News

Arturo Castro joins cast of Apple TV+’s live ‘Matchbox’ film

Arturo Castro (“Road House”) has landed a role alongside John Cena and Jessica Biel in Apple TV+‘s live-action “Matchbox”film from Skydance and Mattel Films, reports Deadline. No word on whom he’s playing. The movie, inspired by Mattel’s iconic real-world...

ADATA Debuts SC740 External SSD with Built-in USB-C Cable

ADATA Technology has launched the SC740 external SSD, which the company says features an industry first built-in USB-C transfer cable and corresponding storage clip. It reportedly combines fast read/write speeds of up to 1,050/1,000 MB/s with a capacity of up to...

More MacTech News

Opinion

Analyst predicts features of the iPhone 17, iPhone 18, and iPhone 19

Talk about a powerful crystal ball! In a new Medium post, analyst Ming-Chi Kuo offers his predictions for the iPhone 17, iPhone 18, and iPhone 19 that will likely arrive in 2025, 2026, and 2027. He says the high-end iPhone 17 model is expected to feature an upgraded...

More Opinion

Scanners

Friday December 06
10 minutes ago
Tim Cook, Super Intelligence, and Wallace and Gromit on the AppleInsider Podcast | AppleInsider
Tim Cook, Super Intelligence, and Wallace and Gromit on the AppleInsider Podcast
Tim Cook has been looking back at his past in Apple, while others look to the future of AI, and Wallace and Gromit are opening presents, on the AppleInsider podcast.Crackin' iPhone, GromitT'is apparently the season to look back on the past, as Tim Cook dodges questions about his retirement and has a good go at re-framing Apple as being at the forefront of AI. But alongside that and the many 2024 reviews like Apple Music Replay launching now, there is always time to delve into the latest rumors about future Apple products. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
1 hour ago
BenQ MA270U review: Good looks, great image quality | Macworld
BenQ MA270U review: Good looks, great image quality
Macworld At a glanceExpert's Rating Pros Great image quality Nano Matte Panel cuts down glare and reflections Height-adjustable stand Cons 60Hz refresh rate may discourage gamers No webcam Our Verdict The BenQ MA270U offers image quality that could satisfy users in a production environment–that’s one way of saying that its quality is better than what general users usually get. You might find a 27-inch 4K display that’s a little cheaper, but you’ll have a hard time finding one that looks this good. Price When Reviewed This value will show the geolocated pricing text for product undefined Best Pricing Today Price When Reviewed$459.99 Best Prices Today: MA270U Retailer Price $459.99 View Deal $459.99 View Deal BenQ $460 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket If you’re looking for a Mac display at a good price, take a look at the BenQ MA270U. Made with the Mac in mind, this 27-inch, 4K display is a nice combination of price, features, and image quality. It’s a lot cheaper than the Apple Studio Display, but you won’t feel like you’re making a sacrifice with the MA270U. See how this monitor compares to others in our round-up of the best displays and monitors for Mac users. Specifications Size27 inchesGlass frontNano Matte PanelAspect ratio16:9Native resolution3840 by 2160Panel type/BacklightIPS/LED backlightResponse time5 msContrast ratio1200:1Frequency24Hz to 60HzColor depth10-bitBrightness400 nitsDimensions with stand (horizontal)Highest height: 22.1 by 24.2 by 8.7 inches (560.1 by 613.8 by 220.2mm) Lowest height: 17.5 by 24.2 by 8.7 inches (445.1 by 613.8 by 220.2mm)Weight with stand18.08 lbs (8.2 kg) BenQ MA270U: Design and build The MA270U has a nice design that complements the Mac aesthetic—it doesn’t completely match, but the display doesn’t obviously look like a PC display connected to a Mac either. While there’s a lot of plastic on the MA270U, it doesn’t look cheap and feels solid and sturdy. The MA270U has a Nano Matte Panel front but it’s not a piece of glass. As the name suggests, it’s not glossy, so glare and reflections are practically non-existent, even more so than with the pricey Nano texture glass on the Apple Studio Display. The Nano Matte Panel does an excellent job of cutting down glare and reflections.Foundry The bezels around the sides and top are less than 1 mm wide, about the same as the Apple Studio Display. The bottom bezel is thicker, but it doesn’t look out of proportion. The display’s bezels remind me a little of the bezels of the MacBook Air but without the top camera notch. BenQ MA270U: Display stand A stand is included with the MA270U. Some displays sell the stand separately so there’s an additional cost consideration, but that’s not the case here. The silver stand is plastic, but it feels strong. The base has a slightly raised gray padded platform for placing your AirPods cases and other items, a nice touch. The stand offers a great range of adjustment: -5 to 20 degrees of tilt, swivels 15 degrees left or right, and 115 mm of height. The display can also pivot 90 degrees, a far greater range of motion than the Studio Display. The MA270U can work with VESA wall mounts, but a stand is included.Foundry BenQ MA270U: Ports The MA70U includes the following ports: Two HDMI 2.0 ports Two USB-A (USB 3.2 Gen 1, 5Gbps, 7.5W) One USB-C (90W Power Delivery) One USB-C (USB 3.2 Gen 1, 5Gbps, 15W) 3.5mm headphone jack The MA270U can connect to a Mac through HDMI or USB-C. The USB-C connection offers 90 watts of power so it can charge your MacBook at the same time. If you want to use the display as a connection hub, you need to connect to the Mac via USB-C. One of the USB-A ports is on the rear of the display, while the other is underneath the display, along with the 3.5mm headphone jack. Having the USB-A port under the display is convenient, though you probably will find someone who wishes that was a USB-C port instead. BenQ MA270U: Image quality The one thing that’s immediately noticeable with the MA270U is its impressive image quality. Colors are full of life and the detail is excellent. One standout aspect of the image quality is how sharp text appears–it looks so noticeably crisp and clean that I’d stop every once in a while as I wrote this review to just admire how nice my words looked. This is great for production and design work, but it can even make it more enjoyable to read and write. Because the MA270U is a matte display, the black reproduction isn’t as deep as on a glossy display like the standard configuration of the Apple Studio Display. But it’s certainly deep enough to display as black, not as, say, a noticeable super dark gray. The display has a standard 60Hz refresh rate that is the same as the Studio Display and fast enough for most users. Gamers, however, might not be satisfied and want faster rates. BenQ MA270U: Built-in controls and Display Pilot 2 software Underneath the display is a mini joystick for access to the built-in controls, which only offers a brightness adjustment, audio volume for the built-in speakers, and changing the input port between the two HDMI ports and USB-C. There’s also a summary that indicates whether HDR is turned on/off, the screen resolution, and the refresh rate. What BenQ really wants you to do is download and install its Display Pilot 2 software for a broader set of display controls. The software is more about adding functionality than it is about tweaking image quality; for example, it has a Desktop Partition feature that is a lot like windows tiling in macOS Sequoia. One cool feature is Application Color Mode, where you can assign color profiles to specific apps. For example, you can assign a Cinema color profile to Final Cut Pro, and when you launch the app, the display automatically switches to that profile. BenQ MA270U: Price The MA270U is $460/£450 and it includes a stand, a USB-C cable, and a power cable. You’ll need to buy a HDMI cable separately if you need one. In the U.S., BenQ offers a three-year limited warranty; in the U.K., it’s two years. Should you buy the BenQ MA270U? The BenQ MA270U offers image quality that could satisfy users in a production environment–that’s one way of saying that its quality is better than what general users usually get. You might be able to find a 27-inch 4K display that’s a little cheaper, but it won’t look this good. It also makes for an attractive alternative to the 5K Apple Studio Display, which is a whopping $2,299 when you configure it with a tilt- and height-adjustable stand and Nano-texture glass. At its price, the MA 270U looks especially great with a new Mac mini–or any Mac, for that matter.
Read more »
11:53 am
Now Indonesia says Apple will build it a $1 billion plant to end the iPhone 16 ban | AppleInsider
Now Indonesia says Apple will build it a $1 billion plant to end the iPhone 16 ban
An Indonesian minister reports that Apple will now build a manufacturing plant in the country to make iPhone components, and presumably thereby get the iPhone 16 ban lifted.Jakarta - Image credit: Tom Fisk/PexelsPreviously on Indonesia vs Apple... Apple used to get around the country's requirement that 40% of the components in phones must be made locally. That's not a practical requirement for any country, and the government seemed to know it, because it allowed Apple to qualify to sell iPhones there by launching developer centers instead.According to Reuters, though, the country's now six-week-old ban on sales of the iPhone 16, may be be resolved by fulfilling that 40% component requirement. Rosan Roeslan, the Indonesian investment minister who made the claim about Apple building a new plant, also said the 40% requirement would be increased. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
11:43 am
Open source marathon trilogy available for iPhone, iPad | PowerPage
Open source marathon trilogy available for iPhone, iPad
“Somewhere in the heavens…they are waiting.” These were the words that inspired an entire generation of Mac gamers throughout the mid-90’s as Bungie released its sci-fi Marathon trilogy first-person shooter epic. The game, which would influence the company’s work on Halo and Destiny, showed what was possible on the Mac with a rich space opera […] Source
Read more »
11:30 am
Four features the iPhone should steal from Google’s Pixel 9 | Macworld
Four features the iPhone should steal from Google’s Pixel 9
Macworld Apple’s iPhone 16 and Google’s Pixel 9 were released just a few weeks apart earlier this year. If you compare main features, you might suspect that the companies were working from the same blueprint: both chose to focus heavily on building in support for their in-house AI platforms. Drill down to the fine details, however, and you can see how differently Apple and Google approached their task. Apple Intelligence, for example, is primarily there to make everyday work easier: summarizing letters, running contextual queries. When you create something new, Apple ensures it’s clear from the outset that the work is not created by human hands, but by an algorithm. It’s not a coincidence that Image Playground mainly adopts a cartoon aesthetic. Google, on the other hand, offers AI features on the Pixel 9 that can intervene deeply in the editing of photos and create lifelike images. This is a difference in philosophy, and it’s hard to point to one or the other approach as being objectively better. But there are specific areas where we think Google has made wiser decisions, and the iPhone could benefit by following the Pixel 9’s example. 1. Get a serious power-saving mode The Pixel 9 claims a battery life of 24+ hours. This seems impressive, but the devil is in the fine print: this figure is based on the use of Extreme Battery Saver mode, which turns off many features, pauses most apps, and slows processing to get some extra time between charges. If Apple offered something similar, it would be able to outstrip the Pixel in one of the few areas where Android phones can actually do better. Apple doesn’t even have to look to its Android competitors for inspiration; it just has to look at the Apple Watch. Since the launch of watchOS 10, Low Power Mode has enabled owners to get half a day of extra usage out of their Apple Watches. Although there is a similar mode on iOS, it’s nowhere near as effective because it isn’t so extreme. Under the watch’s power-saving mode, only the most essential functions remain active, while the rest are mercilessly killed off. The iPhone needs to follow Google’s lead and offer a Super Low Power Mode alongside the existing option. 2. Let the photographer join a group photo When you take a group photo at a special event, it’s often sadly necessary that the person who’s best at taking pictures–or happens to own the best camera–is left out. But Google has come up with a clever solution to this. If you own a Pixel 9 you can take two group photos, using a different photographer each time, and then get the AI to merge the two so that all the participants are captured in a single snap. For the philosophical reasons outlined above, Apple probably won’t do this: it’s “fake,” after all. But it’s nevertheless a cool and useful feature that’s worth consideration for a future Apple Intelligence update. Dominik Tomaszewski / Foundry 3. Use AI to get the best group photo In any circle of friends, there’s bound to be one person with the astonishing ability to notice when the photo is being taken and close their eyes at exactly that moment. Then, when everyone else is getting up to leave, she smiles gracefully into the camera. With this scenario in mind, Google came up with Best Take for the Pixel 9. This clever feature picks and chooses from a series of shots to compose the best possible group photo, for example, pasting a person’s face from one shot into another so no one has their eyes closed. Wouldn’t it be nice to have that option on the iPhone? 4. Help visually impaired people take better selfies Apple is a pioneer in the area of accessibility, but the company can still learn from its rivals. The Google Pixel 9 has a neat feature called Guided Frame that lets visually impaired users know exactly how to align the front-facing camera to get the perfect selfie, even if they can’t see much of the screen. The instructions are given in other ways, either through haptic feedback or spoken instructions. A smart bit of lateral thinking that delivers a real benefit. Google Pixel 9 Price When Reviewed: From $799 Best Prices Today: $637.99 at Amazon | $649 at Target | $799 at Best Buy
Read more »
10:41 am
Fly Me to the Moon movie now streaming on Apple TV+ | 9 to 5 Mac
Fly Me to the Moon movie now streaming on Apple TV+
After making its debut in cinemas around the world in July, the original film Fly Me to the Moon is now streaming on Apple TV+. Scarlett Johansson and Channing Tatum star in this comedic drama, which is set against the backdrop of the 1960s space race. As the outlook of the Apollo 11 mission falters, marketing exec Kelly Jones (Johansson) prepares to stage a fake moon landing, just in case. more…
Read more »
10:15 am
Apple distributes Release Candidate versions of iOS 18.2, other major system updates | PowerPage
Apple distributes Release Candidate versions of iOS 18.2, other major system updates
Apple has entered the home stretch on its upcoming major system updates, and has reached the Release Candidate stages for its iOS 18.2, iPadOS 18.2, and macOS Sequoia 15.2 updates. The beta versions have been distributed to developers and public beta testers for testing, two weeks after the release of the fourth beta versions. Alongside […] Source
Read more »
10:00 am
Rumor: Apple may debut M5 chip in next-gen iPad Pro | PowerPage
Rumor: Apple may debut M5 chip in next-gen iPad Pro
Apple surprised the world when it placed its M4 chip in this year’s iPad Pro before its other products this year, and it may do the same thing with the M5 chip in 2025. Per Macworld and The Elec, noted analyst Ming-Chi Kuo has stated in a report that the new iPad will “enter mass […] Source
Read more »
09:00 am
How to adjust Medications reminders on your iPhone, iPad, and Apple Watch | Macworld
How to adjust Medications reminders on your iPhone, iPad, and Apple Watch
Macworld Medications are a regular, often daily part of many people’s lives. Pill organizers and alarms are all well and good, but Apple’s Health app has a Medications management and reminder feature that can be tuned to help you remember and check off drugs as you take them. This includes discretionary ones. Set up Medications and your medications Launch the Health app in iOS 16/iPadOS 16 or later, tap Browse at the bottom, and tap Medications to start setting up. To place Medications in the Summary view in Health, tap the Edit button at the top of Health, find Medications, and tap it to pin it to the Summary. You can touch and hold to drag pinned items at the top of the Edit view into the order you want. Set up medications (left) and the Health app groups them by scheduled time (right).Foundry The app guides you through adding medications, which must be in the pharmaceutical database that Apple uses. That means some supplements, such as vitamins, won’t appear. You can use Apple’s interface to create an icon of what you’re taking that roughly matches its delivery format, shape, and color. While Apple lets you snap a picture of the U.S. National Drug Code Directory number and other information on a prescription or bottle for matching, it would be good to be able to take a photo of the actual medication here, too. For each drug, specify dosage, format (like inhaled, drops, or pill), dosage (if it comes in multiple ones), and a schedule, which allows multiple times per day. If you’re taking a medication temporarily, such as an antibiotic, you can enter both start and end dates. The feature doesn’t support meds that have different doses on different days. As you build a list of meds, Medications automatically organizes them by the time you set in your schedule for each. So, if you have four medications you take at 8 a.m. each day, that appears as a group entry and works as a single notification with each drug separately listed. Notifications can appear on multiple devices, including an iPhone, iPad, and Apple Watch. Tune notifications for better health The most powerful feature in Medications isn’t creating lists but working with notifications. Research shows that for those prescribed drugs, staying on schedule—”medication adherence” or “medication compliance”—can be a key health factor. Medications lets you set a variety of notifications that appear and work slightly differently than standard notifications—more like Calendar reminders. First off, you start in the Health app’s Medications section by swiping down to Options and tapping it. (You can also get here via Settings > Health > Health Notification Settings.) Medications divides notifications into three categories. It doesn’t present them quite this way, but it’s worth thinking about them as cascading and escalating options: Dose Reminders: As the first step, enable Dose Reminders to receive a single notification for each time you have set for one or more notifications. That notification doesn’t recur, but remains in your notifications list until you act on it. Follow Up Reminders: Enable follow-ups to get a second notification after the initial one for each drug or group of drugs. This can help jog your memory if you weren’t able to take your meds when the first notification went off. Critical Alerts: Where the first two options apply to all notifications, Critical Alerts lets you check off specific medications you want to receive something close to an alarm about if you miss. For some people, missing a dose could imperil their well-being—this option helps with that. A critical alert overrides both mute and Focus states. Critical Alerts provide an extra, non-ignorable nudge with a standard menu of Medications options, including Log All as Taken (left). Mark meds as taken manually in the app, too (right).Foundry There’s one more option in this space: Time Zone Change. If you have it disabled, Medications follows your body clock. If your reminder is 8 a.m. Pacific Daylight Time, and you move eight time zones later, with Time Zone Change disabled, your reminder remains 8 a.m. Pacific and occurs at 4 p.m. Greenwich Mean Time. (During the summer, this is PST and GMT.) Enable Time Zone Change and Medications alerts you and gives you the option to adjust your reminder times to the local time zone as you pass through them, so 8 a.m. PDT set in Seattle becomes 8 a.m. GMT when landing in London. (This can be particularly amusing or annoying on a long flight, even when in Airplane mode, your iPhone uses GPS and will alert you as you pass through zone after zone.) As you receive alerts, you can touch and hold to act on them. You can note you have taken the medication(s) or defer a reminder 10 minutes. You can also note you have skipped it or them. If you dismiss the alert, clear notifications, or want to mark individual medications times more precisely as taken, you can use the Health app’s Medications feature to select meds, adjust times and doses, and then mark them as taken. My advice on Critical Alerts is to experiment with them: you don’t want so many notices that you get aggravated and start automatically dismissing them without taking action. Over time, you can check on your “medication compliance” by looking at a history of filled circles—a little nod to drug shapes—that appear in a timeline at the top. You can also drill down for each medication and see how consistent you have been about taking it—or recording that you took it. (I uniformly take my 9 p.m. meds and forget to mark that I have.) This history of compliance can be useful if you’re not staying up on meds and need to up your notifications to the status of critical alerts, or use the data in consultation with a doctor, pharmacy, or healthcare professional to work out a better plan to stay target. Ask Mac 911 We’ve compiled a list of the questions we get asked most frequently, along with answers and links to columns: read our super FAQ to see if your question is covered. If not, we’re always looking for new problems to solve! Email yours to mac911@macworld.com, including screen captures as appropriate and whether you want your full name used. Not every question will be answered; we don’t reply to emails, and we cannot provide direct troubleshooting advice.
Read more »
08:00 am
Learning new languages so I can leave the country with our unbeatable deal on Babbel | Macworld
Learning new languages so I can leave the country with our unbeatable deal on Babbel
Macworld In uncertain times like these, moving to a new country seems less like a fantasy and more like a backup plan. But I’ll have to learn a new language or a few. Since Babbel is one of the highest-rated apps on the App Store, I’ll try it. Macworld is offering a huge discount on Babbel for Cyber Week: $129.97 for lifetime access, normally $599. I got special word that this offer ends on December 8, so I’m getting my subscription now and testing out the app. I’d love to live in Germany, so I’m selecting German from the 14 options. The language-learning app is asking me to set a daily learning goal, so I’ll commit to 10 minutes a day. The first lesson is teaching me how to greet people and say goodbye — that’ll come in handy when I’m packing my bags and moving abroad! The next few lessons are asking me to speak in German. I’m not good at it, but Babbel tells me my pronunciation is enough to move on. Tomorrow, I’ll probably do a personalized review lesson to lock everything in. Get a Babbel lifetime subscription for $129.97 (reg. $599) through December 8 at 11:59 p.m. PT with no coupon needed. Babbel Language Learning: Lifetime Subscription (All Languages) – $129.97 See Deal StackSocial prices subject to change.
Read more »
06:14 am
iOS 18.2 enhances Apple TV and Apple Music with natural language search | Cult of Mac
iOS 18.2 enhances Apple TV and Apple Music with natural language search
iOS 18.2 will make the search experience in Apple Music and Apple TV better by adding support for natural language search. (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »
01:45 am
Brazil antitrust ruling against Apple overturned by Federal Justice | AppleInsider
Brazil antitrust ruling against Apple overturned by Federal Justice
Apple's antitrust case in Brazil caught a short break as a Federal Justice overturned a regulator's decision, calling it "disproportionate," but appeals are expected.Image source: CADE BrazilIn 2022, an antitrust complaint was filed against Apple with Brazilian regulator Conselho Administrativo de Defesa Economica, or CADE. Following an investigation, a ruling surrounding Apple's payment and anti-steering practices was filed, and it echoes complaints made in the US.Hours after Apple issued a statement on the ruling, a Federal Justice of the Federal District overturned the ruling. The news comes in a report from Valor Economico, shared by 9to5Mac. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
12:43 am
Brazilian court overturns injunction imposed on Apple’s App Store | 9 to 5 Mac
Brazilian court overturns injunction imposed on Apple’s App Store
Following a report earlier today about Apple appealing a Brazilian antitrust regulator’s ruling on the App Store, the Brazilian courts decided on Thursday night to overturn the injunction imposed on Apple, which would have forced the company to enable sideloading on iOS for Brazilian users within 20 days. more…
Read more »
12:28 am
Apple says Brazil antitrust ruling 'drastically threatens' user privacy in appeal | AppleInsider
Apple says Brazil antitrust ruling 'drastically threatens' user privacy in appeal
Apple has issued an appeal following the decision of an antitrust regulator in Brazil, which requires the company to enable sideloading or face daily fines.Apple has appealed the ruling of Brazilian regulator CADE.In 2022, an antitrust complaint against Apple was filed with the Brazilian regulator CADE, short for Conselho Administrativo de Defesa Economica. The complaint argued that Apple forced developers into using its own payment system. Following an investigation into the company, a ruling was issued against Apple in November 2024.CADE gave Apple 20 days to lift restrictions on in-app payment methods and steering customers to external websites. If Apple fails to comply, it could face a fine of R$250,000, or roughly $43,000 per day. Now, Apple has filed an appeal, calling the ruling "arbitrary" and saying that it "drastically threatens" user privacy and security. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
12:21 am
9to5Mac Daily: December 5, 2024 – The latest iPhone and iPad rumors | 9 to 5 Mac
9to5Mac Daily: December 5, 2024 – The latest iPhone and iPad rumors
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. This Black Friday, discover Dreame Technologies’ innovative family of smart home cleaning solutions—designed to revolutionize your cleaning routine! Don’t miss out on groundbreaking deals, plus enjoy an extra 5% off with code DM9to55off at checkout. Experience the future of cleaning today! more…
Read more »
Thursday December 05
11:39 pm
iOS 18.2 is nearing its public release and it's packed with AI features | AppleInsider
iOS 18.2 is nearing its public release and it's packed with AI features
The release candidate version of iOS 18.2 has arrived, as Apple gears up for the software's full public rollout. Here's everything you need to know about the update and its features.Here's what's new in iOS 18.2.On Thursday, two weeks after the fourth developer beta, Apple deployed the release candidate build of iOS 18.2. While the update can be installed on devices as old as the iPhone XR and iPhone XS, the software includes a variety of features that only work on iPhone 15 Pro, iPhone 15 Pro Max, and the iPhone 16 range.Apple Intelligence makes it possible to use generative AI software for things such as text editing, proofreading, summarization, as well as tone adjustment, among other things. These features are available system-wide through a dedicated Writing Tools framework on iOS, iPadOS, and macOS, with iOS 18.2 bringing even more AI-powered functionality to the table. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
11:29 pm
iOS 18.2 adds natural language search to Apple Music and Apple TV app | 9 to 5 Mac
iOS 18.2 adds natural language search to Apple Music and Apple TV app
Apple has been testing iOS 18.2 for a while now, and the update brings a lot of new features related to Apple Intelligence such as Genmoji and Image Playground. However, there’s another small but important change for users of the Apple Music and Apple TV app, and that’s the ability to search using natural language in those apps. more…
Read more »
10:59 pm
Save a massive $235 with this bundle of 13 Mac apps | AppleInsider
Save a massive $235 with this bundle of 13 Mac apps
The latest Unclutter "Space/Time" bundle is offering 13 Mac apps to clean up your desktop for $74, saving you a stellar $235.Apps in the Space/Time dealBlack Friday and Cyber Monday may be over, but you can still get some out-of-this-world deals. With this one from Unclutterapp.com, you can still save a moon-sized amount of money.Dubbed the "Space/Time" bundle, the package consists of 13 Mac apps, designed to make your Mac more productive. The name stems from the apps saving you space on your Mac and saving you time. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
10:50 pm
Samsung unveils One UI 7 for its Android phones – and it looks a lot like iOS 18 | 9 to 5 Mac
Samsung unveils One UI 7 for its Android phones – and it looks a lot like iOS 18
Samsung on Thursday unveiled One UI 7, the new version of its custom experience for the company’s Android phones. One UI 7 comes with a lot of new features such as AI writing assistance tools, but the update also brings some design changes – and it’s impossible not to compare them to Apple’s iOS. more…
Read more »
10:45 pm
New Mexico driver’s licenses can now go into Apple Wallet | Cult of Mac
New Mexico driver’s licenses can now go into Apple Wallet
New Mexico joined the list of states whose residents can store a digital version of their driver’s license and state ID in Apple Wallet. (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »
10:00 pm
Digitize all your old film and slides with this Kodak scanner | Cult of Mac
Digitize all your old film and slides with this Kodak scanner
Easily digitize old slides and film negatives (color or black-and-white) to preserve them with the Kodak Scan N Save slide film scanner. (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »
09:32 pm
‘Festivitas’ brings holiday cheer to your Mac’s dock and menu bar | 9 to 5 Mac
‘Festivitas’ brings holiday cheer to your Mac’s dock and menu bar
Looking for a way to bring some holiday cheer to your Mac? Festivitas is a new app from developer Simon Støvring that does exactly that. more…
Read more »
09:31 pm
Apple appeals Brazilian regulator’s decision requiring sideloading in iOS | 9 to 5 Mac
Apple appeals Brazilian regulator’s decision requiring sideloading in iOS
As we recently reported, the Brazilian antitrust regulator known as “Cade” recently ruled that Apple can no longer prevent developers from selling content and distributing apps outside the App Store in Brazil. Unsurprisingly, Apple is now appealing the decision which the company considers “disproportionate.” more…
Read more »
09:29 pm
Apple shares hit new all-time intraday and closing highs | Mac Daily News
Apple shares hit new all-time intraday and closing highs
In Nasdaq trading today, shares of Apple Inc. rose to hit a new all-time closing high. Apple’s all-time intraday high was set on… The post appeared first on MacDailyNews.
Read more »
09:29 pm
Rumor Replay: Foldable iPhone, new M5 iPad Pro, HomePod confusion | 9 to 5 Mac
Rumor Replay: Foldable iPhone, new M5 iPad Pro, HomePod confusion
This is Rumor Replay, a new weekly column at 9to5Mac that provides a quick rundown of the most recent Apple product rumors, with my analysis and commentary. Today: the foldable iPhone is still on track, M5 iPad Pro release window, and HomePod confusion. Here are this week’s Apple rumors. more…
Read more »
09:00 pm
Take 50% off any Casely iPhone case in this crazy site-wide blowout sale | Macworld
Take 50% off any Casely iPhone case in this crazy site-wide blowout sale
Macworld Searching for an iPhone case can be a difficult task with so many options at such a wide array of prices. But this sale makes it easy: Casely is slashing 50 percent off its entire lineup of iPhone cases in a massive sale that ends Friday. In our roundup of the best iPhone cases, we named Casely as our favorite case for colorful protection due to its incredible library of designs. The are hundreds of options, from graphic illustrations to solid colors, patterns, logos, and artist collaborations. We can’t begin to list all the models available, but many are available for less than $10, dropping prices below even the 50 percent off sale. This sale is scheduled to end at midnight on Saturday, so act fast if you want to save big on a new iPhone case. The sale also includes AirPods cases, bags, cables, and screen protectors, so even if you’re happy with your current iPhone case, head over to take advantage of some huge savings. Browse Casely's massive 50% off sale
Read more »
08:49 pm
Six Apple employees accused of tricking Apple into matching donations they never made | Mac Daily News
Six Apple employees accused of tricking Apple into matching donations they never made
The Santa Clara County District Attorney’s Office has charged six former employees of Apple Inc., for a scheme in which they tricked the… The post appeared first on MacDailyNews.
Read more »
08:36 pm
iOS 18.2 has new waitlist for Genmoji and more, here’s how to jump the line | 9 to 5 Mac
iOS 18.2 has new waitlist for Genmoji and more, here’s how to jump the line
Apple’s big iOS 18.2 update is almost here, bringing highly anticipated new features like Genmoji and ChatGPT integration. But there’s a special waitlist coming before you can use certain AI features. Here’s how to jump the line. more…
Read more »
07:50 pm
Surrealist comedy Government Cheese melts onto Apple TV+ | Cult of Mac
Surrealist comedy Government Cheese melts onto Apple TV+
Want a surreal comedy? Begin by covering the giraffe with brightly painted machine tools. Or you could watch Government Cheese, which Apple TV+ describes as “a surrealist family comedy” when it premieres in spring 2025. It stars David Oyelowo, who’s also in Apple’s very popular sci-fi series Silo. Government Cheese heads away from the everyday […] (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »
07:33 pm
Apple's display roadmap could lead to OLED iPad mini in 2026 | AppleInsider
Apple's display roadmap could lead to OLED iPad mini in 2026
Apple could be making big changes to the displays of the iPad mini, iPad Air, and MacBook Air, if a display roadmap is to be believed, including transitioning the models to OLED starting from 2026.iPad mini could be next to get an OLED displayApple has gradually been adding OLED to its products, but it has so far only used the display technology in its premium iPad Pro line. While it is expected to eventually make more OLED products, it is unclear exactly when that will happen.If a product roadmap released to X on Thursday is to be believed, then the next update could happen in 2026. The roadmap, sourced from Omdia and shared by "@Jukanlosreve," outlines what Apple's next moves could be with regards to OLED. Rumor Score: 🤔 Possible Continue Reading on AppleInsider | Discuss on our Forums
Read more »

Older posts

Friday December 06
1 hour ago
iOS Notification Summaries Lost in Translation? How to Turn Them Off | MacRumors
iOS Notification Summaries Lost in Translation? How to Turn Them Off
With iOS 18.1, Apple has introduced AI-powered notification summarization across all apps, which means your iPhone will automatically condense your alerts to show just the key details. The feature aims to reduce notification overload, but it doesn't always work as advertised. Keep reading to learn how to manage the feature. Image credits: r/AppleIntelligenceFail Powered by Apple Intelligence, the new summarization feature works by analyzing notification content and creating more concise versions that highlight the most important information. By default, it's enabled for compatible apps after you complete the initial setup process in iOS 18.1. While Apple's AI summaries offer convenience, they've also produced some unexpectedly funny results. The system's struggle with emotional context and tone detection has led to some particularly amusing recap fails. As recorded in places like the subreddit r/AppleIntelligenceFail, when the algorithm misinterprets sarcasm, combines unrelated notifications, or fails to grasp logic, the results can be surprisingly entertaining (or not, depending on your sense of humor). Customize or Disable Notification Summaries Whether you've been tickled or confused by summaries, or they just don't appeal to your workflow, fortunately you can disable the feature entirely or customize which apps use the feature. This gives you complete control over how your notifications appear on the Lock Screen and in Notification Center on your iPhone. Open Settings on your iPhone. Scroll down and tap Notifications. Tap Summarize Previews. Toggle off the switch at the top to completely disable Summarize Previews. Alternatively, toggle off the switches for individual apps only. Things to Know About Notification Summaries Turning off summarization doesn't affect other notification settings like grouping or Focus modes. The feature only works on devices that support Apple Intelligence (iPhone 15 Pro and iPhone 16 models, M-series iPads, iPad mini 7, and Macs with Apple silicon). Disabling summaries returns notifications to their standard format immediately. You can re-enable summarization at any time through Settings. Keep in mind that notification summaries are separate from the Notification Summary feature that delivers scheduled batches of notifications at specific times. While they may seem similar, they serve different purposes in helping you manage your notifications more effectively.Tag: Apple IntelligenceThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
11:06 am
Apple Wins Last-Gasp Reprieve From Brazil App Store Changes | MacRumors
Apple Wins Last-Gasp Reprieve From Brazil App Store Changes
A Brazilian federal court has overturned an antitrust ruling that would have required Apple to allow third-party payment systems in the App Store within 20 days. The initial ruling, issued on November 26, came in response to a 2022 complaint from Latin American e-commerce platform MercadoLibre. The regulator had ordered Apple to remove restrictions on alternative payment systems and allow developers to market different payment options for in-app purchases, threatening daily fines of $43,000 for non-compliance. But Judge Eduardo Santos da Rocha Penteado of the 14th Federal Civil Court on Thursday called the original decision by Brazil's competition regulator (Cade) "disproportionate and unnecessary." In his decision, Penteado acknowledged that the measures demanded by Cade would "change, in a sensitive and structural way" Apple's business operations. He said that the technical complexity of the required changes and the global regulatory landscape, particularly similar decisions in the European Union, warranted a more thorough discussion. The decision came hours after reports emerged of Apple appealing the original order, with the company arguing that the required changes were too complex to implement within the given time frame. While the injunction has been overturned, the broader antitrust investigation into Apple's App Store practices will continue. Cade is expected to appeal the court's decision, and Apple could still eventually be required to implement changes to its App Store policies in Brazil. The case follows similar regulatory challenges Apple faces globally, including a recent €1.8 billion fine from the European Commission over music streaming app restrictions. Apple has maintained throughout that the Brazilian regulator's demands would threaten user privacy and security. (Via 9to5Mac.)Tags: Apple Antitrust, App Store, BrazilThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:36 am
AirPods 4 With ANC Drop to $139, Beating Black Friday Deals ($40 Off) | MacRumors
AirPods 4 With ANC Drop to $139, Beating Black Friday Deals ($40 Off)
Amazon has just significantly dropped the price on Apple's AirPods 4 with Active Noise Cancellation to $139.00, a $40 discount from their usual $179.00 pricing. This beats Black Friday pricing by around $25, making this a tremendous opportunity to pick up Apple's latest AirPods at a discount. Note: MacRumors is an affiliate partner with Amazon. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. In addition to Active Noise Cancellation (ANC) on this model, the AirPods 4 also feature a redesigned earbud for increased comfort, the H2 chip for improved audio performance, up to 30 hours of battery life, and an IP54 rating for dust, water, and sweat resistance. $40 OFFAirPods 4 (ANC) for $139.00 We're seeing delivery as soon as overnight for Prime members in some locations, so Amazon appears to have ample stock available. If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week. Deals Newsletter Interested in hearing more about top deals as we head into the holidays? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
12:19 am
OpenAI Launches $200/Month ChatGPT Pro Plan | MacRumors
OpenAI Launches $200/Month ChatGPT Pro Plan
OpenAI today announced the launch of ChatGPT Pro, a $200 per month subscription service that provides unlimited access to OpenAI o1, the company's newest and most advanced large language model. The plan includes unlimited use of OpenAI o1, o1-mini, GPT-4o, and Advanced Voice, along with o1 pro mode, an o1 version that uses more compute to provide better answers to the hardest problems. In the future, ChatGPT Pro will gain "more powerful, compute-intensive productivity features." The OpenAI o1 pro mode takes significantly more compute power to solve complex problems, which is why OpenAI is charging such a high fee. OpenAI says that o1 thinks longer for the "most reliable responses," performing better on ML benchmarks across math, science, and coding. According to OpenAI, ChatGPT Pro is aimed at researchers, engineers, and other individuals who use research-grade intelligence on a daily basis.Tag: OpenAIThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
Thursday December 05
11:24 pm
Meross Debuts $70 Matter-Enabled Smart Thermostat | MacRumors
Meross Debuts $70 Matter-Enabled Smart Thermostat
Smart home company Meross today announced the launch of the Meross Matter Smart Home Thermostat, which can connect to a HomeKit setup using the Matter protocol. At $70 for a limited time, the device is an affordable ‌HomeKit‌ thermostat option. The Smart Thermostat features a minimalist design with a white glass panel that has LEDs that show the temperature and other settings. It requires a C wire for power, and Meross says that it should work with 95 percent of heating and cooling systems in North America, including single and multi-stage furnaces, boilers, air conditioners, heat pumps, and fan coil units. Because the thermostat integrates with ‌HomeKit‌, temperature can be controlled through Siri voice commands, in the Apple Home app, or in the Meross app. There are also touch controls on the device itself. Heating and cooling usage are tracked in the Meross app, and there is an option to save energy costs with a smart schedule that changes the temperature when people are away from home. It can also be used in automations with other ‌HomeKit‌ products. Because the thermostat is Matter-enabled, it can also be controlled by Amazon Alexa, Google Home, and Samsung SmartThings provided an appropriate Matter hub is available. Matter devices are able to be controlled by multiple ecosystems, which is useful in households where not everyone has an Apple device. Meross plans to charge $99.99 for the Smart Thermostat, but it is currently available at a discounted $70 price.Tags: HomeKit, MatterThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
10:42 pm
Former Apple Employees Used Charity Scam to Steal Over $150,000 | MacRumors
Former Apple Employees Used Charity Scam to Steal Over $150,000
Six former Apple employees have been charged with using a charity scheme to defraud Apple out of thousands of dollars, according to the Santa Clara County District Attorney. Apple has a program that will match or double employee donations made to charities, and the employees came up with a plan to make fake donations and collect money from Apple. Ringleader Siu Kei Kwan had five other Apple employees make donations to the American Chinese International Cultural Exchange (ACICE) or Hop4Kids, both of which he was associated with. After Apple matched the donations, the original money was returned to the employees, and the matched money was kept. The employees also wrote off their fake charitable donations on their tax returns, earning them additional money. Between July 1, 2018 and April 6, 2021, the employees collected approximately $152,000 from Apple's program and overreported $100,000 in charitable contributions as tax deductions. Apple detected the fraud and brought it to the attention of the district attorney's office. From Santa Clara District Attorney Jeff Rosen: This case underscores our unwavering commitment to rigorously prosecuting individuals who defraud the tech community and misuse vital charitable programs and state resources. We commend Apple for coming forward and actively collaborating with our Office to uncover this elaborate fraud. We encourage others in the tech community to do the same. It's the holidays. Give - legally - to help the needy, not to help yourself. The six former Apple employees who participated in the scheme have been charged with grand theft, conspiracy to commit felony grand theft, perjury, and tax fraud. Due to the amount of money involved, they face charges under California's aggravated white-collar crime enhancement. If convicted the six are facing jail time, fines, and fees, including restitution for the money they collected.This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
09:38 pm
Festivitas Lets You Add Holiday Lights to Your Mac Desktop | MacRumors
Festivitas Lets You Add Holiday Lights to Your Mac Desktop
If you're looking to get into the holiday spirit, developer Simon Støvring this week released Festivitas, a simple macOS app that lets you customize your Mac desktop with colorful string lights. Festivitas adds lights to the Mac's dock and menu bar. Light size, distance, and cable thickness can be customized, as can the colors and the light changing sequence. When Festivitas is first launched, it requires accessibility features to locate the dock and add the lights. Permissions can be revoked by going to System Settings > Privacy and Security > Accessibility. Festivitas is compatible with Macs running macOS 14.6 and later, and it can be downloaded for four euros, which is equivalent to approximately $4.23.This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
07:48 pm
Here Are Apple's Full Release Notes for iOS 18.2 | MacRumors
Here Are Apple's Full Release Notes for iOS 18.2
Apple seeded the release candidate version of iOS 18.2 today, which means it's going to see a public launch imminently. Release candidates represent the final version of new software that will be provided to the public should no last minute bugs be found, and Apple includes release notes with the RC launch. The iOS 18.2 release notes provide a look at all of the new features that are coming in the update, including Apple Intelligence additions that will be limited to newer iPhones, and changes that will be available to all iPhone users. Apple's full iOS 18.2 release notes: Apple Intelligence (All iPhone 16 models, iPhone 15 Pro, iPhone 15 Pro Max) Image Playground - A new app that lets you use concepts, descriptions, and people from your photo library to create fun, playful images in multiple styles - Swipe through previews and choose from as you add concepts to your playground - Choose from animation and illustration styles when creating your image - Create images in Messages and Freeform, as well as third party apps - Images are synced in your Image Playground library across all your devices with iCloud Genmoji - Genmoji allows you to create a custom emoji right from the keyboard - Genmoji are synced in your sticker drawer across all your devices with iCloud ChatGPT support - ChatGPT from OpenAI can be accessed right from Siri or Writing Tools - Compose in Writing Tools allows you to create something from scratch with ChatGPT - Siri can tap into ChatGPT when relevant to provide you an answer - A ChatGPT account is not required and your requests will be anonymous and won't be used to train OpenAI's models - Sign in with ChatGPT to access your account benefits, and requests will be covered by OpenAI's data policies - Image Wand turns sketches and handwritten or typed notes into images in Notes - Describe your change in Writing Tools allows you to suggest how you'd like something rewritten, for example as a poem - Camera Control (iPhone 16, iPhone 16 Plus, iPhone 16 Pro, iPhone 16 Pro Max) - Visual Intelligence with Camera Control helps you instantly learn about places or interact with information simply by pointing your iPhone at the object, with the option to tap into Google Search or ChatGPT - Camera Control two-stage shutter lets you lock focus and exposure in Camera when light pressing the Camera Control Mail - Mail Categorization sorts your messages to help you prioritize the most important messages - Digest view groups all of the messages from one sender into a single bundle for easy browsing Photos - Video viewing improvements, including the ability to scrub frame-by-frame and a setting to turn off auto-looping video playback - Improvements when navigating Collections views, including the ability to swipe right to go back to the previous view - Recently Viewed and Recently Shared album history can be cleared - Favorites album appears in the Utilities collection in addition to Pinned Collections Safari - New background images to customize your Safari Start Page - Import and Export enables you to export your browsing data from Safari and import browsing data from another app into Safari - HTTPS Priority upgrades URLs to HTTPS whenever possible - File Download Live Activity shows the progress of a file download in the Dynamic Island and on your home screen This update also includes the following improvements and bug fixes: - Voice Memos supports layered recording, letting you add vocals over an existing song idea without the need for headphones -- then import your two-track projects directly into Logic Pro (iPhone 16 Pro, iPhone 16 Pro Max) - Share Item Location in Find My helps you locate and recover misplaced items by easily and securely sharing the location of an AirTag or Find My network accessory with trusted third parties, such as airlines - Natural language search in Apple Music and Apple TV app lets you describe what you're looking for using any combination of categories like genres, moods, actors, decades, and more - Favorite Categories in Podcasts allows you to choose your favorite categories and get relevant show recommendations that you can easily access in your Library - Personalized Search page in Podcasts highlights the most relevant categories and editorially curated collections tailored to you - Sudoku for News+ Puzzles provided in three difficulty levels and available for News+ subscribers - Support for the Hearing Test feature on AirPods Pro 2 in Cyprus, Czechia, France, Italy, Luxembourg, Romania, Spain, United Arab Emirates, and United Kingdom - Support for the Hearing Aid feature on AirPods Pro 2 in United Arab Emirates - Pre-market price quotes in Stocks lets you track NASDAQ and NYSE tickers prior to market open - Fixes an issue where recently captured photos do not appear immediately in the All Photos grid - Fixes an issue where Night mode photos in Camera could appear degraded when capturing long exposures (iPhone 16 Pro, iPhone 16 Pro Max) Some features may not be available for all regions or on all Apple devices. For information on the security content of Apple software updates, please visit this website: https://support.apple.com/100100Apple is expected to release iOS 18.2 on Monday, December 9. It will be accompanied by iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2, HomePod Software 18.2, and visionOS 2.2.Related Roundups: iOS 18, iPadOS 18Related Forums: iOS 18, iPadOS 18This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
07:08 pm
watchOS 11.2 Lets You Pause iPhone Video With Camera Remote App | MacRumors
watchOS 11.2 Lets You Pause iPhone Video With Camera Remote App
In watchOS 11.2, Apple has added a useful new feature that's designed to allow you to pause video that you're recording on the iPhone using the Camera Remote app on the Apple Watch. The Camera Remote app has been available since the Apple Watch initially launched, and while there was an option to start and stop video recording, there wasn't an option to pause video and restart it. When a video recording is in progress, there is now a pause button on the left side of the Camera Remote interface. Tapping it pauses a video, and then tapping the red record button restarts the video. Apple initially added a feature for pausing video recordings with the ‌iPhone‌ Camera app in iOS 18, and the watchOS 11.2 update expands that same functionality to the Apple Watch's Camera Remote app. Other new additions in watchOS 11.2 include expanded support for tidal conditions and coastal locations in the Tides app in China. watchOS 11.2 will see a release alongside iOS 18.2 next Monday. Related Roundup: watchOS 11Related Forum: Apple WatchThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
06:54 pm
iOS 18.2 Expands AirPods Pro 2 Hearing Test Feature to Nine Countries | MacRumors
iOS 18.2 Expands AirPods Pro 2 Hearing Test Feature to Nine Countries
The upcoming iOS 18.2 update expands the hearing test feature on the AirPods Pro 2 to nine additional countries, including Cyprus, Czechia, France, Italy, Luxembourg, Romania, Spain, the United Arab Emirates, and the United Kingdom, according to Apple. The feature first launched in the U.S. and select other countries in late October. The five-minute test allows adults to identify if they have hearing loss by measuring their ability to hear different frequencies of sound. After completing the test, the results will show a hearing loss classification and recommended next steps. Apple has a support document with detailed information about the feature. iOS 18.2 also expands the ability to use AirPods Pro 2 as a clinical-grade hearing aid to the United Arab Emirates, according to Apple. All of the hearing health features on the AirPods Pro 2 require firmware version 7B19 or newer. Firmware updates are installed automatically on AirPods while they are charging and in Bluetooth range of an iPhone, iPad, or Mac connected to Wi-Fi. Apple today released the final iOS 18.2 beta version, known as the Release Candidate, and the update should be widely released next week.Related Roundups: AirPods Pro, iOS 18, iPadOS 18Buyer's Guide: AirPods Pro (Neutral)Related Forums: AirPods, iOS 18, iPadOS 18This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
06:43 pm
visionOS 2.2 Adds Support for Watching Five Sports Games at Once With Multiview | MacRumors
visionOS 2.2 Adds Support for Watching Five Sports Games at Once With Multiview
With the visionOS 2.2 update that's set to come out next week, Apple is introducing the promised Multiview feature that will let sports fans watch up to five games at once. The Multiview feature for the Vision Pro works with MLS and MLB games, but other sports like football and hockey are not supported at this time. Apple offers MLS and MLB games through the Apple TV+ subscription service because it has partnerships with those leagues. The update adds SharePlay integration so that Vision Pro wearers can view live sporting events together, including multiple games at the same time. Along with the new Multiview and SharePlay features, visionOS 2.2 introduces two new Mac Virtual Display aspect ratios, including 21:9 (wide) and 32:9 (ultrawide), which Apple says is equivalent to two 5K monitors side by side. Other new features include the option to route audio from the Mac to the Vision Pro and support for viewing spatial photos and videos that are embedded on web pages. visionOS 2.2 is expected to launch on Monday, December 9. Related Roundup: visionOS 2Related Forum: Apple Vision ProThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
06:32 pm
iOS 18.2 Lets You Use Natural Language Search in Apple Music and Apple TV | MacRumors
iOS 18.2 Lets You Use Natural Language Search in Apple Music and Apple TV
With the iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, and HomePod 18.2 software updates, Apple has added a new natural language search feature for Apple Music and Apple TV. In the ‌Apple TV‌ app, you can use casual language search terms to find exactly what you're looking for, typing in genres, actors, and moods. Searches like "movies about natural disasters," "movies with cats," "movies with Zendaya," and "exhilarating movies" all bring up relevant results. The ‌Apple Music‌ app supports similar searches, and you can look for genres, moods, activity, decades, and more. Examples include "songs about cats," "songs with a vibe," "relaxing songs," "artists similar to Taylor Swift," "sad 80s songs," and "songs about food." On the ‌HomePod‌, Siri supports ‌Apple Music‌ natural language search so you can ask the personal assistant to play content based on moods and activities, just like you can on iPhone, iPad, and Mac. iOS 18.2, iPadOS 18.2, ‌HomePod‌ software 18.2, tvOS 18.2, and ‌macOS Sequoia‌ 15.2 are expected to be released to the public next week.Related Roundups: iOS 18, iPadOS 18Related Forums: iOS 18, iPadOS 18This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
06:03 pm
Apple Seeds Release Candidate Versions of iOS 18.2 and More With Genmoji, Image Playground and ChatGPT Integration | MacRumors
Apple Seeds Release Candidate Versions of iOS 18.2 and More With Genmoji, Image Playground and ChatGPT Integration
Apple today seeded the release candidate versions of upcoming iOS 18.2, iPadOS 18.2, and macOS Sequoia 15.2 updates to developers and public beta testers for testing purposes, two weeks after releasing the fourth betas. Alongside the release candidate versions of the iPhone, iPad, and Mac operating system updates, Apple has also seeded the watchOS 11.2, tvOS 18.2, and HomePod Software 18.2 RCs. Release candidates represent the final version of beta software that's expected to see a public release should no notable bugs be found. With iOS 18.2 and its sister updates, Apple is continuing to test the next phase of Apple Intelligence, with several new features available for iOS, iPadOS, and macOS. Image Playground Image Playground is Apple's image generation app, and it can create images based on prompts. You can enter a description of what you want or use the built-in suggestions and concepts that Apple provides. Apple will suggest costumes, locations, items, and more to add to an image, and these concepts are intelligent and can draw inspiration from a Messages thread or content in the Notes app. There are options to create characters that resemble your friends and family, and you can choose a photo for ‌Image Playground‌ to use as inspiration to create a related image. Elements added to ‌Image Playground‌ creations are previewed, and there is a preview history so you can undo a change and go back to a prior version. While ‌Image Playground‌ is a standalone app, it is also integrated into Messages. ‌Image Playground‌ does not make photorealistic images and is instead limited to animation or illustration styles. Image Wand Image Wand is an Image Playground-related feature that's available in the Notes app. You can draw a rough sketch with the Apple Pencil or circle a blank space or a key phrase in a note to have ‌Image Wand‌ generate an appropriate image. Genmoji Genmoji are custom emoji characters that you can create based on descriptions and phrases. Like ‌Image Playground‌ creations, you can base them on your friends and family, with the data pulled from the People album in Photos. You can also make characters using basic elements, and you'll get multiple ‌Genmoji‌ suggestions to choose from. You can create ‌Genmoji‌ using the emoji keyboard. ‌Genmoji‌ are limited iOS 18.2 and iPadOS 18.2 right now, but will be coming to ‌macOS Sequoia‌ later. Siri ChatGPT Integration Siri can integrate with ChatGPT for certain requests, but only with user approval. If ‌Siri‌ is unable to provide an answer to a query, ‌Siri‌ will hand the request over to ChatGPT. ChatGPT's answer will then be provided by ‌Siri‌. ChatGPT can be used to create content from scratch, including text and images. No account is required to use ChatGPT integration, and Apple and OpenAI do not store requests. Visual Intelligence iPhone 16 users have access to Visual Intelligence, a feature that provides information about what's around you. If you open the camera and point it at a restaurant, for example, you'll see opening hours and reviews. Some other Visual Intelligence capabilities include reading text out loud, detecting phone numbers and addresses to add them to Contacts, copying text, and summarizing text. There is an option to search Google for where to buy a specific item that you see, and you can also point the camera at something and then get more information about it from ChatGPT. Apple plans to expand this feature to include more functionality over time. Writing Tools Apple is enhancing the Writing Tools feature to add an option to make more open-ended changes. In iOS 18.1 and its sister updates, Writing Tools can only be used to change the tone to friendly, professional, and a more simplified version. In iOS 18.2, you can describe the tone or content change that you want to make, such as adding more action words, or turning an email into a poem. More Languages ‌Apple Intelligence‌ has gained support for localized English in Australia, Canada, New Zealand, South Africa, Ireland, and the U.K., in addition to U.S. English. Wait List If you've already been testing ‌Apple Intelligence‌ and are opted in, you will have access to Writing Tools, ChatGPT integration, and Visual Intelligence automatically. There is a secondary waiting list for early access to use ‌Genmoji‌, ‌Image Playground‌, and ‌Image Wand‌. You can sign up to get access in ‌Image Playground‌ or in the areas where you access ‌Genmoji‌ or ‌Image Wand‌. When you request access, you are added to a wait list for all three capabilities and you'll get a notification when the features are available for you to use. Apple is rolling out access to the new image generation features over the coming weeks. Availability and Compatibility The iOS 18.2, iPadOS 18.2, and ‌macOS Sequoia‌ 15.2 are available on all devices, but the ‌Apple Intelligence‌ features require a device capable of ‌Apple Intelligence‌. Apple is still working on refining the new ‌Apple Intelligence‌ tools, and the company warns that ‌Genmoji‌, ‌Image Wand‌, and ‌Image Playground‌ can sometimes give you results you weren't expecting. Apple is collecting feedback on these experiences and will refine them over time. ‌Apple Intelligence‌ requires an iPhone 15 Pro or any ‌iPhone 16‌ model, an ‌iPad‌ with an M-series chip or an A17 Pro chip, or a Mac with an M-series chip. Release Date Apple is expected to release the iOS 18.2, iPadOS 18.2, ‌macOS Sequoia‌ 15.2, watchOS 11.2, tvOS 18.2, and visionOS 2.2 updates next week. Related Roundups: iOS 18, iPadOS 18, macOS SequoiaRelated Forums: iOS 18, iPadOS 18, macOS SequoiaThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
05:45 pm
iPhone Driver's License Support in Wallet Expands to New Mexico | MacRumors
iPhone Driver's License Support in Wallet Expands to New Mexico
iPhone users from New Mexico are now able to add their driver's licenses and IDs to the Apple Wallet app on ‌iPhone‌ and Apple Watch, providing a digital version of the license that can be used in lieu of a physical card in some locations. New Mexico residents can add a license or state ID to the Wallet app by opening it up, tapping on the "+" button, and following the instructions to complete a verification process. Digital IDs can be used at select TSA checkpoints across the United States, in some businesses and venues, and in some mobile apps for verifying age. New Mexico has developed an app called NM Verifier that is available in coordination with the New Mexico Regulation and Licensing Department for verifying digital IDs. "Having a cell phone and mobile device with you at virtually all times is simply a fact of life these days. This new capability adds one more level of convenience for us all," New Mexico Taxation and Revenue Secretary Stephanie Schardin Clarke said in a statement. As of right now, a digital license or identification card does not replace the physical version, and New Mexicans are required to have a physical license available when driving. Apple first announced Wallet support for digital IDs in 2022, and states have been slowly adopting the feature since then. As of right now, Arizona, Colorado, Georgia, Maryland, Hawaii, California, Ohio, Iowa, and New Mexico have implemented support. Acording to Apple, Connecticut, Kentucky, Oklahoma, Utah, Montana, and West Virginia are also working to implement the feature.Tag: Apple WalletThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:03 pm
Holiday Accessory Deals Include Big Discounts on Anker, Jackery, Twelve South, and More | MacRumors
Holiday Accessory Deals Include Big Discounts on Anker, Jackery, Twelve South, and More
Today we're tracking a collection of accessory discounts across Amazon and Anker, with notable savings on portable batteries, Bluetooth trackers, USB-C cables, and more. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. At Amazon, you can also find a good deal on the Oura Smart Ring (Gen 3 Heritage), available for $349.00 in multiple sizes, down from $449.00. This accessory is able to track your sleep, activity, stress levels, and heart rate, and it can sync with Apple Health. $100 OFFOura Smart Ring (Gen 3 Heritage) for $349.00 At Anker, the brand is still hosting its "Ultimate Black Friday Sale," expected to end this Sunday, December 8. That makes this week your last chance to get the year's best prices on Anker's most popular portable batteries, desktop hubs, iPhone chargers, and more. SITEWIDE DEALSAnker Holiday Sale Additionally, below you'll find discounts on Jackery portable power stations, a popular Twelve South iPhone charging stand, and more. Mobile Accessories Oura Smart Ring - $349.00, down from $449.00 AirTag 4-Pack - $72.99, down from $99.00 Twelve South HiRise 3 Deluxe - $119.99, down from $149.99 Jackery Jackery Explorer 100 Plus with Solar Panel - $169.99 with on-page coupon, down from $229.00 Jackery Solar Generator 240 with Solar Panel - $269.00 with on-page coupon, down from $349.00 Jackery Explorer 1000 Power Station - $499.00 for Prime members, down from $799.00 Jackery Solar Generator Explorer 500 - $479.00 for Prime members, down from $799.00 Jackery Solar Generator 4000 Kit - $2,899.00 for Prime members, down from $4,999.00 Jackery Solar Generator 2000 Plus Kit - $3,799.00 with on-page coupon, down from $6,599.00 Anker Prime Chargers Prime Power Bank - $74.99, down from $89.99 Prime Charging Station (8-in-1) - $99.99, down from $164.99 Prime Charger (250W, 6 Ports, GaNPrime) - $109.99, down from $169.99 Prime Power Bank 27,650 mAh - $129.99, down from $179.99 Wireless Chargers MagGo Wireless Charger Stand - $28.80, down from $35.99 MagGo 2-in-1 Wireless Charger Stand - $35.99, down from $49.99 Power Banks MagGo Power Bank 10,000 mAh - $69.99, down from $89.99 MagGo Power Bank for Apple Watch - $64.99, down from $79.99 If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week. Deals Newsletter Interested in hearing more about top deals as we head into the holidays? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
02:38 pm
Apple Looking to Fundamentally Change iPhone Memory Design to Enhance AI Performance | MacRumors
Apple Looking to Fundamentally Change iPhone Memory Design to Enhance AI Performance
Apple is reportedly planning a significant shift in its iPhone hardware design by transitioning to discrete memory packaging to enhance on-device AI performance. Samsung, a key supplier of Apple's memory components, has begun research to accommodate the change at Apple's request, according to a new report from Korea's The Elec. The shift will mark a departure from the current package-on-package (PoP) method, where the low-power double data rate (LPDDR) DRAM is stacked directly on the System-on-Chip (SoC). Starting in 2026, the DRAM will instead be packaged separately from the SoC, which should significantly improve memory bandwidth and enhance the ‌iPhone‌'s AI capabilities. The current PoP configuration was first introduced in the ‌iPhone‌ 4 in 2010 and favored since then for its compact design. Stacking the memory directly atop the SoC minimizes the physical footprint, which is especially important for mobile devices where space is at a premium. However, PoP packaging imposes constraints that limit its suitability for AI applications, which require faster data transfer rates and more memory bandwidth. With PoP, the size of the memory package is constrained by the size of the SoC, capping the number of I/O pins and therefore limiting performance. Moving to discrete packaging will allow the memory to be physically separated from the SoC, enabling the addition of more I/O pins. This design change should increase the data transfer rate and the number of parallel data channels. Separating the memory from the SoC also provides better heat dissipation. Apple has previously used discrete memory packaging across the Mac and iPad product lines but later shifted to memory-on-package (MOP) with the introduction of the M1 chip. MOP shortens the distance between the memory and the SoC, reducing latency and improving power efficiency. For the ‌iPhone‌, adopting discrete packaging may necessitate other design changes, such as shrinking the SoC or battery to create additional space for the memory component. It may also use more power and increase latency. In addition, Samsung is reportedly working on next-generation LPDDR6 memory technology for Apple, which is expected to offer two to three times the data transfer speed and bandwidth of the current LPDDR5X. One variant under development, LPDDR6-PIM (Processor-in-Memory), integrates processing capabilities directly into the memory. Samsung is said to be collaborating with SK Hynix to standardize this technology. The changes could appear beginning with 2026's "‌iPhone‌ 18" devices, providing Apple can overcome engineering challenges related to SoC miniaturization and internal layout optimization.Tags: Samsung, The ElecThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
02:32 pm
Apple Card Savings Account's Lowered Rate Compared to Other Options | MacRumors
Apple Card Savings Account's Lowered Rate Compared to Other Options
In the U.S., the Apple Card offers a high-yield savings account option, allowing you to earn far more interest on your money compared to the average bank's basic savings account. Following a rate cut this week, the account now has an APY of 3.9%. For example, if you deposited $1,000 into the account and maintained that balance for one year, you would earn $39 in interest over that period based on the current APY. The chart below compares the Apple Card savings account's rate to some other popular high-yield savings accounts in the U.S., as of writing. Provider APY* Ally 3.85% Apple Card Savings 3.9% Marcus by Goldman Sachs 3.9% Discover 3.9% American Express 3.9% Capital One 3.9% Citizens Bank 3.9% SoFi 4% Barclays 4.1% Synchrony 4.1% PNC Bank 4.15% Betterment 4.25% Wealthfront 4.25% UFB Direct 4.31% Fierce 4.5% CIT Bank 4.55% Openbank by Santander 5% Pibank 5% * Advertised APYs as of December 5, 2024, excluding promotional rates and affiliate bonuses. Minimum balance requirements and other conditions vary per account. APYs can change at any time, so we cannot guarantee the accuracy of the rates listed above. Apple launched its savings account in April 2023, in partnership with Goldman Sachs. The account can be opened and managed in the Wallet app on the iPhone, and it has no fees, no minimum deposits, and no minimum balance requirements. You must have an Apple Card, be a U.S. resident, and be at least 18 years old to open an account. The account allows Apple Card holders to earn interest on their Daily Cash cashback balance, and on funds deposited via a linked bank account or an Apple Cash balance. The maximum balance allowed is now $1 million, up from $250,000. When the account launched, Apple and Goldman Sachs offered an APY of 4.15%, but the rate has fluctuated in line with U.S. Federal Reserve benchmark rate changes. The APY peaked at 4.5% in early 2024, and the current 3.9% is an all-time low. To open a savings account in the Wallet app, tap on your Apple Card, tap on the circle with three dots at the top of the screen, tap Daily Cash, and select Set Up Savings. Goldman Sachs reportedly plans to end its consumer lending partnership with Apple, but it is unclear if this will have any impact on Apple Card holders. JPMorgan, owner of Chase Bank, reportedly could take over as Apple's financial partner.Tag: Apple CardThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
01:28 pm
Apple Vision Pro Pre-Orders Go Live in Taiwan Ahead of Dec 17 Launch | MacRumors
Apple Vision Pro Pre-Orders Go Live in Taiwan Ahead of Dec 17 Launch
Apple Vision Pro pre-orders have gone live in Taiwan as the launch date of its spatial computing headset nears in the country. The device will be available from Sunday, December 17. Customers can now place their orders through Apple's regional online store, which details pricing options, storage configurations, and additional accessories including ZEISS optical inserts for vision correction. To support the launch, Apple's two retail locations in Taipei will offer 30-minute demonstration sessions, allowing potential customers to experience the device firsthand. The Taiwan launch represents Apple's thirteenth market for Vision Pro, following its initial U.S. debut in February 2024. The company has steadily expanded the headset's availability throughout the year, with releases in major markets including Australia, Canada, France, Germany, the United Kingdom, China, Hong Kong, Japan, and Singapore during the summer months. More recently, Apple brought Vision Pro to South Korea and the United Arab Emirates.Related Roundup: Apple Vision ProTag: TaiwanBuyer's Guide: Vision Pro (Buy Now)Related Forum: Apple Vision ProThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
01:07 pm
Affordable Third-Party Mac Studio Storage Upgrades Coming in 2025 | MacRumors
Affordable Third-Party Mac Studio Storage Upgrades Coming in 2025
French company Polysoft has successfully reverse-engineered Apple's proprietary storage modules for the Mac Studio and plans to offer more affordable upgrade options starting in January 2025, following a successful Kickstarter campaign. The company's "Studio Drive" modules will be available in 2TB, 4TB, and 8TB capacities, with pricing starting at €399 ($420) for 2TB, €799 ($843) for 4TB, and €1,099 ($1,158) for 8TB – roughly half of what Apple charges for comparable storage upgrades at the time of purchase. Unlike traditional SSDs used in PCs, Apple's storage modules require specialized engineering because the actual storage controller is built into the M1 and M2 chips rather than being part of the removable module. To develop compatible modules, Polysoft conducted extensive reverse engineering, sacrificing an original Apple module for detailed analysis. The company removed all its small components one by one using a laser station, inventoried them and measured their characteristics, then scanned every layer with a flatbed scanner. From this work, the company then made its own schematics and designed different boards, using the same Kioxia and Hynix TLC NAND chips as Apple's original modules to ensure compatibility and performance. Polysoft has also added what it calls "RIROP" (Rossmann Is Right Overvoltage Protection), a safety feature designed to prevent data loss from potential voltage regulator failures – an issue the company says it has encountered when repairing certain MacBook Pro models. As noted by The Verge, this development may have exciting implications beyond the Mac Studio. Recent teardowns have revealed that Apple's new M4 Mac mini also uses removable storage modules – potentially opening the door for similar upgrade solutions in the future. While the Mac mini's modules use a different design than the Mac Studio's, Polysoft's breakthrough in reverse-engineering Apple's storage architecture suggests that affordable storage upgrades might eventually become possible for Mac mini users too. Just like with the Mac Studio, Apple's security system in the Mac mini encrypts storage using a unique identifier tied to each Mac's chip, meaning any storage upgrade requires a complete system reset using Apple's Configurator software to re-encrypt the drive for use with the new machine. Polysoft says it will provide detailed installation instructions for hardware enthusiasts and professionals wanting to upgrade their Mac Studio, including the necessary steps for properly initializing new storage modules with Apple's security system. For further details, see Polygon's Kickstarter campaign page.Related Roundup: Mac StudioBuyer's Guide: Mac Studio (Caution)Related Forum: Mac StudioThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
11:57 am
Vodafone-Three Merger Approved by UK Regulator With 5G Investment Conditions | MacRumors
Vodafone-Three Merger Approved by UK Regulator With 5G Investment Conditions
The UK's Competition and Markets Authority (CMA) has approved the merger between Vodafone and Three UK, clearing the way for the creation of Britain's largest mobile operator. The approval comes with legally binding commitments requiring both companies to invest billions in rolling out their combined 5G network across the country. The CMA's decision appears to be something of a turnaround from its initial concerns in September, when it warned the merger could lead to higher prices for customers. The regulatory body now says it's satisfied that the proposed network commitment, along with consumer protections, will address competition concerns. Under the terms of the approval, the merged company must fulfill several key obligations over the next eight years. These include implementing a comprehensive network upgrade plan and adhering to price controls for the first three years. The agreement also requires the company to offer preset contractual terms to mobile virtual network operators that rely on their infrastructure. The combined entity will serve approximately 27 million mobile subscriptions, surpassing current market leaders Virgin Media O2 and EE. Vodafone will initially hold a 51 percent stake in the venture, with plans to acquire the remaining 49 percent after three years. In a press release statement, Stuart McIntosh, chair of the CMA's independent inquiry group, said: "Having carefully considered the evidence, as well as the extensive feedback we have received, we believe the merger is likely to boost competition in the UK mobile sector and should be allowed to proceed." The merger's implementation will be jointly overseen by the CMA and Ofcom, the UK's communications regulator. The combined company will be required to publish annual reports detailing its progress on the network plan, with the CMA specifically monitoring consumer tariffs and wholesale terms. The £16.5 billion ($20.9 billion) deal is expected to complete in the first half of 2025, pending the companies' formal acceptance of the CMA's conditions. Notably, the same competition watchdog last year initially blocked UK approval for Microsoft's proposed $69 billion takeover of Activision Blizzard, before later clearing it under a new deal in which Microsoft would not acquire Activision's cloud streaming rights outside the EEA.Tags: Three UK, United Kingdom, VodafoneThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
10:54 am
Apple Card Savings Account Receives Yet Another Interest Rate Cut | MacRumors
Apple Card Savings Account Receives Yet Another Interest Rate Cut
The Apple Card's high-yield savings account received an interest rate cut overnight, the fourth time it has done so this year. The ‌Apple Card‌ savings account's annual percentage yield (APY) dropped from 4.1% to 3.9%. Push notifications regarding the cut were sent to ‌Apple Card‌ users on Tuesday evening. Savings account interest rates fluctuate with changes made by the Federal Reserve, and when rates are lowered, banks cut their APYs. When the ‌Apple Card‌'s savings account first became available, it offered an APY of 4.15%. The rate then increased three times, first to 4.25%, then to 4.35%, and finally to 4.5%, before being lowered to 4.4% in April 2024. This was followed by two more cuts, one in September to 4.25%, and another in early October to 4.10%. Apple introduced its savings account in April 2023, partnering with Goldman Sachs. Designed for ‌Apple Card‌ holders, the account is exclusively available to U.S. residents aged 18 and above. It can be managed through the iPhone's Wallet app, offering a user-friendly experience with no fees, minimum deposits, or balance requirements. The account allows users to earn interest on their Daily Cash cashback balance, as well as on funds transferred from linked bank accounts or Apple Cash balances. Initially capped at $250,000, the maximum balance has since been increased to $1,000,000, providing more flexibility for high-value savers. Opening an account is straightforward. Users simply need to access their ‌Apple Card‌ in the Wallet app, tap the three-dot menu at the top of the screen, select Daily Cash, and then choose the option to set up savings. This process integrates seamlessly with the existing ‌Apple Card‌ interface. It's worth noting that Goldman Sachs has reportedly indicated plans to end its consumer lending partnership with Apple. However, the potential impact of this change on ‌Apple Card‌ holders remains uncertain at this time. JPMorgan, owner of Chase Bank, reportedly could take over as Apple's financial partner.This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
Wednesday December 04
10:43 pm
Apple Releases Safari Technology Preview 209 With Bug Fixes and Performance Improvements | MacRumors
Apple Releases Safari Technology Preview 209 With Bug Fixes and Performance Improvements
Apple today released a new update for Safari Technology Preview, the experimental browser that was first introduced in March 2016. Apple designed ‌Safari Technology Preview‌ to allow users to test features that are planned for future release versions of the Safari browser. ‌Safari Technology Preview‌ 209 includes fixes and updates for Browser, CSS, Rendering, Scrolling, SVG, Text, Web API, Web Extensions, and Web Inspector. The current ‌Safari Technology Preview‌ release is compatible with machines running macOS Sonoma and macOS Sequoia, the newest version of macOS. The ‌Safari Technology Preview‌ update is available through the Software Update mechanism in System Preferences or System Settings to anyone who has downloaded the browser from Apple’s website. Complete release notes for the update are available on the Safari Technology Preview website. Apple’s aim with ‌Safari Technology Preview‌ is to gather feedback from developers and users on its browser development process. ‌Safari Technology Preview‌ can run side-by-side with the existing Safari browser and while it is designed for developers, it does not require a developer account to download and use.Tag: Safari Technology PreviewThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
07:02 pm
Video Review: A Month With the M4 iMac | MacRumors
Video Review: A Month With the M4 iMac
It's been just over a month since Apple released the refreshed M4 iMac, so we've finally been able to spend enough time with it to provide MacRumors readers with a comprehensive review ahead of the holiday season. Subscribe to the MacRumors YouTube channel for more videos. Apple didn't make external design changes to the M4 ‌iMac‌ except for tweaking the colors, but it does have the latest M4 chip. You can't get the ‌iMac‌ with the M4 Pro or the M4 Max, as those higher-end chips are limited to the Mac mini and the MacBook Pro, but the M4 in the ‌iMac‌ is more than powerful enough for most people. It can be used for simple tasks like web browsing and watching videos, but it's also powerful enough for photo editing, video editing, graphics work, 3D work, and gaming. Some of the latest console games can be played on the M4 ‌iMac‌ thanks to support for hardware-accelerated ray tracing and mesh shading. This year, all M4 Macs come with 16GB RAM minimum with no increase in base cost, which is great. Depending on what you're going to do with your ‌iMac‌, you might want to upgrade the RAM to 24GB or 32GB, but 16GB will get you by for most tasks. You can also get up to 2TB of SSD storage depending on which ‌iMac‌ you pick. The base ‌iMac‌ has two Thunderbolt 4 ports, while higher-end models have four Thunderbolt 4 ports, another nice upgrade compared to the prior-generation ‌iMac‌ that had two Thunderbolt ports and two USB-C ports. Nano-texture, the feature that Apple first brought to the Pro Display XDR, is an option for the ‌iMac‌ this time, so you can get a super matte display that's ideal if you need to work in the sun or in bright lights. If you have an M1 ‌iMac‌ or an ‌iMac‌ with an Intel chip, the M4 ‌iMac‌ is going to be a huge update that's worth it. If you have a newer ‌iMac‌, there's no real reason to update. Make sure to watch our video for a deeper overview of the ‌iMac‌, and let us know if you have plans to get one in the comments below.Related Roundup: iMacBuyer's Guide: iMac (Buy Now)Related Forum: iMacThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
06:05 pm
AirPods 4 Available for Record Low Black Friday Price of $164.99 | MacRumors
AirPods 4 Available for Record Low Black Friday Price of $164.99
Amazon has Apple's AirPods 4 with Active Noise Cancellation for $164.99, down from $179.00. This is one of the rare Black Friday deals that has stuck around this week, and right now we're only tracking the sale on Amazon. Note: MacRumors is an affiliate partner with Amazon. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. This is also an all-time low price on the new AirPods 4 with ANC. The AirPods 4 also feature a redesigned earbud for increased comfort, the H2 chip for improved audio performance, up to 30 hours of battery life, and an IP54 rating for dust, water, and sweat resistance. $14 OFFAirPods 4 (ANC) for $164.99 If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week. Deals Newsletter Interested in hearing more about top deals as we head into the holidays? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
05:42 pm
Apple Releases iCloud Passwords Add-On for Firefox | MacRumors
Apple Releases iCloud Passwords Add-On for Firefox
Apple now has a dedicated iCloud Passwords add-on designed for the Firefox browser, which means Firefox users can access passwords and logins stored in the Passwords app or iCloud Keychain when using Firefox on a PC or Mac. The extension is being distributed by Apple, but it appears that it was originally created by a third-party developer and later taken over and updated by Apple. With the ‌iCloud‌ Passwords extension, passwords stored in ‌iCloud‌ Keychain can be securely filled in automatically when signing into websites in Firefox. New passwords created in Firefox are also saved to ‌iCloud‌ Keychain, which makes them available across Apple devices, plus there is an option to generate verification codes. Alongside iOS 18, iPadOS 18, and macOS Sequoia 15, Apple introduced a dedicated Passwords app that houses all passwords and logins, making them easier to access and manage. The extension works with the Passwords app in ‌macOS Sequoia‌, but it is also compatible with macOS Sonoma. In macOS Sonoma, passwords and login information are stored in the Passwords section of the Settings app.Tags: Firefox, MozillaThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »

Older posts

Tuesday November 19
01:30 pm
Introducing Copilot Actions, new agents, and tools to empower IT teams | Office for Mac
Introducing Copilot Actions, new agents, and tools to empower IT teams
Microsoft 365 Copilot is becoming a daily habit for people around the world—already, nearly 70% of Fortune 500 companies are using it. Dow anticipates that Copilot will save it millions of dollars on shipping operations in the first year; at Bank of Queensland Group, 70% of users are saving two and a half to five hours per week; Eaton is speeding up internal documentation processes by 83%; and Accenture is going big, rolling out Copilot to 100,000 employees. The post appeared first on Microsoft 365 Blog.
Read more »
Thursday November 14
10:00 pm
Price and tax updates for apps, In-App Purchases, and subscriptions | ADC Headlines
Price and tax updates for apps, In-App Purchases, and subscriptions
The App Store is designed to make it easy to sell your digital goods and services globally, with support for 44 currencies across 175 storefronts.From time to time, we may need to adjust prices or your proceeds due to changes in tax regulations or foreign exchange rates. These adjustments are made using publicly available exchange rate information from financial data providers to help make sure prices for apps and In-App Purchases stay consistent across all storefronts. Tax updates as of October:Your proceeds from the sale of eligible apps and In‑App Purchases have been increased in: Nepal: Apple no longer remits Nepal value-added tax (VAT) for local developers and proceeds were increased accordingly. Kazakhstan: Apple no longer remits Kazakstan VAT for local developers and proceeds were increased accordingly. Madeira: Decrease of the Madeira VAT rate from 5% to 4% for news publications, magazines and other periodicals, books, and audiobooks. Exhibit B of the Paid Applications Agreement has been updated to indicate that Apple will not remit VAT in Nepal and Kazakhstan for local developers.Learn more about your proceedsView payments and proceedsDownload financial reportsPrice updates as of December 2: Pricing for apps and In-App Purchases will be updated for the Japan and Türkiye storefronts if you haven’t selected one of these as the base for your app or In‑App Purchases. If you’ve selected the Japan or Türkiye storefront as the base for your app or In-App Purchase, prices won’t change. On other storefronts, prices will be updated to maintain equalization with your chosen base price.Prices won’t change in any region if your In‑App Purchase is an auto‑renewable subscription and won’t change on the storefronts where you manually manage prices instead of using the automated equalized prices.The Pricing and Availability section of Apps has been updated in App Store Connect to display these upcoming price changes. As always, you can change the prices of your apps, In‑App Purchases, and auto‑renewable subscriptions at any time.Learn more about managing your pricesView or edit upcoming price changesEdit your app’s base country or regionPricing and availability start times by country or regionSet a price for an In-App Purchase
Read more »
Thursday November 07
04:00 pm
The latest on AI at work: November 2024 | Office for Mac
The latest on AI at work: November 2024
For Microsoft and our customers, work is changing at the speed of AI. To help you stay ahead, we’ll share monthly highlights of new Microsoft Copilot innovations, plus the latest from our customers on how they’re getting the most value from Copilot. The post appeared first on Microsoft 365 Blog.
Read more »
Monday October 28
03:00 pm
Streamline collaboration with the new chat and channels experience in Microsoft Teams | Office for Mac
Streamline collaboration with the new chat and channels experience in Microsoft Teams
Working together can turn great ideas into reality and bring people together as a team. We’ve been paying attention to our customers’ evolving needs in the AI-powered workplace, which require faster, simpler, and smarter solutions to achieve more. The post appeared first on Microsoft 365 Blog.
Read more »
Thursday October 17
03:00 pm
Microsoft 365 Copilot drove up to 353% ROI for small and medium businesses—new study | Office for Mac
Microsoft 365 Copilot drove up to 353% ROI for small and medium businesses—new study
As a small or medium-sized business (SMB) leader, you’ve likely heard a lot about generative AI and how it’s transforming businesses of all sizes. To better understand how AI is helping businesses grow and compete, Microsoft commissioned Forrester Consulting to study the potential return on investment (ROI) of Microsoft 365 Copilot for SMBs. The post appeared first on Microsoft 365 Blog.
Read more »
Wednesday October 16
04:00 pm
Microsoft named a Leader in the 2024 Gartner® Magic Quadrant™ for Unified Communications as a Service for the sixth year in a row | Office for Mac
Microsoft named a Leader in the 2024 Gartner® Magic Quadrant™ for Unified Communications as a Service for the sixth year in a row
We’re honored to announce that Microsoft has, once again, been recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for Unified Communications as a Service (UCaaS), Worldwide. This is the sixth year we’ve received this recognition and we’re thrilled to be positioned highest in both the ability to execute and furthest on completeness of vision axes. The post appeared first on Microsoft 365 Blog.
Read more »

Reviews & KoolTools

Unbreakable Style: The Best Hardshell Phone Cases on the Market

Are you looking for the ultimate protection for your smartphone? Hardshell phone cases are the answer. These cases are designed to withstand impact. They keep your phone safe from drops and scratches. In a world full of choices, how do you find the best? We have...

Plugable’s 5-in-1 USB Hub expands your MacBook Pro or MacBook Air’s connection options

The new 5-in-1 USB-C hub from Plugable turns two Mac laptop ports into (as the name implies) five, including Ethernet and more. Designed specifically for MacBook Pro and MacBook Air models, the hub (with the moniker AMS-5IN1E) fits flush against the host Mac and adds...

More Reviews & KoolTools

Community and More

MacTech Events and COVID

Due to the pandemic, the regional MacTech Pro events were pushed into 2021 — as early as reasonably possible. This means at best, early in the third quarter of the year. But depending on guidance and public health, it could be later than that. Once there are details,...

More Community

Software & Services Scanners

Wednesday December 04
02:08 pm
U.S. Offered $10M for Hacker Just Arrested by Russia | Krebs on Security
U.S. Offered $10M for Hacker Just Arrested by Russia
In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as "Wazawaka," a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top ransomware purveyor a year later, offering $10 million for information leading to his arrest. Last week, the Russian government reportedly arrested Matveev and charged him with creating malware used to extort companies.
Read more »
Tuesday December 03
01:27 pm
Why Phishers Love New TLDs Like .shop, .top and .xyz | Krebs on Security
Why Phishers Love New TLDs Like .shop, .top and .xyz
Phishing attacks increased nearly 40 percent in the year ending August 2024, with much of that growth concentrated at a small number of new generic top-level domains (gTLDs) -- such as .shop, .top, .xyz -- that attract scammers with rock-bottom prices and no meaningful registration requirements, new research finds. Meanwhile, the nonprofit entity that oversees the domain name industry is moving forward with plans to introduce a slew of new gTLDs.
Read more »
Monday December 02
06:32 pm
Vulnerability Summary for the Week of November 25, 2024 | US-CERT Alerts
Vulnerability Summary for the Week of November 25, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Portfolio Management System MCA A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2024-11-26 7.3 CVE-2024-11744 1000 Projects--Portfolio Management System MCA A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgot_password_process.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-27 7.3 CVE-2024-11819 1000projects -- beauty_parlour_management_system A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11646 1000projects -- beauty_parlour_management_system A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11647 1000projects -- beauty_parlour_management_system A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11648 1000projects -- beauty_parlour_management_system A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11649 AbsolutePlugins--Absolute Addons For Elementor Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AbsolutePlugins Absolute Addons For Elementor allows Local Code Inclusion.This issue affects Absolute Addons For Elementor: from n/a through 1.0.14. 2024-11-28 7.5 CVE-2024-52496 Advantech--EKI-6333AC-2G A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (securityEngineID to local_record.engineid without proper bounds checking. 2024-11-27 3 CVE-2024-36468 Zabbix--Zabbix When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data. If the server's response is an empty document, then wd- >data in the code below will remain NULL and an attempt to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42328 Zabbix--Zabbix The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd- >error will be NULL and trying to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42329 Zabbix--Zabbix In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd- >browser heap pointer is freed by garbage collection. 2024-11-27 3.3 CVE-2024-42331 Zabbix--Zabbix The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host. 2024-11-27 3.7 CVE-2024-42332 Zabbix--Zabbix When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element. 2024-11-26 2.2 CVE-2024-22117 Zabbix--Zabbix When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords. 2024-11-27 2.7 CVE-2024-36464 Zabbix--Zabbix The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c 2024-11-27 2.7 CVE-2024-42333 Back to top Severity Not Yet Assigned PrimaryVendor -- Product Description Published CVSS Score Source Info autolab--Autolab Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the download_all_submissions feature. This can allow for leakage of submissions to unauthorized users, such as downloading submissions from other students in the class, or even instructor test submissions, given they know their user IDs. This issue has been patched in commit `1aa4c769` which is not yet in a release version, but is expected to be included in version 3.0.3. Users are advised to either manually patch or to wait for version 3.0.3. As a workaround administrators can disable the feature. 2024-11-25 not yet calculated CVE-2024-53258 BoidCMS--BoidCMS BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In affected versions a reflected Cross-site Scripting (XSS) vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to inject arbitrary JavaScript code. This code could be used to steal the user's session cookie, perform phishing attacks, or deface the website. This issue has been addressed in version 2.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-25 not yet calculated CVE-2024-53255 bunkerity--bunkerweb bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated "next" parameter for redirects. Ex. visiting: `/loading?next=https://google.com` while authenticated will cause the page will redirect to google.com. This vulnerability could be used in phishing attacks by redirecting users from a legitimate application URL to malicious sites. This issue has been addressed in version 1.5.11. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-27 not yet calculated CVE-2024-53264 Century Systems Co., Ltd.--FutureNet NXR-G110 series FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs. 2024-11-29 not yet calculated CVE-2024-50357 Checkmk GmbH--Checkmk Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions type] may result in an out-of-bounds access. To spot such missed invocations early in the future, checking the validity of link- >type in bpf_link_show_fdinfo() and emitting a warning when such invocations are missed. 2024-11-25 not yet calculated CVE-2024-53099 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queue_lock lock and destroy Commit 76d54bf20cdc ("nvme-tcp: don't access released socket during error recovery") added a mutex_lock() call for the queue- >queue_lock in nvme_tcp_get_address(). However, the mutex_lock() races with mutex_destroy() in nvme_tcp_free_queue(), and causes the WARN below. DEBUG_LOCKS_WARN_ON(lock- >magic != lock) WARNING: CPU: 3 PID: 34077 at kernel/locking/mutex.c:587 __mutex_lock+0xcf0/0x1220 Modules linked in: nvmet_tcp nvmet nvme_tcp nvme_fabrics iw_cm ib_cm ib_core pktcdvd nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc ppdev 9pnet_virtio 9pnet pcspkr netfs parport_pc parport e1000 i2c_piix4 i2c_smbus loop fuse nfnetlink zram bochs drm_vram_helper drm_ttm_helper ttm drm_kms_helper xfs drm sym53c8xx floppy nvme scsi_transport_spi nvme_core nvme_auth serio_raw ata_generic pata_acpi dm_multipath qemu_fw_cfg [last unloaded: ib_uverbs] CPU: 3 UID: 0 PID: 34077 Comm: udisksd Not tainted 6.11.0-rc7 #319 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:__mutex_lock+0xcf0/0x1220 Code: 08 84 d2 0f 85 c8 04 00 00 8b 15 ef b6 c8 01 85 d2 0f 85 78 f4 ff ff 48 c7 c6 20 93 ee af 48 c7 c7 60 91 ee af e8 f0 a7 6d fd 0b e9 5e f4 ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 RSP: 0018:ffff88811305f760 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88812c652058 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffff88811305f8b0 R08: 0000000000000001 R09: ffffed1075c36341 R10: ffff8883ae1b1a0b R11: 0000000000010498 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88812c652058 FS: 00007f9713ae4980(0000) GS:ffff8883ae180000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcd78483c7c CR3: 0000000122c38000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ? __warn.cold+0x5b/0x1af ? __mutex_lock+0xcf0/0x1220 ? report_bug+0x1ec/0x390 ? handle_bug+0x3c/0x80 ? exc_invalid_op+0x13/0x40 ? asm_exc_invalid_op+0x16/0x20 ? __mutex_lock+0xcf0/0x1220 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx___mutex_lock+0x10/0x10 ? __lock_acquire+0xd6a/0x59e0 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx_nvme_tcp_get_address+0x10/0x10 [nvme_tcp] nvme_sysfs_show_address+0x81/0xc0 [nvme_core] dev_attr_show+0x42/0x80 ? __asan_memset+0x1f/0x40 sysfs_kf_seq_show+0x1f0/0x370 seq_read_iter+0x2cb/0x1130 ? rw_verify_area+0x3b1/0x590 ? __mutex_lock+0x433/0x1220 vfs_read+0x6a6/0xa20 ? lockdep_hardirqs_on+0x78/0x100 ? __pfx_vfs_read+0x10/0x10 ksys_read+0xf7/0x1d0 ? __pfx_ksys_read+0x10/0x10 ? __x64_sys_openat+0x105/0x1d0 do_syscall_64+0x93/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? __pfx_ksys_read+0x10/0x10 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? do_syscall_64+0x9f/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9713f55cfa Code: 55 48 89 e5 48 83 ec 20 48 89 55 e8 48 89 75 f0 89 7d f8 e8 e8 74 f8 ff 48 8b 55 e8 48 8b 75 f0 4 ---truncated--- 2024-11-25 not yet calculated CVE-2024-53100 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr- >ia_mode, attr- >ia_uid and attr- >ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0. 2024-11-25 not yet calculated CVE-2024-53101 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: nvme: make keep-alive synchronous operation The nvme keep-alive operation, which executes at a periodic interval, could potentially sneak in while shutting down a fabric controller. This may lead to a race between the fabric controller admin queue destroy code path (invoked while shutting down controller) and hw/hctx queue dispatcher called from the nvme keep-alive async request queuing operation. This race could lead to the kernel crash shown below: Call Trace: autoremove_wake_function+0x0/0xbc (unreliable) __blk_mq_sched_dispatch_requests+0x114/0x24c blk_mq_sched_dispatch_requests+0x44/0x84 blk_mq_run_hw_queue+0x140/0x220 nvme_keep_alive_work+0xc8/0x19c [nvme_core] process_one_work+0x200/0x4e0 worker_thread+0x340/0x504 kthread+0x138/0x140 start_kernel_thread+0x14/0x18 While shutting down fabric controller, if nvme keep-alive request sneaks in then it would be flushed off. The nvme_keep_alive_end_io function is then invoked to handle the end of the keep-alive operation which decrements the admin- >q_usage_counter and assuming this is the last/only request in the admin queue then the admin- >q_usage_counter becomes zero. If that happens then blk-mq destroy queue operation (blk_mq_destroy_ queue()) which could be potentially running simultaneously on another cpu (as this is the controller shutdown code path) would forward progress and deletes the admin queue. So, now from this point onward we are not supposed to access the admin queue resources. However the issue here's that the nvme keep-alive thread running hw/hctx queue dispatch operation hasn't yet finished its work and so it could still potentially access the admin queue resource while the admin queue had been already deleted and that causes the above crash. This fix helps avoid the observed crash by implementing keep-alive as a synchronous operation so that we decrement admin- >q_usage_counter only after keep-alive command finished its execution and returns the command status back up to its caller (blk_execute_rq()). This would ensure that fabric shutdown code path doesn't destroy the fabric admin queue until keep-alive request finished execution and also keep-alive thread is not running hw/hctx queue dispatch operation. 2024-11-25 not yet calculated CVE-2024-53102 Mozilla--Firefox The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5. 2024-11-26 not yet calculated CVE-2024-11696 Mozilla--Firefox On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133. 2024-11-26 not yet calculated CVE-2024-11703 msg Suisse AG--EasyTax A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS. 2024-11-29 not yet calculated CVE-2024-9044 n/a--n/a FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking. 2024-11-29 not yet calculated CVE-2024-35366 n/a--n/a FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer 2024-11-29 not yet calculated CVE-2024-35367 n/a--n/a FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. 2024-11-29 not yet calculated CVE-2024-35368 n/a--n/a Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included in log entries without restrictions. 2024-11-29 not yet calculated CVE-2024-35371 n/a--n/a LinkStack 2.7.9 through 4.7.7 allows resourcesviewscomponentsfavicon.blade.php link SSRF. 2024-11-29 not yet calculated CVE-2024-35451 n/a--n/a A deserialization vulnerability exists in the Stub class of the VarDumper module in Symfony v7.0.3. The vulnerability stems from deficiencies in the original implementation when handling properties with null or uninitialized values. An attacker could construct specific serialized data and use this vulnerability to execute unauthorized code. 2024-11-29 not yet calculated CVE-2024-36610 n/a--n/a In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic handling or denial of service. 2024-11-29 not yet calculated CVE-2024-36611 n/a--n/a Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers. 2024-11-29 not yet calculated CVE-2024-36612 n/a--n/a FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread. 2024-11-29 not yet calculated CVE-2024-36615 n/a--n/a An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file. 2024-11-29 not yet calculated CVE-2024-36616 n/a--n/a FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. 2024-11-29 not yet calculated CVE-2024-36617 n/a--n/a FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. 2024-11-29 not yet calculated CVE-2024-36618 n/a--n/a moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. 2024-11-29 not yet calculated CVE-2024-36620 n/a--n/a moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion. 2024-11-29 not yet calculated CVE-2024-36621 n/a--n/a In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter. 2024-11-29 not yet calculated CVE-2024-36622 n/a--n/a moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes. 2024-11-29 not yet calculated CVE-2024-36623 n/a--n/a nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c. 2024-11-29 not yet calculated CVE-2024-36671 n/a--n/a MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking. 2024-11-29 not yet calculated CVE-2024-45495 n/a--n/a WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file. 2024-12-01 not yet calculated CVE-2024-45520 n/a--n/a OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files. 2024-11-27 not yet calculated CVE-2024-46054 n/a--n/a Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the power(uct_int_t x, uct_int_t n) in src/uct_upstream.c. 2024-11-29 not yet calculated CVE-2024-48406 n/a--n/a Incorrect access control in Adapt Learning Adapt Authoring Tool
Read more »
Wednesday November 27
12:45 am
Hacker in Snowflake Extortions May Be a U.S. Soldier | Krebs on Security
Hacker in Snowflake Extortions May Be a U.S. Soldier
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's identity may not remain a secret for long: A careful review of Kiberphant0m's daily chats across multiple cybercrime personas suggests they are a U.S. Army soldier who is or was recently stationed in South Korea.
Read more »
Thursday November 21
08:13 pm
Feds Charge Five Men in ‘Scattered Spider’ Roundup | Krebs on Security
Feds Charge Five Men in ‘Scattered Spider’ Roundup
Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including LastPass, MailChimp, Okta, T-Mobile and Twilio.
Read more »
Wednesday November 20
01:12 am
Fintech Giant Finastra Investigating Data Breach | Krebs on Security
Fintech Giant Finastra Investigating Data Breach
The financial technology firm Finastra is investigating the alleged large-scale theft of information from its internal file transfer platform, KrebsOnSecurity has learned. Finastra, which provides software and services to 45 of the world's top 50 banks, notified customers of a potential breach after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen from the company.
Read more »
Monday November 18
07:34 pm
Vulnerability Summary for the Week of November 11, 2024 | US-CERT Alerts
Vulnerability Summary for the Week of November 11, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Beauty Parlour Management System A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 7.3 CVE-2024-11100 1000 Projects--Beauty Parlour Management System A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11257 1000 Projects--Beauty Parlour Management System A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11258 1000 Projects--Portfolio Management System MCA A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11256 adobe -- after_effects After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47441 adobe -- after_effects After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47442 adobe -- after_effects After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47443 adobe -- illustrator Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-45114 adobe -- illustrator Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47450 adobe -- illustrator Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47451 adobe -- illustrator Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47452 adobe -- indesign InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49507 adobe -- indesign InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49508 adobe -- indesign InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49509 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47426 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47427 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47428 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47429 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47430 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47431 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47432 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47433 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47434 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49515 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49516 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49517 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49518 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49519 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49520 adobe -- substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49525 Adobe--Adobe Commerce Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction. 2024-11-12 7.7 CVE-2024-49521 Adobe--Animate Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49526 Adobe--Animate Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49528 Adobe--Photoshop Desktop Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49514 adonesevangelista -- agri-trading_online_shopping_system A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the application's total price calculation logic. This vulnerability causes the total price to be reduced to zero, allowing the attacker to add items to the cart and proceed to checkout. 2024-11-14 7.5 CVE-2024-50968 algolplus--Advanced Order Export For WooCommerce The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). 2024-11-13 8.1 CVE-2024-10828 amd -- ryzen_ai_software Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21974 amd -- ryzen_ai_software Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21975 AMD--AMD Cloud Manageability Service Software Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21939 AMD--AMD Management Console Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21957 AMD--AMD Management Plug-In for SCCM Incorrect default permissions in the AMD Management Plugin for the MicrosoftÂ® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21938 AMD--AMD Provisioning Console (APC) Software Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21958 AMD--AMD Ryzen AI Software Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 8.8 CVE-2024-21976 AMD--AMD Ryzen Master Monitoring SDK Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21945 AMD--AMD Ryzen Master Utility for Overclocking Control Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21946 AMD--AMD Software: PRO Edition Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21937 AMI--AptioV APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode. 2024-11-12 7.2 CVE-2024-42442 ampache -- ampache Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 9 CVE-2024-51490 ampache -- ampache Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating controllers. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51484 ampache -- ampache Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating plugins. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51485 ampache -- ampache Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL?-?Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.4 CVE-2024-51486 ampache -- ampache Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51487 angeljudesuarez -- construction_management_system A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter. 2024-11-13 7.2 CVE-2024-50971 angeljudesuarez -- construction_management_system A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter. 2024-11-13 7.2 CVE-2024-50972 angeljudesuarez -- tailoring_management_system A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability affects unknown code of the file /incadd.php. The manipulation of the argument inccat/desc/date/amount leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "inccat" to be affected. But it must be assumed "desc", "date", and "amount" are affected as well. 2024-11-11 9.8 CVE-2024-11074 anisha -- job_recruitment A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument e_hash leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11076 anisha -- job_recruitment A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11077 anisha -- job_recruitment A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 9.8 CVE-2024-11099 anisha -- job_recruitment A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 8.8 CVE-2024-11127 Anthony Carbon--WDES Responsive Mobile Menu Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through 5.3.18. 2024-11-16 9.8 CVE-2024-52414 Apache Software Foundation--Apache Airflow Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially exposing critical data that could be exploited to compromise the security of the Airflow deployment. In version 2.10.3, secrets are now masked in task logs to prevent sensitive configuration variables from being exposed in the logging output. Users should upgrade to Airflow 2.10.3 or the latest version to eliminate this vulnerability.Â If you suspect that DAG authors could have logged the secret values to the logs and that your logs are not additionally protected, it is also recommended that you update those secrets. 2024-11-15 7.5 CVE-2024-45784 Apache Software Foundation--Apache CloudStack Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker that can register templates, can use them to deploy malicious instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.18.2.5 or 4.19.1.3, or later, which addresses this issue. Additionally, all user-registered KVM-compatible templates can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run the following command on their file-based primary storage(s) and inspect the output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. However, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives. for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "nn"; doneFor checking the whole template/volume features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "nn"; done 2024-11-12 8.5 CVE-2024-50386 Apache Software Foundation--Apache Traffic Server Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue. 2024-11-14 9.1 CVE-2024-50306 Apache Software Foundation--Apache Traffic Server Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-38479 Apache Software Foundation--Apache Traffic Server Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-50305 Arttia Creative--Datasets Manager by Arttia Creative Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative.This issue affects Datasets Manager by Arttia Creative: from n/a through 1.5. 2024-11-14 10 CVE-2024-52375 Autodesk--Installer A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management. 2024-11-15 7.2 CVE-2024-9500 Avigilon--VideoIQ iCVR HD camera Avigilon - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-45253 axelkeller--GPX Viewer The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv_file_upload() function in all versions up to, and including, 2.2.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-13 8.8 CVE-2024-10629 ays-pro--Chartify WordPress Chart Plugin The Chartify - WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other "safe" file types can be uploaded and included. 2024-11-14 9.8 CVE-2024-10571 Baxter--Life2000 Ventilation System The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedded software via the calibration tool, without having to authenticate to either tool. This could result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 10 CVE-2024-48966 Baxter--Life2000 Ventilation System The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings that result in unauthorized disclosure of information and/or have unintended impacts on device performance. 2024-11-14 10 CVE-2024-48967 Baxter--Life2000 Ventilation System The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48970 Baxter--Life2000 Ventilation System The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form. This could allow an attacker to obtain the password off the ventilator and use it to gain unauthorized access to the device, with clinician privileges. 2024-11-14 9.3 CVE-2024-48971 Baxter--Life2000 Ventilation System The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-48973 Baxter--Life2000 Ventilation System The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48974 Baxter--Life2000 Ventilation System There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clinician Password. An attacker could execute a brute-force attack to gain unauthorized access to the ventilator, and then make changes to device settings that could disrupt the function of the device and/or result in unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-9832 Baxter--Life2000 Ventilation System Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-9834 BdThemes--Instant Image Generator Unrestricted Upload of File with Dangerous Type vulnerability in BdThemes Instant Image Generator allows Upload a Web Shell to a Web Server.This issue affects Instant Image Generator: from n/a through 1.5.4. 2024-11-14 10 CVE-2024-52377 Bigfive--CF7 Reply Manager Unrestricted Upload of File with Dangerous Type vulnerability in Bigfive CF7 Reply Manager.This issue affects CF7 Reply Manager: from n/a through 1.2.3. 2024-11-16 9.9 CVE-2024-52404 Bikram Joshi--B-Banner Slider Unrestricted Upload of File with Dangerous Type vulnerability in Bikram Joshi B-Banner Slider allows Upload a Web Shell to a Web Server.This issue affects B-Banner Slider: from n/a through 1.1. 2024-11-16 9.9 CVE-2024-52405 BlackBerry--SecuSUITE A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege. 2024-11-12 7.3 CVE-2024-51721 Boa web server--Boa web server 0.94.14rc21 Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-47916 Bosch Rexroth AG--IndraDrive FWA-INDRV*-MP* A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages. 2024-11-13 7.5 CVE-2024-48989 Ciprian Popescu--W3P SEO Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu W3P SEO allows Stored XSS.This issue affects W3P SEO: from n/a before 1.8.6. 2024-11-14 7.1 CVE-2024-51684 Cisco--Cisco BroadWorks A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An attacker could exploit this vulnerability by sending a high rate of TCP connections to the server. A successful exploit could allow the attacker to cause TCP connection resources to grow rapidly until the Cisco BroadWorks Network Server becomes unusable.Note: To recover from this vulnerability, either Cisco BroadWorks Network Server software must be restarted or the Cisco BroadWorks Network Server node must be rebooted. For more information, see the section of this advisory.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.6 CVE-2023-20125 Cisco--Cisco Cyber Vision A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.5 CVE-2022-20685 Cisco--Cisco Industrial Network Director A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device.This vulnerability is due to improper input validation when uploading a Device Pack. An attacker could exploit this vulnerability by altering the request that is sent when uploading a Device Pack. A successful exploit could allow the attacker to execute arbitrary commands as NT AUTHORITYSYSTEM on the underlying operating system of an affected device.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 9.9 CVE-2023-20036 Cisco--Cisco IOS XR Software A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack.The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root. 2024-11-15 8.8 CVE-2022-20655 Cisco--Cisco Modeling Labs A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges.This vulnerability is due to the improper handling of certain messages that are returned by the associated external authentication server. An attacker could exploit this vulnerability by logging in to the web interface of an affected server. Under certain conditions, the authentication mechanism would be bypassed and the attacker would be logged in as an administrator. A successful exploit could allow the attacker to obtain administrative privileges on the web interface of an affected server, including the ability to access and modify every simulation and all user-created data. To exploit this vulnerability, the attacker would need valid user credentials that are stored on the associated external authentication server.Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. 2024-11-15 9.1 CVE-2023-20154 Cisco--Cisco Redundancy Configuration Manager A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container.This vulnerability exists because the debug mode is incorrectly enabled for specific services. An attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled. A successful exploit could allow the attacker to execute arbitrary commands as the root user.The attacker would need to perform detailed reconnaissance to allow for unauthenticated access. The vulnerability can also be exploited by an authenticated attacker.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.1 CVE-2022-20649 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receives when it establishes a connection to a Cisco Unified Communications Manager device. An attacker could exploit this vulnerability by using a man-in-the-middle technique to intercept the traffic between the devices, and then using a self-signed certificate to impersonate the endpoint. A successful exploit could allow the attacker to view the intercepted traffic in clear text or alter the contents of the traffic.Note: Cisco Expressway-E is not affected by this vulnerability.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.4 CVE-2022-20814 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.4 CVE-2022-20853 Citrix Session Recording--Citrix Session Recording Limited remote code execution with privilege of a NetworkService Account accessÂ inÂ Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server 2024-11-12 8.8 CVE-2024-8069 Clarisse K.--Writer Helper Unrestricted Upload of File with Dangerous Type vulnerability in Clarisse K. Writer Helper allows Upload a Web Shell to a Web Server.This issue affects Writer Helper: from n/a through 3.1.6. 2024-11-16 9.9 CVE-2024-52399 cli--cli The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0. Developers connect to remote codespaces through an SSH server running within the devcontainer, which is generally provided through the [default devcontainer image]( https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-... https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-configuration/introduction-to-dev-containers#using-the-default-dev-container-configuration) . GitHub CLI [retrieves SSH connection details]( https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/inv... https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/invoker.go#L230-L244 ), such as remote username, which is used in [executing `ssh` commands]( https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L2... https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L263 ) for `gh codespace ssh` or `gh codespace logs` commands. This exploit occurs when a malicious third-party devcontainer contains a modified SSH server that injects `ssh` arguments within the SSH connection details. `gh codespace ssh` and `gh codespace logs` commands could execute arbitrary code on the user's workstation if the remote username contains something like `-oProxyCommand="echo hacked" #`. The `-oProxyCommand` flag causes `ssh` to execute the provided command while `#` shell comment causes any other `ssh` arguments to be ignored. In `2.62.0`, the remote username information is being validated before being used. 2024-11-14 8 CVE-2024-52308 cmorillas1--External Database Based Actions The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.1. This is due to a missing capability check in the 'edba_admin_handle' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin settings and log in as any existing user on the site, such as an administrator. 2024-11-15 7.5 CVE-2024-10311 cmsMinds--Boat Rental Plugin for WordPress Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress allows Upload a Web Shell to a Web Server.This issue affects Boat Rental Plugin for WordPress: from n/a through 1.0.1. 2024-11-14 10 CVE-2024-52376 code-projects--Job Recruitment A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11241 codeSavory--BasePress Migration Tools Unrestricted Upload of File with Dangerous Type vulnerability in codeSavory BasePress Migration Tools allows Upload a Web Shell to a Web Server.This issue affects BasePress Migration Tools: from n/a through 1.0.0. 2024-11-16 9.9 CVE-2024-52407 craftcms--cms Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads, unauthorized access to sensitive files, and, under certain conditions, remote code execution (RCE) via Server-Side Template Injection (SSTI) payloads. Note that this will only work if you have an authenticated administrator account with allowAdminChanges enabled. This is fixed in 5.4.6 and 4.12.5. 2024-11-13 8.4 CVE-2024-52291 craftcms--cms Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions on system notification templates. This function accepts an absolute file path, reads the file's content, and converts it into a Base64-encoded string. By embedding this function within a system notification template, the attacker can exfiltrate the Base64-encoded file content through a triggered system email notification. Once the email is received, the Base64 payload can be decoded, allowing the attacker to read arbitrary files on the server. This is fixed in 5.4.9 and 4.12.8. 2024-11-13 7.7 CVE-2024-52292 craftcms--cms Craft is a content management system (CMS). Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function FileHelper::absolutePath could lead to Remote Code Execution on the server via twig SSTI. This is a sequel to CVE-2023-40035. This vulnerability is fixed in 4.12.2 and 5.4.3. 2024-11-13 7.2 CVE-2024-52293 creativeinteractivemedia--Real3D Flipbook Lite 3D FlipBook, PDF Viewer, PDF Embedder The 3D FlipBook, PDF Viewer, PDF Embedder - Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'r3dfb_save_thumbnail_callback' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-16 8.8 CVE-2024-9849 cyberlord92--Login using WordPress Users ( WP as SAML IDP ) The Login using WordPress Users ( WP as SAML IDP ) plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.15.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2024-11-16 7.2 CVE-2024-9887 Dang Ngoc Binh--Audio Record Unrestricted Upload of File with Dangerous Type vulnerability in Dang Ngoc Binh Audio Record allows Upload a Web Shell to a Web Server.This issue affects Audio Record: from n/a through 1.0. 2024-11-11 10 CVE-2024-51792 Davor Zeljkovic--Convert Docx2post Unrestricted Upload of File with Dangerous Type vulnerability in Davor Zeljkovic Convert Docx2post allows Upload a Web Shell to a Web Server.This issue affects Convert Docx2post: from n/a through 1.4. 2024-11-16 9.1 CVE-2024-52397 decidim--decidim Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0. 2024-11-13 7.7 CVE-2024-45594 decidim-ice--decidim-module-decidim_awesome An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module 0.9.0) allows an authenticated admin user to manipulate sql queries to disclose information, read and write files or execute commands. 2024-11-12 9 CVE-2024-43415 dell -- smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. 2024-11-12 7.8 CVE-2024-49557 dell -- smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 2024-11-12 7.8 CVE-2024-49558 dell -- smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. 2024-11-12 7.8 CVE-2024-49560 Dell--SmartFabric OS10 Software Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution 2024-11-12 7.8 CVE-2024-48837 Delta Electronics--DIAScreen If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39354 Delta Electronics--DIAScreen If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39605 Delta Electronics--DIAScreen If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-47131 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user's password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user's account. 2024-11-11 9.8 CVE-2024-11068 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11062 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11063 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11064 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11065 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web page. 2024-11-11 7.2 CVE-2024-11066 dlink -- dsl6740c_firmware The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through this vulnerability and attempt to log in to the device using the default password. 2024-11-11 7.5 CVE-2024-11067 DMC--Airin Blog Deserialization of Untrusted Data vulnerability in DMC Airin Blog allows Object Injection.This issue affects Airin Blog: from n/a through 1.6.1. 2024-11-16 9.8 CVE-2024-52413 DonnellC--Global Gateway e4 | Payeezy Gateway Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway.This issue affects Global Gateway e4 | Payeezy Gateway: from n/a through 2.0. 2024-11-14 8.6 CVE-2024-52371 DoThatTask--Do That Task Unrestricted Upload of File with Dangerous Type vulnerability in DoThatTask Do That Task allows Upload a Web Shell to a Web Server.This issue affects Do That Task: from n/a through 1.5.5. 2024-11-14 10 CVE-2024-52374 dotnetzip.semverd_project -- dotnetzip.semverd Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer. 2024-11-13 9.8 CVE-2024-48510 Elastic--Kibana A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. A successful attack requires a malicious user to have a combination of both specific Elasticsearch indices privileges https://www.elastic.co/guide/en/elasticsearch/reference/current/defining-roles.html#roles-indices-priv Â and Kibana privileges https://www.elastic.co/guide/en/fleet/current/fleet-roles-and-privileges.html Â assigned to them. The following Elasticsearch indices permissions are required * writeÂ privilege on the system indices .kibana_ingest** The allow_restricted_indicesÂ flag is set to true Any of the following Kibana privileges are additionally required * Under FleetÂ the AllÂ privilege is granted* Under IntegrationÂ the ReadÂ or AllÂ privilege is granted* Access to the fleet-setupÂ privilege is gained through the Fleet Server's service account token 2024-11-14 9.1 CVE-2024-37285 Eugen Bobrowski--Debug Tool Missing Authorization vulnerability in Eugen Bobrowski Debug Tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through 2.2. 2024-11-16 10 CVE-2024-52416 Flowcraft UX Design Studio--Advanced Personalization Deserialization of Untrusted Data vulnerability in Flowcraft UX Design Studio Advanced Personalization allows Object Injection.This issue affects Advanced Personalization: from n/a through 1.1.2. 2024-11-16 9.8 CVE-2024-52411 fortinet -- forticlient A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts. 2024-11-12 8.8 CVE-2024-36513 fortinet -- forticlient A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering. 2024-11-12 7.8 CVE-2024-36507 Fortinet--FortiClientWindows A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages. 2024-11-13 7.8 CVE-2024-47574 Fortinet--FortiManager A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigDataat least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests. 2024-11-12 7.5 CVE-2024-23666 Fortinet--FortiOS A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link. 2024-11-12 7.5 CVE-2023-50176 FraudLabs Pro--FraudLabs Pro SMS Verification Cross-Site Request Forgery (CSRF) vulnerability in FraudLabs Pro FraudLabs Pro SMS Verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through 1.10.1. 2024-11-14 7.1 CVE-2024-51688 FreeBSD--FreeBSD The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the library was incorrect, in effect ignoring the option. Fetch would still connect to a host presenting a certificate included in the revocation file passed to the --crl option. 2024-11-12 7.5 CVE-2024-45289 GeekRMX--Twitter @Anywhere Plus Cross-Site Request Forgery (CSRF) vulnerability in GeekRMX Twitter @Anywhere Plus allows Stored XSS.This issue affects Twitter @Anywhere Plus: from n/a through 2.0. 2024-11-14 7.1 CVE-2024-51659 GentleSource--Appointmind Cross-Site Request Forgery (CSRF) vulnerability in GentleSource Appointmind allows Stored XSS.This issue affects Appointmind: from n/a through 4.0.0. 2024-11-14 7.1 CVE-2024-51679 GeoVision--GV-VS12 Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports. 2024-11-15 9.8 CVE-2024-11120 GitLab--GitLab An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5 prior to 17.5.2, which could have allowed unauthorized access to the Kubernetes agent in a cluster under specific configurations. 2024-11-14 8.5 CVE-2024-9693 glpi-project--glpi GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be used to alter another user account data and take control of it. Upgrade to 10.0.17. 2024-11-15 8.1 CVE-2024-40638 gogs--gogs/gogs A remote command execution vulnerability exists in gogs/gogs versions
Read more »
Friday November 15
04:45 am
An Interview With the Target & Home Depot Hacker | Krebs on Security
An Interview With the Target & Home Depot Hacker
In December 2023, KrebsOnSecurity revealed the real-life identity of Rescator, the nickname used by a Russian cybercriminal who sold more than 100 million payment cards stolen from Target and Home Depot between 2013 and 2014. Moscow resident Mikhail Shefel, who confirmed using the Rescator identity in a recent interview, also admitted reaching out because he is broke and seeking publicity for several new money making schemes.
Read more »
Tuesday November 12
09:59 pm
Microsoft Patch Tuesday, November 2024 Edition | Krebs on Security
Microsoft Patch Tuesday, November 2024 Edition
Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed prior to today.
Read more »
Saturday November 09
07:20 pm
FBI: Spike in Hacked Police Emails, Fake Subpoenas | Krebs on Security
FBI: Spike in Hacked Police Emails, Fake Subpoenas
The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based technology companies.
Read more »
Tuesday November 05
05:10 pm
Canadian Man Arrested in Snowflake Data Extortions | Krebs on Security
Canadian Man Arrested in Snowflake Data Extortions
A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first reported Moucka's alleged ties to the Snowflake hacks on Monday. At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). After scouring darknet markets for stolen Snowflake account credentials, the hackers began raiding the data storage repositories used by some of the world’s largest corporations.
Read more »

Older posts

Friday December 06
09:00 am
United States players get a chance to trail SD Gundam G Generation Eternal next month | 148Apps
United States players get a chance to trail SD Gundam G Generation Eternal next month
Everyone has a favourite game developer, and a contender for me has always been Bandai Namco. Ever since I was a kid they put out some amazing titles; Digimon World, .hack, the Tales of Series, Freedom Wars, I could go on. And I will, with news of the upcoming strategy game SD Gundam G Generation Eternal. [Read more]
Read more »
Thursday December 05
02:00 pm
The massive Lineage franchise expands its grip on the mobile market with the release of Journey of Monarch | 148Apps
The massive Lineage franchise expands its grip on the mobile market with the release of Journey of Monarch
Lineage is one of those series that I have heard a lot about but never really tried, which is ridiculous. The franchise as a whole is astronomically popular, being one of the highest-grossing of all time. Now, NC America is set to expand this empire, with the release of Journey of Monarch. [Read more]
Read more »
Wednesday December 04
01:30 pm
Pre-registrations open for Akatsuki Games futuristic JRPG Tribe Nine | 148Apps
Pre-registrations open for Akatsuki Games futuristic JRPG Tribe Nine
Akatsuki Games Inc has announced the pre-registration for its single-player cyberpunk JRPG Tribe Nine. With input from the creators of the acclaimed Danhanropa series, Tribe Nine takes place in a futuristic city where you either thrive in the brutal Death Game, or you perish. [Read more]
Read more »
Tuesday December 03
09:05 am
It is time to save the holidays as the Christmas Village returns to Runescape | 148Apps
It is time to save the holidays as the Christmas Village returns to Runescape
It's that festive time of year again when both the cold and those infernal songs are inescapable, and there are only two things keeping us sane; those spiced biscuits from Lidl, and holiday events in games. The latest company to cash in is Jagex, with the Christmas Village returning to Runescape from now until January 6th. [Read more]
Read more »
Monday December 02
09:11 am
Project Mugen gets kicked back into the limelight as NetEase reveals a new name change | 148Apps
Project Mugen gets kicked back into the limelight as NetEase reveals a new name change
There are a couple of big names in the mobile sphere that when you hear them mentioned, you immediately perk an ear to learn more. One such situation was back at Gamescom 2023 when NetEase Games burst onto the stage and showed off a mind-blowing trailer for the frustratingly vague titled Project Mugen. [Read more]
Read more »
Friday November 29
09:55 am
Go penguin-wild as Play Together releases its latest seasonal update | 148Apps
Go penguin-wild as Play Together releases its latest seasonal update
If the freezing temperature, frozen cars, and permanent shivering haven’t tipped you off; we are suffering through winter, and the last place any of us want to be is the beach. If you think you do, you are wrong. That is exactly where Play Together is sending you, though, in its latest seasonal update. [Read more]
Read more »
Thursday November 28
11:22 am
PUBG Mobile reveals upcoming collaboration with luggage providers American Tourister because… what? | 148Apps
PUBG Mobile reveals upcoming collaboration with luggage providers American Tourister because… what?
There are many reasons to enjoy a good video game collaboration; from seeing your favourite characters in other media to maybe getting a funky new piece of branded kit. One of the best things about collaboration for me however is finding the weirdest ones and trying to connect the dots. I can’t do that with PUBG Mobiles' latest announcement. [Read more]
Read more »
Wednesday November 27
09:21 am
Days of Music returns to serenede 2024 in Sky: Children of the Light | 148Apps
Days of Music returns to serenede 2024 in Sky: Children of the Light
We all have our favourite pairings, but a universal one must be the combination of video games and music. A good score can elevate a good game to a great one, and Sky: Children of the Light is celebrating the audible miracle with the Days of Music event lasting until December 8th. [Read more]
Read more »
Tuesday November 26
10:06 am
Claim the power of Grayskull for your own as legendary series crosses over with RAID: Shadow Legends | 148Apps
Claim the power of Grayskull for your own as legendary series crosses over with RAID: Shadow Legends
I may be doing the series a disservice, but I feel that more people know He-Man and the Masters of the Universe from that one song meme. It is that, but it is also a hugely popular franchise and one that has entered Plariums’ dark fantasy world of RAID: Shadow Legends. [Read more]
Read more »
Monday November 25
02:00 pm
Grimguard Tactics unveils first major update, introducing a new hero class and trinkets | 148Apps
Grimguard Tactics unveils first major update, introducing a new hero class and trinkets
Since launching last month, Grimguard Tactics has been quietly going about its business, and if you glance at the Google Play and App Store reviews, it's smashing it. Now, however, it is time to lift the lid on the game's first major update, heading to a phone near you on November 28th. [Read more]
Read more »
Friday November 22
09:12 am
Tower of God: New World announces a collab with Teenahe Mercenary complete with four powerful recruits | 148Apps
Tower of God: New World announces a collab with Teenahe Mercenary complete with four powerful recruits
Netmarble has announced a new collaboration between the collectible card game RPG Tower of God: New World and the WEBTOON series Teenage Mercenary. Four characters from the webcomic will make their way over to be recruited, and there will also be a multitude of events to play through for big rewards. [Read more]
Read more »
Thursday November 21
09:54 am
Digital Extremes releases prequel webcomic to get us pumped for Warframe: 1999 | 148Apps
Digital Extremes releases prequel webcomic to get us pumped for Warframe: 1999
Do you like to read stories but are tired of all those bloody words getting in the way? If so, you probably aren’t reading this. I didn’t think that through... But moving on! Digital Extremes has released its much anticipated, by me, free prequel webcomic for Warframe: 1999. [Read more]
Read more »
Wednesday November 20
09:18 am
Solo Leveling: Arise introduces pre-registration for upcoming raid based on popular anime arc | 148Apps
Solo Leveling: Arise introduces pre-registration for upcoming raid based on popular anime arc
Since launching earlier this year, Solo Leveling: Arise has been quite busy with events, commemorating two age milestones and introducing a few new characters. With the impending release of the Jeju Island Raid, the content train is primed to keep rolling, and you can get some extra goodies for pre-registering. [Read more]
Read more »
Tuesday November 19
09:53 am
The 2024 PUBG Mobile Global Championship Group Stages conclude as we prepare for the crucible of the Survival Stage | 148Apps
The 2024 PUBG Mobile Global Championship Group Stages conclude as we prepare for the crucible of the Survival Stage
We have seen the Group Stages of the PUBG Mobile Global Championship conclude recently, after three weeks of dizzying highs, devastating lows, and other such emotions. Capping off the stage with Brute Force, topping Group Green with 187 points, comprised of three wins and an impressive 110 eliminations. [Read more]
Read more »
Monday November 18
09:33 am
Jujutsu Kaisen Phantom Parade hits a double whammy with eight-million-player celebration and a new SSR-character | 148Apps
Jujutsu Kaisen Phantom Parade hits a double whammy with eight-million-player celebration and a new SSR-character
There are many ways to justify success when it comes to gaming; reviews, units sold, revenue and the like. I would also accept smashing eight million global players since releasing around a week ago, a feat that Jujutsu Kaisen Phantom Parade has achieved. To celebrate, you can claim a huge mountain of free gifts. [Read more]
Read more »
Friday November 15
10:44 pm
Remember Payphones? – The TouchArcade Show #608 | iOS App of Day
Remember Payphones? – The TouchArcade Show #608
In this week’s exciting new episode of The TouchArcade Show we kick things off with a lengthy discussion about Eli’s … Continue reading ""
Read more »
11:28 am
Version 1.4 of Wuthering Waves launches with a revamp of an old game mode | 148Apps
Version 1.4 of Wuthering Waves launches with a revamp of an old game mode
Kuro Games has released Version 1.4 of Wuthering Waves, bringing with it a host of additions. When the Night Knocks introduces a fantastically powerful five-star Resonator complete with a companion story, as well as a new take on the Somnoire: Illusive Realms mode. [Read more]
Read more »
Thursday November 14
08:36 am
TiMi Studio Group is taking the reigns in the iconic series with Monster Hunter Outlanders | 148Apps
TiMi Studio Group is taking the reigns in the iconic series with Monster Hunter Outlanders
If you wanted to play Monster Hunter on your mobile then you have a few choices; Stories for some turn-based fun, Puzzles for, well take a guess, and NOW if you need a reason to walk. We all need a nudge. But what about the true Monster Hunter experience? Enter, Monster Hunter Outlanders. [Read more]
Read more »
Wednesday November 13
10:31 am
GoGo Muffin launches its second closed beta test ahead of launch early next month | 148Apps
GoGo Muffin launches its second closed beta test ahead of launch early next month
After making a name for itself in Hong Kong and Taiwan, and then again with its first beta last month, GoGo Muffin is building up a lot of momentum ahead of its release on December 3rd. But first, there will be a week of a second beta test, and anyone can get involved and try out this cosy MMORPG. [Read more]
Read more »
Tuesday November 12
02:00 pm
Explore Motori Mountain and learn about the soul mages in Guardian Tales latest update | 148Apps
Explore Motori Mountain and learn about the soul mages in Guardian Tales latest update
Kakao Games has announced the unveiling of a huge new area in its action RPG Guardian Tales. World 20: Motori Mountain will not only give you somewhere new to explore, but you can also recruit a valuable ally, and take part in a host of events stuffed with some very helpful items. [Read more]
Read more »
Monday November 11
08:58 am
Wake up, get up, and get out there as Persona V Royal returns to Identity V | 148Apps
Wake up, get up, and get out there as Persona V Royal returns to Identity V
I am a massive fan of the Persona series, so much so that I bought a PS Vita just to import the special edition of Persona 4 Golden from Canada and lose many university nights to it. Sadly, I couldn't get into Persona 5, but good news for all those who did! The second crossover with Persona 5 Royal has arrived in Identity V. [Read more]
Read more »
Friday November 08
09:30 pm
They Put the Power Button WHERE!? – The TouchArcade Show #607 | iOS App of Day
They Put the Power Button WHERE!? – The TouchArcade Show #607
In this week’s episode of The TouchArcade Show I give a recap of the past 2 weeks of my life, … Continue reading ""
Read more »
10:13 am
Uncharted Water Origin is making a massive change to its gacha system starting January | 148Apps
Uncharted Water Origin is making a massive change to its gacha system starting January
Right now in Uncharted Waters Origin, you can take part in the exciting-sounding Treasure Exploration 2 season event. Until December 4th you can log in for 14 days total to receive daily rewards, including the 28-day long Dream of El Dorado buff. But, there is more to enjoy in this update. [Read more]
Read more »
Thursday November 07
10:09 am
Old School RuneScape gets a new school facelift for its sixth birthday | 148Apps
Old School RuneScape gets a new school facelift for its sixth birthday
We took a trip to the written world of Gielinor yesterday with the new book and comic, and now we return to the virtual world with Old School RuneScape. It has been six years since mobile players were able to travel back in time to a simpler MMO life, and now we are receiving a suite of revamped features. [Read more]
Read more »
Wednesday November 06
10:04 am
The literary universe of RuneScape expands with two new offerings | 148Apps
The literary universe of RuneScape expands with two new offerings
The world of Gielinor has many wonderful and fantastic tales, as you would expect for a game like Runescape which has been running for about a billion years. So many in fact, that they can’t all be told in one place, and so Jagex has collaborated to bring a few new written stories to the world. [Read more]
Read more »

Older posts

Friday December 06
5 minutes ago
GoTo Connect – Voice experience not available | GoToMeeting
GoTo Connect – Voice experience not available
Dec 6, 13:20 UTCIdentified - Our engineers have identified the issue and are now actively working towards a resolution. Customers affected by this should reload the GoTo App to correct this issue.We will provide another update shortly.Dec 6, 13:17 UTCUpdate - We are continuing to investigate this issue.Dec 6, 13:15 UTCInvestigating - We are actively investigating reports that some GoTo Connect customers may be not seeing the voice experience within the GoTo App.Our engineers are working to identify the issue and will provide another update shortly.
Read more »
Thursday December 05
11:20 pm
Delayed alert notifications for the EU region. | New Relic
Delayed alert notifications for the EU region.
Dec 5, 23:20 UTCInvestigating - Some customers in the EU region may intermittently experience delayed alert notifications. Data ingest is not impacted at this time.
Read more »
10:16 pm
Issues with Bring Your Own IP (BYOIP) / Bring Your Own IP On-Demand feature | CloudFlare
Issues with Bring Your Own IP (BYOIP) / Bring Your Own IP On-Demand feature
Dec 5, 22:16 UTCIdentified - The issue has been identified and a fix is being implemented.Dec 5, 22:02 UTCInvestigating - Cloudflare is investigating issues with Bring Your Own IP (BYOIP) / Bring Your Own IP (BYOIP) On-Demand feature. We are working to analyse and mitigate this problem. More updates to follow shortly. Impact is restricted to changes in the Bring Your Own IP (BYOIP) configuration and it does not affect any connectivity, security or CDN functionality.
Read more »
09:31 pm
Zap error notification emails delayed | Zapier
Zap error notification emails delayed
Dec 5, 13:31 PSTInvestigating - As of 7:40 am UTC, users may see a delay of up to 3 hours for error notifications regarding failed Zap Runs.Zap Runs and tasks are proceeding as expected.Our team is actively looking into this issue and trying to minimize its impact on your use of our service. We appreciate your patience as we work to resolve this.If you need further assistance, please do not hesitate to reach out to our Support Team: https://zapier.com/app/get-help.
Read more »
07:37 pm
Increased HTTP 503 errors for Workers requests | CloudFlare
Increased HTTP 503 errors for Workers requests
Dec 5, 19:37 UTCIdentified - Cloudflare is investigating increased levels of HTTP 503 errors for Workers requests.
Read more »
06:41 pm
Cloudflare Access Infrastructure SSH applications not emitting command logs | CloudFlare
Cloudflare Access Infrastructure SSH applications not emitting command logs
Dec 5, 18:41 UTCIdentified - Cloudflare is investigating an issue causing SSH Infrastructure Application command logging to not emit command logs. All Access authentication, including infrastructure apps, and all other application type logging are not impacted at this time.
Read more »
06:17 pm
HTTP 500 errors when modifying DNS records, Pages projects, Workers subdomains | CloudFlare
HTTP 500 errors when modifying DNS records, Pages projects, Workers subdomains
Dec 5, 18:17 UTCMonitoring - A fix has been implemented and we are monitoring the results.Dec 5, 18:13 UTCIdentified - The issue has been identified and a fix is being implemented.Dec 5, 18:11 UTCInvestigating - Cloudflare is investigating reports of HTTP 500 errors when modifying or querying DNS records via the Cloudflare API, creating new Pages projects, and creating or changing Workers subdomains.
Read more »
04:11 pm
Issues with Analytics | CloudFlare
Issues with Analytics
Dec 5, 16:11 UTCResolved - Cloudflare is aware of, and investigating an issue with GraphQL-based analytics in the dashboard and API.
Read more »
02:50 pm
Possible Network Congestion in Mumbai (BOM) and Delhi (DEL) | CloudFlare
Possible Network Congestion in Mumbai (BOM) and Delhi (DEL)
Dec 5, 14:50 UTCInvestigating - Cloudflare is observing possible network congestion in Mumbai (BOM) and Delhi (DEL).We are working to mitigate impact to Internet users in this region.
Read more »
02:40 pm
SMS Delivery Delays to MyTel in Myanmar | Twilio
SMS Delivery Delays to MyTel in Myanmar
Dec 5, 06:40 PSTResolved - We are no longer experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. This incident has been resolved.Dec 5, 04:56 PSTMonitoring - We are observing recovery in SMS delivery delays when sending messages to MyTel network in Myanmar. We will continue monitoring the service to ensure a full recovery. We will provide another update in 2 hours or as soon as more information becomes available.Dec 4, 13:31 PSTUpdate - We continue experiencing SMS delivery delays when sending messages to MyTel Network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 24 hours or as soon as more information becomes available.Dec 3, 21:31 PSTUpdate - We continue experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 16 hours or as soon as more information becomes available.Dec 3, 13:37 PSTUpdate - We continue experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 8 hours or as soon as more information becomes available.Dec 3, 09:30 PSTUpdate - We continue experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 4 hours or as soon as more information becomes available.Dec 3, 09:29 PSTUpdate - We continue experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 2 hours or as soon as more information becomes available.Dec 3, 07:35 PSTUpdate - We continue experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 2 hours or as soon as more information becomes available.Dec 3, 06:46 PSTInvestigating - We are experiencing SMS delivery delays when sending messages to MyTel network in Myanmar. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available.
Read more »
12:56 pm
Customers trying to authenticate to the Pipedrive Integration get an error saying “App is not found”. | Zapier
Customers trying to authenticate to the Pipedrive Integration get an error saying “App is not found”.
Dec 5, 04:56 PSTInvestigating - We are currently investigating an issue with our Pipedrive Integration.Some customers are unable to authenticate to the Pipedrive Integration and are encountering an error displayed as “App is not found”.This issue seems to be affecting users trying to connect to the Pipedrive Integration.The impact of this issue is that affected users are unable to connect to Pipedrive through Zapier at this moment.Please, if you have additional questions or need further assistance, don't hesitate to contact our support team.We appreciate your understanding as we diligently work on resolving this issue. Updates will be provided as we receive more information. Thank you for your patience.
Read more »
12:16 pm
SMS Delivery Delays To and From Hungary, Austria and Czech Republic Via Subset Of Domestic Sender IDs | Twilio
SMS Delivery Delays To and From Hungary, Austria and Czech Republic Via Subset Of Domestic Sender IDs
Dec 5, 04:16 PSTInvestigating - We are experiencing SMS delivery delays to and from Hungary, Austria and Czech Republic subset of domestic Sender IDs. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available.
Read more »
10:35 am
Issues with Page Rules containing Server Side Excludes | CloudFlare
Issues with Page Rules containing Server Side Excludes
Dec 5, 10:35 UTCInvestigating - Cloudflare is aware of, and investigating an issue with Page Rules including Server Side Excludes which may be causing 500 errors on traffic. We are working on resolving the issue. Customers can remove the Server Side Excludes from Page Rules as a workaround in the meantime.
Read more »
09:42 am
Potential Service Interruption | New Relic
Potential Service Interruption
Dec 5, 09:42 UTCUpdate - We are investigating a potential service interruption that may impact some customers. Some customers may be experiencing issues with APM monitoring/tools not displaying data. Please continue to monitor this page for updates.Dec 5, 09:38 UTCInvestigating - We are investigating a potential service interruption that may impact some customers. Please continue to monitor this page for updates.
Read more »
09:22 am
ORD (Chicago) on 2024-12-05 | CloudFlare
ORD (Chicago) on 2024-12-05
THIS IS A SCHEDULED EVENT Dec 5, 09:30 - 12:30 UTCDec 5, 09:16 UTCScheduled - We will be performing scheduled maintenance in ORD (Chicago) datacenter on 2024-12-05 between 09:30 and 12:30 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network interfaces in this datacentre may become temporarily unavailable.You can now subscribe to these notifications via Cloudflare dashboard and receive these updates directly via email, PagerDuty and webhooks (based on your plan): https://developers.cloudflare.com/notifications/notification-available/#cloudflare-status.
Read more »
05:52 am
GoToMyPC – Emergency Maintenance | GoToMeeting
GoToMyPC – Emergency Maintenance
THIS IS A SCHEDULED EVENT Dec 5, 06:00 - 07:30 UTCDec 5, 05:34 UTCScheduled - As part of our commitment to provide exceptional service and reliability to our customers, GoToMyPC will be conducting emergency service maintenance on the following date and time listed below. Our team will be taking all appropriate actions to minimize service interruptions during this event.Date and Time: December 5th, 2024, 6:00 AM UTC to 7:30 AM UTCPurpose: This maintenance is to ensure and maintain system performance and stability.Duration: All maintenance will be performed within the 1-hours and 30-minute maintenance window.What to expect:GoToMyPC customers may not be able to initiate sessions for a 5 minute period during the maintenance window. GoToMyPC sessions that are already in progress will not be impacted.We would like to thank you for your patience and understanding during this time.
Read more »
03:22 am
AKL (Auckland) on 2024-12-05 | CloudFlare
AKL (Auckland) on 2024-12-05
THIS IS A SCHEDULED EVENT Dec 5, 12:00 - 18:00 UTCDec 5, 02:52 UTCScheduled - We will be performing scheduled maintenance in AKL (Auckland) datacenter on 2024-12-05 between 12:00 and 18:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network interfaces in this datacentre may become temporarily unavailable.You can now subscribe to these notifications via Cloudflare dashboard and receive these updates directly via email, PagerDuty and webhooks (based on your plan): https://developers.cloudflare.com/notifications/notification-available/#cloudflare-status.
Read more »
12:53 am
Network Performance Issues in Istanbul | CloudFlare
Network Performance Issues in Istanbul
Dec 5, 00:53 UTCInvestigating - Cloudflare is investigating issues with network performance in Istanbul. We are working to analyze and mitigate this problem. More updates to follow shortly.
Read more »
12:52 am
United States Account Security Carrier Partner Maintenance – AT&T | Twilio
United States Account Security Carrier Partner Maintenance – AT&T
THIS IS A SCHEDULED EVENT Dec 4, 21:00 PST - Dec 5, 05:00 PSTDec 4, 16:36 PSTScheduled - Our carrier partner AT&T United States is conducting a planned maintenance from 04 December 2024 at 21:00 PST until 05 December 2024 at 05:00 PST. During the maintenance window, there could be intermittent API request failures for AT&T United States customers.Impacted Product: Verify Silent Network AuthWe are aware of the short notice and are working with our Carrier Partners to provide earlier notification where possible.
Read more »
12:40 am
UPDATE: We are experiencing elevated errors with BigQuery. | Google Cloud
UPDATE: We are experiencing elevated errors with BigQuery.
Incident began at 2024-12-04 14:30 (all times are US/Pacific).Summary: We are experiencing elevated errors with BigQuery. Description: As of Wednesday 2024-12-04 14:30 US/Pacific, we are experiencing elevated errors with BigQuery related to query and export jobs that access Google Drive. Mitigation work is currently underway by our engineering team The mitigation is expected to complete by Wednesday, 2024-12-04 17:30 US/Pacific. We will provide the next update by Wednesday, 2024-12-04 18:00 US/Pacific. Diagnosis: Impacted customers would encounter elevated errors or invalid values with “Error: 80324028” while accessing the Google Drive and these jobs would fail. Workaround: There is no workaround at this time. Affected products: Google BigQueryAffected locations: Johannesburg (africa-south1), Taiwan (asia-east1), Hong Kong (asia-east2), Tokyo (asia-northeast1), Osaka (asia-northeast2), Seoul (asia-northeast3), Mumbai (asia-south1), Delhi (asia-south2), Singapore (asia-southeast1), Jakarta (asia-southeast2), Sydney (australia-southeast1), Melbourne (australia-southeast2), Warsaw (europe-central2), Finland (europe-north1), Madrid (europe-southwest1), Berlin (europe-west10), Turin (europe-west12), London (europe-west2), Frankfurt (europe-west3), Netherlands (europe-west4), Zurich (europe-west6), Milan (europe-west8), Paris (europe-west9), Doha (me-central1), Dammam (me-central2), Tel Aviv (me-west1), Montréal (northamerica-northeast1), Toronto (northamerica-northeast2), São Paulo (southamerica-east1), Santiago (southamerica-west1), Iowa (us-central1), South Carolina (us-east1), Northern Virginia (us-east4), Columbus (us-east5), Dallas (us-south1), Oregon (us-west1), Los Angeles (us-west2), Salt Lake City (us-west3), Las Vegas (us-west4)
Read more »

Older posts

Showcase

Kool Tools: Pegasus3 Symply Edition

Promise Technology and Symply have launched the Pegasus3 Symply Edition, the next generation of the Pegasus desktop RAID storage system. The new system combines 40 Gb/s Thunderbolt 3 performance with Symply's storage management suite. The Pegasus3 Symply Edition is a...

Kool Tools: TimeCache

The Rolling Stones told us that time was on our side (or at least Mick Jagger's side). That's not always true, but with TimeCache (http://www.pandaware.com/timecache/index.html) for Mac OS X from PandaWare we can at least keep track of it. With TimeCache -- now...

Kool Tools: PDF Editor for Mac

Editing PDF files on Mac OS X can be tough, but a product from AnyBizSoft, a Wondershare company focused on PDF solutions, simplifies the process. PDF Editor for Mac, integrates AnyBizSoft's existing PDF to Word conversion technology. It not only enables users to edit...

Kool Tools: Aunsoft’s Video Converter for the Mac

Aunsoft Video Converter for Mac (http://www.aunsoft.com/video-converter-mac/) is a US$35 Mac video converting tool you can use to convert just about any type of video for use on a variety of Apple devices. What's more, it also boasts a several editing features. This...

More Showcase

Scanners “By The Numbers”

Thursday December 05
04:35 pm
13-inch M2 MacBook Airs on Holiday sale for only $769 at B&H with free 1-2 day shipping | MacPrices.net
13-inch M2 MacBook Airs on Holiday sale for only $769 at B&H with free 1-2 day shipping
B&H Photo has 13" MacBook Airs with M2 CPUs, 8GB of RAM, and 256GB of storage in stock and on sale for $230 off Apple's original MSRP, only $769. Free 1-2 day delivery is available to most US addresses. Their prices are among the lowest currently available for in-stock new M2 MacBook Airs among Apple's retailers: 8-core M2/8-core GPU/8GB RAM/256GB SSD - 13" MacBook Air Space Gray: $769 $230 off MSRP - 13" MacBook Air Silver: $769 $230 off MSRP - 13" MacBook Air Starlight: $769 $230 off MSRP - 13" MacBook Air Midnight: $769 $230 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker.
Read more »
12:50 pm
Apple has clearance 15-inch M2 MacBook Airs available starting at $929, Certified Refurbished | MacPrices.net
Apple has clearance 15-inch M2 MacBook Airs available starting at $929, Certified Refurbished
Apple has clearance, Certified Refurbished, 15" M2 MacBook Airs now available starting at $929 and ranging up to $410 off original MSRP. These are the cheapest 15" MacBook Airs for sale today at Apple. Apple's one-year warranty is included, shipping is free, and each MacBook has a new outer shell. The following standard-configurations are available: - 15" MacBook Air/8-Core M2 CPU, 8-Core GPU/8GB RAM/256GB SSD/Space Gray: $929, $370 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 8-Core GPU/8GB RAM/256GB SSD/Silver: $929, $370 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 8-Core GPU/8GB RAM/256GB SSD/Starlight: $929, $370 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 8-Core GPU/8GB RAM/256GB SSD/Midnight: $929, $370 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 10-Core GPU/8GB RAM/512GB SSD/Space Gray: $1089, $410 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 10-Core GPU/8GB RAM/512GB SSD/Silver: $1089, $410 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 10-Core GPU/8GB RAM/512GB SSD/Starlight: $1089, $410 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 10-Core GPU/8GB RAM/512GB SSD/Midnight: $1089, $410 off original MSRP According the Apple, “You will receive a 'like new' device with genuine Apple replacement parts (as needed) that has been thoroughly cleaned and inspected. Every device will come with all accessories, cables and operating systems. All Apple Certified Refurbished products are packaged in a brand new white box and will be sent to you with free shipping and returns.” Note that stock status may vary, check Apple's site for availability. For the latest sales & prices, see our 15" MacBook Air Price Tracker, updated daily.
Read more »
12:46 pm
Holiday Sale: 14-inch M4 Pro/M4 Max MacBook Pros for $200 off MSRP at B&H | MacPrices.net
Holiday Sale: 14-inch M4 Pro/M4 Max MacBook Pros for $200 off MSRP at B&H
B&H Photo is offering a $200 discount on new 14-inch MacBook Pros with M4 Pro or M4 Max MacBook Pros as part of their ongoing Holiday sales. B&H offers free 1-2 day shipping to most US addresses: - 14" M4 Pro MacBook Pro (24GB/512GB): $1799, $200 off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB): $2199, $200 off MSRP - 14" M4 Max MacBook Pro (36GB/1TB): $2999, $200 off MSRP Their prices are the lowest available today for new 14" M4 Pro/Max MacBook Pros among the Apple retailers we track. For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.
Read more »
Wednesday December 04
03:20 pm
Holiday Sale: 16-inch M4 Pro/M4 Max MacBook Pros for $200-$250 off MSRP at B&H | MacPrices.net
Holiday Sale: 16-inch M4 Pro/M4 Max MacBook Pros for $200-$250 off MSRP at B&H
B&H Photo is offering a $200-$250 discount on new 16-inch MacBook Pros with M4 Pro or M4 Max MacBook Pros as part of their ongoing Holiday sales. B&H offers free 1-2 day shipping to most US addresses: - 16" M4 Pro MacBook Pro (24GB/512GB): $2299, $200 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2699, $200 off MSRP - 16" M4 Max MacBook Pro (36GB/1TB): $3249, $250 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB): $3799, $200 off MSRP Their prices are the lowest available today for new 16" MacBook Pros among the Apple retailers we track. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.
Read more »
03:08 pm
Cheapest iMacs for sale today at Apple: Refurbished 24-inch M3 iMacs for $1019, M1 iMacs for only $969 | MacPrices.net
Cheapest iMacs for sale today at Apple: Refurbished 24-inch M3 iMacs for $1019, M1 iMacs for only $969
Apple has last year's 24-inch M3 iMacs available starting at $1019, Certified Refurbished. Each iMac is in like-new condition and comes with Apple's standard one-year warranty: - 24-inch M3 iMac 8-Core CPU/8-Core GPU (all colors): $1019, original MSRP $1299 - 24-inch M3 iMac 8-Core CPU/10-Core GPU/256GB SSD (all colors): $1189, original MSRP $1499 - 24-inch M3 iMac 8-Core CPU/10-Core GPU/512GB SSD (all colors): $1359, original MSRP $1699 Apple has clearance M1 iMacs available in their Certified Refurbished store starting at $969. These are the cheapest iMacs for sale at Apple: - 24-inch M1 iMac 8-Core CPU/7-Core GPU (all colors): $969 - 24-inch M1 iMac 8-Core CPU/8-Core GPU/256GB SSD (all colors): $1139 - 24-inch M1 iMac 8-Core CPU/8-Core GPU/512GB SSD (all colors): $1299 Details at Apple here. For the latest prices and deals, see our iMac Price Tracker, updated daily.
Read more »
12:38 pm
Apple Watch Series 9 in stock today at Apple starting at $299, Certified Refurbished | MacPrices.net
Apple Watch Series 9 in stock today at Apple starting at $299, Certified Refurbished
Apple has a full line of Certified Refurbished Apple Watch Series 9 models available in their online store starting at $299. Each Watch includes Apple's standard one-year warranty, a new outer case, new band, and free shipping: - 41mm Apple Watch Series 9 GPS: $299 - 45mm Apple Watch Series 9 GPS: $319 - 41mm Apple Watch Series 9 GPS + Cellular: $379 - 45mm Apple Watch Series 9 GPS + Cellular: $399 Note that availability of specific models and colors vary and can change rapidly. Details available at Apple here. For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.
Read more »
12:31 pm
Full size 2nd-generation HomePods in stock at Apple for $249, $50 off MSRP | MacPrices.net
Full size 2nd-generation HomePods in stock at Apple for $249, $50 off MSRP
Apple has Certified Refurbished White and Midnight HomePods available for $249, Certified Refurbished. That's $50 off MSRP and the lowest price currently available for a full-size Apple HomePod today. Shipping is free, and each HomePod includes Apple's standard 1-year warranty. The outer case is new. According to Apple, "Each Apple Certified Refurbished Product: - Undergoes full functionality testing and any defective modules identified in testing are replaced. - Is put through a thorough cleaning process and inspection. - Is repackaged (including appropriate manuals, cables, new boxes). - Includes either the Operating System originally shipped with the unit or, in some cases, a more recent version. - Is placed into a Final QA inspection prior to being added to sellable refurbished stock." For the latest prices & sales, see our HomePod Price Tracker, updated daily.
Read more »
Tuesday December 03
01:25 pm
Holiday Sale at Verizon: HomePod minis for $84.99, save $14 (15% off) | MacPrices.net
Holiday Sale at Verizon: HomePod minis for $84.99, save $14 (15% off)
Snag an Apple HomePod mini in your favorite color at Holiday sale prices, now $15 off at Verizon ($84.99). Compact yet powerful, the HomePod mini delivers rich, 360-degree sound and integrates seamlessly with your Apple devices and smart home setup. Their sale price applies to all mini colors and represents a rare HomePod sale price. Verizon service is not required for purchase. Buy online and choose free shipping or free local store pickup (if available). Sale price for online orders only, in-store price may vary. See our HomePod Price Tracker for the latest prices and deals from Apple and its retailers.
Read more »
Monday December 02
03:33 pm
Cyber Monday deals are live at Apple, final day to get a gift card worth up to $200 with these purchases | MacPrices.net
Cyber Monday deals are live at Apple, final day to get a gift card worth up to $200 with these purchases
Apple's four day Black Friday/Cyber Monday 2024 Shopping Event is now live and will run from November 29, 2024 to December 2, 2024. That means today is the final day! Receive a free $150-$200 Apple Gift Card with the purchase of select Macs and $75-$100 with select iPads. Get a $25-$75 Apple Gift Card with select iPhone models as well as $50 with select Apple Watch models. AirPods qualify for $25 to $75 Gift Cards, depending on the model. Click through to see how much is included with each product...
Read more »
02:54 pm
Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday | MacPrices.net
Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday
Apple retailers have 13" M3 and M2 MacBook Airs on Cyber Monday sale this year for $200 off MSRP. Prices start at only $799 for new Airs with 16GB of memory. Here are the retailers offering the lowest prices today: - (1): Amazon has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP, each including free shipping. Price start at only $899: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP - (2): Best Buy has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Best Buy has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP as well, only $799. Sale price for online orders only, in-store price may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.
Read more »
02:54 pm
Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday | MacPrices.net
Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday
Apple retailers have 13" M3 and M2 MacBook Airs on Cyber Monday sale this year for $200 off MSRP. Prices start at only $799 for new Airs with 16GB of memory. Here are the retailers offering the lowest prices today: - (1): Amazon has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP, each including free shipping. Price start at only $899: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP - (2): Best Buy has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Best Buy has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP as well, only $799. Sale price for online orders only, in-store price may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.
Read more »
02:54 pm
Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday | MacPrices.net
Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday
Apple retailers have 13" M3 and M2 MacBook Airs on Cyber Monday sale this year for $200 off MSRP. Prices start at only $799 for new Airs with 16GB of memory. Here are the retailers offering the lowest prices today: - (1): Amazon has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP, each including free shipping. Price start at only $899: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP - (2): Best Buy has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Best Buy has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP as well, only $799. Sale price for online orders only, in-store price may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.
Read more »

Older posts

Monday December 02
10:00 am
Apple Store Cyber Monday Last Chance Deals: Up to $200 Gift Card w/ purchase + free shipping | DealNews iPads
Apple Store Cyber Monday Last Chance Deals: Up to $200 Gift Card w/ purchase + free shipping
Today’s your last chance to get a gift card worth up to $200 with select Apple Store purchases. MacBooks get the biggest gift cards, as you’d expect, but offers start with $25 gift cards on various iPad accessories. Some highlights: Up to $200 Apple Gift Card w/ MacBook Air M3 13″ or 15″, or M2 […]
Read more »
10:00 am
Apple Store Cyber Monday Last Chance Deals: Up to $200 Gift Card w/ purchase + free shipping | DealNews Laptops
Apple Store Cyber Monday Last Chance Deals: Up to $200 Gift Card w/ purchase + free shipping
Today’s your last chance to get a gift card worth up to $200 with select Apple Store purchases. MacBooks get the biggest gift cards, as you’d expect, but offers start with $25 gift cards on various iPad accessories. Some highlights: Up to $200 Apple Gift Card w/ MacBook Air M3 13″ or 15″, or M2 […]
Read more »
Friday November 29
10:40 am
Apple MacBook Pro M4 Laptops at Best Buy From $1,399 + free shipping | DealNews Laptops
Apple MacBook Pro M4 Laptops at Best Buy From $1,399 + free shipping
These Black Friday doorbuster deals take up to $400 off these new MacBook Pro models, only released earlier this month. 20 builds are on sale in total. Buy Now at Best Buy
Read more »
08:29 am
Apple Store Black Friday Deals: Up to $200 Gift Card w/ purchase + free shipping | DealNews iPads
Apple Store Black Friday Deals: Up to $200 Gift Card w/ purchase + free shipping
Through December 2, you’ll get an Apple Gift Card worth up to $200 with select purchases. MacBooks get the biggest gift cards, as you’d expect, but offers start with $25 gift cards on various iPad accessories. Some highlights: Up to $200 Apple Gift Card w/ MacBook Air M3 13″ or 15″, or M2 13″Up to […]
Read more »
08:29 am
Apple Store Black Friday Deals: Up to $200 Gift Card w/ purchase + free shipping | DealNews Laptops
Apple Store Black Friday Deals: Up to $200 Gift Card w/ purchase + free shipping
Through December 2, you’ll get an Apple Gift Card worth up to $200 with select purchases. MacBooks get the biggest gift cards, as you’d expect, but offers start with $25 gift cards on various iPad accessories. Some highlights: Up to $200 Apple Gift Card w/ MacBook Air M3 13″ or 15″, or M2 13″Up to […]
Read more »
Thursday November 28
04:14 pm
Tablet and E-Reader Deals at Best Buy: Up to 50% off + free shipping | DealNews iPads
Tablet and E-Reader Deals at Best Buy: Up to 50% off + free shipping
Save on tablets from Samsung, Lenovo, Apple, and more. We’ve pictured the Lenovo Tab M9 9″ 32GB Android Tablet for $80 ($60 off). Shop Now at Best Buy
Read more »
04:06 pm
Apple MacBooks & iMac Doorbuster Deals at Best Buy: Up to $500 off + free shipping | DealNews Laptops
Apple MacBooks & iMac Doorbuster Deals at Best Buy: Up to $500 off + free shipping
These Black Friday doorbuster deals drop MacBook Air laptops as low as $749, iMacs as low as $1,199, and MacBooks Pro as low as $1,399. Plus, My Best Buy Total members can save an extra $50 on select models. (My Best Buy Total is a paid membership, which costs $180 annually.) Shop Now at Best Buy
Read more »
Wednesday November 27
09:28 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Blue – G1973LL/A – $1,329.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Blue – G1973LL/A – $1,329.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU - Blue – G1973LL/A $1,329.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 16GB unified memory 512GB SSD¹ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Product page on the Apple Store…
Read more »
09:28 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Purple – G19Q6LL/A – $1,829.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Purple – G19Q6LL/A – $1,829.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Purple – G19Q6LL/A $1,829.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 24GB unified memory 1TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
08:21 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Blue – G19L7LL/A – $2,139.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Blue – G19L7LL/A – $2,139.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Blue – G19L7LL/A $2,139.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 24GB unified memory 2TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
07:55 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Purple – G19Q1LL/A – $1,829.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Purple – G19Q1LL/A – $1,829.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Purple – G19Q1LL/A $1,829.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 8GB unified memory 2TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
07:55 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Silver – G1955LL/A – $1,329.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Silver – G1955LL/A – $1,329.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU - Silver – G1955LL/A $1,329.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 24GB unified memory 256GB SSD¹ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Product page on the Apple Store…
Read more »
07:55 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Blue – G19L4LL/A – $1,989.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Blue – G19L4LL/A – $1,989.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Blue – G19L4LL/A $1,989.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 16GB unified memory 2TB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
07:25 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Green – G1960LL/A – $1,179.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Green – G1960LL/A – $1,179.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU - Green – G1960LL/A $1,179.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 8GB unified memory 512GB SSD¹ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Product page on the Apple Store…
Read more »
06:49 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Blue – G1970LL/A – $1,179.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU – Blue – G1970LL/A – $1,179.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 8-Core GPU - Blue – G1970LL/A $1,179.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 8GB unified memory 512GB SSD¹ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Product page on the Apple Store…
Read more »

Older posts

Friday December 06
11 seconds ago
*Apple* / Mac Administrator – JAMF Pro – Amentum (United States) | Job Search Engine
*Apple* / Mac Administrator – JAMF Pro – Amentum (United States)
Amentum is seeking an ** Apple / Mac Administrator - JAMF Pro** to provide support with the Apple Ecosystem to include hardware and software to join our team and
Read more »
20 seconds ago
Seasonal Operations Associate – *Apple* Blossom Mall – JCPenney (United States) | Job Search Engine
Seasonal Operations Associate – *Apple* Blossom Mall – JCPenney (United States)
Seasonal Operations Associate - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) -
Read more »
29 seconds ago
Seasonal Fine Jewelry Commission Associate – *Apple* Blossom Mall – JCPenney (United States) | Job Search Engine
Seasonal Fine Jewelry Commission Associate – *Apple* Blossom Mall – JCPenney (United States)
…Fine Jewelry Commission Associate - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states)
Read more »
38 seconds ago
Seasonal Cashier – *Apple* Blossom Mall – JCPenney (United States) | Job Search Engine
Seasonal Cashier – *Apple* Blossom Mall – JCPenney (United States)
Seasonal Cashier - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) - Apple
Read more »
47 seconds ago
Operations Associate – *Apple* Blossom Mall – JCPenney (United States) | Job Search Engine
Operations Associate – *Apple* Blossom Mall – JCPenney (United States)
Operations Associate - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) - Apple
Read more »
55 seconds ago
Omnichannel Associate – *Apple* Blossom Mall – JCPenney (United States) | Job Search Engine
Omnichannel Associate – *Apple* Blossom Mall – JCPenney (United States)
Omnichannel Associate - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) - Apple
Read more »
1 minute ago
Beauty Consultant – *Apple* Blossom Mall – JCPenney (United States) | Job Search Engine
Beauty Consultant – *Apple* Blossom Mall – JCPenney (United States)
Beauty Consultant - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) - Apple
Read more »
1 minute ago
Field Services Desktop Support Technician (Microsoft and *Apple* ) – CTG (United States) | Job Search Engine
Field Services Desktop Support Technician (Microsoft and *Apple* ) – CTG (United States)
…to provide onsite technical assistance and support for our Microsoft OS and Apple iOS environments. The ideal candidate will have hands-on experience with mobile
Read more »
1 minute ago
Cashier – *Apple* Blossom Mall – JCPenney (United States) | Job Search Engine
Cashier – *Apple* Blossom Mall – JCPenney (United States)
Cashier - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) - Apple Blossom Mall
Read more »
29 minutes ago
Nurse Anesthetist – *Apple* Hill Surgery Center – WellSpan Health (United States) | Job Search Engine
Nurse Anesthetist – *Apple* Hill Surgery Center – WellSpan Health (United States)
Nurse Anesthetist - Apple Hill Surgery Center Location: WellSpan Medical Group, York, PA Schedule: Full Time At WellSpan Health, our community of 23,000 employees,
Read more »
29 minutes ago
Environmental Services Technician – *Apple* Hill – Evening/Night – WellSpan Health (United States) | Job Search Engine
Environmental Services Technician – *Apple* Hill – Evening/Night – WellSpan Health (United States)
Environmental Services Technician - Apple Hill - Evening/Night Location: WellSpan Health, York, PA Schedule: Part Time Part Time (40 hours Biweekly) Monday - Friday
Read more »
29 minutes ago
Pharmacy Technician Retail – *Apple* Hill – Part Time – Day/Evening – WellSpan Health (United States) | Job Search Engine
Pharmacy Technician Retail – *Apple* Hill – Part Time – Day/Evening – WellSpan Health (United States)
Pharmacy Technician Retail - Apple Hill - Part Time - Day/Evening Location: WellSpan Health, York, PA Schedule: Part Time Schedule: Part Time 20-hours per week
Read more »
30 minutes ago
Registered Nurse – Outpatient Procedural – *Apple* Hill Surgery Center – Day – WellSpan Health (United States) | Job Search Engine
Registered Nurse – Outpatient Procedural – *Apple* Hill Surgery Center – Day – WellSpan Health (United States)
Registered Nurse - Outpatient Procedural - Apple Hill Surgery Center - Day Location: WellSpan Health, York, PA Schedule: Part Time Schedule Part Time: 32 Hours/Week
Read more »

Older posts