How to watch the 2023 Grammys on your Apple devices
The 65th Grammy Awards are happening on Sunday night and you can watch it live. Here's how to stream the awards show via the iPhone, iPad, Mac, and Apple TV.Grammy AwardThe Grammy Awards are the highest accolades for members of the music industry to achieve. With many singers, songwriters, bands, and other musical ensembles vying for an award, it's a hotly contested annual event. Read more...

Read more »

Users discover iCloud Backup issues following iOS 16.3 update
A number of users of iCloud are having trouble synching with iCloud Drive, Photos, and uploading their backups after updating to iOS 16.3, a problem that seems linked to two-factor authentication.iCloud logoIn posts to Apple's support forums and to Reddit, as well as for one reader who contacted AppleInsider, it seems there is an issue for some users trying to interact with iCloud. The instances follow the update to iOS 16.3 which made security changes to enable physical security keys to be used to secure accounts, as well as expanding Advanced Data Protection outside of the U.S. Read more...

Read more »

Here’s how to watch the 2023 Grammys on iPhone, iPad, Apple TV, and more
The 2023 Grammy Awards are taking place tonight, live from Los Angeles. Touted as “Music’s Biggest Night,” you can expect performances from the likes of Harry Styles, Stevie Wonder, Lizzo, and more. Head below for details on how to watch and stream the Grammys for free on your iPhone, iPad, Apple TV, or Mac. more… The post appeared first on 9to5Mac.

Read more »

Why the Mac Pro might lack upgradable RAM and eGPUs
The much-anticipated 2023 Mac Pro will almost certainly lack features considered critical for workstations: upgradable RAM and support for eGPUs. But this isn’t Apple blindly making an error — it’s an inescapable fact of the M-series’ unified memory architecture. The limitation isn’t new: it’s been known since the M1 processor was announced. But the imminent […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Today in Apple history: Original iPhone goes large with 16GB of storage
On February 5, 2008, Apple released a supersized version of the iPhone with a whopping 16GB of storage. The 16GB iPhone persisted till 2016. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Shargeek Retro 67 review: Nostalgia plus power equal a winning formula
The Shargeek Retro 67 wall charger uses a classic Macintosh design for a bit of nostalgia, but also to show total output on its "LED Matrix" display. It's a surprisingly compelling feature with today's state of charging.Shargeek Retro 67Early in the iPhone's life, charging it was a simple task. Plug in the Apple-provided cable and 5W wall charger, and a time could be given for how long it would take to reach a full battery. Read more...

Read more »

Shargeek Retro 67 review: Nostalgia plus power equal a winning formula
The Shargeek Retro 67 wall charger uses a classic Macintosh design for a bit of nostalgia, but also to show total output on its "LED Matrix" display. It's a surprisingly compelling feature with today's state of charging.Shargeek Retro 67Early in the iPhone's life, charging it was a simple task. Plug in the Apple-provided cable and 5W wall charger, and a time could be given for how long it would take to reach a full battery. Read more...

Read more »

Shargeek Retro 67 review: Nostalgia plus power equal a winning formula
The Shargeek Retro 67 wall charger uses a classic Macintosh design for a bit of nostalgia, but also to show total output on its "LED Matrix" display. It's a surprisingly compelling feature with today's state of charging.Shargeek Retro 67Early in the iPhone's life, charging it was a simple task. Plug in the Apple-provided cable and 5W wall charger, and a time could be given for how long it would take to reach a full battery. Read more...

Read more »

Apple could launch an ‘Ultra’ high-end iPhone as soon as 2024
Apple could add an 'Ultra' iPhone to its lineup as soon as 2024 that will sit above the Pro series and pack even more features. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Mac Studio may never get updated, because new Mac Pro is coming
A refresh of the Mac Studio with an M2 Ultra may not happen soon or at all, because of the Mac Pro.Mac StudioApple's introduction of the M2 Pro and M2 Max in January, as well as a spec-bump upgrade to the Mac mini, may not necessarily be followed by similar updates to the Mac Studio. With Apple keen to bring out an Apple Silicon Mac Pro, it is reckoned the Mac Studio's refresh with an M2 Ultra chip may be delayed, or even stopped from being released. Read more...

Read more »

New Pro-beating iPhone Ultra model could arrive by 2024
Apple is thinking about extending the Pro line of iPhone models by an additional option, with a report insisting a rumored powerful addition could arrive in 2024.An iPhone "Ultra" could be on the wayRumors since the middle of 2022 have put forward the notion that Apple could rebrand the iPhone 15 Pro Max as the "Ultra" model, as part of a bigger upgrade cycle. If one report is to be believed, Apple may save the Ultra name for an entirely new model instead. Read more...

Read more »

Get 15 bottles of wine shipped to your sweetie’s doorstep for $79.99 this Valentine’s Day
“Be wise, decant the wine,” said Horace. Who are we to argue with the preeminent Roman poet from the age of Augustus? Even back in the first century B.C., the Romans knew the power of wine. Though their Valentine’s Day might’ve looked a little different from ours, it’s a good bet that a couple glasses […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Report: Apple unlikely to launch new Mac Studio as it instead focuses on the Mac Pro
While the Mac Studio has been well-received since its launch last spring, Apple may not launch an upgraded model in the foreseeable future. Bloomberg reports that the upcoming Mac Pro with Apple Silicon is “similar in functionality to the Mac Studio,” and it could be redundant for Apple to sell both… more… The post appeared first on 9to5Mac.

Read more »

Apple may add ultra high-end iPhone model in 2024, even more expensive than current Pro Max
Apple is reportedly considering ways to push the price of the high-end iPhone even higher. Rather than simply re-branding Pro Max to Ultra, Apple is discussing adding an ‘Ultra’ high-end model above the Pro Max as soon as 2024, or the iPhone 16 lineup. That’s according to Mark Gurman in his latest Power On newsletter for Bloomberg. The new model would help increase iPhone average selling price even higher, with Tim Cook hinting on this week’s earnings call that consumers are willing to pay more for the best phone. more… The post appeared first on 9to5Mac.

Read more »

Daily Deals Feb. 5: $150 off M2 Pro 14-inch MacBook Pro, 91% off Microsoft Office for Mac, 13% off Bose Noise Cancelling Headphones 700
The best deals we found today include $20 off an Nvidia Shield, $234 Gen 2 AirPods Pro, $40 off a $149 Anker 737 Power Bank, and more.Save on Bose headphones, 14-inch MacBook Pro, and Microsoft Home & Business 2021 for Mac. The AppleInsider team searches for can't-miss bargains at online retails to compile a list of unbeatable deals on top tech products, including discounts on Apple products, TVs, accessories, and other gadgets. We publish the best in our Daily Deals column to help you save money on your purchases. Read more...

Read more »

Epic deals: save up to 50% on M2 MacBook Air & get an M2 iPad Pro 256GB for $455
Save up to $840 on Apple's M2 MacBook Air and the M2 iPad Pro 11-inch. These deals are selling out fast and may end at any time.Save up to 50% on Apple products.We reported on TigerDirect's 50% discount on the iPad 10th Generation earlier today, and now the Apple reseller has discounted the 11-inch iPad Pro to $403.99. Read more...

Read more »

Apple Watches and iPhones are Placing Dozens of False Distress Calls About Skiers
Dispatchers for 911 emergency calls "are being inundated with false, automated distress calls from Apple devices owned by skiers who are very much alive," reports the New York Times: "Do you have an emergency?" [911 emergency dispatcher] Betts asked. No, the man said, he was skiing — safely, happily, unharmed. Slightly annoyed, he added, "For the last three days, my watch has been dialing 911." Winter has brought a decent amount of snowfall to [Colorado]'s ski resorts, and with it an avalanche of false emergency calls. Virtually all of them have been placed by Apple Watches or iPhone 14s under the mistaken impression that their owners have been debilitated in collisions. As of September, these devices have come equipped with technology meant to detect car crashes and alert 911 dispatchers. It is a more sensitive upgrade to software on Apple devices, now several years old, that can detect when a user falls and then dial for help. But the latest innovation appears to send the device into overdrive: It keeps mistaking skiers, and some other fitness enthusiasts, for car-wreck victims. Lately, emergency call centers in some ski regions have been inundated with inadvertent, automated calls, dozens or more a week. Phone operators often must put other calls, including real emergencies, on hold to clarify whether the latest siren has been prompted by a human at risk or an overzealous device. "My whole day is managing crash notifications," said Trina Dummer, interim director of Summit County's emergency services, which received 185 such calls in the week from Jan. 13 to Jan. 22. (In winters past, the typical call volume on a busy day was roughly half that.) Ms. Dummer said that the onslaught was threatening to desensitize dispatchers and divert limited resources from true emergencies. "Apple needs to put in their own call center if this is a feature they want," she said. Apple acknowledged this was occuring in "some specific scenarios," the Times reports — but a spokesperson also "noted that when a crash is detected, the watch buzzes and sends a loud warning alerting the user that a call is being placed to 911, and it provides 10 seconds in which to cancel the call." But the Times points out that "skiers, in helmets and layers of clothing, often do not to detect the warning, so they may not cancel the call or respond to the 911 dispatcher." Read more of this story at Slashdot.

Read more »

How to decide between two HomePods or a Sonos system for a home theater
Upgrading your home theater speakers for a great movie experience is easy to do, but it can be hard to decide which route to take. Let's look at the choice between a pair of HomePods and a dedicated Sonos system.HomePods for home theaterOnce Apple updated the HomePod line to support eARC (HDMI ARC) it became even more compelling to connect the wireless speakers to a TV — you just need an Apple TV 4K (second generation) or later. Read more...

Read more »

Apple is 'world's most admired company' for 16th straight year
Apple has secured the top spot on Forbes' annual list of the World's Most Admired Companies, taking first place for the 16th consecutive year.Apple ParkIn a repeat of the last 15 editions of the list, Apple has managed to maintain its position at number one on the list, compiled by Forbes. Once again, Apple pulls ahead of many major organizations, including Amazon and Microsoft tied for second place, and Berkshire Hathaway in fourth. Read more...

Read more »

Apple is 'world's most admired company' for 16th straight year
Apple has secured the top spot on Forbes' annual list of the World's Most Admired Companies, taking first place for the 16th consecutive year.Apple ParkIn a repeat of the last 15 editions of the list, Apple has managed to maintain its position at number one on the list, compiled by Forbes. Once again, Apple pulls ahead of many major organizations, including Amazon and Microsoft tied for second place, and Berkshire Hathaway in fourth. Read more...

Read more »

Telegram update lets users translate entire chats and pay for annual Premium subscription
Back in December, Telegram released a major update for its iOS app with options to hide media, auto remove cached files, and more. Now the popular messaging platform is getting its first major update of 2023. The new version lets users translate full chats and also introduces a new annual subscription option for Telegram Premium. more… The post appeared first on 9to5Mac.

Read more »

Will new HomePod dazzle our ears like the original? We hope so. [The CultCast]
This week on Cult of Mac’s podcast: The first reviews of the 2023 HomePod make Apple’s updated smart speaker sound pretty formidable. We can’t wait to hear for ourselves. (Unfortunately, if you didn’t already place your HomePod order, you’re probably looking at a substantial hang time.) Also on The CultCast: An iPad with a folding […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Casexy review: These adorable phones cases can take a hit
Casexy is an up-and-coming accessory producer with great ideas like the Memoji cases, but its products aren't up to par quite yet.The Ukrainian company allows people to customize their phone cases and place their favorite Memoji in the center of the case. Naturally, users can only purchase the case through a Memoji-enabled device, like an iPhone or iPad.The Memoji cases are adorable, and customers are able to choose a MagSafe version. But the unique design begins showing wear after only a couple of weeks of use, and it is covered by whatever MagSafe accessories you choose to use. Read more...

Read more »

Save 50% on Apple's iPad 10th Generation, now just $224.99 (cheapest price ever)
TigerDirect has issued what could be a price mistake on the iPad 10th Generation, which normally retails for $449, but is on sale for just $224.99.Save 50% on the iPad 10th Gen.While the $224.01 discount lasts, grab Apple's iPad 10th Generation with 64GB capacity and Wi-Fi functionality for $224.99 at TigerDirect. This price cut discounts Apple's latest iPad by $225 and delivers the cheapest iPad price we've ever seen on the 10th Gen model in Silver. Read more...

Read more »

Apple sets revenue record for Services: Apple TV+, Apple Music, Apple Arcade, and more
Apple Services, which encompasses Apple TV+, Apple Music, Apple Arcade and more, came in at $20.8 billion for Apple's fiscal Q223… The post appeared first on MacDailyNews.

Read more »

Today in Apple history: Steve Jobs considers buying Yahoo
February 4, 2008: Apple CEO Steve Jobs reportedly considers buying the search engine Yahoo. Apple is one of several interested companies, following reports that Microsoft offered $44.6 billion for the web portal the previous week. Nothing ultimately comes of it, but Apple’s interest is later confirmed in an authorized biography of Jobs. This post contains […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

How to set up home theater audio with HomePod or HomePod mini and Apple TV 4K
You can use a HomePod, HomePod mini, or multiple HomePods stereo paired with your Apple TV 4K to create a home theater experience with… The post appeared first on MacDailyNews.

Read more »

The new HomePod should have been a reboot instead of a rerun
To say that the 2nd-generation HomePod announcement was a surprise is something of an understatement. While there had been some rumblings that a new model was in the works, the timing was completely unexpected, arriving on a Wednesday morning in the middle of January following the launch of the M2 Mac mini and MacBook Pro. But what’s even stranger than the timing is the HomePod itself. The HomePod site gives little indication that it’s a new model, and Apple has seemingly gone to great lengths to design a new HomePod that looks and sounds just like the old HomePod. Early reviewers predictably say the new HomePod “remains true to the original” with “lovely and deep” sound that still offers “expression and punch,” especially when paired with a second one. That last point is key. While music is certainly a major selling point with the 2nd-gen model, Apple is also positioning HomePod as part of your “cinematic home theater experience,” a feature that wasn’t initially available when the first model launched. Indeed, early accounts say a HomePod pair is “great at adding height in terms of positioning sounds to match the action on the screen” and delivers “good clarity, nice bass, and great dimensional audio.” Sound quality was never HomePod’s problem.Foundry Of course, sound quality was never HomePod’s issue. Like iPod and AirPods, music was HomePod’s one main job and it did it extremely well. While some audiophiles criticized it for being too bass-heavy, the HomePod was widely regarded as one of the best standalone smart speakers around at its price. It was limited to Apple Music (or AirPlay from an Apple device), and couldn’t just function as a Bluetooth speaker, but it certainly sounded good! We all know how it ended—Apple discontinued HomePod in March 2021 following an uncharacteristic price cut, presumably due to flagging sales. In an interview with Mens Journal, Alice Chan, vice president of product marketing, said Apple had “heard more interest than ever for the acoustics of a richer larger speaker,” which is why Apple decided to resurrect the HomePod. Maybe that’s true, but if the first one didn’t survive as a pricey and limited music speaker, why not re-imagine the new HomePod as a soundbar? Not only would it have turned heads and re-ignited interest in the speaker, but a radical redesign would also instantly make HomePod a player in the home theater space. Along with Apple TV+ and Apple TV 4K, Apple would have a true one-two punch rivaled by no other speaker maker or streaming service. Arc de triumph The pieces are all there. As a stereo pair, HomePod has two 4-inch high-excursion woofers and 10 horn-loaded tweeters with individual neodymium amplifier magnets, more than enough to rival the Sonos Arc’s 11 Class-D amplifiers, three angled silk-domed tweeters and eight 2-inch by 3-inch elliptical woofers. In fact, Apple already wants you to buy two HomePod speakers with Apple TV 4K “to enjoy Dolby Atmos audio for a complete cinematic home theater experience.” What if that included using a pair of HomePod minis for rear speakers and full surround sound? About the only thing it would really need is a longer, flatter design and a pair of HDMI ports. A HomePod soundbar could still be a music player, Home hub, and always-on Siri speaker, but with a new focus on the home theater. Maybe a Dialogue mode that enhances conversational speech or a Movie mode that leans more toward action or explosions. Two HomePods are better than one, so why didn’t Apple build a multi-channel sound bar instead?Foundry Apple already encourages you to buy two HomePods at $299 each. So even if a HomePod soundbar cost $799 and an extra $199 for two HomePod minis, it would still be cheaper than a Sonos Arc system with two rear One speakers. And the design would be much friendlier for home theater use than two rather tall speakers that could obstruct certain views of your television. I’m not privy to sales figures for the original HomePod or preorders for the new one, but I doubt anyone who has an original HomePod is rushing out to buy a 2nd-gen model. Other than a temperature sensor and the ability to tell you when it hears an alarm, the press releases announcing the speakers could have been the same—Apple doesn’t even mention the original HomePod anywhere on the site as a point of comparison. Instead of a sequel that really builds on the original, Apple’s second attempt at making a high-end high-fidelity speaker for the home feels like a rerun. And I’m afraid it’s going to have the same ending as the first one. Apple HomePod (2nd generation, 2023) Read our review MSRP: $299 Best Prices Today: $299 at Apple Apple TV, HomePod

Read more »

Hands-on: 12 Apple Notes features you need to try [Video]
Apple’s native Notes application is, by far, my most used Apple app. I use it for jotting down ideas, scripting out videos, hand-drawing rough drafts of thumbnails, bookmarking websites, and so much more. I want to show off some Notes features that will really help the everyday user maximize their experience! more… The post appeared first on 9to5Mac.

Read more »

iPhone storage list: Capacity specs for every model
Ever wonder how much storage Apple has put in its iPhones over the years or how much storage your current iPhone has (or could have had)? Read along for a look at the complete iPhone storage list for what capacities come with every iPhone model. more… The post appeared first on 9to5Mac.

Read more »

Finland’s Most-Wanted Hacker Nabbed in France
Julius "Zeekill" Kivimäki, a 25-year-old Finnish man charged with extorting a local online psychotherapy practice and leaking therapy notes for more than 22,000 patients online, was arrested this week in France. A notorious hacker convicted of perpetrating tens of thousands of cybercrimes, Kivimäki had been in hiding since October 2022, when he failed to show up in court and Finland issued an international warrant for his arrest.

Read more »

Credential Stuffing, Pig Butchering, Security Keys for Your Apple Account, and the New Mac mini – Intego Mac Podcast Episode 277
This week's threats involve credential stuffing and pig butchering, and we examine whether you should use security keys to protect your Apple ID account, and why the new Mac mini is a maxi computer. The post appeared first on The Mac Security Blog.

Read more »

Vulnerability Summary for the Week of January 23, 2023
Original release date: January 30, 2023 | Last revised: January 31, 2023  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info adobe -- acrobat_reader Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-01-27 7.8 CVE-2023-22240 MISC adobe -- acrobat_reader Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-01-27 7.8 CVE-2023-22241 MISC adobe -- acrobat_reader Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-01-27 7.8 CVE-2023-22242 MISC assimp -- assimp An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp. 2023-01-20 8.8 CVE-2022-45748 MISC ays-pro -- survey_maker The Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys_ids' parameter of its 'ays_surveys_export_json' action. 2023-01-20 8.8 CVE-2023-23490 MISC cisco -- cx_cloud_agent A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A successful exploit could allow the attacker to take complete control of the affected device. 2023-01-20 7.3 CVE-2023-20044 MISC cisco -- identity_services_engine A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of user input within requests as part of the web-based management interface. An attacker could exploit this vulnerability by manipulating requests to the web-based management interface to contain operating system commands. A successful exploit could allow the attacker to execute arbitrary operating system commands on the underlying operating system with the privileges of the web services user. Cisco has not yet released software updates that address this vulnerability. 2023-01-20 8.8 CVE-2022-20964 MISC cisco -- roomos A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are in the local file system. An attacker could exploit this vulnerability by placing a symbolic link in a specific location on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device. 2023-01-20 7.1 CVE-2023-20008 MISC contec -- conprosys_hmi_system Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user credentials information. 2023-01-20 7.5 CVE-2023-22331 MISC MISC MISC MISC contec -- conprosys_hmi_system Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction and obtain the server certificate including the private key of the product. 2023-01-20 7.5 CVE-2023-22339 MISC MISC MISC MISC electerm_project -- electerm An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service. 2023-01-20 9.8 CVE-2020-23256 MISC hcltech -- bigfix_mobile HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced. User should be locked out for multiple invalid attempts. 2023-01-20 7.5 CVE-2021-27782 MISC hospital_management_system_project -- hospital_management_system SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd (on March 13, 2021), allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php. 2023-01-20 9.8 CVE-2022-48120 MISC inxedu -- inxedu SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction. 2023-01-20 9.8 CVE-2020-21152 MISC MISC login_with_phone_number_project -- login_with_phone_number The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_forgot_password' action. 2023-01-20 8.8 CVE-2023-23492 MISC mangboard -- mangboard_wp SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running. 2023-01-20 9.8 CVE-2021-26644 MISC mariadb -- mariadb MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer. 2023-01-20 7.5 CVE-2022-47015 MISC microsoft -- edge Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. 2023-01-24 8.3 CVE-2023-21775 MISC microsoft -- edge Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21796. 2023-01-24 8.3 CVE-2023-21795 MISC microsoft -- edge Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21795. 2023-01-24 8.3 CVE-2023-21796 MISC misp-project -- misp In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function. 2023-01-20 9.8 CVE-2023-24028 MISC online_food_ordering_system_project -- online_food_ordering_system Multiple SQL Injection vulnerabilies in tourist5 Online-food-ordering-system 1.0. 2023-01-20 9.8 CVE-2020-29297 MISC MISC MISC remoteclinic -- remote_clinic SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php. 2023-01-20 9.8 CVE-2022-48152 MISC reprisesoftware -- reprise_license_manager Directory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM users with sufficient privileges to overwrite any file the on the server. 2023-01-20 8.1 CVE-2021-37500 MISC MISC MISC sandhillsdev -- easy_digital_downloads The Easy Digital Downloads WordPress Plugin, version < 3.1.0.4, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edd_download_search' action. 2023-01-20 9.8 CVE-2023-23489 MISC solarwinds -- database_performance_analyzer In DPA 2022.4 and older releases, generated heap memory dumps contain sensitive information in cleartext. 2023-01-20 7.5 CVE-2022-38112 MISC MISC solarwinds -- dynamips Use of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21. 2023-01-20 7.5 CVE-2022-47012 MISC strangerstudios -- paid_memberships_pro The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route. 2023-01-20 9.8 CVE-2023-23488 MISC tenable -- nessus A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host. 2023-01-20 8.8 CVE-2023-0101 MISC MISC tmux_project -- tmux A null pointer dereference issue was discovered in function window_pane_set_event in window.c in tmux 3.0 thru 3.3 and later, allows attackers to cause denial of service or other unspecified impacts. 2023-01-20 7.8 CVE-2022-47016 MISC MISC totolink -- a7100ru_firmware TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules function. 2023-01-20 9.8 CVE-2022-48121 MISC totolink -- a7100ru_firmware TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting/delStaticDhcpRules function. 2023-01-20 9.8 CVE-2022-48122 MISC totolink -- a7100ru_firmware TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function. 2023-01-20 9.8 CVE-2022-48123 MISC totolink -- a7100ru_firmware TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function. 2023-01-20 9.8 CVE-2022-48124 MISC totolink -- a7100ru_firmware TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function. 2023-01-20 9.8 CVE-2022-48125 MISC totolink -- a7100ru_firmware TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function. 2023-01-20 9.8 CVE-2022-48126 MISC tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18893. 2023-01-26 7.8 CVE-2022-42394 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XPS files. Crafted data in an XPS file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18274. 2023-01-26 7.8 CVE-2022-42395 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XPS files. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18278. 2023-01-26 7.8 CVE-2022-42396 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18327. 2023-01-26 7.8 CVE-2022-42399 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18328. 2023-01-26 7.8 CVE-2022-42400 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in an embedded U3D object can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18632. 2023-01-26 7.8 CVE-2022-42402 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18892. 2023-01-26 7.8 CVE-2022-42403 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of EMF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18367. 2023-01-26 7.8 CVE-2022-42405 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PGM files. Crafted data in a PGM file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18365. 2023-01-26 7.8 CVE-2022-42410 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 files. Crafted data in a JP2 file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18366. 2023-01-26 7.8 CVE-2022-42415 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. Crafted data in a TIF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18673. 2023-01-26 7.8 CVE-2022-42416 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. Crafted data in a TIF file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18676. 2023-01-26 7.8 CVE-2022-42417 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18677. 2023-01-26 7.8 CVE-2022-42418 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. Crafted data in a TIF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18700. 2023-01-26 7.8 CVE-2022-42419 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. Crafted data in a TIF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18686. 2023-01-26 7.8 CVE-2022-42420 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. Crafted data in a TIF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18703. 2023-01-26 7.8 CVE-2022-42421 N/A N/A tracker-software -- pdf-xchange_editor This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. Crafted data in a TIF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18716. 2023-01-26 7.8 CVE-2022-42423 N/A N/A trendmicro -- maximum_security_2022 A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific location and in the process of removal and restoral an attacker could replace an original folder with a mount point to an arbitrary location, allowing a escalation of privileges on an affected system. 2023-01-20 7 CVE-2022-48191 MISC MISC uber -- kraken kraken

Read more »

Apple’s 2023 Mac mini is a Mini Mac Studio
Apple's new M2 Mac mini offers a wide range of configuration options. The post appeared first on The Mac Security Blog.

Read more »

How to protect your Apple ID account with Security Keys on iPhone, iPad, or Mac
You can now protect your Apple ID account with a security key, a hardware device that acts as a second factor for two-factor authentication. But should you? The post appeared first on The Mac Security Blog.

Read more »

The Year in Mac Malware 2022 – Intego Mac Podcast Episode 276
Apple has updated all its operating systems again, and even issued a security update for iOS 12. We discuss new features in the HomePod software, and we look back at the notable Mac malware of 2022. The post appeared first on The Mac Security Blog.

Read more »

Experian Glitch Exposing Credit Files Lasted 47 Days
On Dec. 23, 2022, KrebsOnSecurity alerted big-three consumer credit reporting bureau Experian that identity thieves had worked out how to bypass its security and access any consumer's full credit report -- armed with nothing more than a person's name, address, date of birth, and Social Security number. Experian fixed the glitch, but remained silent about the incident for a month. This week, however, Experian acknowledged that the security failure persisted for nearly seven weeks, between Nov. 9, 2022 and Dec. 26, 2022.

Read more »

The top 20 most notable Mac malware threats of 2022
We recently compiled our list of the top Apple security and privacy stories of 2022. Now we turn our focus specifically to the Mac malware threats of the past year. Here are all of the top malware threats that made headlines each month throughout 2022. Note that most of the dates below relate to when […] The post appeared first on The Mac Security Blog.

Read more »

Apple releases macOS Ventura 13.2, iOS 16.3, and more
Apple released OS updates this week, fixing vulnerabilities and adding features in macOS Ventura 13.2, iOS and iPadOS 16.3, and more. The post appeared first on The Mac Security Blog.

Read more »

Administrator of RSOCKS Proxy Botnet Pleads Guilty
Denis Emelyantsev, a 36-year-old Russian man accused of running a massive botnet called RSOCKS that stitched malware into millions of devices worldwide, pleaded guilty to two counts of computer crime violations in a California courtroom this week. The plea comes just months after Emelyantsev was extradited from Bulgaria, where he told investigators, “America is looking for me because I have enormous information and they need it.”

Read more »

New T-Mobile Breach Affects 37 Million Accounts
T-Mobile today disclosed a data breach affecting tens of millions of customer accounts, its second major data exposure in as many years. In a filing with federal regulators, T-Mobile said an investigation determined that someone abused its systems to harvest subscriber data tied to approximately 37 million current customer accounts.

Read more »

Get an Apple Pencil 2 today for 30% off MSRP, save $40
Amazon has the Apple Pencil 2 on sale for $40 (30%) off MSRP for a limited time. Shipping is free: – Apple Pencil 2: $89.99 $40 off MSRP (30%) Their discount reduces the price of this Pencil to $10 below that of the Apple Pencil 1. For the latest prices and sales, keep an eye on our Apple Pencil Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Get an Apple Pencil 2 today for 30% off MSRP, save $40
Amazon has the Apple Pencil 2 on sale for $40 (30%) off MSRP for a limited time. Shipping is free: – Apple Pencil 2: $89.99 $40 off MSRP (30%) Their discount reduces the price of this Pencil to $10 below that of the Apple Pencil 1. For the latest prices and sales, keep an eye on our Apple Pencil Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Get an Apple Pencil 2 today for 30% off MSRP, save $40
Amazon has the Apple Pencil 2 on sale for $40 (30%) off MSRP for a limited time. Shipping is free: – Apple Pencil 2: $89.99 $40 off MSRP (30%) Their discount reduces the price of this Pencil to $10 below that of the Apple Pencil 1. For the latest prices and sales, keep an eye on our Apple Pencil Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple Watch SE GPS models on sale for $30 off MSRP
Amazon has for a limited time, each including free shipping. Their prices are the lowest currently available for SE Watches: – 40mm Apple Watch SE GPS: $219.99, save $30 – 44mm Apple Watch SE GPS: $249.99, save $30 Note that their sale prices may be restricted to certain band colors, and stock is likely […] The post first appeared on MacPrices.net.

Read more »

Sunday Sale: Apple AirPods Pro for $199, save $50
Amazon has new 2022 Apple AirPods Pro on sale for $199.99 including free shipping. Their price is $50 off MSRP, and it’s currently the lowest price available for new AirPods Pro from any of the retailers we track. For the latest prices & deals, see our Apple AirPods Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple exploring the possibility of adding a high-end iPhone to its lineup
Mark Gurman, in this weeks’s Power On newsletter discusses a comment made by Apple Inc. CEO Tim Cook during Apple’s most recent earnings call that could be a clue to the company’s future. When asked if the mounting average price of the iPhone was sustainable, Cook expressed that the cost increase would not be an issue; in fact, it seemed that he believed consumers could […] The post first appeared on MacPrices.net.

Read more »

Deal Alert! 13″ M2 Midnight MacBook Air with 16GB RAM/512GB SSD on sale for $858, save $841!
Tiger Direct is continuing their Apple fire sale with this new 13″ M2 MacBook Air with 16GB of RAM and a 512GB SSD, in Midnight, for only $858.99 including $7 shipping. Their price is an amazing $841 off Apple’s MSRP. We don’t know how long this deal with last, but act now if you’re interested! For the latest sales & prices, see our 13″ MacBook […] The post first appeared on MacPrices.net.

Read more »

Deal Alert! 13″ M2 Midnight MacBook Air with 16GB RAM on sale for $707, save $692!
Tiger Direct is continuing their Apple fire sale with this new 13″ M2 MacBook Air with 16GB of RAM and a 256GB SSD, in Midnight, for only $707.99 including $7 shipping. Their price is a whopping $692 off Apple’s MSRP. We don’t know how long this deal with last, but act now if you’re interested! For the latest sales & prices, see our 13″ MacBook […] The post first appeared on MacPrices.net.

Read more »

Deal Alert! 13″ M2 MacBook Pros with 16GB of RAM on sale for $849, save $650!
Tiger Direct continues their Apple Fire Sale (see our home page for these latest amazing deals) by offering a $650 discount on new 13″ M2 MacBook Pros with 16GB of RAM and 256GB SSDs: – 13″ M2 MacBook Pro (16GB RAM/256GB SSD/Space Gray): $849.99 $650 off MSRP – 13″ M2 MacBook Pro (16GB RAM/256GB SSD/Silver): $849.99 $650 off MSRP These deals are sure to expire […] The post first appeared on MacPrices.net.

Read more »

Deal Alert! 13″ M2 MacBook Air with 16GB RAM on sale for $757, save $642!
Tiger Direct is continuing their Apple fire sale with this new 13″ M2 MacBook Air with 16GB of RAM and a 256GB SSD, in Space Gray, for only $757.99 including $7 shipping. Their price is a whopping $642 off Apple’s MSRP. We don’t know how long this deal with last, but act now if you’re interested! For the latest sales & prices, see our 13″ […] The post first appeared on MacPrices.net.

Read more »

Deal Alert! Apple iPad fire sale continues, new 10th-generation 2022 iPads for 50% off!
Apple retailer Tiger Direct continues to offer fire sale prices on new 2022 10th-generation iPads with prices as low as 50% off MSRP. This is am amazing deal, and we don’t know how long it will last (or, really, how it’s even possible). But at any rate, act now if you’re interested: – 10.9″ 64GB WiFi iPads: $299.99 $300 off MSRP – 10.9″ 64GB WiFi […] The post first appeared on MacPrices.net.

Read more »

Deal Alert! Select Apple M1 10.9″ iPad Airs on sale for 48% off MSRP!
Tiger Direct is offering a 48% discount on select Apple M1-powered 10.9″ iPad Airs. This is an amazing sale, and we don’t know how long it will last. Their prices are the lowest available among the Apple retailers we track, and you should act now before these prices disappear: – 10.9″ M1 Air 64GB/WiFi/Purple: $313.99 48% off MSRP – 10.9″ M1 Air 64GB/WiFi/Rose: $313.99 48% […] The post first appeared on MacPrices.net.

Read more »