Apple researchers unveil SimpleDesign, a new AI model for protein design
In a new study, Apple researchers detail SimpleDesign, a streamlined AI model that can jointly generate protein sequences and structures. Here are the details. more…

Read more »

WhatsApp rolling out redesigned iPad interface with Mac-like sidebar
Following a few months of Liquid Glass beta testing, WhatsApp is expanding access to a redesigned interface for its iPad app, including a new Mac-like sidebar. Here are the details. more…

Read more »

Leaker says Apple will pay $250 per iPhone Duo display in three-year Samsung deal
While memory costs are expected to comfortably lead the iPhone 18 Pro’s bill of materials, the same may not be true for the iPhone Duo. Here are the details. more…

Read more »

9to5Mac Overtime 081: iPhone Duo thoughts and impressions
Jeff and Fernando discuss their initial thoughts and impressions of the iPhone Duo, Apple’s first foldable smartphone. Sponsored by Bitwarden: Register for the free, virtual Open Source Security Summit on September 17, featuring cybersecurity leaders David Sanger and Joseph Menn — and check out Bitwarden for trusted open source password, passkey, and secrets management, with end-to-end encryption and seamless autofill across all your devices. more…

Read more »

Report: iPhone price hike ‘better than feared,’ iPhone Duo to drive demand for the cycle
In an investor note seen by 9to5Mac, analyst Jeff Pu noted that while this week’s iPhone price hike was better than feared, the iPhone Duo is still likely to drive demand for the cycle, as early consumer interest appears strong. Here are the details. more…

Read more »

New standalone Roblox games will spread safety risks beyond the main app
Roblox is pushing its games into standalone apps and web browsers even as 182 federal child sexual exploitation cases remain pending.RobloxThe company announced September 11 that creators will be able to release standalone games for mobile devices, PCs, and consoles. Players will also be able to open Roblox games in Chrome by the end of 2026 without installing the main app.Standalone releases and browser links could expose Roblox games to more people through app stores, search, videos, social posts, messages, and email. Roblox hasn't said whether every game will include the main app's protections or who will enforce them.Previous child safety coverage documented how Roblox's social features can connect children with strangers. Conversations can then move to outside services where its moderation tools no longer apply. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Tonight’s the cutoff: Get ready now for iPhone 18 Pro pre-orders
Apple’s iPhone 18 Pro and iPhone 18 Pro Max pre-orders open Saturday, September 12 at 5 a.m. Pacific Time. Shoppers who want a faster… The post appeared first on MacDailyNews.

Read more »

Apple ranks third on TIME’s World’s Best Companies list after last year’s absence
TIME’s “The World’s Best Companies 2026” list is out, with Apple returning at No. 3 after dropping off the ranking last year. Here are the details. more…

Read more »

Apple TV this week: ‘Last Seen’ is now streaming
Macworld What’s new on Apple TV? What are the best shows and movies? How do you sign up and what does it cost? This article will answer all of that, and you’ll also get a list of all the currently-available Apple TV content. There’s also a ton of new content in the works for Apple’s service, too. If you want to know what’s on the way, check out our list of upcoming Apple TV shows and movies. Updated September 11, 2026: Last Seen is now streaming. Mentioned IN THIS story Apple TV 4K (2022, 3. Gen.) 128GB WiFi + Ethernet Read our review Price When Reviewed: 64GB – $129 | 128GB $149 Best Prices Today: $129 at Apple Latest Apple TV releases Last SeenReleased: September 9, 2026 MaydayReleased: September 4, 2026 Dark Matter (season 2)Released: August 28, 2026 The Dynasty: UConn HuskiesReleased: August 21, 2026 Women in Blue (Las Azules) (season 2)Released: August 12, 2026 Ted Lasso (season 4)Released: August 5, 2026 How to get Apple TV You can subscribe to Apple TV on Apple’s website here, or via the Apple TV app on your device. It costs $12.99/£9.99 a month, which you can cancel at any time (Read: How to cancel an Apple subscription). You can also opt for a one-year subscription for $99/£89, which essentially gives you two months free each year. Apple also offers various trials so that you can try out Apple TV before you subscribe. Take a look at our article explaining all the ways you can watch Apple TV for free, and the best Apple TV deals you can get. Students can get Apple TV for free with an already subsidized Apple Music subscription. Best shows on Apple TV There’s far too much content on Apple TV to sift through it all yourself. If you’re looking for something to watch and don’t know where to start, here are a few of the Macworld staff’s favorite shows, series, and movies. Bad Sisters Synopsis: A dark comedy about a group of Irish sisters who find themselves at the center of a life insurance investigation after John Paul–the abusive husband to one of the sisters–dies unexpectedly. Number of seasons: 2 Release date: August 19, 2022 Black Bird Synopsis: A gripping miniseries about a convicted con artist who works for the FBI to try to get a serial killer’s confession before he is released from prison. Based on the true story of James Keene and Larry Hall. Number of seasons: 1 Release date: July 8, 2022 Pluribus Synopsis: A mysterious virus-like pathogen turns the entire human race into a peaceful hive-mind, except for a handful of individuals. Created by Vince Gilligan, of Breaking Bad and Better Call Saul fame. Number of seasons: 1 Release date: November 17, 2025 Severance Synopsis: A combination of dystopian sci-fi drama and workplace comedy about a company where employees are “severed”–when at work, they can’t remember their outside lives, and vice-versa. Number of seasons: 2 Release date: February 18, 2022 Shrinking Synopsis: A surprisingly quick-witted comedy about a therapist who has trouble dealing with the death of his wife and his eccentric patients. Number of seasons: 2 Release date: January 27, 2023 Slow Horses Synopsis: Gary Oldman turns in a great performance as the cranky leader of a band of misfit spies. Number of seasons: 5 Release date: April 1, 2022 Ted Lasso Synopsis: Apple’s fish-out-of-water comedy/drama about a midwestern college football coach who heads to England to coach Premier League soccer is a breakout hit for good reason. Number of seasons: 3 Release date: August 14, 2020 The Morning Show Synopsis: Big star power and a fantastic performance by Jenniffer Aniston highlight this fast-paced drama that goes behind the scenes of a fictional morning news program. Number of seasons: 4 Release date: November 1, 2019 Full list of Apple TV shows and series These are all the episodic series you can currently watch on Apple TV, including both recurring and limited series. This list is in alphabetical order. TitlePremiereSeasons / Episodes1971: The Year That Music Changed EverythingMay 21, 20218 episodesAcapulcoOctober 8, 20214 seasons, 40 episodesAmazing StoriesMarch 6, 20201 season, 5 episodesAmber BrownJuly 29, 20221 season, 10 episodesBad MonkeyAugust 14, 20241 season, 10 episodesBad SistersAugust 19, 20222 seasons, 20 episodesBE@RBRICKMarch 21, 20251 season, 13 episodesBecoming YouNovember 13, 20201 season, 6 episodesBeforeOctober 25, 202410 episodesBest Foot ForwardJuly 22, 20221 season, 10 episodesBig BeastsApril 21, 20231 season, 10 episodesBlack BirdJuly 8, 20226 episodesBoom! Boom! The World vs Boris BeckerApril 7, 20232 episodesBorn to be WildDecember 19, 20256 episodesCallsMarch 19, 20211 season, 9 episodesCamp SnoopyJune 14, 20242 seasons, 26 episodesCape FearJune 5, 202610 episodesCarêmeApril 30, 20251 season, 8 episodesCarpool KaraokeAugust 8, 20175 seasons, 75 episodesCentral ParkMay 29, 20203 seasons, 39 episodesChief of WarAugust 1, 20259 episodesCircuit BreakersNovember 11, 20221 season, 7 episodesCity on FireMay 12, 20231 season, 8 episodesConstellationFebruary 21, 20241 season, 8 episodesCowboy CartelAugust 2, 20244 episodesCriminal RecordJanuary 10, 20242 seasons, 16 episodesCurses!October 27, 20232 seasons, 20 episodesDark MatterMay 8, 20242 season, 19 episodesDear EdwardFebruary 3, 20231 season, 10 episodesDear…June 5, 20202 seasons, 20 episodesDefending JacobApril 24, 20208 episodesDickinsonNovember 1, 20193 seasons, 30 episodesDisclaimerOctober 11, 20247 episodesDope ThiefMarch 14, 20258 episodesDoug UnplugsNovember 13, 20202 seasons, 26 episodesDown Cemetery RoadOctober 29, 20251 season, 8 episodesDr. BrainNovember 3, 20211 season, 6 episodesDrops of GodApril 21, 20232 seasons, 16 episodesDuck & GooseJuly 8, 20222 seasons, 17 episodesEarth at Night in ColorDecember 4, 20202 seasons, 12 episodesEarthsoundsFebruary 23, 20241 season, 12 episodesEcho 3November 23, 20221 season, 10 episodesEl DeafoJanuary 7, 20223 episodesEva the OwletMarch 31, 20232 seasons, 17 episodesExtrapolationsMarch 17, 20231 season, 8 episodesFive Days at MemorialAugust 12, 20228 episodesFor All MankindNovember 1, 20195 seasons, 50 episodesFoundationSeptember 24, 20213 seasons, 30 episodesFraggle Rock: Back to the RockJanuary 21, 20222 seasons, 27 episodesFraggle Rock: Rock On!April 21, 20201 season, 6 episodesFrog and ToadApril 28, 20232 seasons, 18 episodesGet Rolling with OtisOctober 8, 20212 seasons, 18 episodesGhostwriterNovember 1, 20193 seasons, 39 episodesGovernment CheeseApril 16, 20251 season, 10 episodesGreatness CodeJuly 10, 20202 seasons, 13 episodesGutsySeptember 9, 20221 season, 8 episodesHarriet the SpyNovember 19, 20212 seasons, 20 episodesHello Tomorrow!February 17, 20231 season, 10 episodesHello, Jack! The Kindness ShowNovember 5, 20212 seasons, 16 episodesHelpstersNovember 1, 20193 seasons, 40 episodesHelpsters Help YouApril 24, 20206 episodesHigh DesertMay 17, 20231 season, 8 episodesHijackJune 28, 20232 seasons, 15 episodesHollywood Con QueenMay 8, 20243 episodesHomeApril 17, 20202 seasons, 19 episodesHome Before DarkApril 3, 20202 seasons, 20 episodesImperfect WomenMarch 18, 20268 episodesInterrupting ChickenNovember 18, 20222 seasons, 17 episodesInvasionOctober 22, 20213 seasons, 30 episodesJaneApril 14, 20233 seasons, 20 episodesJohn Lennon: Murder Without A TrialDecember 6, 20233 episodesKnife Edge: Chasing Michelin StarsOctober 10, 20258 episodesK-Pop IdolsAugust 30, 20246 episodesKPoppedAugust 29, 20251 season, 8 episodesLa MaisonSeptember 20, 20241 season, 10 episodesLady in the LakeJuly 19, 20247 episodesLand of WomenJune 26, 20241 season, 6 episodesLast SeenSeptember 9, 20266 episodesLessons in ChemistryOctober 13, 20238 episodesLiaisonFebruary 24, 20231 season, 6 episodesLife by EllaSeptember 2, 20221 season, 10 episodesLincoln’s DilemmaFebruary 18, 20224 episodesLisey’s StoryJune 4, 20218 episodesLittle AmericaJanuary 17, 20202 seasons, 16 episodesLittle VoiceJuly 10, 20201 season, 9 episodesLong Way UpSeptember 18, 202011 episodesLong Way HomeMay 9, 202510 episodesLootJune 24, 20223 seasons, 30 episodesLosing AliceJanuary 22, 20211 season, 8 episodesLove You to DeathFebruary 7, 20251 season, 7 episodesLovely Little FarmJune 10, 20222 seasons, 14 episodesLuckyJuly 15, 20267 episodesMake or BreakApril 29, 20222 seasons, 15 episodesManhuntMarch 15, 20247 episodesMargo’s Got Money TroublesApril 15, 20261 season, 8 episodesMasters of the AirJanuary 26, 20249 episodesMaximum Pleasure GuaranteedMay 20, 20261 season, 10 episodesMeJuly 12, 20241 seasons, 10 episodesMessi Meets AmericaOctober 11, 20236 episodesMessi’s World Cup: Rise of a LegendFebruary 21, 20244 episodesMidnight FamilySeptember 25, 20241 season, 10 episodesMonarch: Legacy of MonstersNovember 17, 20232 season, 20 episodesMonster FactoryMarch 17, 20236 episodesMr. CormanAugust 6, 20211 season, 10 episodesMr. ScorseseOctober 17, 20255 episodesMurderbotMay 16, 20251 season, 10 episodesMy Brother the MinotaurApril 24, 20261 season, 10 episodesMy Kind of CountryMarch 24, 20231 season, 8 episodesMythic QuestFebruary 7, 20204 seasons, 40 episodesNot a BoxJune 13, 20251 season, 8 episodesNow and ThenMay 20, 20221 season, 8 episodesOmnivoreJuly 19, 20241 season, 8 episodesOne-of-a-Kind MarcieAugust 18, 202339 min.Onside: Major League SoccerFebruary 21, 20258 episodesOprah Talks COVID-19March 21, 20201 season, 13 episodesOprah’s Book ClubNovember 1, 20191 season, 14 episodesPachinkoMarch 25, 20222 seasons, 16 episodesPalm RoyaleMarch 20, 20242 seasons, 20 episodesPhysicalJune 18, 20213 seasons, 30 episodesPinecone & PonyApril 8, 20222 seasons, 16 episodesPlatonicMay 24, 20232 seasons, 20 episodesPluribusNovember 7, 20251 season, 9 episodesPrehistoric PlanetMay 23, 20223 seasons, 15 episodesPresumed InnocentJune 12, 20248 episodesPretzel and the PuppiesFebruary 11, 20222 seasons, 18 episodesPrime TargetJanuary 22, 20258 episodesPuppy PlaceOctober 15, 20212 seasons, 16 episodesReal Madrid: Until the EndMarch 10, 20233 episodesRoarApril 15, 20221 season, 8 episodesSago Mini FriendsSeptember 16, 20223 seasons, 24 episodesSchmigadoon!July 16, 20212 seasons, 12 episodesSeeNovember 1, 20193 seasons, 24 episodesServantNovember 28, 20194 seasons, 40 episodesSeveranceFebruary 18, 20222 seasons, 19 episodesShantaramOctober 14, 20221 season, 12 episodesShape IslandJanuary 20, 20232 seasons, 16 episodesShining GirlsApril 29, 20221 season, 8 episodesShrinkingJanuary 27, 20233 seasons, 33 episodesSide QuestMarch 26, 20254 epsiodesSiloMay 5, 20233 seasons, 30 episodesSlow HorsesApril 1, 20225 seasons, 30 episodesSlumberkinsNovember 4, 20221 season, 8 episodesSmokeJune 27, 20259 episodesSnoopy in SpaceNovember 1, 20192 seasons, 24 episodesStar CityMay 29, 20261 season, 8 episodesStickJune 4, 20251 season, 10 episodesStill UpSeptember 22, 20231 season, 8 episodesStillwaterDecember 4, 20204 seasons, 40 episodesStrange PlanetAugust 9, 20231 season, 10 episodesSTEVE! (martin): A documentary in two piecesMarch 29, 20242 episodesSugarApril 5, 20242 seasons, 16 episodesSunnyJuly 10, 20241 season, 10 episodesSuper League: The War for FootballJanuary 13, 20234 episodesSurfaceJuly 29, 20222 seasons, 16 episodesSurfside GirlsAugust 19, 20221 season, 10 episodesSuspicionFebruary 4, 20221 season, 8 episodesSwaggerOctober 29, 20212 season2, 18 episodesTed LassoAugust 14, 20204 seasons, 44 episodesTehranSeptember 25, 20203 seasons, 24 episodesThe AfterpartyJanuary 28, 20222 seasons, 16 episodesThe Big CigarMay 17, 20246 episodesThe Big ConnMay 6, 20224 episodesThe Big Door PrizeMarch 29, 20232 seasons, 20 episodesThe BuccaneersNovember 8, 20232 seasons, 16 episodesThe ChangelingSeptember 8, 20231 season, 8 episodesThe Completely Made-Up Adventures of Dick TurpinMarch 1, 20241 season, 6 episodesThe Crowded RoomJune 9, 20231 season, 10 episodesThe Dynasty: UConn HuskiesAugust 21, 20263 episodesThe Dynasty: New England PatriotsFebruary 16 202410 episodesThe Enfield PoltergeistOctober 27, 20234 episodesThe Essex SerpentMay 13, 20226 episodesThe HuntMarch 4, 20266 episodesThe Last Days of Ptolemy GreyMarch 11, 20226 episodesThe Last FrontierOctober 10, 20251 season, 10 episodesThe Last Thing He Told MeApril 14, 20232 seasons, 15 episodesThe LineNovember 19, 20214 episodes[a]The Long Game: Bigger Than BasketballApril 22, 20221 season, 5 episodesThe Me You Can’t SeeMay 21, 20211 season, 6 episodesThe Morning ShowNovember 1, 20193 seasons, 30 episodesThe Mosquito CoastApril 30, 20212 seasons, 17 episodesThe New LookFebruary 14, 20241 season, 10 episodesThe Oprah ConversationJuly 30, 20201 season, 15 episodesThe Problem with Jon StewartSeptember 30, 20212 seasons, 20 episodesThe Reluctant TravelerFebruary 24, 20232 seasons, 13 episodesThe Sisters GrimmOctober 3, 20251 season, 6 episodesThe Shrink Next DoorNovember 12, 20218 episodesThe Snoopy ShowFebruary 5, 20212 seasons, 26 episodesThe StudioMarch 26, 20251 season, 10 episodesThe Super ModelsSeptember 20, 20234 episodesThe Wild OnesJuly 11, 20251 season, 6 episodesThey Call Me MagicApril 22, 20221 season, 4 episodesTime BanditsJuly 24, 20241 season, 10 episodesTiny WorldOctober 2, 20202 seasons, 12 episodesTruth Be ToldDecember 6, 20193 seasons, 28 episodesTryingMay 1, 20205 seasons, 40 episodesTwisted YogaMarch 13, 20263 episodesUnconditionalMay 8, 20268 episodesVisible: Out on TelevisionFebruary 14, 20205 episodesWanted: The Escape of Carlos GhosnAugust 25, 20234 episodesWatch the Sound with Mark RonsonJuly 30, 20211 season, 6 episodesWeCrashedMarch 18, 20228 episodesWhere’s Wanda?October 2, 20241 season, 8 episodesWidow’s BayApril 29, 20261 season, 10 episodesWolfboy and the Everything FactorySeptember 24, 20212 seasons, 20 episodesWomen in BlueJuly 31, 20242 seasons, 20 episodesWondLaJune 28, 20243 seasons, 20 episodesWonder Pets: In the CityDecember 13, 20242 seasons, 26 episodesYo Gabba GabbalandAugust 9, 20241 season, 20 episodesYou Would Do It TooOctober 30, 20241 season, 8 episodesYour Friends and NeighborsApril 11, 20252 seasons, 19 episodes Full list of Apple TV movies and short films Apple TV is home to a fair number of original movies, too. Some of the movies saw a limited theatrical release, all are listed here in alphabetical order. TitleRelease Date9/11: Inside the President’s War RoomSeptember 1, 2021ArgylleApril 12, 2024All of YouSeptember 26, 2025Beastie Boys StoryApril 24, 2020Billie Eilish: The World’s a Little BlurryFebruary 26, 2021BlitzNovember 22, 2024BlushOctober 1, 2021Bono: Stories of SurrenderMay 30, 2025Boys StateAugust 14, 2020Bread and RosesNovember 22, 2024Bruce Springsteen’s Letter to YouOctober 23, 2020CausewayNovember 4, 2022Cha Cha Real SmoothJune 17, 2022CherryMarch 12, 2021CODAAugust 13, 2021Come from AwaySeptember 10, 2021Come See Me in the Good LightNovember 14, 2021DadsJune 19, 2020Deaf President Now!May 16, 2025Echo ValleyJune 13, 2025EmancipationDecember 9, 2022EternityFebruary 13, 2026F1: The MovieDecember 12, 2025Fancy DanceJune 28, 2024FathomJune 25, 2021FinchNovember 5, 2021FingernailsNovember 3, 2023Fireball: Visitors from Darker WorldsNovember 13, 2020Flora and SonSeptember 29, 2023Fly Me to the MoonDecember 6, 2024Fountain of YouthMay 23, 2025GhostedApril 21, 2023Girls StateApril 5, 2024GreyhoundJuly 10, 2020HalaDecember 6, 2019Hannah Waddingham: Home for ChristmasNovember 22, 2023Here We Are: Notes for Living on Planet EarthApril 17, 2020Highest 2 LowestSeptember 5, 2025Killers of the Flower MoonJanuary 12, 2024Louis Armstrong’s Black & BluesOctober 28, 2022LuckAugust 5, 2022Lulu is a RhinocerosMay 30, 2025Mariah Carey’s Magical Christmas SpecialDecember 4, 2020Mariah’s Christmas: The Magic ContinuesDecember 3, 2021MaydaySeptember 4, 2026NapoleonMarch 1, 2024Napoleon: Director’s CutAugust 29, 2024Number One on the Call SheetMarch 28, 2025On the RocksOctober 23, 2020OutcomeApril 10, 2026PalmerJanuary 29, 2021Propeller One-Way Night CoachMay 29, 2026Raymond & RayOctober 21, 2022Selena Gomez: My Mind & MeNovember 4, 2022SharperFebruary 17, 2023SidneySeptember 23, 2022Snoopy Presents: A Summer MusicalAugust 15, 2025Snoopy Presents: For Auld Lang SyneDecember 10, 2021Snoopy Presents: It’s The Small Things, Charlie BrownApril 15, 2022Snoopy Presents: Lucy’s SchoolAugust 12, 2022Snoopy Presents: There’s No Place Like SnoopyJuly 31, 2026Snoopy Presents: To Mom (and Dad), With LoveMay 6, 2022Snoopy Presents: Welcome Home, FranklinFebruary 16, 2024SpiritedNovember 18, 2022Stephen Curry: UnderratedJuly 21, 2023Still: A Michael J. Fox MovieMay 12, 2023Stiller & Meara: Nothing is LostOctober 24, 2025Swan SongDecember 17, 2021TetrisMarch 31, 2023The BankerMarch 20, 2020The Beanie BubbleJuly 28, 2023The Bloody HundredthMarch 15, 2024The Boy, the Mole, the Fox and the HorseDecember 25, 2022The DinkJuly 24, 2026The Elephant QueenNovember 1, 2019The Family PlanDecember 15, 2023The Family Plan 2November 21, 2025The First Snow of Fraggle RockDecember 5, 2025The GorgeFebruary 14, 2025The Greatest Beer Run EverSeptember 30, 2022The InstigatorsAugust 9, 2024The Last of the Sea WomenOctober 11, 2024The Lost BusOctober 3, 2025The Pigeon TunnelOctober 20, 2023The Sky Is EverywhereFebruary 11, 2022The Tragedy of MacbethJanuary 14, 2022The Velvet UndergroundOctober 15, 2021The Velveteen RabbitNovember 22, 2023The Year Earth ChangedApril 16, 2021Twas the Fight Before ChristmasNovember 26, 2021Who Are You, Charlie Brown?June 25, 2021WolfsSeptember 27, 2024WolfwalkersDecember 11, 2020

Read more »

US Legislators Complain About Secretive British Court and Apple Encryption
Bruce66423 shares a report from The Guardian: A bipartisan pair of American politicians is telling Britain's most secretive court to stop hiding its handling of Apple's legal fight against a government demand to break into its customers' encrypted data, warning that Whitehall's taste for secrecy is 'needlessly' straining relations between the two allies. The letter (PDF), shared with the Guardian ahead of being sent to the investigatory powers tribunal (IPT) on Friday, is signed by the Democratic senator Ron Wyden of Oregon and the Republican congressman Warren Davidson of Ohio. The row dates back to January 2025, when the Home Office served Apple with a technical capability notice under the Investigatory Powers Act, which requires companies to assist law enforcement in providing evidence. The UK government demanded that Apple provide a mechanism to access encrypted iCloud backups worldwide, a call the company met by withdrawing its Advanced Data Protection encryption feature from UK users the following month. Apple's challenge to that order at the IPT was later thrown out after the Home Office withdrew the original notice and issued a narrower one targeting only British users' data. "It is wholly inappropriate for a foreign executive body to attempt to dictate the distribution of powers within the US government, nor should it be permitted to use secrecy directives under the Investigatory Powers Act to frustrate Article I powers under the US Constitution," the pair wrote. Wyden and Davidson write that Congress "is not only a co-equal branch of government, it is the First Branch," and argue that no government can be allowed to place "its demands beyond the reach of legislative inquiry." "The UK government," they write, "cannot champion legislative oversight at home while using administrative gag orders to kneecap the constitutional authority of the US Congress." Read more of this story at Slashdot.

Read more »

Counterpoint: Apple foldable panel shipments could rise 167% by 2030
Counterpoint Research has released a new report examining the impact of the iPhone Duo on the foldable smartphone market, display suppliers, and the segment’s growth through 2030. Here are the details. more…

Read more »

Apple Watch Series 12 makes a big change to a small complication that I’m excited about
Apple Watch Series 12 is a major upgrade to the core health and fitness tracking wearable. That’s because of the new Health Sensing System that includes an even more capable heart rate monitor. The new hardware doesn’t just extend to more accurate health data. There’s a big change to a small complication that I’m seeing in Apple’s marketing material. It’s just one thing I’m excited about with the new Series 12 and Ultra 4 models. more…

Read more »

These are the best iPhone 18 Pro cases you can buy now
Third-party cases for the iPhone 18 Pro are already hitting the market. Here are some of the cases we like the most to protect your expensive hardware.iPhone 18 Pro casesApple will open preorders for the Pro model early on September 12, before it hits doorsteps on September 18. Every case in this roundup preserves access to Camera Control, although the brands use different approaches to covering or surrounding the button. Most also support MagSafe, while materials range from leather and aramid fiber to polycarbonate and TPU.The drop figures below come from the manufacturers. They describe company testing or compliance claims and shouldn't be read as independent durability results. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple says two iOS 27 features aren’t coming until a ‘future software update’
This week, Apple announced that iOS 27 will be released to everyone on Monday, September 14. Along with that, the company now says two features included in the iOS 27 betas have been removed and will be released in a “future software update” for iPhone: suggestions in Messages and automatic password changes. more…

Read more »

Apple Watch Series 12 vs Series 11: Here’s everything new
Apple Watch Series 12 improves many of the core components that power watchOS and the device’s health and fitness features, plus unlocks new AI capabilities. Here’s everything new in Apple Watch Series 12 vs Series 11. more…

Read more »

Apple’s foldable iPhone Duo shows the upside of waiting
Apple arrived slightly late to foldable phones. As per Bloomberg Tech, that delay looks less like a miss and more like a choice.… The post appeared first on MacDailyNews.

Read more »

Apple Unfolds the iPhone Duo
Apple’s first folding iPhone, the $1999 iPhone Duo, opens from a 5.4-inch outer display to a 7.6-inch inner screen—nearly iPad mini size—in a passport-like form factor. Pre-orders begin 16 October 2026, with availability on 23 October 2026.

Read more »

Apple’s iPhone 18 Pro cases are already in stores, and not just for the new models
Apple’s new iPhone 18 Pro cases and other accessories are now available in Apple Stores. Pre-orders for the new phones start tomorrow ahead of the launch in one week. more…

Read more »

Get the 14-inch M5 Pro MacBook Pro 24GB/1TB at $199 Off
The high-end MacBook Pro is now stronger than ever, with the M5 Pro chip bringing great improvements in performance and AI capabilities to your device to blitz through your workload and take care of heavy AI workloads. The significant components and Apple Silicon are made to run demanding and heavy AI workloads such as LLM […] The post appeared first on iLounge.

Read more »

New Feature Called Apple Reference Image Announced
Apple Reference Image has been announced by Apple, a feature that you could opt-in for the newly announced iPhone 18 Pro Max and iPhone 18 Pro that assists users to verify a picture has not been changed. A new sensor is powering Apple Reference Image for the Main Camera that signals to the sensor data […] The post appeared first on iLounge.

Read more »

Redesigned Vapor Cooling Chamber Added to iPhone 18 Pro Models
The new iPhone 18 Pro and iPhone 18 Pro Max models have received a remade thermal system, with a new vapor chamber that is 3x the surface area compared to the previous model. This new chamber cycles deionized water constantly for better cooling and is able to sustain the A20 Pro chip for prolonged hours […] The post appeared first on iLounge.

Read more »

New iPhone 18 Pro Max Heavier Than Previous Model
The iPhone 18 has been announced, featuring the same dimensions as the previous model but is heavier by 16 grams compared to the iPhone 17 Pro Max. The new device weighs 249 grams, while the iPhone 17 Pro Max weighs 233 grams. The iPhone 18 Pro and Pro Max are given a new and bigger […] The post appeared first on iLounge.

Read more »

Get the 13-inch M5 MacBook Air 24GB/1TB at $100 Off
The MacBook Air is compatible with Apple Intelligence, the personal AI system that keeps things organized and allows you to blitz through your daily workload while providing you with groundbreaking security, ensuring no one but you has access to the data on the device. The Apple laptop has been given the M5 chip for stronger […] The post appeared first on iLounge.

Read more »

HomeKit Weekly: Shelly’s Flood S Gen4 is a low cost Matter leak sensor for Apple Home
Water damage is one of those problems where a single sensor can save you a major repair bill on your floors, cabinets, etc. Leak sensors have been among the best values in the smart home for years, and Shelly’s new Flood S Gen4 makes it even easier to get started. It’s under $30, Matter-certified, and works with Apple Home out of the box. more…

Read more »

Entry-Level AirPods 5 Revealed
The next-generation AirPods 5 have been announced by Apple, featuring a price that starts at $129. The new AirPods eliminate more than half of outside noise with Active Noise Cancellation compared to the AirPods 4, which have ANC and has a remade acoustic architecture with newer Adaptive EQ. Both models of the AirPods 5 have […] The post appeared first on iLounge.

Read more »

New Apple Watch Ultra 4 Announced During Apple Event
The Apple Watch Series 12 and Apple Watch Ultra 4 have been announced at the Apple Event. The Apple Watch Ultra 4 is powered by the S11 chip, has a bigger battery and has a revamped health sensing system. The device has better power efficiency to provide you 18 hours worth of workout tracking, with […] The post appeared first on iLounge.

Read more »

Foldable iPhone Called iPhone Duo Unveiled
The first foldable iPhone has been announced by Apple, named the iPhone Duo. The device has two screens and an inner display that is foldable. One continuous frame connects the two halves of the device, with both displays having the same aspect ratio. The frame of the device features a Ceramic Shield on the rear, […] The post appeared first on iLounge.

Read more »

Can Apple parlay Siân Heder’s latest Oscar bait, ‘Being Heumann,’ into another Best Picture win?
Four years after "CODA" delivered Apple Original Films its first Best Picture Oscar, Siân Heder is back in the awards conversation. Her new… The post appeared first on MacDailyNews.

Read more »

iPhone 18 Pro vs iPhone 15 Pro: Three-year upgrade
The average timetable between pro iPhone upgrades is three years. Apple's iPhone 18 Pro has arrived, with iPhone 15 Pro owners taking a close look. Here's how the two compare.iPhone 18 Pro [left] vs iPhone 15 Pro [right]Apple launched the iPhone 18 Pro at its fall event, the latest in the Pro line. Three years ago, the same thing happened for the iPhone 15 Pro.A lot can change in three years. That means owners of the iPhone 15 Pro are now seriously considering taking advantage of all of the updates by upgrading to a newer device. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

iOS 27.1 release date: Here’s when to expect the new iPhone update
iOS 27 launches for all users next week, and will be followed not long after by the first iOS 27.1 beta and public launch. Here’s when to expect iOS 27.1’s arrival. more…

Read more »

How to clear RAM on a Mac and reduce memory usage
If your Mac is running slowly or showing a memory warning, you may be looking for a cleanup app or command-line trick to clear RAM. You don’t need either. macOS manages RAM automatically, and forcing it to clear memory can reduce performance instead of improving it. A good first step is to look at Memory […] The post first appeared on The Mac Security Blog.

Read more »

Syncing with iCloud paused? What it means and how to fix it
Seeing “Syncing with iCloud paused” can be worrying, especially when your messages, photos, or files stop updating across your Apple devices. Fortunately, this message usually means iCloud has temporarily stopped syncing. It doesn’t normally mean your existing data has disappeared or someone has accessed your Apple Account. The right fix depends on which service has […] The post first appeared on The Mac Security Blog.

Read more »

How to allow pop-ups on a Mac in Safari, Chrome, and Firefox
A blocked pop-up can make a website seem broken. A sign-in page might not appear, a payment window could fail to open, or a form, document viewer, or live chat may stop working. Your browser could be blocking the new window in the background, even when the website itself is legitimate. This guide shows you […] The post first appeared on The Mac Security Blog.

Read more »

Microsoft Plugs Nearly 1,000 Security Holes
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that many organizations already are struggling to prioritize the more human-intensive endeavor of testing and deploying so many fixes each month.

Read more »

Vulnerability Summary for the Week of August 31, 2026
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1Hive--gardens-v2 Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In 3e595f3 and prior, when a streaming proposal is funded, the cluster of streaming contracts moves real pool funds into the proposal's StreamingEscrow to back the Superfluid constant flow agreement (the CFA deposit, plus a 0.5 percent margin). cancelProposal then zeroes the escrow's GDA member units but never reclaims that parked balance, and the permissionless claim() forwards the escrow's entire balance, including the pool funded buffer, to the beneficiary. The beneficiary is chosen by the proposal submitter and defaults to the submitter. The only path that returns escrow funds to the pool is drainToStrategy, which is onlyStrategy and is reached solely from the dispute reject ruling, never from cancel or natural completion. At time of publication, there are no publicly known patches. 2026-09-03 7.7 CVE-2026-55658 : Shane Bishop--EWWW Image Optimizer Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer = 9.1.0 and before 9.3.4 decide whether to run path-scoped middleware by matching against the raw request target, while the Fastify router resolves an absolute-form request target to its path before dispatching. Because the two layers evaluate different strings, a request using an absolute-form target reaches the route handler while the path-scoped middleware, such as authentication or authorization, is skipped. An unauthenticated network attacker can use this to bypass path-based access controls in a Fastify application that relies on middie for those controls. Users should upgrade to @fastify/middie 9.3.4 or later. 2026-09-04 9.1 CVE-2026-85184 aaif-goose--goose goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry configurations. 2026-09-04 8.8 CVE-2026-85623 Acato--Email Essentials Unauthenticated Cross Site Scripting (XSS) in Email Essentials = 5.0.0-RC1 and < 5.10.11 contain a missing authorization vulnerability in AssetsController::actionReplaceFile. When a request supplies sourceAssetId and targetFilename but omits assetId, the target asset is resolved by folder and filename after the permission checks execute, so the replacePeerFiles permission is never enforced. An authenticated low-privilege author with only the replaceFiles permission on a shared folder can overwrite the content of a peer's asset file (located in the same folder) with attacker-controlled bytes. Fixed in 5.10.11. 2026-09-02 7.1 CVE-2026-84800 crcn--sift.js sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation compiles a string value into a function using new Function unless CSP_ENABLED is set (not set by default). As a result, if a prototype-pollution primitive elsewhere in the process sets Object.prototype.$where to a malicious string, even benign filter calls such as sift({}) execute arbitrary JavaScript. Additionally, passing an untrusted query object containing a string $where directly to sift results in code execution under the default configuration. 2026-09-04 8.1 CVE-2026-85625 crmeb--CRMEB CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that returns true from both conditional branches. Sub-administrators and accounts with no roles can access restricted admin endpoints by exploiting the inert role check that always permits requests. 2026-09-03 8.3 CVE-2026-85212 crystaldba--postgres-mcp Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pg_read_file through FROM-clause syntax to read arbitrary files despite restricted-mode protections. 2026-09-04 8.6 CVE-2026-85620 cu--silicon A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function create_app of the file views.py of the component edit Endpoint. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. 2026-08-31 7.3 CVE-2026-82919 Cua computer-server--Cua computer-server   Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated attackers to execute arbitrary commands. Attackers can reach TCP port 8000 to run shell commands via the run_command endpoint, read and write arbitrary files through file operation endpoints, and access interactive PTY shells without authentication. 2026-09-05 9.8 CVE-2026-86121 cyanheads--git-mcp-server git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools that lack leading-dash validation. Attackers can inject git command-line options like --output= to write files outside the repository to arbitrary paths accessible by the process. 2026-09-04 7.5 CVE-2026-85626 cypht-org--cypht Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the back_query GET parameter of the logout handler. Attackers can pass a base64-encoded serialized payload through this parameter, which is decoded and passed directly to unserialize() without an allow-list, signature check, or type restriction, enabling gadget-chain exploitation to achieve remote code execution as the web server process. 2026-09-01 8.8 CVE-2026-71981 D-Link--DIR-825M A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. 2026-08-31 9.9 CVE-2026-82593 D-Link--DIR-825M A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub_456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. 2026-08-31 7.4 CVE-2026-82595 D-Link--DNS-320 ShareCenter A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file_sharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. 2026-09-03 9.1 CVE-2026-85224 D-Link--DNS-320L A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can be executed remotely. The exploit is now public and may be used. 2026-08-31 9.9 CVE-2026-82689 D-Link--DNS-320L A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usb_device.cgi of the component CGI Handler. Such manipulation of the argument f_ups_ip leads to os command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. 2026-08-31 9.1 CVE-2026-82691 D-Link--DNS-327L A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve_mgr.cgi. This manipulation of the argument f_dev causes os command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. 2026-08-31 9.1 CVE-2026-82690 D-Link--DNS-340L A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtual_vol.cgi of the component Virtual Volume Handler. The manipulation of the argument f_sharename/f_target/f_name leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. 2026-08-31 9.1 CVE-2026-82688 D-Link--DNS-340L A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsi_mgr.cgi. Performing a manipulation of the argument alias/username/password/volume_location results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. 2026-08-31 9.9 CVE-2026-82692 D-Link--DNS-340L A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addon_center.cgi of the component Add-On Center. Such manipulation of the argument f_name/f_url/f_flag/f_login_user leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2026-09-03 9.1 CVE-2026-85222 D-Link--DNS-340L A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Performing a manipulation of the argument callback_url/sync_interval results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used. 2026-09-03 9.9 CVE-2026-85223 D-Link--DSM-G600 A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /load_file.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. 2026-08-31 8.8 CVE-2026-82680 datalab-to--marker marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can supply filenames containing directory traversal sequences to write arbitrary files to any location or delete existing files on the system. 2026-09-04 9.1 CVE-2026-85684 datalab-to--surya surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /process routes that accept raw file_path parameters. Attackers can read any image or PDF file on the host by supplying arbitrary file paths to Image.open or pypdfium2.PdfDocument, obtaining rendered contents as base64 and using /info as an existence oracle. 2026-09-04 7.5 CVE-2026-85687 dbgate--dbgate DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbitrary files via file:// scheme resolution. Attackers can exploit getJslFileName() to bypass directory containment and access sensitive files including encrypted database credentials stored in connections configuration. 2026-09-03 8.8 CVE-2026-85176 Delinea--Secret Server (On-Prem) Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only. 2026-09-02 9.8 CVE-2026-19117 Dell--PowerProtect Data Manager Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure. 2026-09-03 7.8 CVE-2026-73600 Dell--PowerStore 500T Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array. 2026-08-31 9.8 CVE-2026-58574 Dell--PowerStore 500T Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access. 2026-09-01 9 CVE-2026-79687 Dell--PowerStore 500T Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. 2026-09-01 8.8 CVE-2026-58566 Dell--PowerStore 500T Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges. 2026-09-01 8.8 CVE-2026-58567 Dell--PowerStore 500T Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.. 2026-09-01 8.8 CVE-2026-58569 Dell--PowerStore 500T Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges. 2026-09-01 8.8 CVE-2026-58571 Dell--PowerStore 500T Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges. 2026-09-01 8.8 CVE-2026-58572 Dell--PowerStore 500T Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator. 2026-09-01 8.8 CVE-2026-58575 Dell--PowerStore 500T Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation. 2026-09-01 8.8 CVE-2026-76111 Dell--PowerStore 500T Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges. 2026-09-01 8.8 CVE-2026-79682 Dell--PowerStore 500T Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker-controlled content to arbitrary filesystem paths. 2026-09-01 8.8 CVE-2026-79683 Dell--PowerStore 500T Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges. 2026-09-01 8.8 CVE-2026-79684 Dell--PowerStore 500T Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges. 2026-09-01 8.8 CVE-2026-79686 Developer Tools--Developer Tools The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component 2026-09-02 9.8 CVE-2025-9314 devitemsllc--Support Genix Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System The Support Genix - Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the `guest_ticket_login()` function and its `p` parameter. This is due to the site-wide AES-256-CBC encryption key being derived from only three two-digit `wp_rand(10, 99)` values and a Unix timestamp via `md5()` - yielding approximately 19.5 bits of entropy - combined with a deterministic IV derived from the password, no authentication tag on the ciphertext, and no capability check, nonce, or session validation on the publicly reachable `/sgnix/?p=` endpoint. This makes it possible for authenticated attackers, with subscriber-level access and above, who can obtain a single legitimate guest ticket token as a known-plaintext oracle and bound the plugin activation timestamp, to exhaust the ~729,000-candidate keyspace entirely offline, recover the site-wide encryption key, and forge a self-consistent `{ticket_id, ticket_user}` token targeting any administrator-owned ticket. Submitting the forged token to the unprotected endpoint causes `wp_set_auth_cookie()` to be called for that administrator, granting the attacker full administrative access to the WordPress site. 2026-09-01 8.8 CVE-2026-19806 devtron-labs--devtron Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowing authenticated users to retrieve admin API tokens. Attackers with any authenticated account can query the endpoint with arbitrary project, environment, and application parameters to retrieve plaintext super-admin JWT tokens for full platform control. 2026-08-31 8.8 CVE-2026-82882 dianping--cat CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access. 2026-09-03 9.8 CVE-2026-85181 digitalbazaar--forge node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an incomplete fix for CVE-2026-33894. 2026-09-03 7.5 CVE-2026-85393 Divi Engine--Divi Ajax Filter The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_loop_template' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. This vulnerability is only exploitable when the loop_templates parameter is set to 'custom-template'. 2026-09-04 9.8 CVE-2026-11613 DocsGPT--DocsGPT In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define prompt content used during chatbot interactions. This functionality renders user-supplied prompt data using Jinja templates without input sanitization or sandboxing. An unauthenticated attacker can inject malicious template expressions, leading to a server-side template injection (SSTI) vulnerability that can be exploited to achieve full remote code execution (RCE). 2026-09-04 9.8 CVE-2026-31020 Dokploy--Dokploy A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the file packages/server/src/utils/traefik/application.ts of the component Settings. The manipulation of the argument path results in path traversal. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2026-08-31 9.9 CVE-2026-82954 domainaware--parsedmarc parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incoming DMARC report emails without user interaction, an unauthenticated remote attacker can send a crafted email with a highly compressed attachment to the monitored mailbox, causing the parsedmarc process to allocate memory proportional to the uncompressed size and exhaust available RAM. 2026-09-03 7.5 CVE-2026-82520 Dotstore--WooCommerce Product Attachment Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for that handler. The internal not-found router for encapsulated handlers dispatches malformed paths through a single shared handler pointer before URL decoding, ignoring the prefix and skipping the selected handler's normal lifecycle. An unauthenticated attacker can therefore reach an authentication-protected private fallback through an unrelated public prefix and read its full response, bypassing the authentication hook and breaking prefix encapsulation. Users should upgrade to fastify 5.12.2 or later. 2026-09-04 7.5 CVE-2026-76169 fastify--fastify fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema before compiling it, but the transformation is incomplete: it lowercases the properties keys and the root-level required array, and does not lowercase the trigger and dependent names inside the JSON Schema Draft 7 dependencies keyword. Because Node stores request header names in lowercase, a canonical-case dependency such as requiring an authentication header whenever a privileged-mode header is present never matches, and the presence assertion is silently skipped. An unauthenticated remote client can therefore send the header that activates a privileged branch while omitting the header the dependency was meant to require, bypassing the conditional check. Users should upgrade to fastify 5.12.2 or later. 2026-09-04 7.5 CVE-2026-84428 fastify--fastify fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines the boolean false as a valid schema that rejects every instance. When an application assigns false to a route's body, querystring, params, or headers schema to deny all input, fastify treats it as a missing schema, compiles no validator, and runs the route handler on any request. An unauthenticated remote client can therefore reach a handler that a valid deny-all schema was intended to make unreachable, a complete validation bypass that can lead to unauthorized state changes or execution of disabled operations. Users should upgrade to fastify 5.12.2 or later. 2026-09-04 7.5 CVE-2026-84469 firecrawl--firecrawl-mcp-server firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequences to read sensitive files like credentials and environment variables, which are then uploaded and returned to the model context. 2026-09-04 7.5 CVE-2026-85606 FreeIPMI--FreeIPMI FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses. 2026-09-04 9.8 CVE-2026-85504 FreeIPMI--FreeIPMI ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info). 2026-09-04 9.8 CVE-2026-85506 FreeIPMI--FreeIPMI ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info). 2026-09-04 9.8 CVE-2026-85507 FreeIPMI--FreeIPMI ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info). 2026-09-04 9.8 CVE-2026-85508 FreeIPMI--FreeIPMI FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested. 2026-09-04 9.8 CVE-2026-85509 FreeIPMI--FreeIPMI ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions). 2026-09-04 7.5 CVE-2026-85505 fs-code--FS Poster - WordPress Social media Auto Poster & Scheduler [Facebook, Instagram, Twitter, Pinterest] The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient input sanitization of the FFmpeg path parameter before passing it to the exec() function, combined with missing authorization checks on the REST API endpoints. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary commands on the underlying server. 2026-09-01 8.8 CVE-2026-10195 GastroMenum--GastroMenum Web Panel Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026. 2026-09-04 7.5 CVE-2026-19205 geonetwork--core-geonetwork GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the Saxon XSLT processor used to render formatters is configured without secure processing (`FEATURE_SECURE_PROCESSING`) and without disabling Java extension functions (`ALLOW_EXTERNAL_FUNCTIONS`). Any stylesheet loaded by GeoNetwork can therefore invoke `java.lang.Runtime.exec()` or `java.lang.ProcessBuilder` directly, achieving arbitrary command execution as the GeoNetwork process user. A user with sufficient privileges to upload a formatter can deliver a `.xsl` file containing Java extension call that execute arbitrary OS commands with the privileges of the GeoNetwork process. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17. 2026-09-03 9.1 CVE-2026-58400 geonetwork--core-geonetwork GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is unprotected and allows the upload of external uncontrolled files. An unauthenticated attacker can upload arbitrary `.xsl` or `.zip` formatter files to the server. An unauthenticated attacker can write arbitrary files into the GeoNetwork formatter directory. On its own this constitutes unauthorized write access to server storage. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17. 2026-09-03 8.6 CVE-2026-63219 getgrav--grav Grav before 2.0.18 (affected versions sk_protocol without validating whether 'sk' represents a full socket. Fix this issue by checking sk- >sk_state != TCP_LISTEN before inspecting sk- >sk_protocol in both bpf_tcp_gen_syncookie and bpf_tcp_check_syncookie. Since mini-sockets are never in the TCP_LISTEN state, the condition short-circuits and prevents dereferencing fullsock-specific fields. 2026-09-03 7.3 CVE-2026-80738 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drm_log_draw_kmsg_record() accesses s[len - 1] to strip the trailing newline, but len is unsigned int. If len is 0, the subtraction wraps to UINT_MAX, causing an out-of-bounds read. Add an early return when len is 0. 2026-09-03 7.1 CVE-2026-80741 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder functions In ls2k0500_mmc_reorder_cmd_data() and ls2k2000_mmc_reorder_cmd_data(), the for_each_sg() macro already iterates over the scatterlist entries, with 'sg' pointing to the current entry. However, the code incorrectly uses '&sg[i]' and 'sg_dma_len(&sg[i])' inside the loop, which treats 'sg' as an array base and indexes it again, leading to access of wrong sg entries (or out-of-bounds if the list is not an array). 2026-09-03 7.8 CVE-2026-80748 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of bounds memory read A helper function was copying a given audio infoframe into the connector's copy but using the size of the destination (a generic target, sized to accept many different data blocks) not the source (a very specific type of data block). Thus, it was copying 60 bytes of data from a 28 byte allocation. Fix that by using the source size instead, together with a build bug on the source size actually being smaller than the destination. I hit this running KUnit tests under KASAN (while debugging something else entirely). In the real world, it seems unlikely to cause an actual problem. It is a read not a write so it can't corrupt any memory. However, it could potentially fall off the end of a page and cause an accvio bug. 2026-09-03 7.1 CVE-2026-80749 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev() mtk_mfg_attach_dev() reads prev_o on the first iteration of its loop, in "if (prev_o && prev_o- >freq == o- >freq)", before prev_o is assigned at the end of the loop body. On that first iteration, evaluating prev_o reads an indeterminate value. If it is non-NULL, the condition dereferences a stale or invalid pointer, potentially faulting or incorrectly skipping the first OPP. Initialize prev_o to NULL. This matches the intent as well: there is no previous OPP to compare against on the first iteration. Found with Clang's -Wconditional-uninitialized. 2026-09-03 7.8 CVE-2026-80751 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter (TX) electrode count was incorrectly assigned the value of the receiver (RX) electrode count due to copy-paste typos. This incorrect value was then propagated to the driver data and used by F54 to determine the diagnostics report size. On devices with more RX than TX electrodes, this inflated the perceived TX count, leading to incorrect report size calculations and potential out-of-bounds buffer accesses. Fix the typos by correctly assigning the TX electrode counts. 2026-09-03 7.8 CVE-2026-80754 LiquidThemes--Booking Hub Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1. 2026-09-02 8.8 CVE-2026-81769 LiteSpeed Technologies--LiteSpeed Cache Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache

Read more »

How to recognize and avoid phishing attacks on your Mac
Phishing attacks don’t usually try to hack your Mac. They try to trick you into giving away passwords, verification codes, payment details, or other sensitive information. A message might look like it’s from Apple, your bank, a delivery company, or even someone you know, making it difficult to tell what’s real and what’s a scam. […] The post first appeared on The Mac Security Blog.

Read more »

FBI Probes Service Selling 153M+ Drivers Licenses
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana. KrebsOnSecurity also has learned that the New Orleans field office of the Federal Bureau of Investigation (FBI) today launched an official inquiry into the source of the images.

Read more »

How to update an older Mac to a newer macOS
Using the latest version of macOS is always best from a security standpoint. But if your Mac is several years old, there’s a good chance that macOS Sonoma or macOS Sequoia won’t run on it. Thankfully, there’s an app for that. The post first appeared on The Mac Security Blog.

Read more »

How to update an older Mac to a newer macOS
Using the latest version of macOS is always best from a security standpoint. But if your Mac is several years old, there’s a good chance that macOS Sonoma or macOS Sequoia won’t run on it. Thankfully, there’s an app for that. The post first appeared on The Mac Security Blog.

Read more »

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police (AFP) said two unnamed suspects from Western Australia, aged 21 and 23, were arrested in connection with a "sophisticated cybercrime syndicate that allegedly created malicious open-source software to rob thousands of global businesses." The AFP did not name the defendants, but KrebsOnSecurity learned the 21-year-old suspect's real identity in June, and has been communicating with him ever since. This story includes interviews with TeamPCP's self-described spokesperson, and examines clues left behind by the TeamPCP leader that likely led to his undoing.

Read more »

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police (AFP) said two unnamed suspects from Western Australia, aged 21 and 23, were arrested in connection with a "sophisticated cybercrime syndicate that allegedly created malicious open-source software to rob thousands of global businesses." The AFP did not name the defendants, but KrebsOnSecurity learned the 21-year-old suspect's real identity in June, and has been communicating with him ever since. This story includes interviews with TeamPCP's self-described spokesperson, and examines clues left behind by the TeamPCP leader that likely led to his undoing.

Read more »

7 Ways to Save on Apple’s iPhone 17e Right Now, Including Two $0/Month Deals
Apple's 256GB iPhone 17e normally sells for $599, but wireless carriers are competing aggressively for iPhone buyers right now. AT&T and Total Wireless both have $0/month offers, while Boost Mobile, Cricket, Metro, Straight Talk, and Red Pocket are offering their own discounts and rebates. AT&T: $0/month with qualifying new line Total Wireless: $0/month with Edge financing Boost Mobile: $200 off with qualifying service Cricket: $299.99 with qualifying port-in Metro: $349.99 with qualifying port-in Straight Talk: $299.99 upfront + $300 in service credits Red Pocket: $150 rebate with qualifying service For the latest iPhone prices and carrier promotions, see our iPhone Price Tracker.

Read more »

Save Up to $300 on Apple’s iPhone Air at Metro, Total Wireless, and Boost Mobile
Apple's 256GB iPhone Air normally sells for $999, but three wireless carriers have dropped prices as low as $699.99. Metro by T-Mobile leads the pack with a $300 discount for customers who bring their number, while Total Wireless is $250 off and Boost Mobile is $200 off. Metro: $699.99 ($300 off) Total Wireless: $749.99 ($250 off) Boost Mobile: $799.99 ($200 off) For the latest iPhone prices and carrier deals, see our iPhone Price Tracker.

Read more »

Total Wireless Drops the iPhone 16 to $479.99, Save $349
Total Wireless has dropped the 128GB iPhone 16 to just $479.99 when purchased with a qualifying Total ALL ACCESS three-month plan. That's a $349 discount from the phone's $829 regular price, and no trade-in is required. Total Wireless also offers monthly payments through its Edge financing program for qualified customers. Total Wireless service runs on Verizon's 5G network. Shop Total Wireless iPhone deals For the latest iPhone prices and carrier promotions, see our iPhone Price Tracker.

Read more »

Metro by T-Mobile Drops the 256GB iPhone 17 to $529.99, Save $300
Metro by T-Mobile has dropped the 256GB iPhone 17 to just $529.99 for customers who switch and bring their number, a $300 instant discount from its regular $829.99 price. No trade-in is required. You'll need to transfer an eligible number and activate a qualifying Metro plan, with plans starting at $55 for the first month and $50/month thereafter with AutoPay. Shop Metro by T-Mobile's iPhone deals For more iPhone sales, see our iPhone Price Tracker.

Read more »

Record $600 Discount Drops 14″ M5 Max MacBook Pro to $3499 at Amazon
Amazon has dropped the Space Black 14-inch M5 Max MacBook Pro to a new record-low price, with the 36GB/2TB configuration now selling for just $3499. That's a substantial $600 savings from Apple's $4099 MSRP. This is the standard 14-inch M5 Max configuration with an 18-core CPU, 32-core GPU, 36GB of unified memory, and a 2TB SSD. At $3499 at Amazon, it's the lowest price we've seen on the Space Black model and one of the best M5 Max MacBook Pro deals available right now. A $600 discount is especially notable on a current M5 Max MacBook Pro, bringing this high-end configuration well below the $4000 mark. Amazon is also offering fast shipping on available inventory. For the latest prices and deals across Apple's 14-inch MacBook Pro lineup, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

B&H Takes $500 Off 16″ M5 Max MacBook Pro, Drops Price to $3899
B&H has another strong deal on Apple's high-end MacBook Pro lineup, dropping the 16-inch M5 Max MacBook Pro with 36GB RAM and a 2TB SSD to just $3899. That's a substantial $500 savings from its regular $4399 price. This Space Black configuration features an 18-Core M5 Max CPU, 32-Core GPU, 36GB of unified memory, and a 2TB SSD. At $3899, it's one of the better current opportunities to pick up an M5 Max MacBook Pro without paying well over $4000. Check the current $3899 price at B&H. According to B&H's latest sale sheet, the $500 discount is scheduled to run through September 15. As with B&H's other recent Apple sales, availability at the discounted price may be limited. For the latest prices and deals across the lineup, see our 16" MacBook Pro Price Tracker, updated daily.

Read more »

B&H Slashes Up to $2500 Off Clearance Mac minis and Mac Studios
B&H has launched some unusually large discounts on previous-generation Mac desktops, including M4 and M4 Pro Mac minis and a high-end M3 Ultra Mac Studio. Among the Mac mini deals, B&H has an M4 model with 16GB RAM and a 2TB SSD for $1599, a $300 savings, while the M4 Pro with 24GB RAM and a 1TB SSD is also $300 off at $1799. Another M4 configuration with 24GB RAM and a 1TB SSD is down to $1399, saving $100. Shop B&H's current Mac mini deals. The biggest savings, however, are on a loaded M3 Ultra Mac Studio. B&H has the 32-Core M3 Ultra with an 80-Core GPU, a massive 256GB of unified memory, and a 2TB SSD for just $10499, down from $12999. That's a substantial $2500 savings. Shop B&H's current Mac Studio deals. These are previous-generation models being sold alongside Apple's new Mac desktop lineup, making the clearance prices especially interesting for buyers who would rather get more RAM or storage for their money. B&H also offers free shipping on the models we checked. For the latest prices and deals, see our Mac mini Price Tracker and Mac Studio Price Tracker, updated daily.

Read more »

Amazon Takes $500 Off 16-Inch M5 Max MacBook Pro, Now $3899
Amazon has dropped the 16-inch M5 Max MacBook Pro with 36GB RAM and a 2TB SSD to $3899, taking a full $500 off Apple’s $4399 MSRP. The Labor Day discount is available on both Space Black and Silver, making this one of the strongest current discounts on Apple’s high-end M5 Max MacBook Pro lineup. Amazon is also including free shipping. Get the 16-inch M5 Max MacBook Pro for $3899 at Amazon, or compare the latest prices in our 16-inch MacBook Pro Price Tracker.

Read more »

B&H Labor Day Sale Takes Up to $500 Off M5 Pro and M5 Max MacBook Pros
B&H is marking Labor Day with another round of discounts on Apple's MacBook Pro lineup, with savings reaching $400 on M5 Pro models and an even larger $500 on one 16-inch M5 Max configuration. Shop B&H's Labor Day MacBook Pro sale. One of the standout deals is a 14-inch M5 Pro MacBook Pro with 24GB RAM and a 2TB SSD for just $2699, a substantial $400 savings from its regular $3099 price. B&H also has the standard 14-inch M5 Pro 24GB/1TB model starting at $2349, while 16-inch M5 Pro models start at $2759. At the high end, B&H has dropped a 16-inch M5 Max MacBook Pro to $4499, a full $500 savings from its regular $4999 price. Several 16-inch M5 Pro configurations are also $240-$300 off. B&H lists limited supply at the current prices on several of these configurations, with free shipping included. The Labor Day deals run through September 5. For the latest MacBook Pro prices and deals, see our 14" MacBook Pro Price Tracker and 16" MacBook Pro Price Tracker, updated daily.

Read more »

B&H Labor Day Sale Takes Up to $300 Off M5 MacBook Airs Through September 5
B&H has launched its Labor Day sale on Apple's M5 MacBook Air lineup, with some of the best discounts available on upgraded 13-inch and 15-inch configurations. Shop B&H's Labor Day MacBook Air sale. Among the better deals, select 13-inch M5 MacBook Airs with 32GB RAM and a 512GB SSD are down to $1549, a $150 savings. On the 15-inch side, B&H has a 24GB/1TB model with a 70W USB-C adapter for $1799, a $220 savings from B&H's regular $2019 price, while a 32GB/1TB model is down to $1999, saving $200. These deals are especially interesting for buyers looking for more memory or storage than Apple's standard MacBook Air configurations. B&H lists limited supply at the current prices on many models and is offering free 2-day shipping. The Labor Day deals run through September 5, although individual configurations could sell out earlier. For the latest prices across the lineup, see our 13" MacBook Air Price Tracker and 15" MacBook Air Price Tracker, updated daily.

Read more »

B&H Labor Day Sale Takes Up to $400 Off Clearance M4 and M4 Pro Mac minis
B&H is clearing out remaining M4 and M4 Pro Mac mini inventory for Labor Day, with some particularly good discounts available on upgraded configurations. The sale runs through September 5, with savings advertised at up to $350, although we've spotted one high-end M4 Pro configuration currently marked down by an even larger $400. Among the standouts, B&H has an M4 Mac mini with 16GB RAM and a 2TB SSD for $1599, a $300 savings. An M4 Pro model with 24GB RAM and a 1TB SSD is also $300 off at $1799, while a 48GB/1TB M4 Pro is down to $2249, saving $250. The biggest discounts are on higher-end M4 Pro configurations. A 14-Core M4 Pro Mac mini with 64GB RAM and a 512GB SSD is $2599, a $350 savings, while the 64GB/1TB version has dropped to $2799 — currently $400 below B&H's regular $3199 price. These are clearance models following the introduction of Apple's new Mac mini lineup, and B&H lists limited supply at the sale price on some configurations. Free 2-day shipping is also available. For the latest prices and deals across the lineup, see our Mac mini Price Tracker, updated daily.

Read more »

B&H Drops 2026 Apple Studio Display to $1499, Save $100
B&H Photo has dropped the 2026 27-inch Apple Studio Display with standard glass and tilt-adjustable stand to $1499, taking a full $100 off Apple’s $1599 MSRP. B&H currently lists the display as in stock with free 2-day shipping, although supply is limited at the $1499 sale price. This is the current-generation Studio Display with a 27-inch 5K Retina panel, Thunderbolt 5 connectivity, up to 96W charging, and Apple’s built-in Center Stage camera and six-speaker audio system. Get the 2026 Apple Studio Display for $1499 at B&H, or compare the latest prices in our Studio Display Price Tracker.

Read more »