Apple Podcasts Best of 2021 Includes ‘A Slight Change of Plans’
Apple has announced the Podcasts Best of 2021 to recognize popular podcasts that excel in storytelling, production, sound design, and other defining features. Apple Podcasts Best of 2021 This year the editorial team has recognized “A Slight Change of Plans” with Maya Shankar from Pushkin Industries as Best Show of the Year, and “Anything for Selena” with Maria Garcia from WBUR and Futuro Studios as Newcomer of the Year. A Slight Change of Plans features stories about all sorts of change, from Tiffany Haddish discussing how she navigated the foster care system and discovered that she had a rare gift that would change her life, to John Elder Robison, who underwent experimental brain treatment to try and increase his emotional sensitivity. Anything for Selena asks questions about belonging through her relationship with musician Selena Quintanilla. “I loved Selena since I was 7 years old. I couldn’t articulate this when I was younger, but I felt a profound sense that she mattered — not just because of her music, but because of her expansive cultural impact.” Shows of the Year Apple also curated a collection of other shows and episodes that defined and reflected 2021. Here are a few: Anything Goes with Emma Chamberlain for making listeners feel as though they’re her best friend, helping them through doubt and sadness with her unique frankness, keen observations, and genuine affection. Teenager Therapy with Gael Aitor, Kayla Suarez, Mark Hugo, and Thomas Pham, for reminding everyone that direct, vulnerable conversations among friends — no matter the issue — is the best medicine. This Land from Crooked Media with Rebecca Nagle, for investigating and explaining the experiences of Native Americans to recontextualize America’s understanding of its own history. Oliver Schusser, Apple’s vice president of Apple Music and Beats: “We are honored to recognize the phenomenal creators who are redefining podcasting with this year’s best shows, and to help more listeners around the world discover, enjoy, and support their inspiring work.”

Read more »

Native Union Curve Strap review: A lightweight silicone band for Apple Watch
The Native Union Curve Strap for Apple Watch is an absurdly comfortable silicone strap that is both durable and lightweight.Native Union Curve Apple Watch strapWe've tried our fair share of budget Apple Watch bands. Some work surprisingly well, while others aren't worth their discounted prices. Native Union comes into the market with a mid-priced band that doesn't do anything far outside the norm, but nails the simple things. Read more...

Read more »

Intel Stockpiles Legacy Hardware for Security Research at Costa Rica Facility
The Wall Street Journal reports that Intel has a facility in Costa Rica where it stores legacy hardware for security research. Intel’s issue reflects a wider concern: Legacy technology can introduce cybersecurity weaknesses. Tech makers constantly improve their products to take advantage of speed and power increases, but customers don’t always upgrade at the same pace. This creates a long tail of old products that remain in widespread use, vulnerable to attacks.

Read more »

iPhone market share Q4 2021 predicted to hit 23%, taking lead from Samsung
Based on supply chain data of smartphone production levels, a market intelligence company is predicting iPhone market share for Q4 2021 will hit 23.1%. That would be up from 15.9% last quarter, and enough to convincingly take the No. 1 slot from Samsung. Apple is expected to benefit from both strong holiday quarter demand, and better supply chain management than its competitors – factors also cited in an earlier tablet report … more… The post appeared first on 9to5Mac.

Read more »

Apple Music Awards go to The Weeknd, Olivia Rodrigo, H.E.R., and others
Apple today announced the winners of the third annual Apple Music Awards, recognizing the best artists of 2021 and their influence on… The post appeared first on MacDailyNews.

Read more »

'Rocket League Sideswipe' brings car soccer game to iOS
The high-octane sports game "Rocket League Sideswipe" has shot onto iOS, with the car soccer title arriving on the small screen worldwide after existing on consoles and PC for years.The mobile version of the main "Rocket League" game, "Sideswipe" takes the core concept of rocket-propelled cars playing soccer, but simplifies it. Rather than requiring players to deal with three dimensions, "Sideswipe" instead is a side-on game that has players dealing with just two.Loosely following the rules of soccer, teams must knock a ball into their opponent's goal, while also defending their own. However, instead of people, the game uses cars with rockets, enabling them to gain a speed boost, jump, and fly in the air. Read more...

Read more »

Apple names its picks for the Best Podcasts of 2021
Apple has chosen Maya Shankar's "A Slight Change of Plans" as the best podcast show of 2021, alongside other recommended series and individual episodes of the year.000 lead Maya Shankar's "A Slight Change of Plans" is the show of the yearFollowing its announcement of this year's Apple Music Awards, Apple has now also released its pick of the best podcasts. Read more...

Read more »

Some 16-inch MacBook Pro users report issues trying to charge their Mac
Although the new M1 Max MacBook Pro has been really well-praised by the Apple community, one month after it was unveiled, some users are now starting to report an issue when trying to charge the computer when it’s completely shut down. more… The post appeared first on 9to5Mac.

Read more »

Apple celebrates the best and most popular podcasts of 2021
Apple on Tuesday published its showcase of this year’s best and most popular podcasts in the United States. It also called 2021 a year for “shows that moved us in ways unlike ever before.” A Slight Change of Plans with Maya Shankar has been named the Best Show of the Year, while Anything for Selena […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

16″ MacBook Pro (M1 Max) users face charging issues (via MagSafe)
The new 16” MacBook Pro powered by the company’s latest silicon – M1 Pro and M1 Max – appears to be plagued with issues ... Read more The post appeared first on iLounge.

Read more »

European tablet shipments in Q3 saw iPad as the only winner
A new market intelligence reports indicates that Western European tablet shipments declined sharply in Q3 2021, with four out of five of the top brands seeing their year-on-year numbers fall by anywhere from 20% to 53%. Apple was the only tablet vendor to see its sales increase during the quarter, enjoying a 33% growth in iPad shipments, year-on-year … more… The post appeared first on 9to5Mac.

Read more »

Apple Podcasts celebrates the best shows of 2021
After releasing the Apple Music Awards early this morning, Apple is now celebrating the best podcast shows of 2021. This year, Apple Podcasts Best of 2021 features shows and creators that “provided listeners with a powerful sense of connection in a challenging and uncertain time, curated by Apple Podcasts’ world-class editorial team.” more… The post appeared first on 9to5Mac.

Read more »

How to use the emoji keyboard on iOS 15 and iPadOS 15
Learn how to enable the built-in emoji keyboard on your iPad and iPhone and how to quickly add emojis to messages, emails, and more.Emojis are a fun, helpful way to add some personality to whatever you're typing. Not only are they cute, but they can also help provide a bit of emotion behind your messages.The emoji keyboard is enabled by default, but if you can't find it for some reason, here's a quick way to make sure it's enabled. Read more...

Read more »

Apple published a new Press Release
Apple just published a new Press Release:Apple Podcasts presents the Best of 2021

Read more »

Rocket League blasts onto iPhone and iPad, but not as you know it
Rocket League has finally made its way to iPhone and iPad — but it’s not quite the same game that has proven popular on consoles and PC. Sideswipe is a brand-new take on the formula that’s built specifically for mobile play. The free-to-play game features 1v1 or 2v2 matches in which players battle it out to […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple iPad sales up in Western Europe as all other tablets decline
New research claims that Apple's iPad sales rose 33% in Western Europe in Q3 2021, even as the market declined 20% year over year.Apple's iPad sales continued to grow in Western EuropeApple's continued launches of new iPads has reportedly helped it see a rise in sales for the quarter across Western Europe. According to Canalys, as that market declined to a total of 6.9 million units shipped, Apple's rise saw it take 45% of all tablet sales. Read more...

Read more »

T-Mobile trade-ins against iPhone 13 purchases being denied; carrier says it will resolve
Following problems with the Apple Watch $100 rebate program, customers are now reporting that T-Mobile trade-ins against iPhone 13 purchases are being similarly denied. T-Mobile promised extremely generous trade-in values of up to $800 on older models when purchasing a new iPhone 13, with credits being applied against monthly bills. But some customers report being denied, while others say the credits are not appearing on their bills … more… The post appeared first on 9to5Mac.

Read more »

16-inch MacBook Pro users reporting MagSafe issues, clamshell mode problems
For some users, the new 16-inch MacBook Pro does not always charge when completely shut down, with others finding issues with external monitors not waking correctly in clamshell mode.MagSafe charging on a MacBook ProSome users of the revised 16-inch MacBook Pro have been reporting hardware issues concerning MagSafe charging, and using external monitors. Read more...

Read more »

When Safari flashes a ‘Compromised Password’ warning, pay attention
I brought up a Start Page in Safari 15 and a banner at the top read “Compromised Password.” I first thought that I must have been redirected to a website that looks like the Safari Start Page. The alert looked just like the kind of phishing technique that would lure someone in to entering the […]

Read more »

The Weeknd and Olivia Rodrigo win big in 2021 Apple Music Awards
The Weeknd and Olivia Rodrigo are among the biggest winners in the 2021 Apple Music Awards. This year, Apple Music also added Regional Artist of the Year awards, which recognize “artists who made the greatest impact culturally.” Apple called the past 12 months “a remarkable year for music.” You can watch its Awards celebration through […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

How to send balloons, hearts, and other flair in iMessage
Give your text and emoji-based messages a bit of life, by sending special effects to others in the iMessage conversation.You can send various iMessage effects to your friends and family. Sometimes, sending a message from your iPhone to others can seem a bit pedestrian. A line of text doesn't really elicit emotion unless it's a meaningful message, unless you count the use of emojis and copious use of capitalized letters and punctuation. Read more...

Read more »

Everything we know (and hope) Apple is releasing in December 2021
There’s no doubt about it: Apple’s releases are starting to wind down for the year. We think all the significant hardware coming this year is out now, and even the Apple TV+ shows are slowing to a trickle. We’ll probably get new iOS and macOS updates in December, along with a handful of Apple Arcade […]

Read more »

Apple launches Mac upgrade program, allows for some businesses to upgrade their Macs every 90 days through CIT financing
If your business is looking to upgrade its Macs a bit more often, this might be for you. Apple has recently launched a new program via its business portal that allow for Mac upgrades every 90 days with financing through a certified third party. Through CIT, businesses can get a base model ($999) Macbook Air for […] Source

Read more »

The reports of Apple’s death in China are greatly exaggerated
It’s times like these when the Macalope remembers the sage advice of his spiritual guru who once said, “Don’t trust people. They’ll only hurt you.” In retrospect the Macalope should probably not have picked Cormac McCarthy as a spiritual guru. But we all make mistakes. Anyway, cast your memory back to a time long, long […]

Read more »

Rumor: Apple resuming work on abandoned AirPower wireless charging product
In spite of the assorted starts and stops involved in its now-abandoned AirPower wireless charging product, Apple appears to be working on a future wireless charger. In the latest edition of the journalist’s Power On newsletter, Bloomberg’s Mark Gurman reiterates earlier reports that Apple still intends to create a wireless charging accessory that would charge […] Source

Read more »

Apple unveils third annual Apple Music award winners
"The Weeknd" has been named global Artist of the Year at the third Apple Music Awards, which also introduced a new category of Regional Artist of the Year.Apple Music AwardsFirst launched in 2019, the Apple Music Awards have this year expanded to recognize more works from around the world. Read more...

Read more »

Apple Music Awards celebration details announced
Apple has announced the winners of the third edition of Apple Music Awards. It recognizes the best artists of the year (2021) and reportedly ... Read more The post appeared first on iLounge.

Read more »

Vulnerability Summary for the Week of November 22, 2021
Original release date: November 29, 2021  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info 4mosan -- gcb_doctor 4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files. 2021-11-19 10 CVE-2021-42338 CONFIRM adobe -- creative_cloud_desktop_application Adobe Creative Cloud version 5.5 (and earlier) are affected by a privilege escalation vulnerability in the resources leveraged by the Setup.exe service. An unauthenticated attacker could leverage this vulnerability to remove files and escalate privileges under the context of SYSTEM . An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability on the product installer. User interaction is required before product installation to abuse this vulnerability. 2021-11-23 9.3 CVE-2021-43019 MISC MISC adobe -- incopy Adobe InCopy version 16.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability. 2021-11-22 9.3 CVE-2021-43015 MISC adobe -- prelude Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability. 2021-11-22 9.3 CVE-2021-42738 MISC asus -- gt-ax11000_firmware An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote unauthenticated attacker to DoS via sending a specially crafted HTTP packet. 2021-11-19 7.8 CVE-2021-41436 MISC MISC MISC MISC MISC MISC MISC MISC asus -- gt-ax11000_firmware A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request. 2021-11-19 10 CVE-2021-41435 MISC MISC MISC MISC MISC MISC MISC MISC beyondtrust -- privilege_management_for_windows BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions. 2021-11-19 7.2 CVE-2021-42254 MISC MISC c-ares_project -- c-ares A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability. 2021-11-23 7.5 CVE-2021-3672 MISC MISC dell -- cloudlink Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system. 2021-11-23 8.5 CVE-2021-36312 CONFIRM dell -- cloudlink Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker. This vulnerability is considered critical as it may be leveraged to completely compromise the vulnerable application as well as the underlying operating system. Dell recommends customers to upgrade at the earliest opportunity. 2021-11-23 9 CVE-2021-36313 CONFIRM dell -- emc_cloud_link Dell EMC CloudLink 7.1 and all prior versions contain an Arbitrary File Creation Vulnerability. A remote unauthenticated attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary files on the end user system. 2021-11-23 7.5 CVE-2021-36314 CONFIRM dell -- networking_os10 Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system. 2021-11-20 8.5 CVE-2021-36307 MISC dell -- networking_os10 Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system. 2021-11-20 9.3 CVE-2021-36308 MISC dell -- networking_os10 Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system. 2021-11-20 9.3 CVE-2021-36306 MISC dell -- x1008p_firmware Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID. 2021-11-20 7.5 CVE-2021-36320 MISC duplicate_post_project -- duplicate_post The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In many cases it also possible to exploit features of SQL server to execute system commands and/or access the local file system. This particular vulnerability can be exploited by any authenticated user who has been granted access to use the Duplicate Post plugin. By default, this is limited to Administrators, however the plugin presents the option to permit access to the Editor, Author, Contributor and Subscriber roles. 2021-11-19 9 CVE-2021-43408 MISC MISC gerbv_project -- gerbv An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version of Gerbv (commit 71493260). A specially-crafted drill file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. 2021-11-19 7.5 CVE-2021-40391 MISC huawei -- cloudengine_5800_firmware There is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600. Due to lack of privilege restrictions, an authenticated local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. 2021-11-23 7.2 CVE-2021-39976 MISC huawei -- fusioncompute There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands to the system. Affected product versions include: FusionCompute 6.0.0, 6.3.0, 6.3.1, 6.5.0, 6.5.1, 8.0.0. 2021-11-23 9 CVE-2021-37102 MISC ibm -- planning_analytics IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 208396. 2021-11-24 9.3 CVE-2021-38873 CONFIRM XF iptime -- c200_firmware ius_get.cgi in IpTime C200 camera allows remote code execution. A remote attacker may send a crafted parameters to the exposed vulnerable web service interface which invokes the arbitrary shell command. 2021-11-22 10 CVE-2021-26614 MISC isync_project -- isync A flaw was found in mbsync in isync 1.4.0 through 1.4.3. Due to an unchecked condition, a malicious or compromised IMAP server could use a crafted mail message that lacks headers (i.e., one that starts with an empty line) to provoke a heap overflow, which could conceivably be exploited for remote code execution. 2021-11-22 7.5 CVE-2021-44143 MISC MISC MISC moodle -- moodle A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified. 2021-11-22 7.5 CVE-2021-3943 MISC MISC nvidia -- geforce_gt_605 NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to instantiate a specifically timed DMA write to corrupt code execution, which may impact confidentiality, integrity, or availability. 2021-11-20 7.2 CVE-2021-23217 CONFIRM nvidia -- geforce_gtx_950 NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller which may allow a user with elevated privileges to generate valid microcode. This could lead to information disclosure, data corruption, or denial of service of the device. 2021-11-20 7.2 CVE-2021-23201 CONFIRM oisf -- suricata Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments. 2021-11-19 7.5 CVE-2021-37592 MISC CONFIRM CONFIRM pulsesecure -- pulse_connect_secure A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a malformed request is sent to the device. 2021-11-19 7.8 CVE-2021-22965 MISC quagga -- quagga An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (with control of the non-root-owned directory /etc/quagga) to escalate their privileges to root upon package installation or update. 2021-11-19 7.2 CVE-2021-44038 MISC MISC roundcube -- webmail Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params. 2021-11-19 7.5 CVE-2021-44026 MISC MISC MISC FEDORA FEDORA DEBIAN sharetribe -- sharetribe Sharetribe Go is a source available marketplace software. In affected versions operating system command injection is possible on installations of Sharetribe Go, that do not have a secret AWS Simple Notification Service (SNS) notification token configured via the `sns_notification_token` configuration parameter. This configuration parameter is unset by default. The vulnerability has been patched in version 10.2.1. Users who are unable to upgrade should set the`sns_notification_token` configuration parameter to a secret value. 2021-11-19 7.5 CVE-2021-41280 CONFIRM MISC MISC vim -- vim vim is vulnerable to Heap-based Buffer Overflow 2021-11-19 8.5 CVE-2021-3968 CONFIRM MISC FEDORA vim -- vim vim is vulnerable to Heap-based Buffer Overflow 2021-11-19 9.3 CVE-2021-3973 MISC CONFIRM FEDORA wazuh -- wazuh In the wazuh-slack active response script in Wazuh before 4.2.5, untrusted user agents are passed to a curl command line, potentially resulting in remote code execution. 2021-11-22 7.5 CVE-2021-44079 MISC MISC wpwave -- hide_my_wp The SQL injection vulnerability in the Hide My WP WordPress plugin (versions

Read more »

The Internet is Held Together With Spit & Baling Wire
Imagine being able to disconnect or redirect Internet traffic destined for some of the world's largest companies -- just by spoofing an email. This is the nature of a threat vector recently removed by a Fortune 500 firm that operates one of the world's largest Internet backbones.

Read more »

Apple Sues NSO Group for Pegasus Spyware – Intego Mac Podcast Episode 215
Apple has filed a lawsuit against NSO Group, the creator of Pegasus spyware, that has targeted politicians, journalists, and activists. We discuss this surprising lawsuit and what it means for Apple users and security. The post appeared first on The Mac Security Blog.

Read more »

Mac and iOS Keychain Tutorial: How Apple’s iCloud Keychain Works
The macOS and iOS keychain allows you to store passwords securely, and access them on all your Apple devices. The post appeared first on The Mac Security Blog.

Read more »

Arrest in ‘Ransom Your Employer’ Email Scheme
In August, KrebsOnSecurity warned that scammers were contacting people and asking them to unleash ransomware inside their employer's network, in exchange for a percentage of any ransom amount paid by the victim company. This week, authorities in Nigeria arrested a suspect in connection with the scheme -- a young man who said he was trying to save up money to help fund a new social network.

Read more »

The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back
One of the more common ways cybercriminals cash out access to bank accounts involves draining the victim's funds via Zelle, a "peer-to-peer" (P2P) payment service used by many financial institutions that allows customers to quickly send cash to friends and family. Naturally, a great deal of phishing schemes that precede these bank account takeovers begin with a spoofed text message from the target's bank warning about a suspicious Zelle transfer. What follows is a deep dive into how this increasingly clever Zelle fraud scam typically works, and what victims can do about it.

Read more »

Shop Safely on Black Friday and Cyber Monday – Intego Mac Podcast Episode 214
We had to check our calendars when Apple announced a new self-service repair program for iPhones. We look at some new Mac malware, and we discuss how to shop safely and securely online this Black Friday and Cyber Monday. The post appeared first on The Mac Security Blog.

Read more »

Tech CEO Pleads to Wire Fraud in IP Address Scheme
The CEO of a South Carolina technology firm has pleaded guilty to 20 counts of wire fraud in connection with an elaborate network of phony companies set up to obtain more than 735,000 Internet Protocol (IP) addresses from the nonprofit organization that leases the digital real estate to entities in North America.

Read more »

7 essential tips to stay safe shopping online, Cyber Week and all year
How can you ensure that your online shopping experience is safe and secure? We have several crucial tips to help you stay protected during the holiday shopping season and year-round. (And also, don't miss our Cyber Week 2020 deals!) The post appeared first on The Mac Security Blog.

Read more »

Vulnerability Summary for the Week of November 8, 2021
Original release date: November 15, 2021  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info airangel -- hsmx-app-25_firmware Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution. 2021-11-10 10 CVE-2021-40521 MISC MISC asgaros -- asgaros_forum The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue 2021-11-08 7.5 CVE-2021-24827 CONFIRM MISC azeotech -- daqfactory The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown. 2021-11-05 7.5 CVE-2021-42543 MISC cloudera -- cloudera_manager Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges. 2021-11-08 7.5 CVE-2021-30132 MISC MISC dolibarr -- dolibarr The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shell_exec are blocked but backticks are not blocked. 2021-11-10 7.5 CVE-2021-33816 MISC MISC FULLDISC engineers_online_portal_project -- engineers_online_portal A file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via dashboard_teacher.php, which allows changing the avatar through teacher_avatar.php. Once an avatar gets uploaded it is getting uploaded to the /admin/uploads/ directory, and is accessible by all users. By uploading a php webshell containing "

Read more »

Hoax Email Blast Abused Poor Coding in FBI Website
The Federal Bureau of Investigation (FBI) confirmed today that its fbi.gov domain name and Internet address were used to blast out thousands of fake emails about a cybercrime investigation. According to an interview with the person who claimed responsibility for the hoax, the spam messages were sent by abusing insecure code in an FBI online portal designed to share information with state and local law enforcement authorities.

Read more »

13″ M1 MacBook Pro with 512GB SSD on Cyber Monday sale for $1249, $250 off MSRP
Amazon has the Space Gray 13″ M1 MacBook Pro with a 512GB SSD on Cyber Monday 2021 sale for $250 off MSRP shipped: – 2020 13″ MacBook Pro Silver M1 CPU/512GB SSD: $1249.99 $250 off MSRP Their $1249 price is the lowest available for any 13″ M1 MacBook Pro with 512GB of storage this Cyber Monday 2021. Note that Amazon’s stock comes and goes, so […] The post first appeared on MacPrices.net.

Read more »

Cyber Monday 2021 Sale: $10 off HomePod minis on Staples’ online store
Staples’ online store has HomePod minis on sale for $10 (10%) off MSRP as part of their Cyber Monday 2021 sale. Prices for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup, if available: – HomePod mini (Space Gray): $89 $10 off MSRP – HomePod mini (White): $89 $10 off MSRP Their 10% off discount is […] The post first appeared on MacPrices.net.

Read more »

B&H has M1 Mac minis on sale for up to $150 off Apple’s MSRP for Cyber Monday 2021
B&H Photo has Apple’s Mac minis with M1 Apple Silicon CPUs in stock today and on sale for $70-$150 off MSRP, starting at $629, for Cyber Monday 2021. Free 1-2 shipping is free to many US addresses. Their prices are among the lowest available for new M1 Mac minis today, and both models are in stock: – Mac mini M1 CPU/256GB SSD: $629 $70 off […] The post B&H has M1 Mac minis on sale for up to $150 off Apple’s MSRP for Cyber Monday 2021 first appeared on MacPrices.net.

Read more »

This is the best Cyber Monday 2021 deal on Apple 14″ M1 Pro MacBook Pros, save $200 and get free 1-2 day shipping
B&H Photo is offering a $200 discount on Apple’s new 14″ M1 Pro MacBook Pro as part of their Cyber Monday 2021 sale. Their sale price applies to the configuration below, and it’s in stock today with free 1-2 day shipping to most US addresses: – 14″ MacBook Pro M1 Pro/8-Core CPU/16GB RAM/512GB SSD/Space Gray: $1799 $100 off MSRP in stock B&H’s price on this […] The post first appeared on MacPrices.net.

Read more »

Apple AirPods are on sale for up to $70 off MSRP for Cyber Monday
Amazon has launched their Cyber Monday 2021 Apple AirPods sale. Models are available for up to $70 off Apple’s MSRP with prices starting at only $99. Shipping is free, and all models are in stock today: – AirPods Pro (2021): $179 $70 off MSRP – AirPods (2021 3rd Gen): $149.99 $30 off MSRP – AirPods 2nd-gen with Charging Case: $99.99 $30 off MSRP Amazon’s prices […] The post first appeared on MacPrices.net.

Read more »

Cyber Monday Deal: 13″ M1 Silver MacBook Airs for $869, $130 off Apple’s MSRP
Apple resellers are offering the M1-powered 13″ 256GB Silver MacBook Air for $130 off Apple’s MSRP, only $869, as part of their Cyber Monday 2021 sales: 8-Core M1 Silicon CPU, 7-Core GPU. MSRP: $999 – 13″ MacBook Air/256GB SSD: $869 at Amazon $130 off MSRP – 13″ MacBook Air/256GB SSD: $869 at B&H $130 off MSRP free 1-2 day shipping Keep an eye on our […] The post first appeared on MacPrices.net.

Read more »

Cyber Monday Clearance Deal: 21″ iMac for only $799
Amazon has recently-discontinued 2020 21″ 2.3GHz Intel-based dual-core i5 iMacs (8GB RAM/256GB SSD) on clearance sale for only $799 shipped as part of their Cyber Monday 2021 sale. Their price is $220 off original MSRP, and it’s $80 lower than their Black Friday price. For the latest prices & sales, keep an eye on our iMac Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Cyber Monday Sale: 16″ M1 Pro MacBook Pro in stock and on sale for $100 off MSRP
Apple resellers are reporting stock of the new 16″ MacBook Pro with an Apple M1 Pro CPU today and are discounting one model $100 off MSRP: – 16″ Space Gray 10-core MacBook Pro (M1 Pro/16GB RAM/512GB SSD): $2399 at Amazon $100 off MSRP – 16″ Space Gray 10-core MacBook Pro (M1 Pro/16GB RAM/512GB SSD): $2399 at B&H $100 off MSRP Both resellers are offering free […] The post first appeared on MacPrices.net.

Read more »

Black Friday Sale: Get an 11″ M1 2TB WiFi iPad Pro for $1649, save $250
Amazon has the 11″ M1 2TB WiFi iPad Pro, in Space Gray, on sale for $1648.99 shipped as part of their Black Friday/Cyber Monday 2021 sale. Amazon’s price is $250 off MSRP, and it’s the lowest price available for this model from any Apple reseller. Delivery is expected as soon as December 4th. For the latest prices & sales, see our 11″ iPad Price Tracker, […] The post first appeared on MacPrices.net.

Read more »

The best Black Friday/Cyber Monday 2021 deal on 13″ MacBook Airs are these models in stock today at Apple starting at only $849
Apple has a full line of 2020 13″ M1 MacBook Airs available and in stock today, Certified Refurbished, starting at only $849 and up to $190 off original MSRP. These are the best deals on 13″ MacBook Airs available from Apple or any of its resellers over the Black Friday and Cyber Monday 2021 period. Apple’s one-year warranty is included, shipping is free, and each […] The post first appeared on MacPrices.net.

Read more »

Expercom offers $40 discount on AppleCare+ with 13″ M1 MacBook Pros
Take $40 off 3-year AppleCare+ Plans ($209, regularly $249) when purchased alongside new 13″ M1 MacBook Pros at Apple reseller Expercom. All models are in stock today: – 2020 13″ MacBook Pro M1 CPU/256GB SSD: $1299 – 2020 13″ MacBook Pro M1 CPU/512GB SSD: $1499 Additional discounts may be available if you create a free account on their site. For the latest prices & sales, […] The post first appeared on MacPrices.net.

Read more »

Black Friday Clearance Deal: 21″ iMacs for only $879
Amazon has recently-discontinued 2020 21″ 2.3GHz Intel-based dual-core i5 iMacs (8GB RAM/256GB SSD) on clearance sale for only $879 shipped. Their price is $220 off original MSRP, and it’s the lowest price for a new iMac available at any Apple reseller this Black Friday. For the latest prices & sales, keep an eye on our iMac Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »