 18 has there been a dedicated Passwords app. The new app has a lot going for it, but there’s one feature in particular that’s stood out for me above the rest: Shared Groups. more…
Read more »
07:25 pm
Corning faces antitrust actions for its Gorilla Glass dominance | Ars Technica
Corning faces antitrust actions for its Gorilla Glass dominance
European Commission looks into alleged exclusivity, pricing, and patent demands.
Read more »
07:16 pm
Hands-on: iOS 18.2 beta 2 changes and features [Video] | 9 to 5 Mac
Hands-on: iOS 18.2 beta 2 changes and features [Video]
The initial beta for iOS 18.2 brought forth a heaping helping of new changes and features, headlined by phase two of the Apple Intelligence rollout. In the second beta, Apple continues to build on Apple Intelligence, but we also find several other noteworthy additions like Camera Control AE/AF lock for iPhone 16 users, Find Lost Item tracking, and the ability to disable video looping in the Photos app. Watch the full hands-on video walkthrough for the details. more…
Read more »
06:31 pm
iOS 18.2: Apple Intelligence image features have a waitlist, here’s why | 9 to 5 Mac
iOS 18.2: Apple Intelligence image features have a waitlist, here’s why
Apple just launched the public beta for iOS 18.2. If you’re excited to try out the latest Apple Intelligence features and more, we have an important PSA to share. Image features like Genmoji and Image Playground come with a waitlist in iOS 18.2, so you may not get access right away. Here’s why. more…
Read more »
06:25 pm
Tim Cook congratulates Trump on presidential election victory | 9 to 5 Mac
Tim Cook congratulates Trump on presidential election victory
Apple CEO Tim Cook has joined the chorus of Big Tech CEOs congratulating Donald Trump on his victory in the US presidential election. Cook says that he looks forward to working with the Trump administration. more…
Read more »
06:16 pm
Generation gaps: How much faster Apple Silicon gets with each release | AppleInsider
Generation gaps: How much faster Apple Silicon gets with each release
Apple Silicon speed has steadily improved since the debut in 2020. Here's how much faster Apple has made its chips in just four years.M4 is Apple's latest chips - Image credit: AppleChip generations tend to improve with age. As designs get better and production processes squeeze more onto a smaller space, the performance of chips get better over time.This is also true of Apple Silicon, Apple's self-designed chips used in its Mac lineup, as well as the iPad Pro and iPad Air. The replacement of Intel's chips has proven itself repeatedly to have been a great move for Apple, with the improvements impressing customers and resulting in more buyers. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
06:11 pm
iOS 18.2 public beta is now available, here’s everything new | 9 to 5 Mac
iOS 18.2 public beta is now available, here’s everything new
Apple has released the first public beta for iOS 18.2, bringing new Apple Intelligence features to iPhone users. Some of the highlights include the highly anticipated Genmoji and ChatGPT integration. Here’s everything that’s new. more…
Read more »
06:10 pm
Public beta for iPadOS 18.2, macOS 15.2, more released with these new features | 9 to 5 Mac
Public beta for iPadOS 18.2, macOS 15.2, more released with these new features
Apple just launched a new wave of public betas. The first public betas for iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, and more are now available. And they bring a ton of exciting features to users. Here’s what’s new. more…
Read more »
06:04 pm
Three U.S. Apple Retail Stores will change locations on November 9th | Mac Daily News
Three U.S. Apple Retail Stores will change locations on November 9th
Apple Retail Stores in three U.S. cities will move to new temporary locations on November 9, likely due to renovations… The post appeared first on MacDailyNews.
Read more »
05:26 pm
9to5Mac Gift Guide: Zac’s bag of 2024 tech | 9 to 5 Mac
9to5Mac Gift Guide: Zac’s bag of 2024 tech
Every great holiday gift guide deserves a punchy theme that captures your attention and inspires your gift giving season. My theme this year? Stuff I received to review but haven’t yet, and stuff I honestly use daily. What… the smart home gift guide idea was already taken. Seriously, though, I think this is my favorite list yet. more…
Read more »
05:25 pm
Apple supplier Corning faces EU antitrust probe over exclusive supply deals with phone makers | Mac Daily News
Apple supplier Corning faces EU antitrust probe over exclusive supply deals with phone makers
Steve Jobs's persuasive powers played a crucial role in convincing Corning to develop the ultra-thin, scratch-resistant glass used… The post appeared first on MacDailyNews.
Read more »
05:20 pm
How to stop dust, dirt, and lint from getting into your iPhone charging port | Macworld
How to stop dust, dirt, and lint from getting into your iPhone charging port
Macworld Keep your phone in your pocket or backpack and dust and dirt will certainly enter your phone’s most vulnerable point of entry—the charging port. Once enough fluff is in there you will find it difficult to properly insert the charging cable and you will have to rely on wireless charging. Dirt transferred from your pocket or bag into the charging port is simply inevitable—or is it? After too many trips to the Apple Store, I’ve taken to plugging that port with a little stopper. There are several on Amazon, but I use the Limvory dust plug covers, shown below, which come in a pack of four with a handy little cleaning brush. Amazon You can buy USB-C dust plug covers for iPhone 15 and 16 or dust plug covers for Lightning ports (iPhone 14 and earlier). You will surely lose a few so buying in bulk isn’t a crazy idea. Amazon I mostly charge wirelessly using either a MagSafe charger or a magnetic power bank, so I don’t need access to the charging port most of the time. If I want to use a wire, then I can pop out the stopper and plug in the cable. (Most wireless charging is pegged back at 7.5W or 15W, while wired charging can get up to 30W, so there are times when you’ll want to plug in a cable.) A low-tech port plug is a simple solution that will keep dirt from getting into the port but won’t stop you from quickly charging your iPhone with a cable. Using a port plug is the best way to stop that happening. And if you need a cable, check out our roundups of the best USB-C iPhone charging cables and best Lightning cables.
Read more »
05:11 pm
Hands on with Belkin's Vision Pro strap that Apple didn't want to make | AppleInsider
Hands on with Belkin's Vision Pro strap that Apple didn't want to make
Apple elected not to make a combination strap for Apple Vision Pro that used the solo knit back with an over the head support. Belkin made one instead, and we've got it installed.The new Belkin head strap for Apple Vision ProWell-known accessory maker Belkin is out with its latest accessory for Apple's spatial computer. Dubbed the Head Strap for Apple Vision Pro, it fills a hole that Apple itself made.When Vision Pro was announced, eagle-eyed viewers noticed a marketing image that showed the headset with this dual-strap setup. It was never released and eventually scrubbed by Apple. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
04:47 pm
Deals: First cash discounts on M4 Pro/Max MacBook Pro, Apple Watch Solo Loops from just $17, M2 iPad Air $150 off, more | 9 to 5 Mac
Deals: First cash discounts on M4 Pro/Max MacBook Pro, Apple Watch Solo Loops from just $17, M2 iPad Air $150 off, more
After seeing the first cash deals on the all-new M4 Mac mini and M4 iMac this week, we are now turning our attention to the very first Amazon deals on the new M4 Pro and M4 Max MacBook Pro configurations. All of the details you need on these offers are waiting down below alongside some seriously wild deals on the official Apple Watch silicon and Braided Solo Loop bands with prices starting from just $17 on these regularly $49 and $99 straps – not to mention the return of the best prices yet on the 2024 model black and natural Milanese Loops. We have a new all-time low on M2 iPad Air at $150 off and loads of accessory offers too. Scope it all out down below. more…
Read more »
04:30 pm
Video editor streamlines workflow with Elgato Stream Deck [Setups] | Cult of Mac
Video editor streamlines workflow with Elgato Stream Deck [Setups]
In today's MacBook Pro setup, Elgato Stream Deck helps streamline a YouTuber's workflow, launching apps and more. (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »
04:00 pm
Today in Apple history: iTunes sales hit astonishing new heights | Cult of Mac
Today in Apple history: iTunes sales hit astonishing new heights
On November 6, 2003, Apple set a new record for digital music sales: 1.5 million downloads in one week, thanks to iTunes on Windows. (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »
03:52 pm
European Union evaluating if Corning monopolizes the smartphone screen market | AppleInsider
European Union evaluating if Corning monopolizes the smartphone screen market
The European Union is investigating Corning over concerns that the company might misuse its dominant position in the global market for alkali-aluminosilicate glass, commonly used in smartphone screens.Ceramic Shield on an iPhone 16 | Image credit: AppleIf you own a smartphone, chances are, the glass used to make the screen came from Corning. In 2016, the New York-based company held an impressive 73% share of the smartphone screen market, largely thanks to Gorilla Glass. Currently, Corning provides 40% of the glass for the entire display market, which includes smartphones, tablets, laptop screens, wearables, and more.Apple's own Ceramic Shield, which has been used on iPhone models since the iPhone 12, was developed by Corning, too. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
03:51 pm
iPhone average selling price soars because of big demand for Pro models & more storage | AppleInsider
iPhone average selling price soars because of big demand for Pro models & more storage
Consumer demand for premium iPhones with extra storage is fueling a surge in the average price per device, with it topping $1,000 for the first time.iPhone 15 and iPhone 15 PlusApple's latest iPhones have hit a new high in popularity and price, with the average U.S. retail price (US-WARP) reaching a record $1,018 in the September 2024 quarter. According to the latest data from Consumer Intelligence Research Partners (CIRP), the rise is primarily driven by strong consumer demand for Pro and Pro Max models equipped with expanded storage.As consumers continue to prioritize premium features, average iPhone prices have seen a steady increase. In the recent quarter, 47% of all iPhones sold were Pro or Pro Max models, a significant jump from 38% in the same period last year. Continue Reading on AppleInsider | Discuss on our Forums
Read more »

Older posts

Wednesday November 06
08:45 pm
What to Expect From Apple's Powerbeats Pro 2 Next Year | MacRumors
What to Expect From Apple's Powerbeats Pro 2 Next Year
A few months ago, Apple shared a short teaser video in which it revealed that it will be releasing new Powerbeats Pro 2 next year. The video showed MLB superstar Shohei Ohtani wearing the upcoming version of the earbuds, which appear to have some slight design changes compared to the original Powerbeats Pro from 2019. MLB player Shohei Ohtani wearing the Powerbeats Pro 2 As a refresher, Powerbeats Pro are a sportier, fitness-focused alternative to AirPods Pro with built-in, adjustable ear hooks for a secure fit. Below, we recap what to expect from the Powerbeats Pro 2 based on known info and leaks: A more vertical, slimmer design compared to the original Powerbeats Pro Heart rate monitoring during workouts Active Noise Cancellation for the first time Spatial Audio and Adaptive Audio support Orange, purple, black, and beige color optionsBased on iOS 18 code findings, we previously reported that you will be able to connect the Powerbeats Pro 2 to gym equipment like a treadmill to measure heart rate, and the data would be visible in the Health app on the iPhone. This capability might be limited to workouts. Heart rate monitoring has also been rumored for the AirPods Pro in the past, so perhaps the feature will extend to the AirPods Pro 3 rumored to launch next year. Based on other recent Beats headphones, other potential upgrades for the Powerbeats Pro 2 include improved sound quality, longer battery life, and improved cross-platform compatibility with Android features like Find My Device. Plus, the Powerbeats Pro 2 charging case will almost certainly have a USB-C port instead of a Lightning port. Apple did not reveal a specific release date in 2025 for the Powerbeats Pro 2. It discontinued the original Powerbeats Pro last month.Tags: Beats, Powerbeats ProThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
06:12 pm
Apple Seeds First Public Betas of iOS 18.2, iPadOS 18.2 and macOS Sequoia 15.2 With New Apple Intelligence Features | MacRumors
Apple Seeds First Public Betas of iOS 18.2, iPadOS 18.2 and macOS Sequoia 15.2 With New Apple Intelligence Features
Apple today seeded the first public betas of upcoming iOS 18.2, iPadOS 18.2, and macOS Sequoia 15.2 updates, allowing the public to try out the new features ahead of when the software launches. The public betas come a couple days after Apple provided developers with the second betas. Public beta testers can download the updates from the Settings app on each device after opting into the beta through Apple's public beta testing website. iOS 18.2, iPadOS 18.2, and ‌macOS Sequoia‌ 15.2 introduce the next Apple Intelligence features, including the first image generation capabilities. The update adds Image Playground, a new app for creating images based on text descriptions. You can enter anything you want, though Apple will suggest costumes, locations, items, and more to add to an image. There are options to create characters that resemble your friends and family, and you can choose a photo for ‌Image Playground‌ to use as inspiration to create a related image. Elements added to ‌Image Playground‌ creations are previewed, and there is a preview history so you can undo a change and go back to a prior version. While ‌Image Playground‌ is a standalone app, it is also integrated into Messages, Notes, Freeform, and more. ‌Image Playground‌ does not make photorealistic images and is instead limited to animation or illustration styles. The update also adds Genmoji, which are customizable emoji characters that you can create based on descriptions and phrases. Like ‌Image Playground‌ creations, you can base them on your friends and family, with the data pulled from the People album in Photos. You can also make characters using basic elements, and you'll get multiple ‌Genmoji‌ suggestions to choose from. You can create ‌Genmoji‌ using the emoji keyboard. ‌Genmoji‌ are limited to iOS 18.2 and iPadOS 18.2 right now, and will be coming to ‌macOS Sequoia‌ later. Siri in iOS 18.2, iPadOS 18.2, and ‌macOS Sequoia‌ 15.2 has ChatGPT integration. If ‌Siri‌ is unable to provide an answer to a question, ‌Siri‌ will hand the request over to ChatGPT, though ‌Siri‌ will need user permission first. ChatGPT will answer the question and relay the information back through ‌Siri‌. ChatGPT can be used to create content from scratch, including text and images. No account is required to use ChatGPT integration, and Apple and OpenAI do not store requests. If you have an iPhone 16, there's a Visual Intelligence feature in iOS 18.2 that provides information about what's around you. Open up the camera and point it at a restaurant to get reviews, or point it at an item to search Google for it. Some other Visual Intelligence capabilities include reading text out loud, detecting phone numbers and addresses to add them to Contacts, copying text, and summarizing text. Apple added Writing Tools in iOS 18.1, but in iOS 18.2, you can more freely describe the tone or content change that you want to make, such as adding more action words, or turning an email into a poem. ‌Apple Intelligence‌ now supports localized English in Australia, Canada, New Zealand, South Africa, Ireland, and the UK in addition to U.S. English. Wait List If you've already been testing ‌Apple Intelligence‌ and are opted in, you will have access to Writing Tools, ChatGPT integration, and Visual Intelligence automatically. There is a secondary waiting list for early access to use ‌Genmoji‌, ‌Image Playground‌, and Image Wand. You can sign up to get access in ‌Image Playground‌ or in the areas where you access ‌Genmoji‌ or Image Wand. When you request access, you are added to a wait list for all three capabilities and you'll get a notification when the features are available for you to use. Apple will roll out access over time. Availability and Compatibility The public betas are available on all devices, but the ‌Apple Intelligence‌ features require a device capable of ‌Apple Intelligence‌. Apple is still working on refining the new ‌Apple Intelligence‌ tools, and the company warns that ‌Genmoji‌, Image Wand, and ‌Image Playground‌ can sometimes give you results you weren't expecting. Apple is collecting feedback on these experiences and will refine them over time. Release Date Apple is expected to release the iOS 18.2, iPadOS 18.2, ‌macOS Sequoia‌ 15.2, watchOS 11.2, tvOS 18.2, and visionOS 2.2 updates in early December.Related Roundups: iOS 18, iPadOS 18, macOS SequoiaRelated Forums: iOS 18, iPadOS 18, macOS SequoiaThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
05:48 pm
Apple Intelligence Servers Expected to Start Using M4 Chips Next Year After M2 Ultra This Year | MacRumors
Apple Intelligence Servers Expected to Start Using M4 Chips Next Year After M2 Ultra This Year
Apple plans to start using the M4 chip in its Apple Intelligence servers next year, according to a Nikkei Asia report this week, citing TrendForce analyst Frank Kung. Apple Intelligence servers are currently powered by the M2 Ultra chip, per previous reports. The report claims that Apple has approached its largest manufacturing partner Foxconn about building additional Apple Intelligence servers in Taiwan. It is unclear if the new servers will be equipped with the standard M4 chip, or a higher-end variant like the M4 Pro, M4 Max, or yet-to-be-announced M4 Ultra. It is also unclear if the existing servers with the M2 Ultra will be immediately upgraded to M4 chips. Apple's plan to use M4 chips in servers was previously revealed by Haitong analyst Jeff Pu. While some Apple Intelligence features rely entirely on on-device processing, Apple says requests that "require more processing power" rely on Private Cloud Compute models that are stored on the Apple Intelligence servers. When using Private Cloud Compute, Apple says that a user's data is never stored or shared with the company. iOS 18.1 was released last month with the first Apple Intelligence features on the iPhone, such as writing tools and notification summaries. iOS 18.2 will be released to the public in December with additional Apple Intelligence features, including Genmoji for custom emoji, Image Playground for image generation, ChatGPT integration for Siri, and more.Tags: Apple Intelligence, NikkeiThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:19 pm
Amazon Expands iPad Mini 7 Sale With More Models Available at $99 Discount | MacRumors
Amazon Expands iPad Mini 7 Sale With More Models Available at $99 Discount
Amazon this week continues to provide record low prices on multiple models of the new iPad mini 7, starting at $399.99 for the 128GB Wi-Fi tablet, down from $499.00. All of the deals on the iPad mini 7 in this article require you to clip an on-page coupon in order to see the discounts. Note: MacRumors is an affiliate partner with Amazon. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. Amazon has all four colors of the 128GB Wi-Fi iPad mini 7 on sale at this all-time low price, expanding on the sale that began last week with just two colors. You can also get the 512GB Wi-Fi iPad mini 7 for $699.99, down from $799.00. We're not tracking any deals on the 256GB Wi-Fi model this time around, nor any cellular models. Note: You won't see the deal price until checkout. $99 OFF128GB Wi-Fi iPad mini 7 for $399.99 $99 OFF512GB Wi-Fi iPad mini 7 for $699.99 These iPad mini 7 discounts are part of Amazon's early Black Friday discounts, which also include other iPads like the 9th and 10th generation iPads, and the M2 iPad Air. You can find more information about these deals in our Best Early Black Friday iPad Deals guide, and check out our overall Best Early Black Friday Apple Deals guide for everything else currently on sale. We're keeping track of all of the season's best Apple-related deals in our Black Friday roundup, so be sure to check back throughout the month for an updated list of all the most notable discounts you'll find for Black Friday 2024. Deals Newsletter Interested in hearing more about top deals as we head into the holidays? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
02:33 pm
The Best Early Black Friday Apple Watch Deals | MacRumors
The Best Early Black Friday Apple Watch Deals
Black Friday is just around the corner, and Apple Watch deals have begun appearing ahead of the shopping holiday on November 29. In this article, we'll take a look at all of the best early Black Friday Apple Watch deals, including the new Series 10 models. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. Of course, there is a chance that we could see better deals on these Apple Watch models arrive as Black Friday gets closer. This is a risk anyone has to take while shopping during the holidays, so with that in mind, many of the deals shared below are currently their best prices ever seen. More information on these sales can be found in our Black Friday Roundup. Best Apple Watch Deals Apple Watch SE (40mm GPS) for $189.00 ($60 off) Apple Watch Series 10 (42mm GPS) for $354.28 ($45 off) Apple Watch Series 10 (46mm GPS) for $392.00 ($37 off) Apple Watch Ultra 2 (Black) for $721.89 ($77 off) Best Black Friday Deals The Best Early Black Friday Apple Deals The Best Early Black Friday AirPods Deals The Best Early Black Friday iPad Deals Apple Watch Series 10 Right now, the best early Black Friday Apple Watch deals are focused entirely on the new Series 10 models. You can get the 42mm GPS device for $355.28 at Amazon, down from $399.00. This $44 discount is a new all-time low price on the 2024 smartwatch. Likewise, the 46mm GPS is down to $392.00 at Amazon, which is a $37 markdown and record low price. $45 OFFApple Watch Series 10 (42mm GPS) for $354.28 $37 OFFApple Watch Series 10 (46mm GPS) for $392.00 Apple Watch Ultra 2 In terms of other Apple Watch deals, Amazon has the Apple Watch Ultra 2 in Black for $722.89, down from $799.00. This is an all-time low price on the new 2024 model of the Apple Watch Ultra, and right now only the Black model with Black Trail Loop (M/L) is on sale at this price. $77 OFFApple Watch Ultra 2 for $721.89 However, there are multiple models available at just a few dollars higher at $729.99, like the Black with Dark Green Alpine Loop and Natural with Blue Trail Loop. Apple Watch SE Amazon has the 40mm GPS Apple Watch SE for just $189.00, down from $249.00, which is a second-best price for the model. The 44mm GPS model is also at a second-best price of $219.00 this week. $60 OFFApple Watch SE (40mm GPS) for $189.00 $60 OFFApple Watch SE (44mm GPS) for $219.00 You can find all the Apple Black Friday Deals currently available in our dedicated post. For everything else, we're keeping track of all of the season's best Apple-related deals in our Black Friday roundup, so be sure to check back throughout the month for an updated list of all the most notable discounts you'll find for Black Friday 2023. Deals Newsletter Interested in hearing more about top deals as we head into the holidays? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundups: Apple Black Friday, Apple DealsRelated Forum: Community DiscussionThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
02:05 pm
iOS 18.2 Lets You Track Progress of Safari Downloads on Lock Screen | MacRumors
iOS 18.2 Lets You Track Progress of Safari Downloads on Lock Screen
iOS 18.2 expands Live Activities support to ongoing Safari downloads, allowing you to quickly track the progress of file downloads on the iPhone's Lock Screen, and in the Dynamic Island on iPhone 14 Pro models and newer. This is a minor but useful improvement coming with iOS 18.2. The update is currently in beta, and it will be released in December, according to Apple. Check out our lists of new features and changes in the first and second betas of iOS 18.2 to see what else is coming with the update, including additional Apple Intelligence features like Genmoji, Image Playground, and ChatGPT integration for Siri.Related Roundups: iOS 18, iPadOS 18Related Forums: iOS 18, iPadOS 18This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
01:18 pm
iPhone Glass Supplier Corning Faces EU Antitrust Probe | MacRumors
iPhone Glass Supplier Corning Faces EU Antitrust Probe
Apple supplier Corning is facing a European Commission-led antitrust probe over potential anticompetitive practices related to its dominant position in the smartphone cover glass market, specifically in relation to its Gorilla Glass technology. The investigation centers on concerns that US-based Corning may have abused its market position by adopting exclusivity contracts to prevent rival glass makers from competing for business with mobile device manufacturers. The Commission is particularly focused on arrangements that allegedly required manufacturers to source "all or nearly all" of their specialized alkali-aluminosilicate glass from Corning. "It is [a] very frustrating and costly experience to break a mobile phone screen. Therefore, strong competition in the production of the cover glass used to protect such devices is crucial to ensure low prices and high-quality glass," said EU competition chief Margrethe Vestager in a statement. "We are investigating if Corning, a major producer of this special glass, may have tried to exclude rival glass producers, thereby depriving consumers from cheaper and more break-resistant glass."Corning's relationship with Apple has been particularly strong over the years, with Apple having invested $495 million in the company through its Advanced Manufacturing Fund between 2017 and 2021. This collaboration led to the development of Ceramic Shield, which Apple describes as its "most advanced glass ceramic formulation" in the iPhone 16 lineup, claiming that it is twice as tough as competitive smartphone glass. The partnership has yielded exclusive benefits for Apple's devices. While competitors like Samsung use standard Gorilla Glass products, including the recent "Gorilla Armor" for the Galaxy S24 Ultra, Apple's Ceramic Shield technology remains exclusive to iPhone models since its introduction with the iPhone 12 in 2020. The glass is infused with nano-ceramic crystals at high temperatures while maintaining the transparency needed for the display, cameras, and Face ID sensors. The Commission aims to determine whether Corning's practices have led to higher prices and reduced innovation, but it has not set a deadline for the investigation's completion. If Corning is found to have violated EU competition rules, it could face significant penalties. However, the company will have the opportunity to address the Commission's concerns by offering commitments that could bring the investigation to a close. Tags: Corning, European Commission, European UnionThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
12:06 pm
Valve Launches Game Recording Feature for Steam Client | MacRumors
Valve Launches Game Recording Feature for Steam Client
Valve has officially released Steam Game Recording, a new built-in feature that allows players to capture and share gameplay footage across PC, Mac, and Steam Deck devices. The feature recently exited beta testing and is now available through the Steam client. Steam Game Recording offers both manual and automatic recording options, with manual recording triggered by a customizable hotkey. Players can configure recording length, quality settings, and storage limits through a dedicated Game Recording tab in Steam's settings menu. The feature is disabled by default, but can be enabled through Steam's settings menu. The feature works with any game that supports Steam Overlay, including non-Steam titles. For privacy reasons, recordings only capture the game window itself while excluding other desktop content. Additional functionality includes basic editing tools, timeline management, and flexible export options. Recorded content can then be shared directly through Steam or exported as MP4 files. This version of the Steam client is also the first to drop support for macOS 10.13 High Sierra and 10.14 Mojave, following Valve's announcement earlier this year. Steam installations on these systems will no longer receive updates or security patches, but this is unlikely to affect that many Mac users as most will have already upgraded to newer versions.Tags: Steam, ValveThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
11:25 am
iOS 18.2 Could Show How Long Your iPhone Will Take to Charge | MacRumors
iOS 18.2 Could Show How Long Your iPhone Will Take to Charge
Apple appears to be working on a new battery charging feature for iPhone that will show users how much time it will take for their device to reach a full charge. Code unearthed in the latest iOS 18.2 beta by 9to5Mac references a new "BatteryIntelligence" framework that apparently allows the system to calculate estimated charging completion times. While the feature has yet to be enabled, if Apple does implement it in the public release, iOS 18.2 may be able to notify users about how long it will take their iPhone to reach a specific charge level. This would build upon iOS 18's existing battery health capabilities, which include new options to limit maximum charging to 80%, 85%, 90%, or 95% to help preserve long-term battery health. iOS 18 also now alerts users when their iPhone is being charged with a slower-than-optimal charger. Using the New iPhone Charging Limit Options in iOS 18 While the underlying framework exists in iOS 18.2 beta 2, it's unclear whether the associated feature will be included in the final release or reserved for a future update. Apple is still releasing a course of iOS 18.2 betas to developers for testing in preparation for a planned release in early December.This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
Tuesday November 05
11:42 pm
Apple Planning 'Ten Year Celebration' Activity Achievement for Apple Watch | MacRumors
Apple Planning 'Ten Year Celebration' Activity Achievement for Apple Watch
Apple appears to be planning an activity challenge to celebrate the 10th anniversary of the Apple Watch, which was released in 2015. In the latest iOS 18.2 beta, there's a mention of a "Ten Year Celebration" with references to an activity achievement, so it sounds like something is in the works. While the Apple Watch was introduced at Apple's September 2014 iPhone event, it was not released until April 2015. The delay between the device's introduction and its launch have raised questions about whether the Apple Watch 10th anniversary is in 2024 or 2025. Apple celebrated the 10th anniversary of the ‌iPhone‌ with the launch of the ‌iPhone‌ X in 2017, and this year, the company highlighted the 10th anniversary of Apple Pay. Apple does see 10th anniversaries as notable, so we can expect something for the Apple Watch. Back in 2023, Bloomberg's Mark Gurman claimed that Apple was planning a complete revamp of the Apple Watch for its 10th anniversary, complete with a magnetic band attachment system and a slimmer design. In September 2024, the Apple Watch did get a design update with larger displays and a thinner chassis, but the device was not branded the "Apple Watch X" as Gurman said it would be, nor did it have a new band attachment system. It is possible that those updates that Gurman talked about in 2023 will actually come in 2025 as part of an anniversary celebration for the device, but it is unclear because the slimmed down look that Gurman mentioned has already been implemented. Next year will also mark the 10th anniversary of the Apple Music streaming service, which came out in June 2015. Apple could also have something planned for that anniversary.Related Roundup: Apple Watch 10Buyer's Guide: Apple Watch (Buy Now)This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
09:56 pm
Apple Continues Working to Get Blood Oxygen Sensing Back in U.S. Apple Watches as Next Masimo Trial Begins | MacRumors
Apple Continues Working to Get Blood Oxygen Sensing Back in U.S. Apple Watches as Next Masimo Trial Begins
Apple and Masimo are back in a California court this week for a bench trial that will see Masimo arguing that Apple illegally poached its employees and stole trade secrets when developing the Apple Watch. Masimo first filed the trade secret lawsuit against Apple in 2020, and there was a jury trial in April 2023. During that trial, the court threw out more than half of Masimo's trade secret claims, but the judge ultimately declared a mistrial because the jury was not able to come to a final decision. Six of seven jurors sided with Apple, while one Masimo holdout would not change her opinion. Apple and Masimo were slated to retry the case with another jury, but Masimo abandoned all claims asking for monetary compensation in order to get a bench trial instead. Masimo originally requested $1.85 billion in damages, along with reasonable royalties, lost profits, and a penalty for willful trade secret appropriation. With the bench trial, Masimo is no longer claiming any monetary damages, but it wants an injunction against the Apple Watch. The bench trial will first determine if there were any trade secret violations, and then the court will consider Masimo's argument for an injunction. It is unclear what injunctive relief Masimo could ask for in this situation, especially as many of the claims in this case have now been thrown out. During the case, Masimo accused Apple of infringing on 17 patents. After an ITC review, 15 of the 17 patents were invalidated, with two remaining. The patent portion of the trade secret case is on hold. Note that the Masimo trade secret lawsuit against Apple is separate from both an ITC injunction preventing the sale of Apple Watch models with a blood oxygen sensor and a patent infringement case that Apple filed against Masimo. Apple is appealing the ITC's Apple Watch injunction, but it has been able to continue selling the Apple Watch by disabling the blood oxygen sensor that allegedly infringes on Masimo's technology. To get the sales ban in the first place, Masimo had to prove that it was using the patents that Apple was infringing, so Masimo rushed to create its own smart watch in 2022, deliberately copying several of Apple's patents. Masimo's W1 Freedom smart watch was the subject of the patent lawsuit that Apple filed against Masimo, and just last week, a jury decided that Masimo's devices had infringed on Apple Watch patents. Apple says that it only asked for $250 in damages, as the goal of the lawsuit wasn't profit, it was to get Masimo to stop copying the design of the Apple Watch. The ITC order is the most damaging to Apple because Apple is prevented from selling Apple Watch models with blood oxygen sensing in the United States. Apple believes the appeals court will overturn the ITC's ruling, and the company said this week that it is exploring all possible methods to get blood oxygen sensing back in U.S. Apple Watch models. Over the last five years, Masimo has been fighting three separate cases with Apple. Masimo did win the ITC ban of the blood oxygen sensing feature, but it ultimately had no material impact on Apple's business because Apple was able to simply disable the feature and continue selling the device. So far, Masimo has not gained much in its legal battle with Apple, and it isn't looking like the trade secret case will go in Masimo's favor.Tags: Masimo, Patent LawsuitsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
09:51 pm
OWC's Thunderbolt 5 External SSD for Latest Macs is Impressively Fast | MacRumors
OWC's Thunderbolt 5 External SSD for Latest Macs is Impressively Fast
Apple's new Mac mini with the M4 Pro chip and MacBook Pro models with M4 Pro and M4 Max chips feature support for the faster Thunderbolt 5 specification, and reputable accessory maker OWC is ready with a new external SSD. Announced in September, OWC's Envoy Ultra external SSD is compatible with Apple's latest Macs, and it has Thunderbolt 5 support for advertised data transfer speeds of more than 6GB per second. That is up to double the speeds that OWC's previous high-end external SSDs with Thunderbolt 3/Thunderbolt 4 support can achieve. The external SSD has a built-in Thunderbolt 5 cable, and it is powered by the Mac that it is connected to, rather than an external power supply. Unsurprisingly, these impressive speeds come at a steeper price compared to the average external SSD. OWC is now accepting pre-orders for the Envoy Ultra through its online store in the U.S., with 2TB and 4TB storage capacities available for $399.99 and $599.99, respectively. Orders are estimated to begin shipping in early November. OWC plans to announce a Thunderbolt 5 dock with an array of ports later in November. Apple's new Macs launch on Friday.Tags: OWC, Thunderbolt 5This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
09:23 pm
EU Plans to Fine Apple for Anticompetitive App Store Practices | MacRumors
EU Plans to Fine Apple for Anticompetitive App Store Practices
The European Commission plans to fine Apple for not adequately complying with Digital Markets Act (DMA) requirements for the App Store, reports Bloomberg. Regulators apparently believe that Apple did not implement changes that allowed developers to steer users to cheaper prices outside of the ‌App Store‌. Back in June, the EU said that Apple was in breach of the DMA due to its anti-steering rules. The European Commission said that developers should be able to inform their customers of alternative purchasing options, steer them to offers, and allow them to make purchases outside of the ‌App Store‌. In August, Apple again changed its App Store rules in Europe to satisfy regulators. Apple began allowing EU developers to communicate and promote offers that would direct customers outside of the ‌App Store‌, and it marked a significant loosening of Apple's prior rules. Developers are able to communicate discounts and deals without opting into Apple's new developer terms or paying the Core Technology Fee, but Apple is requiring developers to report external purchase transactions and pay an initial acquisition fee and a store services fee. It is not clear when the European Commission will announce the fine, but it could happen before current competition commissioner Margrethe Vestager leaves the position later this month. It could also be pushed back to later in the year, though. Exactly how much Apple will have to pay is unknown at this time, but earlier this year, the EU fined Apple $2 billion for anticompetitive behavior against third-party music services. Under the DMA, the European Union can fine Apple up to 10 percent of its global annual sales.Tags: Apple Antitrust, App Store, European Commission, European UnionThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
08:16 pm
Apple Stores Moving This Weekend in Three U.S. Cities, Including Tucson | MacRumors
Apple Stores Moving This Weekend in Three U.S. Cities, Including Tucson
Apple this week announced that its retail store at La Encantada in Tucson, Arizona will be moving to a temporary location that opens Saturday, November 9 at 10 a.m. local time. Apple says the temporary store will be located on the second level of the outdoor shopping center, just in front of the stairs and escalator leading to that level. Apple will likely renovate its original store at La Encantada while operating out of the temporary location, but the company did not share details or a timeframe. Apple first opened a store there in 2004, and its interior design is now dated. Last week, we reported that Apple would be opening a relocated store in Fairfax, Virginia, and a temporary store at Roosevelt Field on Long Island in New York. Apple has since announced that both of these stores will open on November 9 as well. Overall, it will be an eventful weekend for Apple retail in the U.S., with three stores on the move.Tag: Apple StoreThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
07:45 pm
Veterans Day Apple Watch Activity Challenge Set for November 11 | MacRumors
Veterans Day Apple Watch Activity Challenge Set for November 11
Apple is planning an Apple Watch Activity Challenge to honor Veterans Day, which takes place next Monday in the United States. Apple Watch owners are tasked with doing any workout for 11 minutes or more on November 11. Apple Watch owners who complete the challenge will win an Apple Watch activity award in the Fitness app. Earn this award on November 11 by doing any workout for 11 minutes or more. Record your time with the Workout app or any app that adds workouts to Health.Like all of Apple's Activity Challenges, the Veterans Day event will come with animated stickers that can be found in the Messages app. Apple's Veterans Day Activity Challenge is offered on an annual basis, and the company often includes other Veterans Day-themed content in the App Store, Apple TV app, Books app, and more. Tag: Activity ChallengeThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
07:00 pm
Testing the Vision Pro With New Ultrawide Display Option in visionOS 2.2 | MacRumors
Testing the Vision Pro With New Ultrawide Display Option in visionOS 2.2
The first developer beta of visionOS 2.2 came out yesterday, and it includes a much anticipated new feature for Vision Pro users. When using the Vision Pro as a display for a Mac, there are now options to use wide and ultrawide layouts in addition to the standard virtual display. Subscribe to the MacRumors YouTube channel for more videos. We thought we'd check out the new display settings for those who might be interested in seeing how this changes the Vision Pro Mac workflow. With the wide display option, there's enough screen real estate to use four apps at once without compromising on window size. Ultrawide bumps up the available space even more, and it's almost too much display space. Using the ultrawide setting is like having multiple curved Mac displays in front of you to handle your Mac apps, and then you can also add in visionOS apps to better utilize the virtual space around you. The larger screen sizes for the Mac do improve productivity because there's so much more space to work with. Note that you still can't use multiple Mac windows when mirroring your Mac display to your Vision Pro, but the wide and ultrawide provide so much space that it's essentially the same function. Apple says that the ultrawide mode is equivalent to using two 4K monitors side by side. In addition to adding these display modes, Apple improved the quality of the virtual displays so they're crisper and higher resolution, plus audio plays from the Vision Pro rather than the Mac so it sounds better. visionOS 2.2 is in beta right now, but it will see a launch alongside macOS Sequoia 15.2 and iOS 18.2 in early December.Related Roundups: Apple Vision Pro, visionOS 2Buyer's Guide: Vision Pro (Buy Now)Related Forum: Apple Vision ProThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
06:56 pm
Anker's Early Black Friday Sale Includes Exclusive 20% Off for MacRumors Readers, Mystery Boxes, and More | MacRumors
Anker's Early Black Friday Sale Includes Exclusive 20% Off for MacRumors Readers, Mystery Boxes, and More
MacRumors readers can get 20 percent off a collection of Anker's best chargers, power banks, cables, hubs, and docks this month, just in time for holiday shopping. In order to get this deal, head to Anker's website and add an accessory to your cart, then enter the code akmacrumors20ch at checkout to see the discount. Note: MacRumors is an affiliate partner with Anker. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. Our exclusive 20 percent off code works on most accessories sitewide, including Anker's new line of MagSafe-compatible products. Our code does not stack with any existing offers, including any early access Black Friday deals. We've collected some of the best accessories to use our code on in the list below. In some cases Anker's own on-page coupons are better, so we have marked them as such. EXCLUSIVE 20% OFFAnker Sitewide Sale Anker is also currently hosting a new Black Friday event where you can buy two accessories to get 20 percent off, or buy three for 25 percent off, so if you plan on buying in bulk this may be a better offer. There are also mystery boxes where you can spend up to $79.99 in order to win a piece of gear worth as much as $799.00. Don't forget that our exclusive code works with even more devices sitewide. All prices listed below will appear after you enter the code akmacrumors20ch at the checkout screen on Anker's website. Prime Chargers Prime USB-C to USB-C Cable - $28.00, down from $34.99 Prime Charger (200W, 6 Ports) - $68.40, down from $84.99 Prime Charger (100W, 3 Ports) - $64.00, down from $79.99 Prime Power Bank - $72.00, down from $89.99 Prime Charging Station (8-in-1) - $132.00, down from $164.99 Prime Power Bank 27,650 mAh - $144.00, down from $179.99 Prime Charging Docking Station (14-in-1) - $200.00, down from $249.99 Wireless Chargers MagGo 3-in-1 Foldable Wireless Charging Station - $72.00, down from $89.99 MagGo Wireless Charger Stand - $28.80, down from $35.99 MagGo 2-in-1 Wireless Charger Stand - $40.00, down from $49.99 MagGo 2-in-1 Wireless Charger Dock Stand - $40.00, down from $49.99 Power Banks MagGo Power Bank 10,000 mAh - $60.00, down from $69.99 MagGo Power Bank for Apple Watch - $59.99 with on-page coupon, down from $79.99 Accessories MagGo Magnetic Case with Stand - $24.00, down from $32.99 MagGo USB-C Adapter - $23.10 with on-page coupon, down from $34.99 Easy Fit Screen Protector - $19.20 with on-page coupon, down from $31.99 Our full Deals Roundup has more information on the latest Apple-related sales and bargains. Deals Newsletter Interested in hearing more about top deals as we head into the holidays? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
06:38 pm
Apple's Employee Count Grew This Year Despite Smaller-Scale Layoffs | MacRumors
Apple's Employee Count Grew This Year Despite Smaller-Scale Layoffs
Apple's employee count grew in 2024, despite reports that the company had at least four incidents of smaller-scale layoffs this year. As of late September, Apple had approximately 164,000 full-time employees worldwide, the company disclosed in a filing last week. That's up from the 161,000 full-time employees that Apple reported a year ago. These figures include corporate employees, such as software engineers, and retail employees at its stores. Apple now has as many employees as it did in 2022, following a slight decrease last year. Apple's full-time employee counts by year, per the company's filings: 2024: 164,000 2023: 161,000 2022: 164,000 2021: 154,000 2020: 147,000 2019: 137,000 2018: 132,000Apple laid off more than 600 employees this year after canceling its long-running electric vehicle project, according to a notice the company filed in California. The company also relocated a Siri evaluation team from San Diego, California to Austin, Texas, and employees on the 120-person team who were not willing to make the long-distance move were laid off. Apple also cut around 100 jobs across its Apple Books and Apple News teams this year, and laid off some employees after abandoning its plan to develop in-house Apple Watch displays with micro-LED technology, according to Bloomberg's Mark Gurman. While some other tech companies like Google and Microsoft have laid off tens of thousands of employees over the past two years, Apple has managed to avoid larger-scale layoffs in that time. With its employee count once again at an all-time high, and its quarterly revenues in record territory again, Apple is heading into 2025 on a good note.This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:42 pm
Apple Silicon Unified Memory: How Much Mac RAM Do You Need? | MacRumors
Apple Silicon Unified Memory: How Much Mac RAM Do You Need?
When choosing a new Mac, one of the most important decisions you'll make is how much memory to configure. This guide helps you to work out how much RAM you need. With the advent of Apple silicon and its unified memory architecture in 2020, the traditional understanding of RAM has evolved, leading to new considerations for users when selecting a memory option. Unlike traditional PC RAM, where separate components like the CPU and GPU each have their own dedicated memory pools, Apple's unified memory architecture allows all processing units to access a single, shared pool of high-bandwidth, low-latency memory. As a result, in Apple silicon systems, data doesn't need to be copied between multiple memory areas, significantly improving speed and power efficiency. By uniting memory, Apple devices with this technology theoretically deliver superior performance across multitasking, creative workflows, and demanding applications while minimizing the latency typically associated with data transfer between separate memory types. With the optimizations of macOS, this means that less memory can go further than before, for most Mac users. All Mac models now start with 16GB of memory, up from 8GB, with the option to upgrade to higher configurations with build-to-order models. However, choosing to do so can add considerable cost to the base price of a new Mac. To help you make the best choice for your workflow and budget, here's a breakdown of who should choose each memory tier currently available in the entire Mac lineup and why it may be the right fit for you: 16GB: General users, students, and professionals with standard workloads should opt for 16GB. This configuration is perfect for those who primarily browse the web, stream content, use productivity apps, and perform multitasking. Thanks to the performance of Apple silicon and the efficiency of macOS, 16GB is more than sufficient for a smooth experience with everyday tasks. 24GB: Users who need slightly more headroom for multitasking and moderate creative work should consider 24GB. This tier is ideal for those who work with slightly heavier applications such as video editing, gaming, graphic design, or coding but do not push these tasks to the absolute extreme. It provides an additional buffer for users who run multiple intensive apps simultaneously and perform more multitasking than what 16GB can handle comfortably. 32GB or 36GB: Professionals engaging in intensive creative workflows, such as video editing in 4K, music production with multiple tracks, or large-scale coding projects, should opt for 32GB or 36GB. These configurations suit users who frequently use memory-heavy applications like Adobe Creative Cloud apps, Xcode, or virtual machines. It provides sufficient power for consistent performance without frequent reliance on disk swapping, even under substantial workloads. 64GB: Power users and creative professionals who manage high-resolution media and extensive multitasking should choose 64GB. It is ideal for those working on large 3D modeling projects, editing 8K video, or handling complex simulations and data analysis. This memory quantity should support running multiple virtual machines or advanced software development environments without any slowdown. 96GB: High-end creative professionals and developers handling intensive projects involving large datasets or media should consider 96GB. This tier offers significant overhead for those who need more than 64GB, ensuring seamless performance when editing multiple streams of high-resolution video, detailed 3D rendering, or working with substantial datasets that need to be kept in active memory. 128GB: Professionals in specialized fields like film editing, data science, or engineering should look at 128GB. This memory configuration is designed for workflows that involve extremely large projects and require vast amounts of data to be kept in active memory. It is perfect for those working on high-resolution visual effects in cinema, simulation-based software, or advanced scientific computations, providing robust multitasking and peak performance across demanding tasks. 192GB: Enterprise-level users, researchers, and industry professionals dealing with mission-critical, memory-intensive applications should opt for 192GB. This option is suitable for large-scale data processing, machine learning, or AI development, ensuring maximum efficiency and reducing the need for data swapping between RAM and storage. It is also ideal for developers working on complex server-side projects requiring powerful single-machine testing. With Apple silicon's Unified Memory Architecture and macOS's efficient memory management, the base 16GB configuration now meets the needs of most users, providing a good balance of cost and performance for everyday computing tasks and moderate creative work. The increasing importance of demanding artificial intelligence features like Apple Intelligence and the potential for more intensive applications over time mean that those with more demanding workflows or plans for longevity should consider upgrading the memory. Opting for 24GB or 32GB can provide an added buffer for the future, supporting heavier multitasking, creative software, and emerging AI features. Higher configurations, such as 64GB or more, are better for professionals in fields that require significant data handling, including video production, 3D rendering, and machine learning. For users who already own an Apple silicon Mac, it will be worthwhile to evaluate your current system's performance to determine whether you'll need more memory next time around. Consider whether your current memory configuration handles your typical workload efficiently or if you experience slowdowns during multitasking or when using resource-intensive applications. Ultimately, your decision should balance your current workload, any anticipated future requirements, and cost—especially since adding memory can be expensive and it cannot be changed after purchase. Tags: Apple Silicon, RAMThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:17 pm
GM Again Attempts to Explain Its Decision to Drop CarPlay in New EVs | MacRumors
GM Again Attempts to Explain Its Decision to Drop CarPlay in New EVs
American automaker General Motors (GM) last year announced it would be phasing out support for CarPlay and Android Auto in its new electric vehicles, in favor of its own software platform called Ultifi. The decision has been very controversial, as many drivers consider CarPlay to be a must-have feature in a new vehicle. In 2022, for example, Apple said 79% of U.S. buyers would only consider a vehicle that works with CarPlay. To make matters worse, GM's rollout of Ultifi went rather poorly, with some early reviewers of the Chevrolet Blazer EV last year experiencing technical issues with the platform. Some of those problems have since been resolved, but it is clear that the automaker might not be as effective at developing software as a tech company like Apple. In a statement shared with MacRumors last year, GM said its software strategy is "driven by the benefits of having a system that allows for greater integration with the larger GM ecosystem and vehicles." In other words, the automaker wants to control the entire in-vehicle experience, which is both a reasonable and a risky decision. In a recent interview with The Verge's Nilay Patel, GM's senior vice president of software Baris Cetinok further attempted to defend the automaker's decision to phase out CarPlay. Cetinok worked at Apple between 2012 and 2021, helping to spearhead the launch of Apple Pay, Find My, iCloud Drive, and more, according to his LinkedIn profile. Cetinok joined GM months after it announced its decision to phase out CarPlay and Android Auto, but unsurprisingly he stands by the automaker's decision. He told Patel that GM believes with "strong conviction" that creating its entire in-vehicle experience provides "a better customer experience" with "end-to-end magic." 2024 Chevrolet Blazer EV with GM's Ultifi software platform "But we have a strong conviction that effort pays off in a better customer experience," said Cetinok, speaking on the Decoder podcast. "You get the most out of your vehicle because now we're the company that builds the vehicle and is also creating the infotainment experience, the cluster experience, the app, and everything. We're going to build that one day and maybe a voice assistant on top of it. The only way you can create that end-to-end magic is to have a strong conviction that you want to own all of these." He said GM wants to offer a seamless experience that does not require having to switch in and out of phone mirroring systems like CarPlay and Android Auto. "When you want to create something so seamless, it's hard to think about getting into a car and going, 'Okay, so I'm doing highway trailering, but let me flip to a totally different user interface to pick my podcast,'" said Cetinok. "By the way, it's a single app-obsessed interface — it's still hard to believe. So I pick my podcast, flip back to trailering. Oh, now I can also do Super Cruise trailering. Let me manage that. Then, wait, we're now getting into potentially Level 3, Level 4 autonomy levels that should be deeply integrated with talking to the map where the lanes lie. But wait a minute, the map that I'm using doesn't really talk to my car." The full transcript of the interview with more CarPlay commentary is available on The Verge.Related Roundup: CarPlayRelated Forum: HomePod, HomeKit, CarPlay, Home & Auto TechnologyThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
03:02 pm
The Best Early Black Friday iPad Deals | MacRumors
The Best Early Black Friday iPad Deals
Black Friday is still a few weeks away, but you can already find great prices on numerous iPads, including the 9th generation iPad, 10th generation iPad, iPad Air, and iPad mini. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. Of course, there is a chance that we could see better deals on these iPads arrive as Black Friday gets closer. This is a risk anyone has to take while shopping during the holidays, so with that in mind, many of the deals shared below are currently their best prices ever seen. More information on these sales can be found in our Black Friday Roundup. Unless otherwise noted, all the deals in this guide will be found on Amazon. Best iPad Deals 9th Gen iPad (64GB Wi-Fi) for $199.99 ($129 off) 10th Gen iPad (64GB Wi-Fi) for $296.00 ($53 off) Magic Keyboard for 11-inch iPad Pro for $249.99 ($49 off) Apple Pencil Pro for $91.99 ($37 off) Best Early Black Friday Deals The Best Early Black Friday Apple Deals The Best Early Black Friday AirPods Deals 9th Gen iPad We've been tracking a great all-time low discount on the ninth generation iPad since Prime Day, and that discount is still around in November. You can get the 64GB Wi-Fi iPad for $199.99, down from $329.00. At this price, the iPad is a perfect entry-level tablet for a kid or family member who doesn't need the tablet for work-intensive projects. $129 OFF10.2-inch iPad (64GB Wi-Fi) for $199.9910th Gen iPad Apple's 64GB Wi-Fi iPad from 2022 is being discounted to the all-time low price of $297.00 right now on Amazon, from $349.00. This upgraded model comes with a larger 10.9-inch Liquid Retina display, A14 Bionic chip for a performance boost, Wi-Fi 6, and more. $53 OFF10.9-inch iPad (64GB Wi-Fi) for $296.007th Gen iPad Mini Apple's new 8.3-inch iPad mini 7 is down to $399.99 on Amazon, down from $499.00. You'll need to clip an on-page coupon in order to see this deal. This iPad mini has an 8.3-inch Liquid Retina display, A17 Pro chip, Wi-Fi 6E, and more. $99 OFFiPad mini 7 (64GB Wi-Fi) for $399.99M2 iPad Air For the latest iPad Air models, Amazon has a few all-time low prices, including the 256GB Wi-Fi 11-inch iPad Air for $596.00 ($103 off) and the 128GB Wi-Fi 13-inch iPad Air for $691.00 ($108 off). There are a few cellular discounts as well on select M2 iPad Air tablets. $103 OFF11-inch iPad Air (256GB Wi-Fi) for $596.00 $108 OFF13-inch iPad Air (128GB Wi-Fi) for $691.00Accessories Apple Pencil (USB-C) - $69.00 ($10 off) Apple Pencil Pro - $91.99 ($37 off) Magic Keyboard for 11-inch iPad Pro - $249.99 ($49 off) Magic Keyboard for 13-inch iPad Pro - $273.99 ($75 off) We've begun tracking all of the season's best deals in our dedicated Black Friday Roundup, so be sure to bookmark the page and visit it throughout the season as you do your online shopping. Our roundup mainly focuses on Apple products and related tech accessories. Deals Newsletter Interested in hearing more about top deals as we head into the holidays? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundups: Apple Black Friday, Apple DealsRelated Forum: Community DiscussionThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
02:36 pm
Apple Preparing to Add New Screen Savers to tvOS 18.2, Including Snoopy and More | MacRumors
Apple Preparing to Add New Screen Savers to tvOS 18.2, Including Snoopy and More
Apple on Monday seeded the first beta of tvOS 18.2 to developers for testing, and the upcoming update includes hidden code-level references to new screen savers coming soon, according to MacRumors contributor Aaron Perris. Snoopy The code shows there will be four categories of screen savers added to the Apple TV, including Snoopy, TV and Movies, Music, and Soundscapes. TV and Movies Music Soundscapes The new screen savers will likely become visible in a later tvOS 18.2 beta version. Apple's website indicates that the Snoopy and TV and Movies options are "coming late 2024," and the Music and Soundscapes options will likely be available then too. We expect tvOS 18.2 to be released to the public in December, in line with the late 2024 timeframe. At least some of the new screen saver options, including Snoopy, will require a second-generation Apple TV 4K or newer, according to Apple. Existing screen saver categories on the Apple TV include Aerials and Memories, along with a Portraits option with clocks added in tvOS 18.0.Related Roundup: Apple TVBuyer's Guide: Apple TV (Don't Buy)Related Forum: Apple TV and Home TheaterThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
01:02 pm
Track 2024 Election Results Live on Your iPhone Lock Screen | MacRumors
Track 2024 Election Results Live on Your iPhone Lock Screen
Apple News is providing Live Activities support for the 2024 U.S. presidential election, allowing iPhone and iPad users to track electoral results in real time directly from their Lock Screen. The feature is rolling out for U.S. users over the course of Election Day, November 5, providing continuous updates of the electoral count. So if you're interested, you don't need to repeatedly check news websites or unlock your device. If you have an iPhone 14 Pro or later model running iOS 16.1 or newer, or an iPad running iPadOS 17 or later, you can activate the feature through the Apple News app. Setting it up in advance ensures you won't miss any updates when coverage begins. Open the Apple News app and tap the prominent "Follow Live" button when prompted. When active, the Live Activity will appear as an interactive widget on your Lock Screen – you can quickly access detailed coverage with a tap. For iPhone 14 Pro and newer models, updates will also be visible in the Dynamic Island at the top of the display, even if you're doing something else on your iPhone.Tag: Apple NewsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
11:11 am
Apple Reportedly Working on 90Hz Studio Display, iMac, iPad Air | MacRumors
Apple Reportedly Working on 90Hz Studio Display, iMac, iPad Air
A new rumor suggests Apple is developing 90Hz display technology that could make its way to future versions of the Studio Display, iPad Air, and 24-inch iMac, all of which currently feature 60Hz refresh rates. The claim, spotted by 9to5Mac, comes from an anonymous source who contacted the Upgrade podcast, hosted by Myke Hurley and Jason Snell. According to the source, Apple is working on "a higher refresh rate LCD display with a new liquid motion panel fixed at around 90Hz," with plans to implement the technology across multiple products. Such a development would be particularly noteworthy for the Studio Display, which hasn't received any hardware updates since its March 2022 launch. Many Apple users had hoped to see a refreshed model before the end of 2024, amid on-again, off-again rumors about a potential upgrade featuring mini-LED technology and ProMotion support. Apple's higher-end Pro Display XDR has also remained unchanged since its 2019 debut. Display analyst Ross Young, who is known for accurate predictions about Apple's display technology, reported in April 2023 that Apple had abandoned plans for a 27-inch monitor with mini-LED backlighting. That canceled project, which could have been a next-generation Studio Display, was said to include the use of ProMotion technology with refresh rates up to 120Hz. Earlier, Young had anticipated such a display launching in 2022, but the release never materialized. According to the anonymous source, the 90Hz display technology will debut first in the next-generation M3 iPad Air, expected in early 2025, before expanding to other products. The 24-inch iMac, which just received an M4 update, likely wouldn't see this display improvement until late 2025 at the earliest. The current Studio Display features a 27-inch 5K LCD panel with 60Hz refresh rate, P3 wide color support, and up to 600 nits brightness, starting at $1,599.Related Roundups: iMac, iPad Air Buyer's Guide: iMac (Buy Now), iPad Air (Buy Now)Related Forums: iMac, iPadThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
10:25 am
Indonesia iPhone Ban: Apple Proposes $10M Manufacturing Investment | MacRumors
Indonesia iPhone Ban: Apple Proposes $10M Manufacturing Investment
Apple has proposed investing nearly $10 million in Indonesian manufacturing operations in an effort to lift the country's recent ban on iPhone 16 sales, according to sources familiar with the matter (via South China Morning Post). The investment would establish a factory in Bandung, near Jakarta, where Apple would partner with its suppliers to produce accessories and components for Apple devices. The proposal has been submitted to Indonesia's Ministry of Industry for review. The manufacturing investment comes in response to Indonesia blocking iPhone 16 sales last month, after it was determined that Apple's local unit failed to meet the country's requirement for 40% domestic content in smartphones. The ban is part of broader protectionist policies implemented under new President Prabowo Subianto's administration, which has also restricted sales of Google's Pixel phones for similar reasons. Indonesia represents a significant market for Apple, with the country's population of 280 million operating some 354 million active mobile phones. Apple has established four developer academies in Indonesia to train students and engineers, but the country's officials have pressed for more substantial manufacturing investments. The proposed $10 million facility would mark Apple's first manufacturing presence in Indonesia, potentially helping the company comply with local content requirements. The Ministry of Industry is currently reviewing the proposal and is expected to make a decision soon. About 9,000 iPhone 16 units have entered Indonesia through personal imports, but these devices are restricted to personal use and cannot be sold commercially under the current ban.Tag: IndonesiaThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »

Older posts

Monday October 28
03:00 pm
Streamline collaboration with the new chat and channels experience in Microsoft Teams | Office for Mac
Streamline collaboration with the new chat and channels experience in Microsoft Teams
Working together can turn great ideas into reality and bring people together as a team. We’ve been paying attention to our customers’ evolving needs in the AI-powered workplace, which require faster, simpler, and smarter solutions to achieve more. The post appeared first on Microsoft 365 Blog.
Read more »
Thursday October 17
03:00 pm
Microsoft 365 Copilot drove up to 353% ROI for small and medium businesses—new study | Office for Mac
Microsoft 365 Copilot drove up to 353% ROI for small and medium businesses—new study
As a small or medium-sized business (SMB) leader, you’ve likely heard a lot about generative AI and how it’s transforming businesses of all sizes. To better understand how AI is helping businesses grow and compete, Microsoft commissioned Forrester Consulting to study the potential return on investment (ROI) of Microsoft 365 Copilot for SMBs. The post appeared first on Microsoft 365 Blog.
Read more »
Wednesday October 16
04:00 pm
Microsoft named a Leader in the 2024 Gartner® Magic Quadrant™ for Unified Communications as a Service for the sixth year in a row | Office for Mac
Microsoft named a Leader in the 2024 Gartner® Magic Quadrant™ for Unified Communications as a Service for the sixth year in a row
We’re honored to announce that Microsoft has, once again, been recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for Unified Communications as a Service (UCaaS), Worldwide. This is the sixth year we’ve received this recognition and we’re thrilled to be positioned highest in both the ability to execute and furthest on completeness of vision axes. The post appeared first on Microsoft 365 Blog.
Read more »
Thursday October 03
03:00 pm
Microsoft recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for Desktop as a Service for the second year in a row | Office for Mac
Microsoft recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for Desktop as a Service for the second year in a row
The path to IT modernization involves the integration of technology to optimize processes and elevate experiences for customers and employees alike. Microsoft recognizes that customers have many tech and vendor choices on this journey to help solve their biggest workplace challenges. The post appeared first on Microsoft 365 Blog.
Read more »
Monday September 30
04:00 pm
Office 2024 for consumers available October 1 | Office for Mac
Office 2024 for consumers available October 1
Microsoft 365 is the best way to access the latest versions of the productivity apps that millions of people use every day to bring their ideas to life and power through tasks. But we know some of our customers still prefer a non-subscription way to access our familiar apps, which is why we’re releasing Office 2024 on October 1 for consumers and small businesses. The post appeared first on Microsoft 365 Blog.
Read more »
Monday September 16
03:00 pm
Microsoft 365 Copilot Wave 2: Pages, Python in Excel, and agents | Office for Mac
Microsoft 365 Copilot Wave 2: Pages, Python in Excel, and agents
We are introducing Wave 2 of Microsoft 365 Copilot innovation, with three key updates. From enterprises to small businesses, they help Copilot get better every day. Nearly 1,000 customers have given us direct feedback on Copilot, and we’ve made more than 700 product updates based on that feedback. The post appeared first on Microsoft 365 Blog.
Read more »

Reviews & KoolTools

Unbreakable Style: The Best Hardshell Phone Cases on the Market

Are you looking for the ultimate protection for your smartphone? Hardshell phone cases are the answer. These cases are designed to withstand impact. They keep your phone safe from drops and scratches. In a world full of choices, how do you find the best? We have...

Plugable’s 5-in-1 USB Hub expands your MacBook Pro or MacBook Air’s connection options

The new 5-in-1 USB-C hub from Plugable turns two Mac laptop ports into (as the name implies) five, including Ethernet and more. Designed specifically for MacBook Pro and MacBook Air models, the hub (with the moniker AMS-5IN1E) fits flush against the host Mac and adds...

More Reviews & KoolTools

Community and More

MacTech Events and COVID

Due to the pandemic, the regional MacTech Pro events were pushed into 2021 — as early as reasonably possible. This means at best, early in the third quarter of the year. But depending on guidance and public health, it could be later than that. Once there are details,...

More Community

Software & Services Scanners

Tuesday November 05
05:10 pm
Canadian Man Arrested in Snowflake Data Extortions | Krebs on Security
Canadian Man Arrested in Snowflake Data Extortions
A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first reported Moucka's alleged ties to the Snowflake hacks on Monday. At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). After scouring darknet markets for stolen Snowflake account credentials, the hackers began raiding the data storage repositories used by some of the world’s largest corporations.
Read more »
Monday November 04
03:49 pm
Vulnerability Summary for the Week of October 28, 2024 | US-CERT Alerts
Vulnerability Summary for the Week of October 28, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info acnoo -- flutter_api Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API allows Authentication Bypass.This issue affects Acnoo Flutter API: from n/a through 1.0.5. 2024-10-28 9.8 CVE-2024-50486 audit@patchstack.com adirectory--aDirectory Unrestricted Upload of File with Dangerous Type vulnerability in adirectory aDirectory allows Upload a Web Shell to a Web Server.This issue affects aDirectory: from n/a through 1.3. 2024-10-29 10 CVE-2024-50420 audit@patchstack.com Ajar Productions--Ajar in5 Embed Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed allows Upload a Web Shell to a Web Server.This issue affects Ajar in5 Embed: from n/a through 3.1.3. 2024-10-29 10 CVE-2024-50473 audit@patchstack.com Amin Omer--Sudan Payment Gateway for WooCommerce Unrestricted Upload of File with Dangerous Type vulnerability in Amin Omer Sudan Payment Gateway for WooCommerce allows Upload a Web Shell to a Web Server.This issue affects Sudan Payment Gateway for WooCommerce: from n/a through 1.2.2. 2024-10-29 10 CVE-2024-50494 audit@patchstack.com amu02aftab--Enable Shortcodes inside Widgets,Comments and Experts The The Enable Shortcodes inside Widgets,Comments and Experts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. 2024-10-30 7.3 CVE-2024-9846 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com Andy Moyle--Church Admin Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Andy Moyle Church Admin allows Reflected XSS.This issue affects Church Admin: from n/a before 5.0.0. 2024-10-28 7.1 CVE-2024-50438 audit@patchstack.com Apache Software Foundation--Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replication node URL, can provide a specially-crafted JSON response that is deserialized as an attacker-provided exception type. This can result in remote code execution or other potential unauthorized access. Users are recommended to upgrade to version 4.8.0-beta00017, which fixes the issue. 2024-10-31 8 CVE-2024-43383 security@apache.org apple -- ipados A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox. 2024-10-28 9.6 CVE-2024-40867 product-security@apple.com apple -- ipados The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, iOS 17.7 and iPadOS 17.7, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. Processing a maliciously crafted file may lead to heap corruption. 2024-10-28 7.8 CVE-2024-44126 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com apple -- ipados This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, iOS 18.1 and iPadOS 18.1. Processing a maliciously crafted file may lead to heap corruption. 2024-10-28 7.8 CVE-2024-44218 product-security@apple.comproduct-security@apple.comproduct-security@apple.com apple -- ipados A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, tvOS 18.1. Restoring a maliciously crafted backup file may lead to modification of protected system files. 2024-10-28 7.1 CVE-2024-44252 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com apple -- ipados A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to run arbitrary shortcuts without user consent. 2024-10-28 7.8 CVE-2024-44255 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com apple -- ipados This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, tvOS 18.1. Restoring a maliciously crafted backup file may lead to modification of protected system files. 2024-10-28 7.1 CVE-2024-44258 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com apple -- ipados A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.1 and iPadOS 18.1, watchOS 11.1, visionOS 2.1, tvOS 18.1. An app may be able to cause unexpected system termination or corrupt kernel memory. 2024-10-28 7.8 CVE-2024-44285 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com apple -- macos A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, macOS Sonoma 14.7.1. An application may be able to break out of its sandbox. 2024-10-28 8.8 CVE-2024-44122 product-security@apple.comproduct-security@apple.comproduct-security@apple.com apple -- macos A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A sandboxed process may be able to circumvent sandbox restrictions. 2024-10-28 8.6 CVE-2024-44270 product-security@apple.comproduct-security@apple.com apple -- macos A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to bypass Privacy preferences. 2024-10-28 7.1 CVE-2024-44156 product-security@apple.comproduct-security@apple.com apple -- macos A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to bypass Privacy preferences. 2024-10-28 7.1 CVE-2024-44159 product-security@apple.comproduct-security@apple.com apple -- macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library. 2024-10-28 7.5 CVE-2024-44203 product-security@apple.com apple -- macos This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. An app may be able to bypass certain Privacy preferences. 2024-10-28 7.5 CVE-2024-44208 product-security@apple.com apple -- macos A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to read sensitive location information. 2024-10-28 7.5 CVE-2024-44289 product-security@apple.comproduct-security@apple.com apple -- xcode This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data. 2024-10-28 7.5 CVE-2024-44228 product-security@apple.com Apple--iOS and iPadOS A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in iOS 18 and iPadOS 18. Password autofill may fill in passwords after failing authentication. 2024-10-28 9.1 CVE-2024-44217 product-security@apple.com Apple--macOS The issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to break out of its sandbox. 2024-10-28 9.3 CVE-2024-44256 product-security@apple.comproduct-security@apple.com Apple--macOS A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system. 2024-10-28 7.5 CVE-2024-44196 product-security@apple.comproduct-security@apple.com Apple--macOS A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system. 2024-10-28 7.7 CVE-2024-44280 product-security@apple.comproduct-security@apple.com Apple--macOS This issue was addressed with additional entitlement checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system. 2024-10-28 7.7 CVE-2024-44295 product-security@apple.comproduct-security@apple.com Apple--visionOS This issue was addressed through improved state management. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, Safari 18.1. An attacker may be able to misuse a trust relationship to download malicious content. 2024-10-28 8.8 CVE-2024-44259 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com Apple--visionOS The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, visionOS 2.1, tvOS 18.1. An app may be able to cause unexpected system termination or corrupt kernel memory. 2024-10-28 7.7 CVE-2024-44277 product-security@apple.comproduct-security@apple.comproduct-security@apple.com autodesk -- autocad A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-7991 psirt@autodesk.com autodesk -- autocad A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-7992 psirt@autodesk.com autodesk -- autocad A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8588 psirt@autodesk.com autodesk -- autocad A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8589 psirt@autodesk.com autodesk -- autocad A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8590 psirt@autodesk.com autodesk -- autocad A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8591 psirt@autodesk.com autodesk -- autocad A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8592 psirt@autodesk.com autodesk -- autocad A maliciously crafted CATPART file when parsed in ASMKERN230A.dll through Autodesk AutoCAD can force a Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8593 psirt@autodesk.com autodesk -- autocad A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8594 psirt@autodesk.com autodesk -- autocad A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8595 psirt@autodesk.com autodesk -- autocad A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force an Out-of-Bound Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8596 psirt@autodesk.com autodesk -- autocad A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8597 psirt@autodesk.com autodesk -- autocad A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8598 psirt@autodesk.com autodesk -- autocad A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8599 psirt@autodesk.com autodesk -- autocad A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8600 psirt@autodesk.com autodesk -- autocad A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8896 psirt@autodesk.com autodesk -- autocad A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9489 psirt@autodesk.com autodesk -- autocad A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9826 psirt@autodesk.com autodesk -- autocad A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9827 psirt@autodesk.com autodesk -- autocad A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9996 psirt@autodesk.com autodesk -- autocad A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9997 psirt@autodesk.com Autodesk--AutoCAD A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8587 psirt@autodesk.com Automattic--Newspack Blocks Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic Newspack Blocks allows Path Traversal.This issue affects Newspack Blocks: from n/a through 3.0.8. 2024-11-01 8.5 CVE-2024-37423 audit@patchstack.com Azexo--Marketing Automation by AZEXO Incorrect Privilege Assignment vulnerability in Azexo Marketing Automation by AZEXO allows Privilege Escalation.This issue affects Marketing Automation by AZEXO: from n/a through 1.27.80. 2024-10-30 8.8 CVE-2024-50506 audit@patchstack.com azexo--Marketing Automation by AZEXO Unrestricted Upload of File with Dangerous Type vulnerability in azexo Marketing Automation by AZEXO allows Upload a Web Shell to a Web Server.This issue affects Marketing Automation by AZEXO: from n/a through 1.27.80. 2024-10-29 9.9 CVE-2024-50480 audit@patchstack.com buynowdepot -- advanced_online_ordering_and_delivery_platform Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BuyNowDepot Advanced Online Ordering and Delivery Platform allows PHP Local File Inclusion.This issue affects Advanced Online Ordering and Delivery Platform: from n/a through 2.0.0. 2024-10-28 9.8 CVE-2024-50497 audit@patchstack.com Carl Alberto--Simple Custom Admin Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Carl Alberto Simple Custom Admin allows Reflected XSS.This issue affects Simple Custom Admin: from n/a through 1.2. 2024-10-29 7.1 CVE-2024-49647 audit@patchstack.com CHANGING Information Technology--IDExpert IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server. 2024-11-01 7.2 CVE-2024-10653 twcert@cert.org.twtwcert@cert.org.tw Chetan Khandla--Woocommerce Product Design Unrestricted Upload of File with Dangerous Type vulnerability in Chetan Khandla Woocommerce Product Design allows Upload a Web Shell to a Web Server.This issue affects Woocommerce Product Design: from n/a through 1.0.0. 2024-10-29 10 CVE-2024-50482 audit@patchstack.com Chetan Khandla--Woocommerce Product Design Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through 1.0.0. 2024-10-30 8.6 CVE-2024-50509 audit@patchstack.com Chetan Khandla--Woocommerce Product Design Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through 1.0.0. 2024-10-30 7.5 CVE-2024-50508 audit@patchstack.com code-projects--Courier Management System A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /track-result.php. The manipulation of the argument Consignment leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-01 7.3 CVE-2024-10607 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com code-projects--Courier Management System A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-01 7.3 CVE-2024-10608 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com code-projects--E-Health Care System A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionality of the file /Admin/adminlogin.php. The manipulation of the argument email/admin_pswd as part of String leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "email" to be affected. But it must be assumed that parameter "admin_pswd" is affected as well. 2024-11-03 7.3 CVE-2024-10739 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com code-projects--E-Health Care System A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument f_name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2024-11-03 7.3 CVE-2024-10741 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com code-projects--Restaurant Order System A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-03 7.3 CVE-2024-10733 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com code-projects--Simple Car Rental System A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-02 7.3 CVE-2024-10702 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com code-projects--Wazifa System A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-02 7.3 CVE-2024-10699 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com codezips -- hospital_appointment_system A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-28 9.8 CVE-2024-10449 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com codezips -- online_institute_management_system A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-10-30 9.8 CVE-2024-10509 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com codezips -- pet_shop_management_system A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file birdsadd.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-31 9.8 CVE-2024-10556 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com codezips -- pet_shop_management_system A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file birdsupdate.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-31 9.8 CVE-2024-10561 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com Codezips--Free Exam Hall Seating Management System A vulnerability classified as critical was found in Codezips Free Exam Hall Seating Management System 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-10-30 7.3 CVE-2024-10507 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com Codezips--Free Exam Hall Seating Management System A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-03 7.3 CVE-2024-10736 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com Codezips--Free Exam Hall Seating Management System A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected is an unknown function of the file /teacher.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-03 7.3 CVE-2024-10737 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com CozyThemes--Cozy Blocks Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.0.15. 2024-10-28 7.4 CVE-2024-50441 audit@patchstack.com cure53--DOMPurify DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2. 2024-10-31 9.1 CVE-2024-48910 security-advisories@github.comsecurity-advisories@github.com D3TN--D3TN Reachable Assertion in BPv7 parser in Ã‚ÂµD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block 2024-10-28 7.5 CVE-2024-10455 cve@gitlab.com Daniel Schmitzer--DS.DownloadList Deserialization of Untrusted Data vulnerability in Daniel Schmitzer DS.DownloadList allows Object Injection.This issue affects DS.DownloadList: from n/a through 1.3. 2024-10-30 9.8 CVE-2024-50507 audit@patchstack.com David DONISA--WP donimedia carousel Unrestricted Upload of File with Dangerous Type vulnerability in David DONISA WP donimedia carousel allows Upload a Web Shell to a Web Server.This issue affects WP donimedia carousel: from n/a through 1.0.1. 2024-10-30 9.9 CVE-2024-50511 audit@patchstack.com Delta Electronics--InfraSuite Device Master Delta Electronics InfraSuite Device Master versions prior to 1.0.12 are affected by a deserialization vulnerability that targets the Device-Gateway, which could allow deserialization of arbitrary .NET objects prior to authentication. 2024-10-30 9.8 CVE-2024-10456 ics-cert@hq.dhs.gov Deryck Oate--User Toolkit Authentication Bypass Using an Alternate Path or Channel vulnerability in Deryck OÃƒÂ±ate User Toolkit allows Authentication Bypass.This issue affects User Toolkit: from n/a through 1.2.3. 2024-10-30 9.8 CVE-2024-50503 audit@patchstack.com Devsoft Baltic O--SurveyJS: Drag & Drop WordPress Form Builder Unrestricted Upload of File with Dangerous Type vulnerability in Devsoft Baltic OÃƒÅ“ SurveyJS: Drag & Drop WordPress Form Builder.This issue affects SurveyJS: Drag & Drop WordPress Form Builder: from n/a through 1.9.136. 2024-10-29 9.9 CVE-2024-50427 audit@patchstack.com Eclipse Foundation--mosquitto In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. This affects the mosquitto_sub and mosquitto_rr clients. 2024-10-30 9.1 CVE-2024-10525 emo@eclipse.orgemo@eclipse.orgemo@eclipse.org Eclipse Foundation--mosquitto In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the broker a double free will occur with a subsequent crash of the broker. 2024-10-30 7.5 CVE-2024-3935 emo@eclipse.orgemo@eclipse.orgemo@eclipse.org esafenet -- cdg A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2024-10-31 9.8 CVE-2024-10595 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com gaizhenbiao -- chuanhuchatgpt A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions
Read more »
Friday November 01
09:12 pm
Booking.com Phishers May Leave You With Reservations | Krebs on Security
Booking.com Phishers May Leave You With Reservations
A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spear-phishing campaign that ensued when a California hotel had its booking.com credentials stolen. We'll also explore an array of cybercrime services aimed at phishers who target hotels that rely on the world's most visited travel website.
Read more »
Wednesday October 30
01:34 pm
Change Healthcare Breach Hits 100M Americans | Krebs on Security
Change Healthcare Breach Hits 100M Americans
Change Healthcare says it has notified approximately 100 million Americans that their personal, financial and healthcare records may have been stolen in a February 2024 ransomware attack that caused the largest ever known data breach of protected health information.
Read more »
Wednesday October 23
11:30 am
The Global Surveillance Free-for-All in Mobile Ad Data | Krebs on Security
The Global Surveillance Free-for-All in Mobile Ad Data
Not long ago, the ability to remotely track someone’s daily movements just by knowing their home address, employer, or place of worship was considered a powerful surveillance tool that should only be in the purview of nation states. But a new lawsuit in a likely constitutional battle over a New Jersey privacy law shows that anyone can now access this capability, thanks to a proliferation of commercial services that hoover up the digital exhaust emitted by widely-used mobile apps and websites.
Read more »
Monday October 21
12:23 pm
Vulnerability Summary for the Week of October 14, 2024 | US-CERT Alerts
Vulnerability Summary for the Week of October 14, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info Acespritech Solutions Pvt. Ltd.--Social Link Groups Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Acespritech Solutions Pvt. Ltd. Social Link Groups allows Blind SQL Injection.This issue affects Social Link Groups: from n/a through 1.1.0. 2024-10-20 8.5 CVE-2024-49619 audit@patchstack.com acm309--PutongOJ PutongOJ is online judging software. Prior to version 2.1.0-beta.1, unprivileged users can escalate privileges by constructing requests. This can lead to unauthorized access, enabling users to perform admin-level operations, potentially compromising sensitive data and system integrity. This problem has been fixed in v2.1.0.beta.1. As a workaround, one may apply the patch from commit `211dfe9` manually. 2024-10-17 9.1 CVE-2024-48920 security-advisories@github.comsecurity-advisories@github.comsecurity-advisories@github.com acronis -- cyber_files Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. 2024-10-17 7.8 CVE-2024-49389 security@acronis.com acronis -- cyber_files Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. 2024-10-17 7.3 CVE-2024-49390 security@acronis.com acronis -- cyber_files Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. 2024-10-17 7.3 CVE-2024-49391 security@acronis.com acronis -- cyber_protect Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690. 2024-10-15 9.1 CVE-2024-49388 security@acronis.com acronis -- cyber_protect Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690. 2024-10-15 7.5 CVE-2024-49387 security@acronis.com Agustin Berasategui--AB Categories Search Widget Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Agustin Berasategui AB Categories Search Widget allows Reflected XSS.This issue affects AB Categories Search Widget: from n/a through 0.2.5. 2024-10-18 7.1 CVE-2024-49240 audit@patchstack.com Ahime--Ahime Image Printer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ahime Ahime Image Printer.This issue affects Ahime Image Printer: from n/a through 1.0.0. 2024-10-16 7.5 CVE-2024-49245 audit@patchstack.com Ahmet Imamoglu--Ahmeti Wp Timeline Cross-Site Request Forgery (CSRF) vulnerability in Ahmet Imamoglu Ahmeti Wp Timeline allows Stored XSS.This issue affects Ahmeti Wp Timeline: from n/a through 5.1. 2024-10-17 7.1 CVE-2024-49237 audit@patchstack.com Al Imran Akash--Recently Deserialization of Untrusted Data vulnerability in Al Imran Akash Recently allows Object Injection.This issue affects Recently: from n/a through 1.1. 2024-10-16 9.8 CVE-2024-49218 audit@patchstack.com anand23--Ajax Rating with Custom Login Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in anand23 Ajax Rating with Custom Login allows SQL Injection.This issue affects Ajax Rating with Custom Login: from n/a through 1.1. 2024-10-17 9.3 CVE-2024-49246 audit@patchstack.com andrewmrobbins--ShopWP The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating the plugin's settings and injecting malicious scripts. 2024-10-16 7.2 CVE-2019-25214 security@wordfence.comsecurity@wordfence.com Apa--Apa Banner Slider Cross-Site Request Forgery (CSRF) vulnerability in Apa Apa Banner Slider allows SQL Injection.This issue affects Apa Banner Slider: from n/a through 1.0.0. 2024-10-20 8.2 CVE-2024-49622 audit@patchstack.com Apa--APA Register Newsletter Form Cross-Site Request Forgery (CSRF) vulnerability in Apa APA Register Newsletter Form allows SQL Injection.This issue affects APA Register Newsletter Form: from n/a through 1.0.0. 2024-10-20 8.2 CVE-2024-49621 audit@patchstack.com apache -- activemq_artemis Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint. Before version 2.29.0, this also included the Log4J2 MBean. This MBean is not meant for exposure to non-administrative users. This could eventually allow an authenticated attacker to write arbitrary files to the filesystem and indirectly achieve RCE. Users are recommended to upgrade to version 2.29.0 or later, which fixes the issue. 2024-10-14 8.8 CVE-2023-50780 security@apache.org apache -- cloudstack Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing validation of the origin of the requests. This can allow an attacker to gain privileges and access to resources of the authenticated users and may lead to account takeover, disruption, exposure of sensitive data and compromise integrity of the resources owned by the user account that are managed by the platform. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3 and 4.19.0.0 through 4.19.1.1 Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. 2024-10-16 8.8 CVE-2024-45693 security@apache.orgsecurity@apache.orgsecurity@apache.org apache -- cloudstack The logout operation in the CloudStack web interface does not expire the user session completely which is valid until expiry by time or restart of the backend service. An attacker that has access to a user's browser can use an unexpired session to gain access to resources owned by the logged out user account. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1. Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. 2024-10-16 7.1 CVE-2024-45462 security@apache.orgsecurity@apache.orgsecurity@apache.org Apache Software Foundation--Apache CloudStack Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data disks to their existing instances. Due to missing validation checks for KVM-compatible templates or volumes in CloudStack 4.0.0 through 4.18.2.3 and 4.19.0.0 through 4.19.1.1, an attacker that can upload or register templates and volumes, can use them to deploy malicious instances or attach uploaded volumes to their existing instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. Additionally, all user-uploaded or registered KVM-compatible templates and volumes can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run this on their secondary storage(s) and inspect output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "nn"; done The command can also be run for the file-based primary storages; however, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives. For checking the whole template/volume features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "nn"; done 2024-10-16 8.5 CVE-2024-45219 security@apache.orgsecurity@apache.orgsecurity@apache.org Apache Software Foundation--Apache Solr Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing. This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0. Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue. 2024-10-16 9.8 CVE-2024-45216 security@apache.org Apache Software Foundation--Apache Solr Insecure Default Initialization of Resource vulnerability in Apache Solr. New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the "trusted" metadata. ConfigSets that do not contain the flag are trusted implicitly if the metadata is missing, therefore this leads to "trusted" ConfigSets that may not have been created with an Authenticated request. "trusted" ConfigSets are able to load custom code into classloaders, therefore the flag is supposed to only be set when the request that uploads the ConfigSet is Authenticated & Authorized. This issue affects Apache Solr: from 6.6.0 before 8.11.4, from 9.0.0 before 9.7.0. This issue does not affect Solr instances that are secured via Authentication/Authorization. Users are primarily recommended to use Authentication and Authorization when running Solr. However, upgrading to version 9.7.0, or 8.11.4 will mitigate this issue otherwise. 2024-10-16 8.1 CVE-2024-45217 security@apache.org Arif Nezami--Better Author Bio Cross-Site Request Forgery (CSRF) vulnerability in Arif Nezami Better Author Bio allows Cross-Site Scripting (XSS).This issue affects Better Author Bio: from n/a through 2.7.10.11. 2024-10-17 7.1 CVE-2024-49229 audit@patchstack.com arisoft--ARI Adminer WordPress Database Manager The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of the plugin in versions up to, and including, 1.1.14. This makes it possible for unauthenticated attackers to call the files directly and perform a wide variety of unauthorized actions such as accessing a site's database and making changes. 2024-10-16 7.3 CVE-2019-25215 security@wordfence.comsecurity@wordfence.com arraytics--WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin The WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin plugin for WordPress is vulnerable to Account Takeover/Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 1.0.25 via the save() due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to reset the emails and passwords of arbitrary user accounts, including administrators, which makes account takeover and privilege escalation possible. 2024-10-17 9.8 CVE-2024-9263 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.com Asep Bagja Priandana--Woostagram Connect Unrestricted Upload of File with Dangerous Type vulnerability in Asep Bagja Priandana Woostagram Connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through 1.0.2. 2024-10-20 10 CVE-2024-49327 audit@patchstack.com Autodesk--Revit A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-16 7.8 CVE-2024-7993 psirt@autodesk.com Autodesk--Revit A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-16 7.8 CVE-2024-7994 psirt@autodesk.com Avchat.net--AVChat Video Chat Cross-Site Request Forgery (CSRF) vulnerability in Avchat.Net AVChat Video Chat allows Stored XSS.This issue affects AVChat Video Chat: from n/a through 2.2. 2024-10-20 7.1 CVE-2024-49605 audit@patchstack.com bc2018--WordPress Landing Page Squeeze Page Responsive Landing Page Builder Free WP Lead Plus X The WP Lead Plus X plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.99. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to perform administrative actions, such as adding pages to the site and/or replacing site content with malicious JavaScript via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2024-10-16 8.3 CVE-2020-36839 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com Bhaskar Dhote--Back Link Tracker Cross-Site Request Forgery (CSRF) vulnerability in Bhaskar Dhote Back Link Tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through 1.0.0. 2024-10-20 8.2 CVE-2024-49617 audit@patchstack.com Boyan Raichev--IP Loc8 Deserialization of Untrusted Data vulnerability in Boyan Raichev IP Loc8 allows Object Injection.This issue affects IP Loc8: from n/a through 1.1. 2024-10-16 9.8 CVE-2024-48028 audit@patchstack.com Brandon Clark--SiteBuilder Dynamic Components Deserialization of Untrusted Data vulnerability in Brandon Clark SiteBuilder Dynamic Components allows Object Injection.This issue affects SiteBuilder Dynamic Components: from n/a through 1.0. 2024-10-20 9.8 CVE-2024-49625 audit@patchstack.com Brandon White--Author Discussion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brandon White Author Discussion allows Blind SQL Injection.This issue affects Author Discussion: from n/a through 0.2.2. 2024-10-20 8.5 CVE-2024-49609 audit@patchstack.com brx8r--Nice Backgrounds Unrestricted Upload of File with Dangerous Type vulnerability in brx8r Nice Backgrounds allows Upload a Web Shell to a Web Server.This issue affects Nice Backgrounds: from n/a through 1.0. 2024-10-20 10 CVE-2024-49330 audit@patchstack.com ChanGate--Property Management System Property Management System from ChanGate has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. 2024-10-15 9.8 CVE-2024-9972 twcert@cert.org.twtwcert@cert.org.tw chertz--WP Easy Post Types The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajax_import_content' function. This allows authenticated attackers, with subscriber-level permissions and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. 2024-10-18 8.8 CVE-2024-10079 security@wordfence.comsecurity@wordfence.com chertz--WP Easy Post Types The WP Easy Post Types plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 1.4.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to add, modify, or delete plugin options and posts. 2024-10-18 7.3 CVE-2024-10078 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.com Cisco--Cisco Analog Telephone Adaptor (ATA) Software A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to view or delete the configuration or change the firmware on an affected device. This vulnerability is due to a lack of authentication on specific HTTP endpoints. An attacker could exploit this vulnerability by browsing to a specific URL. A successful exploit could allow the attacker to view or delete the configuration or change the firmware. 2024-10-16 8.2 CVE-2024-20458 ykramarz@cisco.com Cisco--Cisco Analog Telephone Adaptor (ATA) Software A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on the affected device with the privileges of the targeted user. 2024-10-16 7.1 CVE-2024-20421 ykramarz@cisco.com cmssoft--CSV Product Import Export for WooCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cmssoft CSV Product Import Export for WooCommerce allows SQL Injection.This issue affects CSV Product Import Export for WooCommerce: from n/a through 1.0.0. 2024-10-17 8.5 CVE-2024-49244 audit@patchstack.com code-projects -- pharmacy_management_system A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/manage_customer.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-15 9.8 CVE-2024-9976 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com code-projects--Blood Bank Management System A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file member_register.php. The manipulation of the argument fullname/username/password/email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "password" to be affected. But it must be assumed that other parameters are affected as well. 2024-10-15 7.3 CVE-2024-9986 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com CodeFlock--FREE DOWNLOAD MANAGER Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CodeFlock FREE DOWNLOAD MANAGER allows Path Traversal.This issue affects FREE DOWNLOAD MANAGER: from n/a through 1.0.0. 2024-10-17 8.6 CVE-2024-49315 audit@patchstack.com CodePassenger--Job Board Manager for WordPress Incorrect Privilege Assignment vulnerability in CodePassenger Job Board Manager for WordPress allows Privilege Escalation.This issue affects Job Board Manager for WordPress: from n/a through 1.0. 2024-10-17 9.8 CVE-2024-49322 audit@patchstack.com Codezips--Sales Management System A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file deletecustcom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-10-20 7.3 CVE-2024-10165 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com Codezips--Sales Management System A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file checkuser.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-10-20 7.3 CVE-2024-10166 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com Codezips--Sales Management System A vulnerability classified as critical has been found in Codezips Sales Management System 1.0. This affects an unknown part of the file deletecustind.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-20 7.3 CVE-2024-10167 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com Cookie Scanner Nikel Schubert--Cookie Scanner Cross-Site Request Forgery (CSRF) vulnerability in Cookie Scanner - Nikel Schubert Cookie Scanner allows Stored XSS.This issue affects Cookie Scanner: from n/a through 1.1. 2024-10-17 7.1 CVE-2024-49220 audit@patchstack.com cyberlord92--Miniorange OTP Verification with Firebase The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 3.6.0. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources, and the user current password check is missing. This makes it possible for unauthenticated attackers to change user passwords and potentially take over administrator accounts. 2024-10-17 9.8 CVE-2024-9862 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com cyberlord92--Miniorange OTP Verification with Firebase The UserPro plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.6.0 due to the insecure 'administrator' default value for the 'default_user_role' option. This makes it possible for unauthenticated attackers to register an administrator user even if the registration form is disabled. 2024-10-17 9.8 CVE-2024-9863 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com cyberlord92--Miniorange OTP Verification with Firebase The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.6.0. This is due to missing validation on the token being supplied during the otp login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they know the phone number associated with that user. 2024-10-17 8.1 CVE-2024-9861 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.com Dan Alexander--SermonAudio Widgets Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dan Alexander SermonAudio Widgets allows SQL Injection.This issue affects SermonAudio Widgets: from n/a through 1.9.3. 2024-10-20 8.5 CVE-2024-49614 audit@patchstack.com Dassault Systmes--3DSwymer An authorization bypass through user-controlled key vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an authenticated attacker to access some unauthorized data. 2024-10-16 7.7 CVE-2024-8040 3DS.Information-Security@3ds.com Dassault Systmes--ENOVIA Collaborative Industry Innovator A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. 2024-10-16 8.7 CVE-2024-6380 3DS.Information-Security@3ds.com Dell--Dell OpenManage Enterprise Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution. 2024-10-17 8 CVE-2024-45766 security_alert@emc.com Denis--Azz Anonim Posting Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting allows Upload a Web Shell to a Web Server.This issue affects Azz Anonim Posting: from n/a through 0.9. 2024-10-16 10 CVE-2024-49257 audit@patchstack.com Dennis Hoppe--Encyclopedia / Glossary / Wiki Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dennis Hoppe Encyclopedia / Glossary / Wiki allows Reflected XSS.This issue affects Encyclopedia / Glossary / Wiki: from n/a through 1.7.60. 2024-10-17 7.1 CVE-2024-49320 audit@patchstack.com didi--DDMQ A vulnerability has been found in didi DDMQ 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Console Module. The manipulation with the input /;login leads to improper authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. 2024-10-20 7.3 CVE-2024-10173 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com Dotsquares--Google Map Locations Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dotsquares Google Map Locations allows Reflected XSS.This issue affects Google Map Locations: from n/a through 1.0. 2024-10-20 7.1 CVE-2024-49606 audit@patchstack.com dueclic -- wp_2fa_with_telegram The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the 'validate_tg' action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator. 2024-10-15 8.8 CVE-2024-9687 security@wordfence.comsecurity@wordfence.com dueclic -- wp_2fa_with_telegram The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-factor code being stored in a cookie, which makes it possible to bypass two-factor authentication. 2024-10-15 7.5 CVE-2024-9820 security@wordfence.comsecurity@wordfence.com easy.jobs--EasyJobs Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in easy.Jobs EasyJobs allows Reflected XSS.This issue affects EasyJobs: from n/a through 2.4.14. 2024-10-17 7.1 CVE-2024-43997 audit@patchstack.com edo888--Translate WordPress Google Language Translator The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 6.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Specifically affects users with older browsers that lack proper URL encoding support. 2024-10-16 7.1 CVE-2021-4452 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.com Edush Maxim--GoogleDrive folder list Cross-Site Request Forgery (CSRF) vulnerability in Edush Maxim GoogleDrive folder list allows Stored XSS.This issue affects GoogleDrive folder list: from n/a through 2.2.2. 2024-10-20 7.1 CVE-2024-49335 audit@patchstack.com emrevona--WP Fastest Cache The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete arbitrary files from the server. 2024-10-16 8.8 CVE-2020-36836 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com ESi Technology--AIM LINE Marketing Platform AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enabled, unauthenticated remote attackers can inject arbitrary FetchXml commands to read, modify, and delete database content. 2024-10-15 9.8 CVE-2024-9982 twcert@cert.org.twtwcert@cert.org.tw F5--BIG-IP BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. 2024-10-16 7.2 CVE-2024-45844 f5sirt@f5.com facebook--Facebook Chat Plugin Live Chat Plugin for WordPress The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_update_options function in versions up to, and including, 1.5. This flaw makes it possible for low-level authenticated attackers to connect their own Facebook Messenger account to any site running the vulnerable plugin and engage in chats with site visitors on affected sites. 2024-10-16 7.4 CVE-2020-36838 security@wordfence.comsecurity@wordfence.com Fahad Mahmood--Endless Posts Navigation Cross-Site Request Forgery (CSRF) vulnerability in Fahad Mahmood Endless Posts Navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through 2.2.7. 2024-10-20 7.1 CVE-2024-49629 audit@patchstack.com Fahad Mahmood--Keep Backup Daily : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fahad Mahmood Keep Backup Daily allows Retrieve Embedded Sensitive Data.This issue affects Keep Backup Daily: from n/a through 2.0.7. 2024-10-17 7.5 CVE-2024-48024 audit@patchstack.com filemanagerpro -- file_manager The File Manager Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.3.9. This is due to missing or incorrect nonce validation on the 'mk_file_folder_manager' ajax action. This makes it possible for unauthenticated attackers to upload arbitrary files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2024-10-16 8.8 CVE-2024-8507 security@wordfence.comsecurity@wordfence.com filemanagerpro -- file_manager The File Manager Pro plugin for WordPress is vulnerable to arbitrary backup file downloads and uploads due to missing file type validation via the 'mk_file_folder_manager_shortcode' ajax action in all versions up to, and including, 8.3.9. This makes it possible for unauthenticated attackers, if granted access to the File Manager by an administrator, to download and upload arbitrary backup files on the affected site's server which may make remote code execution possible. 2024-10-16 8.8 CVE-2024-8746 security@wordfence.comsecurity@wordfence.com Fliperrr Team--Creates 3D Flipbook, PDF Flipbook Unrestricted Upload of File with Dangerous Type vulnerability in Fliperrr Team Creates 3D Flipbook, PDF Flipbook allows Upload a Web Shell to a Web Server.This issue affects Creates 3D Flipbook, PDF Flipbook: from n/a through 1.2. 2024-10-16 9.9 CVE-2024-48034 audit@patchstack.com formosasoft -- ee-class The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify and delete database contents. 2024-10-15 8.8 CVE-2024-9980 twcert@cert.org.twtwcert@cert.org.tw formosasoft -- ee-class The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upload a malicious PHP file first and then exploit this vulnerability to include the file, resulting in arbitrary code execution on the server. 2024-10-15 8.8 CVE-2024-9981 twcert@cert.org.twtwcert@cert.org.tw Gabriele Valenti--Telecash Ricaricaweb Deserialization of Untrusted Data vulnerability in Gabriele Valenti Telecash Ricaricaweb allows Object Injection.This issue affects Telecash Ricaricaweb: from n/a through 2.2. 2024-10-16 9.8 CVE-2024-48030 audit@patchstack.com Gerry Ntabuhashe--GERRYWORKS Post by Mail : Incorrect Privilege Assignment vulnerability in Gerry Ntabuhashe GERRYWORKS Post by Mail allows Privilege Escalation.This issue affects GERRYWORKS Post by Mail: from n/a through 1.0. 2024-10-20 8.8 CVE-2024-49608 audit@patchstack.com Giveaway Boost--Giveaway Boost Deserialization of Untrusted Data vulnerability in Giveaway Boost allows Object Injection.This issue affects Giveaway Boost: from n/a through 2.1.4. 2024-10-20 9.8 CVE-2024-49332 audit@patchstack.com google -- chrome Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2024-10-15 8.8 CVE-2024-9954 chrome-cve-admin@google.comchrome-cve-admin@google.com google -- chrome Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low) 2024-10-15 8.8 CVE-2024-9965 chrome-cve-admin@google.comchrome-cve-admin@google.com Google Cloud--Migrate to Containers There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" commands were interrupted or skipping the action to delete the local user "m2cuser". We recommend upgrading to 1.2.3 or beyond 2024-10-16 7.8 CVE-2024-9858 cve-coordination@google.com Google--Chrome Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9955 chrome-cve-admin@google.comchrome-cve-admin@google.com Google--Chrome Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9957 chrome-cve-admin@google.comchrome-cve-admin@google.com Google--Chrome Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9959 chrome-cve-admin@google.comchrome-cve-admin@google.com Google--Chrome Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9960 chrome-cve-admin@google.comchrome-cve-admin@google.com Google--Chrome Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9961 chrome-cve-admin@google.comchrome-cve-admin@google.com Google--Chrome Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 7.8 CVE-2024-9956 chrome-cve-admin@google.comchrome-cve-admin@google.com Gora Tech LLC--Cooked Pro Unrestricted Upload of File with Dangerous Type vulnerability in Gora Tech LLC Cooked Pro.This issue affects Cooked Pro: from n/a before 1.8.0. 2024-10-17 10 CVE-2024-49291 audit@patchstack.com Grafana--Grafana The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or higher permission is capable of executing this attack. The `duckdb` binary must be present in Grafana's $PATH for this attack to function; by default, this binary is not installed in Grafana distributions. 2024-10-18 9.9 CVE-2024-9264 security@grafana.com Grayson Robbins--Disc Golf Manager Deserialization of Untrusted Data vulnerability in Grayson Robbins Disc Golf Manager allows Object Injection.This issue affects Disc Golf Manager: from n/a through 1.0.0. 2024-10-16 9.8 CVE-2024-48026 audit@patchstack.com Hasan Movahed--Duplicate Title Validate Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hasan Movahed Duplicate Title Validate allows Blind SQL Injection.This issue affects Duplicate Title Validate: from n/a through 1.0. 2024-10-20 8.5 CVE-2024-49623 audit@patchstack.com helmholz -- myrex24_v2_virtual_server An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost. 2024-10-15 7.5 CVE-2024-45272 info@cert.vde.cominfo@cert.vde.com Henrique Rodrigues--SafetyForms Cross-Site Request Forgery (CSRF) vulnerability in Henrique Rodrigues SafetyForms allows Blind SQL Injection.This issue affects SafetyForms: from n/a through 1.0.0. 2024-10-20 8.2 CVE-2024-49615 audit@patchstack.com Hgiga--OAKlouds The fix for CVE-2024-26261 was incomplete, and and the specific package for OAKlouds from Hgiga remains at risk. Unauthenticated remote attackers still can download arbitrary system files, which may be deleted subsequently . 2024-10-14 9.8 CVE-2024-9924 twcert@cert.org.twtwcert@cert.org.tw HMS Networks--EWON FLEXY 202 The EWON FLEXY 202 transmits credentials using a weak encoding method base64. An attacker who is present in the network can sniff the traffic and decode the credentials. 2024-10-17 8.2 CVE-2024-7755 ics-cert@hq.dhs.gov HP Inc.--Certain HP DesignJet products Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials. 2024-10-15 7.5 CVE-2024-5749 hp-security-alert@hp.com Hung Trang Si--SB Random Posts Widget : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Hung Trang Si SB Random Posts Widget allows PHP Local File Inclusion.This issue affects SB Random Posts Widget: from n/a through 1.0. 2024-10-16 7.5 CVE-2024-48029 audit@patchstack.com Igor Funa--Ad Inserter Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Igor Funa Ad Inserter allows Reflected XSS.This issue affects Ad Inserter: from n/a through 2.7.37. 2024-10-17 7.1 CVE-2024-49248 audit@patchstack.com Imagination Technologies--Graphics DDK Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. 2024-10-14 7.8 CVE-2024-43701 367425dc-4d06-4041-9650-c2dc6aaa27ce Infotuts--SW Contact Form Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infotuts SW Contact Form allows Blind SQL Injection.This issue affects SW Contact Form: from n/a through 1.0. 2024-10-20 8.5 CVE-2024-49612 audit@patchstack.com Innovaweb Sp. z o.o.--Free Stock Photos Foter Deserialization of Untrusted Data vulnerability in Innovaweb Sp. Z o.O. Free Stock Photos Foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through 1.5.4. 2024-10-16 8.8 CVE-2024-49227 audit@patchstack.com Jack Zhu--photokit Unrestricted Upload of File with Dangerous Type vulnerability in Jack Zhu allows Upload a Web Shell to a Web Server.This issue affects photokit: from n/a through 1.0. 2024-10-20 10 CVE-2024-49610 audit@patchstack.com James Park--Analyse Uploads Relative Path Traversal vulnerability in James Park Analyse Uploads allows Relative Path Traversal.This issue affects Analyse Uploads: from n/a through 0.5. 2024-10-16 8.6 CVE-2024-49253 audit@patchstack.com JetBrains--YouTrack In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript execution and unauthorized API requests 2024-10-17 8.1 CVE-2024-49579 cve@jetbrains.com jetmonsters--Timetable and Event Schedule by MotoPress The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_route_url() function called via a nopriv AJAX action in versions up to, and including, 2.3.8. This makes it possible for unauthenticated attackers to call that function and perform a wide variety of actions such as including random template, injecting malicious web scripts, and more. 2024-10-16 7.3 CVE-2020-36840 security@wordfence.comsecurity@wordfence.com Jon Vincent Mendoza--Dynamic Elementor Addons Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Jon Vincent Mendoza Dynamic Elementor Addons allows PHP Local File Inclusion.This issue affects Dynamic Elementor Addons: from n/a through 1.0.0. 2024-10-18 7.5 CVE-2024-49243 audit@patchstack.com Jordan Lyall--MyTweetLinks Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jordan Lyall MyTweetLinks allows Blind SQL Injection.This issue affects MyTweetLinks: from n/a through 1.1.1. 2024-10-20 8.5 CVE-2024-49618 audit@patchstack.com Joshua Clayton--Feed Comments Number Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Clayton Feed Comments Number allows Upload a Web Shell to a Web Server.This issue affects Feed Comments Number: from n/a through 0.2.1. 2024-10-16 10 CVE-2024-49216 audit@patchstack.com Julian Weinert // cs&m--cSlider Cross-Site Request Forgery (CSRF) vulnerability in Julian Weinert // cs&m cSlider allows Stored XSS.This issue affects cSlider: from n/a through 2.4.2. 2024-10-17 7.1 CVE-2024-49221 audit@patchstack.com Kubernetes--Image Builder A security issue was discovered in the Kubernetes Image Builder versions
Read more »
Friday October 18
12:33 pm
Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach | Krebs on Security
Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach
Brazilian authorities reportedly have arrested a 33-year-old man on suspicion of being "USDoD," a prolific cybercriminal who rose to infamy in 2022 after infiltrating the FBI's InfraGard program and leaking contact information for 80,000 members. More recently, USDoD was behind a breach at the consumer data broker National Public Data that led to the leak of Social Security numbers and other personal information for a significant portion of the U.S. population.
Read more »
Thursday October 17
02:17 pm
Sudanese Brothers Arrested in ‘AnonSudan’ Takedown | Krebs on Security
Sudanese Brothers Arrested in ‘AnonSudan’ Takedown
The U.S. government on Wednesday announced the arrest and charging of two Sudanese brothers accused of running Anonymous Sudan (a.k.a. AnonSudan), a cybercrime business known for launching powerful distributed denial-of-service (DDoS) attacks against a range of targets, including dozens of hospitals, news websites and cloud providers. One of the brothers is facing life in prison for allegedly seeking to kill people with his attacks.
Read more »
Wednesday October 09
05:36 pm
Lamborghini Carjackers Lured by $243M Cyberheist | Krebs on Security
Lamborghini Carjackers Lured by $243M Cyberheist
The parents of a 19-year-old Connecticut honors student accused of taking part in a $243 million cryptocurrency heist in August were carjacked a week later, while out house-hunting in a brand new Lamborghini. Prosecutors say the couple was beaten and briefly kidnapped by six young men who traveled from Florida as part of a botched plan to hold the parents for ransom.
Read more »
Tuesday October 08
10:21 pm
Patch Tuesday, October 2024 Edition | Krebs on Security
Patch Tuesday, October 2024 Edition
Microsoft today released security updates to fix at least 117 security holes in Windows computers and other software, including two vulnerabilities that are already seeing active attacks. Also, Adobe plugged 52 security holes across a range of products, and Apple has addressed a bug in its new macOS 15 "Sequoia" update that broke many cybersecurity tools.
Read more »
Thursday October 03
01:05 pm
A Single Cloud Compromise Can Feed an Army of AI Sex Bots | Krebs on Security
A Single Cloud Compromise Can Feed an Army of AI Sex Bots
Organizations that get relieved of credentials to their cloud environments can quickly find themselves part of a disturbing new trend: Cybercriminals using stolen cloud credentials to operate and resell sexualized AI-powered chat services. Researchers say these illicit chat bots, which use custom jailbreaks to bypass content filtering, often veer into darker role-playing scenarios, including child sexual exploitation and rape.
Read more »

Older posts

Wednesday November 06
10:04 am
The literary universe of RuneScape expands with two new offerings | 148Apps
The literary universe of RuneScape expands with two new offerings
The world of Gielinor has many wonderful and fantastic tales, as you would expect for a game like Runescape which has been running for about a billion years. So many in fact, that they can’t all be told in one place, and so Jagex has collaborated to bring a few new written stories to the world. [Read more]
Read more »
Tuesday November 05
09:45 am
Honor of Kings teams up with Jujutsu Kaisen to host the largest amount of events known to man | 148Apps
Honor of Kings teams up with Jujutsu Kaisen to host the largest amount of events known to man
If you are looking for a collaboration to draw in the players then you could do worse than one of the best-selling mangas of all time, and that's exactly what Honor of Kings has got. Characters from Jujutsu Kaisen will be stepping into the arena, ready to engage in epic battles. [Read more]
Read more »
Monday November 04
09:21 am
Tokkun Studio unveils alpha trailer for family-friendly MMORPG Puzkin: Magnetic Odyssey | 148Apps
Tokkun Studio unveils alpha trailer for family-friendly MMORPG Puzkin: Magnetic Odyssey
We are back on the MMORPG news train, and this time it comes from the sort of international developers Tokkun Studio. They are based in France and Japan, so it counts. Anyway, semantics aside, they have released an alpha trailer for the upcoming family-friendly Puzkin: Magnetic Odyssey. [Read more]
Read more »
Friday November 01
11:04 am
Win a host of exclusive in-game Honor of Kings goodies, courtesy of Pocket Gamer’s latest giveaway | 148Apps
Win a host of exclusive in-game Honor of Kings goodies, courtesy of Pocket Gamer’s latest giveaway
To celebrate its latest Jujutsu Kaisen crossover event, Honor of Kings is offering a bounty of login and achievement rewards kicking off the holiday season early. [Read more]
Read more »
09:04 am
Miraibo GO comes out swinging hard as it debuts its first seasonal event | 148Apps
Miraibo GO comes out swinging hard as it debuts its first seasonal event
Having just launched what feels like yesterday, Dreamcube Studio is wasting no time adding events to their open-world survival Miraibo GO. Abyssal Souls arrives relatively in time for the spooky season and brings with it horrifying new partners to collect, parallel worlds to explore, and more. [Read more]
Read more »
Thursday October 31
08:02 am
Ditch the heavy binders and high price tags and instead build a virtual card collection with Pokemon Trading Card Game Pocket | 148Apps
Ditch the heavy binders and high price tags and instead build a virtual card collection with Pokemon Trading Card Game Pocket
As fun as the real-world equivalent and the very old Game Boy version are, the Pokemon Trading Card games have historically been received poorly on mobile. It is a very strange and confusing trend, but one that The Pokemon Company is determined to change, given the release of Pokémon Trading Card Game Pocket. [Read more]
Read more »
Wednesday October 30
09:23 am
Peace amongst mobile gamers is now shattered with the release of EVE Galaxy Conquest | 148Apps
Peace amongst mobile gamers is now shattered with the release of EVE Galaxy Conquest
Some of the crazy folk tales from gaming have undoubtedly come from the EVE universe. Stories of spying, betrayal, and epic battles have entered history, and now the franchise expands as CCP Games launches EVE Galaxy Conquest, a free-to-play 4x strategy game. [Read more]
Read more »
Tuesday October 29
11:23 am
Lord of Nazarick, the turn-based RPG based on Overlord, launches today for iOS and Android | 148Apps
Lord of Nazarick, the turn-based RPG based on Overlord, launches today for iOS and Android
Crunchyroll and A PLUS JAPAN have just confirmed that Lord of Nazarick, their turn-based RPG based on the popular OVERLORD anime, is now available for iOS and Android. Starting today at 2PM CET, fans can download the game from Google Play and the App Store and begin commanding their armies on a fresh adventure that promises all-new canon scenarios. [Read more]
Read more »
10:35 am
Digital Extremes' recent Devstream reveals latest upcoming Prime frame | 148Apps
Digital Extremes' recent Devstream reveals latest upcoming Prime frame
If you are anything like me you are impatiently waiting for Warframe: 1999 whilst simultaneously cursing the fact Excalibur Prime is permanently Vault locked. To keep us fed during our wait, Digital Extremes hosted a Double Devstream to dish out a few new bites of information for Warframe. [Read more]
Read more »
Monday October 28
09:04 am
The Frozen Canvas adds a splash of colour to Torchlight: Infinite | 148Apps
The Frozen Canvas adds a splash of colour to Torchlight: Infinite
It is time to grab your gloves and layer up, as Torchlight: Infinite is diving into the frozen tundra in its sixth season. The Frozen Canvas is a colourful new update that brings a stylish flair to the Netherrealm and puts creativity in the spotlight. [Read more]
Read more »
Friday October 25
08:10 pm
Back When AOL WAS the Internet – The TouchArcade Show #606 | iOS App of Day
Back When AOL WAS the Internet – The TouchArcade Show #606
In Episode 606 of The TouchArcade Show we kick things off talking about my plans for this weekend, which has … Continue reading ""
Read more »
Thursday October 24
12:25 pm
Creative Assembly's latest mobile port is almost ready with Total War: Empire debuting late November | 148Apps
Creative Assembly's latest mobile port is almost ready with Total War: Empire debuting late November
The Total War series has been slowly trickling onto mobile, which is a fantastic thing because most, if not all, of them are incredibly great fun. Creative Assembly's latest to get the Feral Interactive treatment into portable form is Total War: Empire, the entry that changed the franchise. [Read more]
Read more »
08:31 am
Go Go Muffin opens its doors for an open beta test | 148Apps
Go Go Muffin opens its doors for an open beta test
If you are someone who is just dipping your toes in the MMORPG world, or you think you do not have time to “properly” invest, then you might want to keep an eye on Go Go Muffin. It has all the trimmings of the genre, some idle mechanics thrown in, and an open beta ongoing. [Read more]
Read more »
Wednesday October 23
01:00 pm
Outerdawn's turn-based RPG Grimguard Tactics releases after months of build-up | 148Apps
Outerdawn's turn-based RPG Grimguard Tactics releases after months of build-up
It has been quite the build-up, with pre-order targets smashed and many beautifully animated trailers released, but finally, Outerdawn’s Grimguard Tactics is out on mobile. Venture into a destroyed world with this turn-based RPG, and see if you have the makings of a saviour. [Read more]
Read more »
Tuesday October 22
08:32 am
The Elder Scroll Castles plays host to the Witch Festival for the spooky season | 148Apps
The Elder Scroll Castles plays host to the Witch Festival for the spooky season
There are spooky sights and sounds abound, and no one is safe from them, not even you hunkered down in your fortress in The Elder Scroll: Castles. Halloween has arrived, with the Witch Festival taking place until November 4th, bringing with it a special new subject. [Read more]
Read more »
Monday October 21
08:00 am
The icy grip of winter invades Once Human and makes survival that much harder | 148Apps
The icy grip of winter invades Once Human and makes survival that much harder
Since its launch, Once Human has done pretty well for itself, and NetEase is looking to quickly capitalise on this early success with a massive update. The Way of Winter is stuff full of new things to experience, such as an extra survival mechanic, a giant new area, and the ability to befriend Deviations. [Read more]
Read more »
Saturday October 19
12:16 am
Just Don’t Huff Anything! – The TouchArcade Show #605 | iOS App of Day
Just Don’t Huff Anything! – The TouchArcade Show #605
In this week’s episode of The TouchArcade Show, it’s kind of a weird one! We kick things off talking about … Continue reading ""
Read more »
Friday October 18
09:00 am
Nominations have opened for the 2024 Pocket Gamer Awards | 148Apps
Nominations have opened for the 2024 Pocket Gamer Awards
Video gaming is an incredibly subjective topic. Everyone has their favourites, a character they love, a mechanic they despise. It is a deeply personal choice, and there is no right answer. Or, there wouldn’t be if Pocket Gamer wasn’t around with their 2024 Awards to settle the debate for us. [Read more]
Read more »
Thursday October 17
09:13 am
X.D. Games announces that MMO Go Go Muffin is available to pre-order now | 148Apps
X.D. Games announces that MMO Go Go Muffin is available to pre-order now
The genre I play more than anything is - without a doubt - MMORPGs, by which I mean one in particular, but I have tried a huge range of them. So, I am always interested when a new one enters the market, which is why X.D. Global's announcement for Go Go Muffin has caught my eye. To be honest, the name also had a lot to do with it; you read that, you need to check it out. X.D says the idea behind this game was to combine the relaxing nature of titles such as Animal Crossing, with a usual MMO. A bold dream, and one you can get a peek at on October 23rd. [Read more]
Read more »
Wednesday October 16
09:26 am
Black Desert Mobile prepares for a slew of updates including an Awakening class and main quest revamp | 148Apps
Black Desert Mobile prepares for a slew of updates including an Awakening class and main quest revamp
Pearl Abyss is winding up to hit the player base of its MMO, Black Desert Mobile, with the one-two combo starting later this month. Huge changes to the main quest line are coming, a new Awakening class is on the horizon, and there are rumblings of some Guild content in development. [Read more]
Read more »
Tuesday October 15
09:24 am
Sky: Children of the Light collaborates with the Moomin franchise to bring a wonderful story to life | 148Apps
Sky: Children of the Light collaborates with the Moomin franchise to bring a wonderful story to life
Even if you didn’t know the name, you have definitely seen a Moomin at some point. The white, rather simplistic-looking hippopotamus-adjacent fellows are both adorable and abundant. So popular are they, you will now be able to encounter them in Sky: Children of the Light until the end of the year. [Read more]
Read more »
Monday October 14
09:07 am
Uncharted Water Origin debuts combat PvE mode in newest update | 148Apps
Uncharted Water Origin debuts combat PvE mode in newest update
Uncharted Water Origin has released its latest update, and as well as the usual S-Grade Admiral, we are also getting an all-new PvE mode. Resetting each month, this will give you a chance to swashbuckler your way through combat challenges to earn big rewards. [Read more]
Read more »
Friday October 11
09:29 pm
Terrorizing Pasadena – The TouchArcade Show #604 | iOS App of Day
Terrorizing Pasadena – The TouchArcade Show #604
In this week’s episode of The TouchArcade Show we kick things off with some discussion about AR/VR devices like Apple’s … Continue reading ""
Read more »
10:47 am
Join one million players as Miraibo GO launches after very successful pre-registration | 148Apps
Join one million players as Miraibo GO launches after very successful pre-registration
With the semi-recent news that Nintendo is doing its thing and suing the creators of Palworld, it got me thinking; can Palworld turn around and sue someone who is copying them? A copy of a copy. One million people will be hoping not, as Dreamcube has officially announced the launch of Miraibo GO. [Read more]
Read more »
Thursday October 10
08:09 am
Recruit the perfect support character now in Tower of God: New World | 148Apps
Recruit the perfect support character now in Tower of God: New World
Tower of God: New World is about to get a whole lot easier with the release of a stupendous new SSR+ character. To celebrate this broken arrival three special events are going on, as well as two new modes to try out. [Read more]
Read more »

Older posts

Wednesday November 06
08:33 pm
UPDATE: **Summary :** There may be issues accessing Google Workspace Extensions (Google Calendar, Google Keep and Google Tasks) from Gemini app **Description :** We are experiencing an issue with some Extensions in the Gemini app (gemini.google.com). Our engineering team continues to investigate the issue. We will provide an update by Friday, 2024-11-08 00:30 US/Pacific with current details. We apologize to all who are affected by the disruption. **Diagnosis :** Users may observe error messages when trying to use Calendar, Keep, and Tasks extensions from the Gemini app. This is limited to only enterprise users and does not impact consumer accounts. **Workaround :** None at this time. | Google Apps
UPDATE: **Summary :** There may be issues accessing Google Workspace Extensions (Google Calendar, Google Keep and Google Tasks) from Gemini app **Description :** We are experiencing an issue with some Extensions in the Gemini app (gemini.google.com). Our engineering team continues to investigate the issue. We will provide an update by Friday, 2024-11-08 00:30 US/Pacific with current details. We apologize to all who are affected by the disruption. **Diagnosis :** Users may observe error messages when trying to use Calendar, Keep, and Tasks extensions from the Gemini app. This is limited to only enterprise users and does not impact consumer accounts. **Workaround :** None at this time.
Incident began at 2024-11-06 18:03 (times are in Coordinated Universal Time (UTC)).Summary : There may be issues accessing Google Workspace Extensions (Google Calendar, Google Keep and Google Tasks) from Gemini app Description : We are experiencing an issue with some Extensions in the Gemini app (gemini.google.com). Our engineering team continues to investigate the issue. We will provide an update by Friday, 2024-11-08 00:30 US/Pacific with current details. We apologize to all who are affected by the disruption. Diagnosis : Users may observe error messages when trying to use Calendar, Keep, and Tasks extensions from the Gemini app. This is limited to only enterprise users and does not impact consumer accounts. Workaround : None at this time. Affected products: Gemini
Read more »
03:05 pm
Service Issue – Block Storage | Linode
Service Issue – Block Storage
Nov 6, 15:05 UTCIdentified - Our team has identified the issue affecting the Block Storage service in all our data centers. We are working quickly to implement a fix, and we will provide an update as soon as the solution is in place.Nov 6, 14:54 UTCInvestigating - We are investigating an issue affecting the Block Storage service which appears constraint to LKE nodes in all data centers. During this time, users may be unable to attach Block Storage volumes to LKE nodes. We will share additional updates as we have more information.
Read more »
02:47 pm
Cloudflare Workers AI Issues | CloudFlare
Cloudflare Workers AI Issues
Nov 6, 14:47 UTCUpdate - We are continuing to investigate this issue.Nov 6, 14:46 UTCInvestigating - Cloudflare is aware of, and investigating issues with Workers AI experiencing elevated errors to all models. We are working to mitigate this problem. Further details will be provided as more information becomes available.
Read more »
12:44 pm
UPDATE: Looker Studio users may observe increased latency | Google Cloud
UPDATE: Looker Studio users may observe increased latency
Incident began at 2024-11-06 01:30 (all times are US/Pacific).Summary: Looker Studio users may observe increased latency Description: We are experiencing an issue with Looker Studio beginning on Wednesday, 2024-11-06 01:30 US/Pacific. Our engineering team continues to investigate the issue. We will provide an update by Wednesday, 2024-11-06 06:00 US/Pacific with current details. Diagnosis: Looker Studio users may observe issues with their dashboards, dashboard components may load slower than usual, they can be stuck in endless loading state. Workaround: None at this time. Affected products: Looker StudioAffected locations: Global
Read more »
11:39 am
Webflow app – “New Form Submission” Trigger is failing to provide sample data nor triggering | Zapier
Webflow app – “New Form Submission” Trigger is failing to provide sample data nor triggering
Nov 6, 03:39 PSTIdentified - We've identified an issue with the ""New Form Submission in Webflow" trigger, where no sample data is being provided when this trigger is being tested in the Zap editor, and the Zaps are failing to trigger.We are actively working on identifying the root cause of this problem to resolve it as soon as possible. As of now, we do not have an estimated time for resolution, and we regret any inconvenience this issue may cause.We encourage you to contact our Support Team should you need any assistance with other matters: https://zapier.com/app/get-help. We will continue to provide updates on this incident as we have more information. Please stay tuned.
Read more »
04:07 am
Degraded performance for reddit.com | Reddit
Degraded performance for reddit.com
Nov 5, 20:07 PSTInvestigating - We are currently investigated degraded performance on reddit.com
Read more »
03:55 am
WARP connectivity issue | CloudFlare
WARP connectivity issue
Nov 6, 03:55 UTCResolved - Cloudflare experienced s between 21:04 UTC and 22:13 UTC on 2024-11-04. The issue was caused by a new release, which was quickly identified and reverted to mitigate the impact. Cloudflare is currently investigating the root cause.
Read more »
01:22 am
SEA (Seattle) on 2024-11-06 | CloudFlare
SEA (Seattle) on 2024-11-06
THIS IS A SCHEDULED EVENT Nov 6, 09:00 - 11:00 UTCNov 6, 00:56 UTCScheduled - We will be performing scheduled maintenance in SEA (Seattle) datacenter on 2024-11-06 between 09:00 and 11:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network interfaces in this datacentre may become temporarily unavailable.You can now subscribe to these notifications via Cloudflare dashboard and receive these updates directly via email, PagerDuty and webhooks (based on your plan): https://developers.cloudflare.com/notifications/notification-available/#cloudflare-status.
Read more »
Tuesday November 05
10:46 pm
Email and Email Digest services experiencing technical difficulties | IFTTT
Email and Email Digest services experiencing technical difficulties
Nov 5, 14:46 PSTIdentified - We're currently investigating an issue that is preventing the actions for the Email and Email Digest services from sending emails.
Read more »
07:22 pm
LAX (Los Angeles) on 2024-11-06 | CloudFlare
LAX (Los Angeles) on 2024-11-06
THIS IS A SCHEDULED EVENT Nov 6, 16:00 UTC - Nov 7, 00:00 UTCNov 5, 19:18 UTCScheduled - We will be performing scheduled maintenance in LAX (Los Angeles) datacenter between 2024-11-06 16:00 and 2024-11-07 00:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network interfaces in this datacentre may become temporarily unavailable.You can now subscribe to these notifications via Cloudflare dashboard and receive these updates directly via email, PagerDuty and webhooks (based on your plan): https://developers.cloudflare.com/notifications/notification-available/#cloudflare-status.
Read more »
06:33 pm
[Multiple Deployments] Activity and Telephony Log Retrieval Errors | Duo Security
[Multiple Deployments] Activity and Telephony Log Retrieval Errors
Nov 5, 13:33 ESTInvestigating - We are currently investigating an issue that affects access of activity and telephony logs via the Duo Admin API. Authentication logs and sign-ins are not impacted.Please check back here or subscribe to updates for any changes.
Read more »
11:43 am
Cloudflare Zero Trust Access change delay | CloudFlare
Cloudflare Zero Trust Access change delay
Nov 5, 11:43 UTCMonitoring - A fix has been implemented and we are monitoring the results.Nov 5, 11:40 UTCInvestigating - Cloudflare is investigating issues with .Delays are taking 15-20 minutes. This only affects Customer configuration changes in the Cloudflare Zero Trust Access API and Cloudflare Zero Trust Access dashboard.We are working to understand the full impact and mitigate this problem. More updates to follow shortly.
Read more »
06:20 am
Connectivity Issue – ALL: 1 (INVESTIGATING) | Linode
Connectivity Issue – ALL: 1 (INVESTIGATING)
Nov 5, 06:20 UTCInvestigating - Our team is investigating an issue affecting connectivity in our Frankfurt data center. During this time, users may experience intermittent connection timeouts and errors for all services deployed in this data center. We will share additional updates as we have more information.
Read more »
12:46 am
[Federal Deployments] Authentication issues using Yubikey tokens | Duo Security
[Federal Deployments] Authentication issues using Yubikey tokens
Nov 4, 19:46 ESTMonitoring - We have implemented a fix for the authentication issue using Yubikey tokens.We will continue to monitor the issue and will post any updates when the incident is considered fully resolved.Nov 4, 19:33 ESTIdentified - We have identified the cause of the authentication issue using Yubikey tokens and are actively working to restore service.Nov 4, 19:24 ESTInvestigating - We are currently investigating an issue that is affecting authentication using Yubikey tokens on Federal Deployments. We are working on remediation and will provide more updates as soon as we have more information.
Read more »
Monday November 04
11:22 pm
Canada SMS Carrier Partner Maintenance | Twilio
Canada SMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Nov 5, 21:01 - 23:00 PSTNov 4, 15:05 PSTScheduled - Our SMS carrier partner in Canada is conducting a planned maintenance from 05 November 2024 at 21:01 PST until 05 November 2024 at 23:00 PST. During the maintenance window, there could be intermittent delays delivering SMS to and from Canada handsets.
Read more »
11:13 pm
GoTo Connect – audio quality issues | GoToMeeting
GoTo Connect – audio quality issues
Nov 4, 23:13 UTCInvestigating - We are aware that a subset of users may be experiencing audio quality issues on calls. Our engineers are looking into the problem, and we will provide updates shortly as more information becomes available.
Read more »
09:17 pm
UPDATE: Large Vertex Model Garden Deployment Failures | Google Cloud
UPDATE: Large Vertex Model Garden Deployment Failures
Incident began at 2024-11-04 12:29 (all times are US/Pacific).Summary: Large Vertex Model Garden Deployment Failures Description: We are experiencing an issue with Vertex Model Garden Deployments. Our engineering team continues to investigate the issue. We will provide an update by Monday, 2024-11-04 14:00 US/Pacific with current details. We apologize to all who are affected by the disruption. Diagnosis: Customers may experience failures with large Vertex Model Garden deployments (greater than 100GB) when deployed on a GKE Autopilot cluster. Workaround: None at this time. Affected products: Cloud Machine Learning, Vertex AI Online PredictionAffected locations: Taiwan (asia-east1), Hong Kong (asia-east2), Tokyo (asia-northeast1), Osaka (asia-northeast2), Seoul (asia-northeast3), Mumbai (asia-south1), Singapore (asia-southeast1), Jakarta (asia-southeast2), Sydney (australia-southeast1), Melbourne (australia-southeast2), Warsaw (europe-central2), Finland (europe-north1), Madrid (europe-southwest1), Belgium (europe-west1), London (europe-west2), Frankfurt (europe-west3), Netherlands (europe-west4), Zurich (europe-west6), Milan (europe-west8), Paris (europe-west9), Tel Aviv (me-west1), Montréal (northamerica-northeast1), Toronto (northamerica-northeast2), São Paulo (southamerica-east1), Santiago (southamerica-west1), Iowa (us-central1), South Carolina (us-east1), Northern Virginia (us-east4), Dallas (us-south1), Oregon (us-west1), Los Angeles (us-west2), Salt Lake City (us-west3), Las Vegas (us-west4)
Read more »
06:21 pm
Universal SSL backup certificate issuance delays | CloudFlare
Universal SSL backup certificate issuance delays
Nov 4, 18:21 UTCInvestigating - Universal SSL backup certificates issuance is delayed. Our primary certificates pipeline for Universal SSL is not impacted and certificates at the edge are not impacted.
Read more »
06:19 pm
Warp Egress IPv6 GeoIP Data | CloudFlare
Warp Egress IPv6 GeoIP Data
Nov 4, 18:19 UTCInvestigating - Cloudflare is investigating issues with Cloudflare WARP and Cloudflare Zero Trust. Cloudflare WARP and Zero Trust users may experience incorrect GeoIP data for IPv6 connections.
Read more »
06:12 pm
Connectivity Issue – US-IAD (Washington) | Linode
Connectivity Issue – US-IAD (Washington)
Nov 4, 18:12 UTCMonitoring - At this time we have been able to correct the issues affecting connectivity in our US-IAD (Washington) data center between 16:50-17:25 UTC on November 4, 2024 . We will be monitoring this to ensure that it remains stable. If you are still experiencing issues, please open a Support ticket for assistance.
Read more »

Older posts

Showcase

Kool Tools: Pegasus3 Symply Edition

Promise Technology and Symply have launched the Pegasus3 Symply Edition, the next generation of the Pegasus desktop RAID storage system. The new system combines 40 Gb/s Thunderbolt 3 performance with Symply's storage management suite. The Pegasus3 Symply Edition is a...

Kool Tools: TimeCache

The Rolling Stones told us that time was on our side (or at least Mick Jagger's side). That's not always true, but with TimeCache (http://www.pandaware.com/timecache/index.html) for Mac OS X from PandaWare we can at least keep track of it. With TimeCache -- now...

Kool Tools: PDF Editor for Mac

Editing PDF files on Mac OS X can be tough, but a product from AnyBizSoft, a Wondershare company focused on PDF solutions, simplifies the process. PDF Editor for Mac, integrates AnyBizSoft's existing PDF to Word conversion technology. It not only enables users to edit...

Kool Tools: Aunsoft’s Video Converter for the Mac

Aunsoft Video Converter for Mac (http://www.aunsoft.com/video-converter-mac/) is a US$35 Mac video converting tool you can use to convert just about any type of video for use on a variety of Apple devices. What's more, it also boasts a several editing features. This...

More Showcase

Scanners “By The Numbers”

Wednesday November 06
03:04 pm
Price Drop! Clearance 14-inch M3 Pro/M3 Max MacBook Pros for $400 off original MSRP | MacPrices.net
Price Drop! Clearance 14-inch M3 Pro/M3 Max MacBook Pros for $400 off original MSRP
B&H Photo has dropped prices on clearance 14" M3 Pro and M3 Max MacBook Pros by $400 off original MSRP with prices now available starting at $1599. B&H offers free 1-2 day delivery to most US addresses: - 14" 11-Core M3 Pro MacBook Pro (18GB RAM/512GB SSD): $1599 $400 off MSRP - 14" 12-Core M3 Pro MacBook Pro (18GB RAM/1TB SSD): $1999 $400 off MSRP - 14" 14-Core M3 Max MacBook Pro (36GB RAM/1TB SSD): $2799 $400 off MSRP For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.
Read more »
01:03 pm
Take $50 off Apple’s 10th-generation iPads with the latest sales | MacPrices.net
Take $50 off Apple’s 10th-generation iPads with the latest sales
Amazon and Best Buy are offering $50 discounts on Apple's 10th-generation iPads this week, with models now available starting at only $299. These are the lowest prices available for Apple's entry-level iPads: (1): Best Buy has Apple's 10th-generation WiFi iPads on sale for $50 off MSRP in their online store. Sale prices for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 10" 10th-generation 64GB WiFi iPads: $299 $50 off MSRP - 10" 10th-generation 256GB WiFi iPads: $449 $50 off MSRP - 10" 10th-generation 64GB WiFi + Cellular iPads: $449 $50 off MSRP - 10" 10th-generation 256GB WiFi + Cellular iPads: $599 $50 off MSRP (2): Amazon has Apple's 10th-generation WiFi iPads on sale for $50 off MSRP as well. Shipping is free: - 10" 10th-generation 64GB WiFi iPads: $299 $50 off MSRP - 10" 10th-generation 256GB WiFi iPads: $449 $50 off MSRP - 10" 10th-generation 64GB WiFi + Cellular iPads: $449 $50 off MSRP - 10" 10th-generation 256GB WiFi + Cellular iPads: $599 $50 off MSRP Note that Amazon's prices are dynamic, and the sale price may vary depending on model and color. See their site for the latest information. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.
Read more »
01:03 pm
Take $50 off Apple’s 10th-generation iPads with the latest sales | MacPrices.net
Take $50 off Apple’s 10th-generation iPads with the latest sales
Amazon and Best Buy are offering $50 discounts on Apple's 10th-generation iPads this week, with models now available starting at only $299. These are the lowest prices available for Apple's entry-level iPads: (1): Best Buy has Apple's 10th-generation WiFi iPads on sale for $50 off MSRP in their online store. Sale prices for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 10" 10th-generation 64GB WiFi iPads: $299 $50 off MSRP - 10" 10th-generation 256GB WiFi iPads: $449 $50 off MSRP - 10" 10th-generation 64GB WiFi + Cellular iPads: $449 $50 off MSRP - 10" 10th-generation 256GB WiFi + Cellular iPads: $599 $50 off MSRP (2): Amazon has Apple's 10th-generation WiFi iPads on sale for $50 off MSRP as well. Shipping is free: - 10" 10th-generation 64GB WiFi iPads: $299 $50 off MSRP - 10" 10th-generation 256GB WiFi iPads: $449 $50 off MSRP - 10" 10th-generation 64GB WiFi + Cellular iPads: $449 $50 off MSRP - 10" 10th-generation 256GB WiFi + Cellular iPads: $599 $50 off MSRP Note that Amazon's prices are dynamic, and the sale price may vary depending on model and color. See their site for the latest information. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.
Read more »
Tuesday November 05
02:39 pm
Early Black Friday Sale: New iPads for only $199 | MacPrices.net
Early Black Friday Sale: New iPads for only $199
Best Buy has Apple's 9th generation 10.2" WiFi iPads on early Black Friday sale for starting at only $199 on their online store for a limited time. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 10" 64GB WiFi iPad (Space Gray or Silver): $199.99 MSRP $329 - 10" 256GB WiFi iPad (Space Gray or Silver): $349.99 MSRP $479 - 10" 64GB WiFi + Cellular iPad (Space Gray or Silver): $329.99 MSRP $459 - 10" 256GB WiFi + Cellular iPad (Space Gray or Silver): $479.99 MSRP $609 Best Buy's prices are among the lowest prices available for these base-model iPads. These are clearance iPads and will be available while supplies last. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.
Read more »
02:34 pm
Clearance 13-inch M2 MacBook Airs with 8GB of memory on sale again for only $699 | MacPrices.net
Clearance 13-inch M2 MacBook Airs with 8GB of memory on sale again for only $699
Amazon has clearance 13" MacBook Airs with M2 CPUs and 8GB of RAM in stock today and on sale again for $300 off MSRP with prices starting at only $699. Shipping is free. These are the lowest prices available for M2-powered MacBook Airs anywhere: - 13" M2 MacBook Air 8GB/256GB (Space Gray): $699, $300 off MSRP - 13" M2 MacBook Air 8GB/256GB (Silver): $699, $300 off MSRP - 13" M2 MacBook Air 8GB/256GB (Midnight): $699, $300 off MSRP - 13" M2 MacBook Air 8GB/256GB (Starlight): $699, $300 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.
Read more »
12:39 pm
13-inch M2 MacBook Air (16GB RAM/256GB SSD) on early Black Friday sale for $799, $200 off MSRP, with free store pickup | MacPrices.net
13-inch M2 MacBook Air (16GB RAM/256GB SSD) on early Black Friday sale for $799, $200 off MSRP, with free store pickup
Best Buy has Apple's newly upgraded 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $200 off MSRP, only $799. Their price equals that of Amazon's, which we posted yesterday. It's the lowest price out there for a new MacBook with 16GB of memory and a great deal: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP Sale price for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker.
Read more »
12:39 pm
13-inch M2 MacBook Air (16GB RAM/256GB SSD) on early Black Friday sale for $799, $200 off MSRP, with free store pickup | MacPrices.net
13-inch M2 MacBook Air (16GB RAM/256GB SSD) on early Black Friday sale for $799, $200 off MSRP, with free store pickup
Best Buy has Apple's newly upgraded 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $200 off MSRP, only $799. Their price equals that of Amazon's, which we posted yesterday. It's the lowest price out there for a new MacBook with 16GB of memory and a great deal: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP Sale price for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker.
Read more »
12:39 pm
13-inch M2 MacBook Air (16GB RAM/256GB SSD) on early Black Friday sale for $799, $200 off MSRP, with free store pickup | MacPrices.net
13-inch M2 MacBook Air (16GB RAM/256GB SSD) on early Black Friday sale for $799, $200 off MSRP, with free store pickup
Best Buy has Apple's newly upgraded 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $200 off MSRP, only $799. Their price equals that of Amazon's, which we posted yesterday. It's the lowest price out there for a new MacBook with 16GB of memory and a great deal: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP Sale price for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker.
Read more »
12:39 pm
13-inch M2 MacBook Air (16GB RAM/256GB SSD) on early Black Friday sale for $799, $200 off MSRP, with free store pickup | MacPrices.net
13-inch M2 MacBook Air (16GB RAM/256GB SSD) on early Black Friday sale for $799, $200 off MSRP, with free store pickup
Best Buy has Apple's newly upgraded 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $200 off MSRP, only $799. Their price equals that of Amazon's, which we posted yesterday. It's the lowest price out there for a new MacBook with 16GB of memory and a great deal: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP Sale price for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker.
Read more »
Monday November 04
08:11 pm
Early Black Friday Deal: Apple’s newly upgraded 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP | MacPrices.net
Early Black Friday Deal: Apple’s newly upgraded 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. At the time of this post, the discount applied only to Silver and Starlight colors, but other colors may also qualify for the discount soon -- check their site for the latest information: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker.
Read more »
08:11 pm
Early Black Friday Deal: Apple’s newly upgraded 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP | MacPrices.net
Early Black Friday Deal: Apple’s newly upgraded 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. At the time of this post, the discount applied only to Silver and Starlight colors, but other colors may also qualify for the discount soon -- check their site for the latest information: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker.
Read more »
08:04 pm
13-inch 8GB M2 MacBook Airs for $749, $250 off Apple’s MSRP, with free store pickup today | MacPrices.net
13-inch 8GB M2 MacBook Airs for $749, $250 off Apple’s MSRP, with free store pickup today
Best Buy has Apple 13" MacBook Airs with M2 CPUs and 8GB of RAM in stock and on sale on their online store for $250 off MSRP. Prices start at $749. Their prices are the lowest currently available for new 13" M2 MacBook Airs: - 13" M2 MacBook Air (8GB RAM/256GB SSD): $749 $250 off MSRP - 13" M2 MacBook Air (8GB RAM/512GB SSD): $949 $250 off MSRP Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker.
Read more »

Older posts

Wednesday November 06
04:29 pm
Apple Studio Display 27″ 5K 2880p Monitor From $1,599 + free shipping | DealNews Laptops
Apple Studio Display 27″ 5K 2880p Monitor From $1,599 + free shipping
Choose the standard glass option for prices starting from $1,599, or the nano-texture glass option for prices starting from $1,899. Each lets you pick from three stand options. (Scroll across the top carousel to see this monitor.) Buy Now at Apple
Read more »
04:09 pm
10th-Gen. Apple iPad 10.9″ Tablet (2022) From $349 + free shipping | DealNews iPads
10th-Gen. Apple iPad 10.9″ Tablet (2022) From $349 + free shipping
Get the latest iteration of the regular iPad in its 64GB model from $349, or the 256GB from $499. Plus, you can get up to $520 off your order with an eligible trade-in. Buy Now at Apple
Read more »
10:16 am
Apple MacBook Air M2 13″ Laptop (2022) for $799 + free shipping | DealNews Laptops
Apple MacBook Air M2 13″ Laptop (2022) for $799 + free shipping
That's a savings of $200. Buy Now at Best Buy
Read more »
Saturday November 02
01:32 am
Refurbished 24-inch iMac Apple M1 Chip with 8‑Core CPU and 8‑Core GPU, Gigabit Ethernet – Green – G12U0LL/A – $1,289.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M1 Chip with 8‑Core CPU and 8‑Core GPU, Gigabit Ethernet – Green – G12U0LL/A – $1,289.00
Refurbished 24-inch iMac Apple M1 Chip with 8‑Core CPU and 8‑Core GPU, Gigabit Ethernet - Green – G12U0LL/A $1,289.00 Originally released April 2021 24-inch 4.5K Retina display 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 16GB unified memory 256GB SSD 1080p FaceTime HD camera Two Thunderbolt / USB 4 ports Two USB 3 ports Magic Keyboard with Touch ID Product page on the Apple Store…
Read more »
01:32 am
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Blue – G19K0LL/A – $1,349.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Blue – G19K0LL/A – $1,349.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Blue – G19K0LL/A $1,349.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 16GB unified memory 256GB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
01:32 am
Refurbished 24-inch iMac Apple M1 Chip with 8‑Core CPU and 8‑Core GPU, Gigabit Ethernet – Silver – G12Q0LL/A – $1,289.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M1 Chip with 8‑Core CPU and 8‑Core GPU, Gigabit Ethernet – Silver – G12Q0LL/A – $1,289.00
Refurbished 24-inch iMac Apple M1 Chip with 8‑Core CPU and 8‑Core GPU, Gigabit Ethernet - Silver – G12Q0LL/A $1,289.00 Originally released April 2021 24-inch 4.5K Retina display 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 16GB unified memory 256GB SSD 1080p FaceTime HD camera Two Thunderbolt / USB 4 ports Two USB 3 ports Magic Keyboard with Touch ID Product page on the Apple Store…
Read more »
01:32 am
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Yellow – G19G0LL/A – $1,509.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Yellow – G19G0LL/A – $1,509.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Yellow – G19G0LL/A $1,509.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 8GB unified memory 1TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
01:32 am
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Green – G19J5LL/A – $1,669.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Green – G19J5LL/A – $1,669.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Green – G19J5LL/A $1,669.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 24GB unified memory 512GB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
01:32 am
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Purple – G19Q5LL/A – $1,669.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Purple – G19Q5LL/A – $1,669.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Purple – G19Q5LL/A $1,669.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 24GB unified memory 512GB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
01:32 am
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Orange – G19S2LL/A – $1,509.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Orange – G19S2LL/A – $1,509.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Orange – G19S2LL/A $1,509.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 16GB unified memory 512GB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
01:32 am
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Silver – G19E4LL/A – $1,989.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Silver – G19E4LL/A – $1,989.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Silver – G19E4LL/A $1,989.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 16GB unified memory 2TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
01:32 am
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Orange – FQRY3LL/A – $1,359.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Orange – FQRY3LL/A – $1,359.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Orange – FQRY3LL/A $1,359.00 $1,599.00 −15% Originally released October 2023 24-inch 4.5K Retina;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 8GB unified memory 512GB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
01:32 am
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Green – G19J6LL/A – $1,829.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Green – G19J6LL/A – $1,829.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Green – G19J6LL/A $1,829.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 24GB unified memory 1TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
01:32 am
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Blue – G19L3LL/A – $1,669.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Blue – G19L3LL/A – $1,669.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Blue – G19L3LL/A $1,669.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 16GB unified memory 1TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
01:32 am
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Purple – G19Q0LL/A – $1,509.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Purple – G19Q0LL/A – $1,509.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Purple – G19Q0LL/A $1,509.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 8GB unified memory 1TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »

Older posts

Wednesday November 06
19 mins ago
Sonographer – *Apple* Hill Imaging Center – Evenings – WellSpan Health (United States) | Job Search Engine
Sonographer – *Apple* Hill Imaging Center – Evenings – WellSpan Health (United States)
Sonographer - Apple Hill Imaging Center - Evenings Location: York Hospital, York, PA Schedule: Full Time Full Time (80 hrs/pay period) Evenings General Summary
Read more »
20 mins ago
Commercial Account Manager – Apple Roofing (United States) | Job Search Engine
Commercial Account Manager – Apple Roofing (United States)
…in the greater Kansas City, MO area to service designated territory and clients. Apple Roofing is a leading name in the roofing industry, recognized for providing
Read more »
20 mins ago
Part Time – Student – Blue *Apple* Cafe Worker (Spring 2025) – Pennsylvania State University (United States) | Job Search Engine
Part Time – Student – Blue *Apple* Cafe Worker (Spring 2025) – Pennsylvania State University (United States)
…to enhance your work experience. Student openings are available at the Blue Apple Cafe. Employee meal discount during working hours is provided. Job Duties +
Read more »
20 mins ago
Pharmacy Technician Retail – *Apple* Hill – Part Time – Day/Evening – WellSpan Health (United States) | Job Search Engine
Pharmacy Technician Retail – *Apple* Hill – Part Time – Day/Evening – WellSpan Health (United States)
Pharmacy Technician Retail - Apple Hill - Part Time - Day/Evening Location: WellSpan Health, York, PA Schedule: Part Time Schedule: Part Time 20-hours per week
Read more »
20 mins ago
Licensed Practical Nurse – Orthopedics *Apple* Hill – WellSpan Health (United States) | Job Search Engine
Licensed Practical Nurse – Orthopedics *Apple* Hill – WellSpan Health (United States)
Licensed Practical Nurse - Orthopedics Apple Hill Location: WellSpan Medical Group, York, PA Schedule: Full Time Schedule Full Time Monday - Friday Day / Evening
Read more »
20 mins ago
L1 *Apple* Support Technician – CompuCom (United States) | Job Search Engine
L1 *Apple* Support Technician – CompuCom (United States)
…right fit for the right people. Our client is currently seeking a qualified Level 1 Apple Support Specialist to join their team. This role can be hybrid / remote up
Read more »
20 mins ago
Retail Assistant Department Manager, *Apple* Tech Shop – Barnes & Noble Education (United States) | Job Search Engine
Retail Assistant Department Manager, *Apple* Tech Shop – Barnes & Noble Education (United States)
…combination of education, certification and experience will be considered. + A+ and/or Apple certified or able to achieve certification within 60 days required. +
Read more »
20 mins ago
Child Care Teacher – Glenda Drive/ *Apple* ValleyTeacher – Learning Care Group (United States) | Job Search Engine
Child Care Teacher – Glenda Drive/ *Apple* ValleyTeacher – Learning Care Group (United States)
Child Care Teacher - Glenda Drive/ Apple ValleyTeacher Share by Email Share on LinkedIn Share on X
Read more »
21 mins ago
Endpoint Systems Engineer ( *Apple* Platforms) – SpaceX (United States) | Job Search Engine
Endpoint Systems Engineer ( *Apple* Platforms) – SpaceX (United States)
Endpoint Systems Engineer ( Apple Platforms) at SpaceX Hawthorne, CA SpaceX was founded under the belief that a future where humanity is out exploring the stars is
Read more »
21 mins ago
Housekeeper, *Apple* Valley Village – Cassia (United States) | Job Search Engine
Housekeeper, *Apple* Valley Village – Cassia (United States)
Apple Valley Village Health Care Center, a senior care campus, is hiring a Part-Time Housekeeper to join our team! We will train you for this position! In this role,
Read more »
21 mins ago
Seasonal Fine Jewelry Commission Associate – *Apple* Blossom Mall – JCPenney (United States) | Job Search Engine
Seasonal Fine Jewelry Commission Associate – *Apple* Blossom Mall – JCPenney (United States)
…Fine Jewelry Commission Associate - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states)
Read more »
21 mins ago
*Apple* SME/Client Experience Manager – US Tech Solutions (United States) | Job Search Engine
*Apple* SME/Client Experience Manager – US Tech Solutions (United States)
Title: Apple SME/Client Experience Manager Responsibilities * Provides Apple SME guidance to America's technical support team. * Client Experience manager
Read more »
21 mins ago
Operations Associate – *Apple* Blossom Mall – JCPenney (United States) | Job Search Engine
Operations Associate – *Apple* Blossom Mall – JCPenney (United States)
Operations Associate - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) - Apple
Read more »

Older posts