UK Apple Stores start to accept walk-in customers again
Apple is opening up a number of its Apple Stores in the UK to walk-in customers, by dropping a requirement to attend a session with a reservation.Apple Store, White CitySince the introduction of "Plan B" measures by the UK government in December to counter a rise in Omicron variant COVID-19 infections, Apple limited access to its stores only to customers with an appointment. Apple is now starting to open the stores back up to passing trade. Read more...

Read more »

Apple delays in-app account deletion requirement, extends IAP exception for group services
Apple has pushed back the enforcement of some rules that were previously set to come into effect on January 31st. Firstly, during the first 2020 lockdowns, Apple allowed apps offering realtime group services to use payment methods other than In-App Purchase. This exception was introduced to help businesses trying to adapt to pandemic life. Citing the recent resurgence of COVID, this exception is now being extended to June. Apple has also deferred previously-announced rules that would require apps to offer simple in-app account deletion. more… The post appeared first on 9to5Mac.

Read more »

App Store virtual event, account deletion rule changes delayed until June
Developers now have more time to change their apps to abide by inbound App Store rules about online virtual group events and in-app account deletion, with a new deadline set for June 30.In an update posted to Apple's Developer site on Saturday, Apple warns developers that it has changed deadlines for rules applying to apps held in the App Store. The deadlines have been lengthened, giving developers a few more months to implement changes to their apps."In order to provide more time for you to update your apps, we've changed the following requirement deadlines to June 30, 2022," writes Apple. Read more...

Read more »

AT&T and Verizon Debut Faster, More Widely Available 5G Service
AT&T and Verizon have started using C-band wireless spectrum that will speed up their 5G cellular service and make it available to more customers. This important step in 5G’s overall evolution brings AT&T and Verizon more in line with T-Mobile, which has had an edge in available spectrum until now.

Read more »

‘Frankenchip’ and other big changes coming to pro Macs this year [The CultCast]
This week on Cult of Mac’s podcast: Leaks, rumors and government filings give us an even clearer look at what Apple’s product pipeline looks like for 2022. We’re expecting big changes to the pro Mac lineups this year — including a hybrid Apple “Frankenchip” based on the M1 series. Also on The CultCast: Bye-bye, 13-inch […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

How to sign up for Apple TV+ without an Apple device
Apple TV+ and the TV app is available on many platforms, not just Apple devices. But you need an Apple ID to sign in. Unfortunately, Apple doesn’t make it particularly easy to make an Apple ID without owning an Apple device of some kind. The Apple TV website will direct you to log in with your account on a PC using iTunes. This works, but it’s also inconvenient and many people don’t have access to a computer. Thankfully, there is a workaround which allows you to fully sign up to Apple TV+ using only your Android phone. Here’s how … more… The post appeared first on 9to5Mac.

Read more »

iPhone 13 'pink screen' issue affects small number of users
A so-called "pink screen" issue is affecting a small number of iPhone 13 units, with a brightly-colored display and crashes thought by Apple support teams to be a software problem, not hardware.An iPhone with a pink display [via Apple Support Forums user 'Jphon']Shortly after the release of the iPhone 13 and iPhone 13 Pro lines in late 2021, a small number of users encountered a frustrating situation with their smartphones. Their iPhones would lock up and display a pink screen. Read more...

Read more »

Today in Apple history: Super Bowl Mac ad airs against the odds
January 22, 1984: Apple’s stunning “1984” commercial for the Macintosh 128K airs on CBS during the third quarter of Super Bowl XVIII. Probably the most famous TV ad for a computer in history, the commercial is directed by Alien and Blade Runner helmer Ridley Scott. It very nearly didn’t air, though. Apple advertising thinks different […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple signs multi-year live-action film deal with Skydance Media
Skydance Media is extending its relationship with Apple TV+, by signing a new multi-year deal to develop and produce a series of Apple Original Films.In February 2021, Apple signed a deal with Skydance in relation to some of its animated projects. Almost one year later, another deal has been struck, this time dealing with live-action content.The agreement means Skydance Media will be working to develop and produce a series of films that will be released through Apple Original Films, reports Deadline. Few details about the deal have been revealed, though it will apparently be a multi-year affair between the two companies. Read more...

Read more »

Poll: What are you most excited to see at Apple’s rumored Spring event?
Apple is rumored to be planning a Spring event in the coming months with a new iPhone SE, new iPad Air, and more. What are you most excited to see at this keynote? more… The post appeared first on 9to5Mac.

Read more »

Get in the cybersecurity game with this $30 bundle
The cybersecurity industry continues to grow every year, producing high-paying jobs for people with the right education. Learn the skills of this lucrative trade at your own pace with The 2022 Ultimate Cybersecurity Analyst Preparation Bundle. It’s on sale now for just $29.99 (regularly $1,600). Learn all about cybersecurity This bundle comes with 51 hours […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Best deals Jan. 22: $850 12.9-inch iPad Pro, $425 off Roomba combo, more!
Saturday's best deals include a 12.9-inch iPad Pro for $850, a 16TB Seagate hard drive for $292, and a LePow portable monitor for $167.Best Deals for January 22As we do every day, we've collected some of the best deals we could find on Apple products, tech accessories, and other items for the AppleInsider audience. If an item is out of stock, it may still be able to be ordered for delivery at a later date. Read more...

Read more »

Apple @ Work: Here’s how an annual Mac upgrade program benefits Apple, enterprises, and employees
Apple @ Work is brought to you by Mosyle, the leader in modern mobile device management (MDM) and security for Apple enterprise and education customers. Over 28,000 organizations leverage Mosyle solutions to automate the deployment,  management and security of millions of Apple devices daily. Request a FREE account today and discover how you can put your Apple fleet on auto-pilot at a price point that is hard to believe. A few months ago, 9to5Mac explained how businesses now can upgrade their Macs every 90 days through a 3rd party financing company. Through CIT, companies can get a base model ($999) Macbook Air for $30/month with the option to upgrade it in 3 months if a new model comes out. I believe that Apple is just testing the waters here, and a new business lease program that enables regular upgrades is on the way soon. more… The post appeared first on 9to5Mac.

Read more »

WhatsApp readying expanded chat migration from Android to iPhone, will require ‘Move to iOS’ app
Samsung users that want to migrate to iPhone can already transfer their WhatsApp chat history with no problem. Now, the app is continuing to develop support to allow all Android users being able to do the same. more… The post appeared first on 9to5Mac.

Read more »

PDF Expert: Award-Winning Mac Software is 62% Off
iLounge has a special deal on the PDF Expert: Award-Winning Mac Software, which allows you to work on and share your documents, with features ... Read more The post appeared first on iLounge.

Read more »

MacCleanse Lifetime License is 59% Off
iLounge has a special deal on the MacCleanse Lifetime License, which allows you to keep your Mac’s hard drive clean and consistent. Rooting out ... Read more The post appeared first on iLounge.

Read more »

The New Beats Fit Pro is Nearly 25% Off
Upgrading to new earbuds is perhaps the most direct way to enjoy modern and improved audio features. Today, you can get the all-new Beats ... Read more The post appeared first on iLounge.

Read more »

Shot on iPhone 13 Pro features ‘Chinese New Year- The Comeback’
A new ‘Shot on iPhone 13 Pro’ video has arrived on Apple’s official YouTube channel. ‘The Comeback’ is themed around the Chinese New Year ... Read more The post appeared first on iLounge.

Read more »

iPhone 13 durability and battery life highlighted in new Apple ads
Two new Apple ads have surfaced online and highlight the iPhone 13 in terms of durability and battery life. ‘Doin’ Laps’ is a video ... Read more The post appeared first on iLounge.

Read more »

‘Godzilla and the Titans’ announced for Apple TV+
A new live-action series, tentatively titled ‘Godzilla and the Titans’ will be arriving on Apple’s streaming platform. The series will focus on the titular ... Read more The post appeared first on iLounge.

Read more »

The Multi-Angled Speck Presidio Pro Folio MagSafe Stand is Down $13
A MagSafe stand solves both charging needs and having something you can prop your iPhone 12 or iPhone 13 on. Today, the Speck Presidio ... Read more The post appeared first on iLounge.

Read more »

AirPods saves NJ designer’s life
A New Jersey woman credits the Apple AirPods for saving her life after an injury. 60 year old Susan Putnam was alone in her ... Read more The post appeared first on iLounge.

Read more »

Apple Music ranks number 2 in Most-Used global streaming service
Apple’s music streaming platform ranks second in the most widely-used service genre, according to data collected by research firm Midia. Spotify is still the ... Read more The post appeared first on iLounge.

Read more »

Apple education store revamped, Unidays verification added
Apple’s online education store has received an upgrade and a verification check for Unidays staff education and students’ status. The revision to the educational ... Read more The post appeared first on iLounge.

Read more »

Pokémon GO Community Day Classic spotlights Bulbasaur this Saturday
If you missed the good old days of Pokémon GO and were never able to catch a Shiny Bulbasaur, this Saturday will be the day to do just that, as the grass starter from the Kanto region is back in the spotlight on the first Community Day Classic. more… The post appeared first on 9to5Mac.

Read more »

Apple Breakfast: Dreaming of spring iPhones and iPads
Welcome to the new home for Apple Breakfast! If you’re a reader of Macworld’s UK site, you’ll recognize this column that will now appear on Macworld.com every Saturday. If you’re new, this is our weekly collection of all the Apple news you missed this week, in a handy bite-sized roundup. We call it Apple Breakfast because we think it goes great with a morning cup of coffee or tea, but it’s cool if you want to give it a read during lunch or dinner hours too. Spring is in the air This article is being written while looking out on a scene of the bleakest wintry desolation: gloom, ice, bare trees. At times like this it can soothe the soul to think ahead to warmer days – which is handy, because much of this week has been spent speculating about Apple’s preparations for its customary spring event, and the ever-growing backlog of unreleased products we expect to be announced. We began with indications, via “reliable sources in China”, that the new iPad Air would make an appearance in the spring, followed by predictions that it would be accompanied by something called the “iPhone SE+ 5G”. Not terribly snappy, as names go, but a launch that would gladden many hearts. Apple has registered new iPadOS and iOS devices with the Eurasian Economic Commission, too, which usually means something’s about to launch. Sadly, such pleasing news may arrive a little later than usual. Apple generally chooses March as the moment to come out of winter hibernation, as we saw in 2011 and 2012, then 2015 and 2016, and finally in 2018 and 2019. Occasionally, as we saw in 2021, it waits until April. But this year we may have to wait until May. Why? because the new iPhone SE – I’m sorry, the iPhone SE+ 5G – might not come out of production until then. But cheer up: maybe Apple will announce the iPad Air (and maybe some new AirPods Pro, and who knows, perhaps a new iMac) at an event in March, then slip out the iPhone SE in a press release a month or so later… although that would probably mean the new SE is too boring to merit its own event. Now turn up the heating, put on a second pair of socks, and think warm thoughts. There’s only 99 days until May. News in brief The pressure continues to build on Apple’s control of the App Store. After recently (and reluctantly) allowing app developers in South Korea to use alternative payment systems, the company this week offered a similar concession in the Netherlands – although only for makers of dating apps specifically. It’s not yet clear if Apple’s move will be enough to mollify Dutch authorities, which are currently considering their response. Google is wrong. Apple’s iMessage is actually a failure, reckons Jason Snell. Samsung, which based an entire marketing strategy around notches being stupid, has made a tablet with a notch. It’s amazing how often Samsung does this sort of thing: this is the third article on Macworld with a headline beginning with the four magic words: “After mocking Apple, Samsung…” So the Mac isn’t doomed to fail anymore? Who’d a thunk it, wonders the Macalope. Roman Loyola rounds up 5 iPhone features the Mac needs right now. Sorry switchers, Apple will give you a lot less for your Android trade-in now. Apple has an AirTag problem, says Michael Simon. Here’s how to solve it. In the latest episode of the Macworld Podcast, we talk about what the app store does right and what it gets oh-so-very wrong, and what we as customers need to do to get the most out of it. You might think Apple is working on a folding iPhone, but Samuel Nyberg is not fooled. Apple has won back top spot in the smartphone market, despite widely reported stock problems last quarter. Craig Grannell rounds up the 40 finest iPhone games that don’t cost anything. That’s right: nothing. They don’t cost a bean! They must be mad! Software, bugs & other issues IDG At the end of last week, we reported on a bug in Safari 15 that could result in your browsing history and Google ID being leaked; it was so serious that we suggested looking into alternative browsers. Well, there’s good news: Apple is fixing it. Users are complaining about flickering pixels when they use Apple’s Thunderbolt Display with M1 Macs. Unfortunately the display is classified as Vintage, which means Apple is unlikely to fix the problem. You can run macOS on the latest Intel Alder Lake chips. If you dare. Apple is usually very good at persuading mobile users to update their devices to the latest versions of iOS and iPadOS – but this year the adoption numbers are way down. We explore some of the reasons why. The rumor mill IDG A new version of the Mac Pro featured an upgraded M1 Max chipset will be released this year, according to the reliable leaker Dylan DKT. A cheaper 14-inch MacBook Pro with an M2 chip could land soon. Apple has patented Back To The Future-style self-lacing shoes. To which we have two questions: how soon and why? And with that, we’re done for this week. If you’d like to get regular roundups, sign up for our newsletters. You can also follow us on Twitter for breaking news stories. See you next Saturday, enjoy your weekend, and stay Appley!

Read more »

This 5-in-1 modular wireless charger is marked down by $30
It’s 2022, and there’s no reason to have a charger that doesn’t do its job flawlessly. The OMNIA Q5 5-in-1 Wireless Charging Station is one of the only charging stations that can power 5 devices at once, and for a limited time, it’s on sale for $99.95 (Reg. $120).  The OMNIA can power an iPhone, Apple Watch, Apple Pencil, AirPods, and iPad all at once in one contained, organized area. USB-A and USB-C ports are compatible with any Apple Watch chargers, and the wireless charging base is lightning fast without being unsafe for any of your devices. Designed to maximize space and efficiency, you can even split the OMNIA up and charge devices separately. The OMNIA was made specifically to work with Apple devices, and that’s where it excels.  Get the Kickstarter Funded OMNIA Q5 5-in-1 Wireless Charging Station on sale for $99.95 (reg. $120).  Prices subject to change.

Read more »

Apple lets anyone buy discounted devices through the education store again
Earlier this week, Apple created some waves in the community by adding strict Unidays verification to its online education store. Now it appears to be reversed course. It’s a strange move. The Unidays process is one used around the world, and it wasn’t surprising that Apple brought it to the US. Under the previous store, anyone could purchase an Apple device through the education store, as Apple required no proof that they were actually a student. Changing it made sense and also made us wonder why it took so long. But just as quickly as Apple brought verification to the U.S. education store up to speed with the rest of the world, it’s now removed any mention of it. Visiting the education site now beings up a regular storefront with the available products, and you can click through to buy any of them. To register for the Unidays site, college students need to enter their school email address and click a verification link. Some students are presumably already registered and can find Apple products on the Unidays site for the same discount as Apple’s own education store. The site only applies to college students, which left K-12 students without a clear way to buy discounted Apple products. Apple limits education purchases per category each year. However, students can buy multiple Macs since MacBooks, iMacs, and Mac minis and all defined as separate categories. It’s not clear if the change is permanent or if Apple is planning on bringing back the Unidays verification. Macworld has contacted Apple for clarification and we will update this article if we receive further information.

Read more »

Wondershare PDFelement, the ultimate Adobe Acrobat alternative
Have you tried to edit PDFs on iPhone, iPad, or Mac with the built-in software? You’ve probably realized the Files app and Preview aren’t very powerful for working with the format. Whether you’re looking for a solution for personal or business use, PDFelement unlocks all the features you need like advanced PDF editing, OCR, conversion from/to almost any format, and much more at a fraction of the price of products like Adobe Acrobat. And for 9to5Mac readers, PDFelement is an even better value at up to 50% off. more… The post appeared first on 9to5Mac.

Read more »

Today in Apple history: Letterpad gives us a preview of Apple Watch gaming
January 21, 2015: Months before the first Apple Watch goes on sale, users get a glimpse at what playing games might look like on the wearable. Thanks to Apple making the WatchKit API available to third parties, game developer NimbleBit releases a mockup of its simple work-in-progess word game, Letterpad. Suddenly, we get a desire […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Crime Shop Sells Hacked Logins to Other Crime Shops
Up for the "Most Meta Cybercrime Offering" award this year is Accountz Club, a new cybercrime store that sells access to purloined accounts at services built for cybercriminals, including shops peddling stolen payment cards and identities, spamming tools, email and phone bombing services, and those selling authentication cookies for a slew of popular websites.

Read more »

10 Ways End-to-Encryption Protects Your Data, Your Privacy, and Your Bank Balance
End-to-end encryption protects your data, your privacy, and your bank accounts in many ways. The post appeared first on The Mac Security Blog.

Read more »

How to Run Windows on an M1 Mac – Intego Mac Podcast Episode 223
A new Safari vulnerability can leak your browser history, 5G can interfere with airplane altimeters, Google Analytics is being targeted by EU courts, and we take a deep dive into running Windows on an M1 Mac. The post appeared first on The Mac Security Blog.

Read more »

IRS Will Soon Require Selfies for Online Access
If you created an online account to manage your tax records with the U.S. Internal Revenue Service (IRS), those login credentials will cease to work later this year. The agency says that by the summer of 2022, the only way to log in to irs.gov will be through ID.me, an online identity verification service that requires applicants to submit copies of bills and identity documents, as well as a live video feed of their faces via a mobile device.

Read more »

At Request of U.S., Russia Rounds Up 14 REvil Ransomware Affiliates
The Russian government said today it arrested 14 people accused of working for "REvil," a particularly aggressive ransomware group that has extorted hundreds of millions of dollars from victim organizations. The Russian Federal Security Service (FSB) said the actions were taken in response to a request from U.S. officials, but many experts believe the crackdown is part of an effort to reduce tensions over Russian President Vladimir Putin's decision to station 100,000 troops along the nation's border with Ukraine.

Read more »

SysJoker: Cross-Platform Backdoor Malware for Mac, Windows, and Linux
  SysJoker is one of the most recently discovered Mac malware families. But SysJoker is not just Mac malware—it’s cross-platform malware that can also infect PCs running Windows or Linux. Intego detects this malware’s various components as OSX/SysJoker.gen, OSX/SysJoker.lct, Linux/SysJoker.A, and Win32/SysJoker.A. Let’s examine this new threat and what makes it unique. How was SysJoker […] The post appeared first on The Mac Security Blog.

Read more »

SysJoker Malware and Scams in the App Store – Intego Mac Podcast Episode 222
New SysJoker malware attacks Mac, Windows, and Linux computers. Apple has difficulty managing scams and copycat apps in its App Stores. And iCloud Private Relay is provoking ire among phone carriers. The post appeared first on The Mac Security Blog.

Read more »

Who is the Network Access Broker ‘Wazawaka?’
In a great many ransomware attacks, the criminals who pillage the victim's network are not the same crooks who gained the initial access to the victim organization. More commonly, the infected PC or stolen VPN credentials the gang used to break in were purchased from a cybercriminal middleman known as an initial access broker. This post examines some of the clues left behind by Wazawaka, the handle chosen by a major access broker in the Russian-speaking cybercrime scene.

Read more »

‘Wormable’ Flaw Leads January 2022 Patch Tuesday
Microsoft today released updates to plug nearly 120 security holes in Windows and supported software. Six of the vulnerabilities were publicly detailed already, potentially giving attackers a head start in figuring out how to exploit them in unpatched systems. More concerning, Microsoft warns that one of the flaws fixed this month is "wormable," meaning no human interaction would be required for an attack to spread from one vulnerable Windows box to another.

Read more »

Vulnerability Summary for the Week of January 3, 2022
Original release date: January 10, 2022  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info beyondtrust -- appliance_base_software BeyondTrust Secure Remote Access Base Software through 6.0.1 allows an attacker to achieve full admin access to the appliance, by tricking the administrator into creating a new admin account through an XSS/CSRF attack involving a crafted request to the /appliance/users?action=edit endpoint. This cross-site-scripting (XSS) vulnerability occurs when it does not properly sanitize an unauthenticated crafted web request to the server 2022-01-05 9.3 CVE-2021-31589 MISC MISC MISC sun_moon_jingyao -- network_computer_terminal_protection_system_firmware The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery (SSRF) attack on another agent computer, resulting in arbitrary code execution for controlling the system or disrupting service. 2022-01-03 7.7 CVE-2021-45917 CONFIRM transloadit -- uppy uppy is vulnerable to Server-Side Request Forgery (SSRF) 2022-01-04 7.5 CVE-2022-0086 MISC CONFIRM Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info artifex -- ghostscript Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp). 2022-01-01 4.3 CVE-2021-45944 MISC MISC DEBIAN artifex -- ghostscript Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp). 2022-01-01 4.3 CVE-2021-45949 MISC MISC MISC DEBIAN assimp -- assimp Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper::M3DWrapper). 2022-01-01 4.3 CVE-2021-45948 MISC MISC asus -- rt-ac52u_b1_firmware Invalid input sanitizing leads to reflected Cross Site Scripting (XSS) in ASUS RT-AC52U_B1 3.0.0.4.380.10931 can lead to a user session hijack. 2022-01-03 4.3 CVE-2021-46109 MISC atlassian -- jira_server_and_data_center Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (XSS) vulnerability in the /rest/collectors/1.0/template/custom endpoint. To exploit this issue, the attacker must trick a user into visiting a malicious website. The affected versions are before version 8.13.15, and from version 8.14.0 before 8.20.3. 2022-01-04 4.3 CVE-2021-43942 MISC booking_calendar_project -- booking_calendar The Booking Calendar WordPress plugin before 8.9.2 does not sanitise and escape the booking_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting 2022-01-03 4.3 CVE-2021-25040 MISC daybydaycrm -- daybyday_crm In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality. A user with privileges to update his password could change it to a weak password, such as those with a length of a single character. This may allow an attacker to brute-force users’ passwords with minimal to no computational effort. 2022-01-05 4 CVE-2022-22110 CONFIRM MISC daybydaycrm -- daybyday_crm In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has update user permission enabled is able to change the password of other users, including the administrator’s. This allows the attacker to gain access to the highest privileged user in the application. 2022-01-05 6.5 CVE-2022-22111 CONFIRM MISC daybydaycrm -- daybyday_crm In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (employee type user), can view the absences of all users in the system including administrators. This type of user is not authorized to view this kind of information. 2022-01-05 4 CVE-2022-22108 CONFIRM MISC daybydaycrm -- daybyday_crm In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (employee type user), can view the appointments of all users in the system including administrators. However, this type of user is not authorized to view the calendar at all. 2022-01-05 4 CVE-2022-22107 CONFIRM MISC dhrystone_project -- dhrystone A NULL pointer dereference in the main() function dhry_1.c of dhrystone 2.1 causes a denial of service (DoS). 2022-01-03 5 CVE-2020-23026 MISC dmproadmap_project -- dmproadmap DMP Roadmap before 3.0.4 allows XSS. 2022-01-01 4.3 CVE-2021-44896 MISC MISC MISC fluxbb -- fluxbb Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability. 2022-01-04 4.3 CVE-2021-43677 MISC MISC geminilabs -- site_reviews The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_action AJAX action (available to unauthenticated and any authenticated users), allowing them to perform Cross-Site Scripting attacks against logged in admins viewing the Tool dashboard of the plugin 2022-01-03 4.3 CVE-2021-24973 CONFIRM MISC github_readme_stats_project -- github_readme_stats Github Read Me Stats commit 3c7220e4f7144f6cb068fd433c774f6db47ccb95 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the function renderError. 2022-01-06 4.3 CVE-2020-23986 MISC gpac -- gpac A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service. 2022-01-05 4.3 CVE-2021-45831 MISC gpac -- gpac A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context-dependent). 2022-01-05 4.3 CVE-2021-46038 MISC ideabox -- powerpack_addons_for_elementor The PowerPack Addons for Elementor WordPress plugin before 2.6.2 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting issue 2022-01-03 4.3 CVE-2021-25027 CONFIRM MISC premio -- chaty The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting 2022-01-03 4.3 CVE-2021-25016 MISC updraftplus -- updraftplus The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backup_timestamp and job_id parameter before outputting then back in admin pages, leading to Reflected Cross-Site Scripting issues 2022-01-03 4.3 CVE-2021-25022 CONFIRM CONFIRM MISC uwebsockets_project -- uwebsockets uWebSockets 19.0.0 through 20.8.0 has an out-of-bounds write in std::__1::pair uWS::HttpParser::fenceAndConsumePostPadded

Read more »

How to Run Windows on an Intel or M1 Mac
There used to be many options for running Windows on a Mac, and now it's more limited, but you can still run Windows on your Mac if you want. The post appeared first on The Mac Security Blog.

Read more »

Amazon lowers prices on select 13″ M1 MacBook Airs to $849, $150 off Apple’s MSRP
Amazon has select Apple 13″ M1 MacBook Airs on sale for $150 off MSRP this weekend, starting at only $849. Their prices are the lowest available for new MacBook Airs today. Stock may come and go, so check their site frequently. The following colors were discounted at the time of this post: 8-Core M1 Silicon CPU, 7-Core GPU: – 13″ M1 MacBook Air/256GB Silver: $849.99 […] The post first appeared on MacPrices.net.

Read more »

Apple has 13″ M1 MacBook Airs back in stock starting at only $849, Certified Refurbished
Apple has restocked a full line of 13″ M1 MacBook Airs, Certified Refurbished, starting at only $849 and up to $190 off original MSRP. These are the cheapest M1-powered MacBooks for sale today at Apple and also the best deal on MacBooks this weekend. Apple’s one-year warranty is included, shipping is free, and each MacBook has a new outer shell: – 13″ M1 MacBook Air/8-Core […] The post first appeared on MacPrices.net.

Read more »

In stock and on sale! 16″ 10-Core M1 Pro MacBook Pros for $2449, save $50
Amazon has new 16″ 10-Core/512GB M1 Pro MacBook Pros in stock today and on sale for $50 off MSRP including free shipping. Their prices are the lowest available for new M1 Pro 16″ MacBook Pro from any Apple reseller. Be sure to purchase from Amazon rather than a third-party seller, and note that stock may change at any moment: – 16″ M1 Pro MacBook Pro […] The post first appeared on MacPrices.net.

Read more »

Deal Alert!: 14″ M1 Pro with 10-Core CPU in stock and on sale for $2299, $200 off MSRP
Amazon has the new 14″ M1 Pro MacBook Pro with a 10-Core CPU and 16-Core GPU in stock today and on sale for $2299.99 including free shipping. Their price is $200 off Apple’s standard MSRP, and it’s the lowest price we’ve seen so far for this model: – 14″ M1 Pro MacBook Pro 10-Core CPU/16-Core GPU/16GB/1TB/Silver: $2299.99 $200 off MSRP Note that Amazon will likely […] The post first appeared on MacPrices.net.

Read more »

Deal Alert!: 14″ M1 Pro with 10-Core CPU in stock and on sale for $2299, $200 off MSRP
Amazon has the new 14″ M1 Pro MacBook Pro with a 10-Core CPU and 16-Core GPU in stock today and on sale for $2299.99 including free shipping. Their price is $200 off Apple’s standard MSRP, and it’s the lowest price we’ve seen so far for this model: – 14″ M1 Pro MacBook Pro 10-Core CPU/16-Core GPU/16GB/1TB/Silver: $2299.99 $200 off MSRP Note that Amazon will likely […] The post first appeared on MacPrices.net.

Read more »

Apple has 24-inch M1 iMacs (8-Core CPU/8-Core GPU) available starting at only $1269, up to $260 off MSRP, Certified Refurbished
Apple has restocked a wide array of 24-inch M1 iMacs with 8-Core CPUs and 8-Core GPUs in their Certified Refurbished store. Models are available starting at only $1269 and range up to $260 off original MSRP. Each iMac is in like-new condition and comes with Apple’s standard one-year warranty: – 24-inch M1 iMac 8-Core CPU/8-Core GPU/256GB SSD (all colors): $1269 $230 off MSRP – 24-inch […] The post first appeared on MacPrices.net.

Read more »

Select 24″ M1 iMacs are on sale for $100 off Apple’s MSRP with free 1-2 day shipping
Sales of Apple’s new 24″ M1 iMacs have been rare since its introduction, perhaps due to global supply issues. However, B&H is offering a $100 discount on select 24″ iMacs, and they’re in stock today with free 1-2 day shipping to most US addresses: – 24″ M1 iMac 8-Core CPU/7-Core GPU/256GB (Pink): $1199 $100 off MSRP – 24″ M1 iMac 8-Core CPU/8-Core GPU/256GB (Green, Silver, […] The post first appeared on MacPrices.net.

Read more »

M1 Mac minis are back in stock today at Apple starting at only $589
Apple has M1-powered Mac minis available in their Certified Refurbished section starting at only $589 and up to $140 off MSRP. Each mini comes with Apple’s one-year warranty, and shipping is free: – M1 Mac mini (8GB RAM/256GB SSD): $589 $110 off MSRP Step up to a mini with 512GB of storage for $759: – M1 Mac mini (8GB RAM/512GB SSD): $759 $140 off MSRP […] The post first appeared on MacPrices.net.

Read more »

B&H has M1-powered Mac minis on sale for $50-$100 off MSRP with free 1-2 day shipping
B&H Photo has Apple’s Mac minis with M1 Apple Silicon CPUs in stock today and on sale for $50-$100 off MSRP, starting at $649. Free 1-2 shipping is free to many US addresses. Their prices are among the lowest available for new M1 Mac minis today, and both models are in stock: – Mac mini M1 CPU/256GB SSD: $649 $50 off MSRP – Mac mini […] The post B&H has M1-powered Mac minis on sale for $50-$100 off MSRP with free 1-2 day shipping first appeared on MacPrices.net.

Read more »

B&H has M1-powered Mac minis on sale for $50-$100 off MSRP with free 1-2 day shipping
B&H Photo has Apple’s Mac minis with M1 Apple Silicon CPUs in stock today and on sale for $50-$100 off MSRP, starting at $649. Free 1-2 shipping is free to many US addresses. Their prices are among the lowest available for new M1 Mac minis today, and both models are in stock: – Mac mini M1 CPU/256GB SSD: $649 $50 off MSRP – Mac mini […] The post B&H has M1-powered Mac minis on sale for $50-$100 off MSRP with free 1-2 day shipping first appeared on MacPrices.net.

Read more »

New Amazon sale: Apple’s 13″ M1 MacBook Airs in stock and on sale for $100 off MSRP, starting at $899
Amazon has Apple 13″ M1 MacBook Airs on sale for $100 off MSRP, starting at only $899. Their prices are the lowest available for new MacBook Airs today. Stock may come and go, so check their site frequently. However, at the time of this post, all models were in stock with free shipping: 8-Core M1 Silicon CPU, 7-Core GPU: – 13″ M1 MacBook Air/256GB Space […] The post first appeared on MacPrices.net.

Read more »

Get an Apple Watch Series 7 for $50 off MSRP, prices start at $349
Amazon has Apple Watch Series 7 models on sale for $50 off MSRP including free shipping. Their prices are the lowest available for Apple Watch Series 7 models today: – 41mm Apple Watch Series 7 GPS + Cellular: $449, save $50 – 45mm Apple Watch Series 7 GPS + Cellular: $479, save $50 – 41mm Apple Watch Series 7 GPS: $349, save $50 – 45mm […] The post first appeared on MacPrices.net.

Read more »