WWDC 2023: Selling the future and buying time
Macworld WWDC 2023 is just around the corner and it’s time for the annual exercise where we figuratively handcuff our wrists to our ankles and attempt to pull off an interpretive dance meant to indicate what we think Apple will announce. This is not an exhaustive list, even if it’s a little exhausting how much we’ve talked about some of this already. What to expect WWDC is, of course, always going to have a preview of the upcoming operating systems. You’ll get a preview of the new versions of macOS, iOS, iPadOS, and at least a tired admission that tvOS continues to be an operating system in their lineup. The bulk of the time will likely be spent on the much-anticipated headset. Just a few weeks ago some were speculating whether or not Apple would actually announce the headset at a separate event. Since then, however, Apple has apparently invited XR media outlets to WWDC, which seems like a bit of a tell that the company might be announcing something XR media outlets would be interested in at the event, so expect a headset. You don’t invite reporters from Hog Quarterly to your county fair unless you have some big hog news. “Betty Sue Lumpkin has done it again!” [image of giant hog] So, while the headset will surely not be released until months later and Apple may not even announce pricing at WWDC, it will demo the device and make its pitch for developing for it. What you might expect A larger MacBook Air is, well, in the air and if it doesn’t get announced later today after this column is released, then it will surely make an appearance at WWDC. The Macalope feels the 11-inch MacBook Air is one of the best Macs ever released but as with smartphones these days it’s go big or go home so Apple is going to add a 15-inch model to the lineup. Are two inches worth 10 minutes in a crowded keynote? Maybe not. It’s perfectly possible the 15-inch MacBook Air is just a press release after the event. It’ll be a nice device for many people, but it’s not as big a deal as Betty Sue’s latest porcine oeuvre. What about a Mac Pro? No, really, the Macalope is asking. He has no idea. It does seem like Apple will at some point ship a new Mac Pro with Apple silicon, but at this point, we’ve been waiting so long it’s like that extra dipping sauce you asked for at Buffalo Wild Wings an hour ago. Where is it? Is it coming? It doesn’t even matter at this point. You’re not even hungry anymore. You just need closure. IDG Truth be told, the Macalope has never been to a Buffalo Wild Wings. It could be buffet style for all he knows. Or they could just throw all the wings into a huge trough for people to eat out of and the sauces are shot out of fire hoses. Don’t know. Likewise, he doesn’t know if a Mac Pro is coming to WWDC. What not to expect Much, if any, mention of AI is probably not going to happen, despite the fact that Apple has repeatedly been warned that it is drastically falling behind in automated ways to pass users information that is absolute baloney. It’s sad that Apple is okay knowing there are people out there thinking that human beings usually have five fingers on each hand, but that’s clearly the company’s decision and we just have to live with it. It is antler-bangingly maddening that we repeatedly have to suffer these bouts of groupthink that suggest that Apple is “behind” on technologies that are either not well thought out, not ready for prime time, or both. In any number of instances–from netbooks to tablet computers to smartwatches–Apple declined to rush in with a half-baked concept and then crushed it with the MacBook Air, iPad, and Apple Watch. Smart speakers are another, if different, example. For years we heard how the Amazon Echo was a huge hit for Amazon and Apple was nowhere in the smart speaker market. Come to find out that Amazon’s hit is actually a “colossal failure” that cost the company $3 billion in the first quarter of 2022 alone. Apparently, people don’t want to subscribe to Maruchen ramen via voice. Who knew? The HomePod certainly isn’t a huge hit, but at least Apple’s investment in the line isn’t losing billions of dollars every year. Like Jason Snell, the Macalope thinks Apple’s got time to get a compelling AI story together before we see it made public. This is more likely to be at next year’s WWDC than this year’s and that’s okay. iOS

Read more »

Leak indicates Apple prototyped MagSafe chargers in assorted colors, “Magic Charger” stand
Per Twitter leaker @kosutamiSan, Apple has apparently prototyped at least one colored version of its MagSafe Charger for iPhone, suggesting the company could potentially one day release a new version of the device in additional color options beyond the standard silver model. The prototype rumor seems to indicate that Apple intended to release its current […] Source

Read more »

Unlock Netflix, Hulu, and more this Memorial Day with Getflix — just $50
Macworld Web security is a matter to be taken seriously. Unfortunately, while most VPNs protect you, they also sacrifice performance, making it difficult to do things like stream content. Wish you could enjoy the best of both worlds? Then it’s time to check out Getflix — And particularly this Memorial Day since you can save over $100 off the cost of a lifetime subscription. Getflix, unlike most conventional VPNs, uses DNS technology to reroute only certain types of data to overseas servers while allowing popular streaming services to pass through. What that means is that you’ll be able to stream from sources like Netflix and Hulu unimpeded, but you’ll still be protected from hackers so your anonymity and web traffic will forever remain secure. Related: Add an extra layer of security to your file system with a lifetime subscription to Koofr Cloud Storage for just $140. If you value security but still want to get the most out of your web access without suffering any performance issues, then Getflix Smart DNS and VPN is a must-have. And since you can get a lifetime subscription for way less than usual, virtually anyone can afford it. Purchase a lifetime subscription to Getflix this Memorial Day for just $49.99.     Getflix Smart DNS & VPN: Lifetime Subscription – $49.99 See Deal Prices subject to change. Entertainment

Read more »

No Man’s Sky teases Apple announcement amid VR rumors and almost a year after Mac version was announced during WWDC 2022
Hello Games’ founder Sean Murray yesterday tweeted two cryptic apple emojis, suggesting an announcement aimed at Apple users is imminent. The tease comes almost a year after WWDC 2022, in which Apple announced on stage that Hello Game’s flagship title No Man’s Sky would launch on Mac and iPad by the end of 2022. That deadline came and went, but perhaps now the game is ready to release on Apple’s platforms. Naturally, speculation is also rife that Hello Games is working on a VR title for Apple’s upcoming headset. more… The post appeared first on 9to5Mac.

Read more »

How to use a Mac laptop or iMac with a broken display
Macworld If you have a Mac laptop or iMac with a display that’s been damaged or no longer turns on, but you’re sure the computer is still functioning, a repair may not be required to extract all its data or continue using it. (In fact, without a paid AppleCare+ for Mac plan, repair costs for a display often far exceed a Mac’s value unless a repair shop can find a refurbished or salvaged display. It may be cheaper or not much more expensive to simply buy a used Mac of the same vintage with a working monitor.) Use an external monitor to keep it alive or extract data All Mac laptops and iMacs of the last many years support an external monitor, though the particular adapter and type varies based on the vintage of Mac: Determine your Mac model and the kind of monitor and cable you need.Shut down the Mac if it’s running. (If you can’t see the display well enough to select Shut Down, press and hold the power button until it powers down, which is about 10 seconds.)Attach the monitor.Start up the Mac. If you’re lucky, the monitor is enabled with display mirroring, so you see exactly on the monitor what would appear on the internal display. If the external monitor shows the image of a second screen instead of a mirror of the internal display: See if you can bring up the Displays preference pane and check the Mirror Displays box in the Arrangement tab. Even if you can’t see it, you might be able to grab the top of the window with the cursor on the monitor that’s invisible to you and drag it to the monitor you can see! It’s a little like those terrible claw toy machines—but without being able to even see the claw or the toy.With a Mac laptop, shut the computer’s lid, which may transfer the display to the external monitor. You’ll need an external keyboard, too.Try restarting the Mac and then reset its NVRAM or PRAM per Apple’s instructions at startup. This might switch to mirrored displays. If any of that works, you can continue to use the Mac normally, or use the second display to manage transferring data from it. Also see: How to connect an old Apple display to a new Mac. We also have a guide to the best Mac monitors and displays. Connect via Screen Sharing or VNC macOS allows remote screen access via a local network using Bonjour, but only if you enabled Screen Sharing in the Sharing preference pane. If you might have done so, follow these steps: Power the Mac up.Go to another Mac that’s on the same network. In the Finder, look in the Locations section in the sidebar in any window. Does the Mac’s name appear?If so, click the Mac’s entry. Does Share Screen appear in the upper-right corner of the Finder window?If that appears, click it, and enter the account information in the Screen Sharing app that launches. You should now have access. With Screen Sharing enabled, if you also clicked Computer Settings and enabled a password for VNC viewers, you should also or instead be able to use standard VNC screen-sharing software from any computer on the network (including a Mac), or one that can reach the network remotely. Use Target Disk Mode If all else fails, Target Disk Mode may save the day. This allows a Mac to mount like a hard drive on other Macs. Apple has a detailed set of instructions on its site, but the outline is: Power down your damaged Mac.Plug it in with the appropriate like-to-like cable with the Mac you want to mount it on.Start up your damaged Mac while holding down the T key. If all is well, your Mac with a broken display appears as a mounted drive on the Mac to which it’s attached. Note that Target Disk Mode is a bit different on M-series Macs, but is can be done, see: All the new ways of doing things on M1 Macs. This Mac 911 article is in response to a question submitted by Macworld reader Meredith. Ask Mac 911 We’ve compiled a list of the questions we get asked most frequently along with answers and links to columns: read our super FAQ to see if your question is covered. If not, we’re always looking for new problems to solve! Email yours to mac911@macworld.comincluding screen captures as appropriate, and whether you want your full name used. Not every question will be answered, we don’t reply to email, and we cannot provide direct troubleshooting advice. iMac, Mac, MacBook, Monitors

Read more »

Apple stops signing iOS 16.4.1 following iOS 16.5 release
Apple recently stopped signing iOS 16.4.1 and iPadOS 16.4.1 following the release of iOS 16.5 to the public a few days ago. This means that iPhone and iPad users can no longer downgrade to this version of the operating system if they’re already running a newer version of iOS. more… The post appeared first on 9to5Mac.

Read more »

Poll: What announcements are you most excited to see at WWDC 2023?
WWDC 2023 is just around the corner, and all the latest rumors suggest that the event will be packed with huge announcements. This includes not only software updates like iOS 17 and watchOS 10, but also the unveiling of Apple’s mixed reality headset. Now we want to know what you’re most excited to see at WWDC 2023. more… The post appeared first on 9to5Mac.

Read more »

Apple Music VR and the mixed reality headset
I spent part of Friday night attending a concert in virtual reality. It wasn’t very good. By this time next week, however, Apple is expected to have already unveiled its mixed reality headset. I’m hoping part of the pitch includes Apple Music. more… The post appeared first on 9to5Mac.

Read more »

Canada Pension fund increases held Apple shares by 50%, slashes Tesla stake by 53%
The Canada Pension Plan Investment Board boosted its held Apple shares by 50% in the first quarter of 2023, just after slashing held EV stocks like Tesla at the end of 2022.CPP sells Tesla, buys Apple stockApple continues to be a strong stock to hold as it grows quarter to quarter. Investment firms like the Canada Pension Plan tend to choose company stocks that signal strong growth potential. Read more...

Read more »

Learn the financial ropes with this $39.99 investing boot camp
Get the Complete 2023 Stock Trading and Investing Bundle, now on sale for just $39.99. That's hundreds off the total MSRP. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

There’s still one AirPower feature Apple should release
Ah, AirPower, Apple’s ambitious wireless charging mat unveiled in September 2017 and canceled in March 2019. Who could forget the unreleased product that never even got a price tag? Multidevice Qi chargers and Apple’s MagSafe technology have long since made AirPower look basic and dated. Even Apple’s MagSafe Duo charger hasn’t caught up with fast charging capabilities on newer devices. Still, there’s one AirPower promise that only Apple could fulfill to make the canceled wireless charging mat completely obsolete while improving another product. more… The post appeared first on 9to5Mac.

Read more »

iPhone: How to check what apps are using precise location tracking and how to turn it off
Many iOS apps ask for precise location tracking permission by default the first time you open them. And it can be easy to forget how many or which apps you’ve given permission to. Here’s how to turn off precise iPhone location tracking. more… The post appeared first on 9to5Mac.

Read more »

Cryptic tease may suggest imminent 'No Man's Sky' launch on Mac
Sean Murray, founder of Hello Games and creator of "No Man's Sky," may have revealed the game's imminent Mac launch, or given the proximity to WWDC, an Apple VR Headset release.'No Man's Sky' is coming to MacIt's no secret that "No Man's Sky" is coming to Apple Silicon Macs. The game was teased during WWDC in 2022 alongside "Resident Evil: Village" to promote Apple's new Metal 3 API. Read more...

Read more »

Apple sued by actor Brent Sexton over COVID vaccination mandate
A former "Deadwood" actor is suing Apple because he alleges the company rescinded a job offer over a COVID-19 vaccination mandate.Brent Sexton in 'The Killing', copyright: AMC 2010According to the suit filed against Apple by Brent Sexton ("Deadwood", "The Killing"), Apple required anyone working on an Apple TV+ production in Los Angeles to get the coronavirus vaccine and submit proof they did. The suit says Apple "trampled the rights" of those working to create content for the streaming service. Read more...

Read more »

WWDC 23: What to expect from Apple’s blockbuster keynote
Wondering what Apple could announce at WWDC23? Here's a roundup of what to expect from the company's developer conference this year. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Go ultrawide with this BenQ monitor for creatives [Review] ★★★★☆
The BenQ PD3420Q ultrawide monitor is designed for creative professionals with its atypical shape and color consistency with MacBooks. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple to Shut Down My Photo Stream on 26 July 2023
Apple has announced that My Photo Stream will shut down in 2 months. If you find its syncing capabilities useful, consider switching to iCloud Photos, which may require paying Apple for iCloud+ storage.Read original article

Read more »

Apple Watch for kids: What to buy and avoid, Family Setup, band recommendations
Apple Watch for kids is something parents are embracing more and more. The New York Times ran a story in September 2022 about Apple Watch adoption among children as young as five. Parents are finding the Apple Watch more appropriate for kids wanting smartphones. The Apple Watch gives kids a way to stay in touch with parents, share location, and build responsibility without the full cost and risk of a smartphone. With school out for the summer, it may be time to consider adding more connectivity without the complexity of a phone. more… The post appeared first on 9to5Mac.

Read more »

Bargain bonanza: unbeatable Apple deals on Amazon this week
This week's Amazon deals feature the premier Apple Watch Ultra with a $50 discount and come with various bands to choose from at the discounted price. Also on sale are other Apple Watch models, like the Series 8 and SE 2, both with decent discounts to bring the price down.Apple products are on sale at Amazon.Shoppers looking for an M2-powered laptop are also in luck with the MacBook Air M2 and 13-inch MacBook Pro, each sporting discounts of up to $200 off retail price. Don't forget the accessories, either, as AirPods, Apple Pencils, and Magic Keyboards also have solid deals. Read more...

Read more »

How much would you pay for a more premium iPad mini?
Taking a break from 8.3-inch Liquid Retina display version in September 2021. Available in four colors, the A15 chip-equipped iPad mini hardly feels dated with performance on par with that of the iPhone 13 and iPhone 14. If anything, an updated iPad mini could satisfy a lot of fans wanting a more premium model that could be sold alongside the current iPad mini 6. more… The post appeared first on 9to5Mac.

Read more »

Today in Apple history: Apple shows off the Newton for the first time
May 29, 1992: Apple demonstrates the Newton MessagePad for the first time, showing how the upcoming PDA can be used to order a pizza and pull off other time-saving tricks. Hailed by Apple CEO John Sculley as “nothing less than a revolution,” the Newton is Apple’s first major new product since the Macintosh eight years […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

The PopSockets MagSafe Phone Grip is 50% Off
Reduce the chances of dropping your iPhone to the hard ground with a PopSockets MagSafe PopGrip. Today, it’s down to just $14.99 from its original price of $30 on Amazon. Attaching the PopSockets MagSafe Grip is just as easy as snapping it magnetically on the back of your iPhone. Once there, you’ll be able to [...] The post appeared first on iLounge.

Read more »

Apple services’ Eric Hoffman exits Apple
Apple executive Eric Hoffman is leaving Apple in search for greener pastures. Mark Gurman mentioned in his ‘Power On’ newsletter that Hoffman had left the company this week. Before the exit, Hoffman was Apple Pay Business Development Director and managed Tap to Pay. The exec served the company for 8 years and joined in 2014, [...] The post appeared first on iLounge.

Read more »

Apple promotes Apple Card ‘Family’ feature with a $125 daily cash campaign
Apple Card users can earn up to $125 in rewards through a limited-time promo. Apple Card launched with great success in 2019 and brought iPhone integration with credit card services from Goldman Sachs. In 2021, Apple expanded the service to support up to five people. The latest promotion invites users to ‘share up to $125 [...] The post appeared first on iLounge.

Read more »

New Macs to be unveiled at WWDC 2023
Apple is preparing to unveil a new lineup of Macs, as per Bloomberg’s Mark Gurman. Gurman mentioned via tweet that Apple will begin a trade-in program for Macs beginning June 5, the same day the WWDC keynote will be taking place. The Cupertino-based company will be updating its trade-in page to include the 13-inch M2 [...] The post appeared first on iLounge.

Read more »

Foxconn raises joining bonuses in preparation for iPhone 15
Foxconn is offering sign-up bonuses to new employees at its Zhengzhou factory, in advance of its annual busy period when it mass-produces the next model of iPhone.A Foxconn workerEvery year, Foxconn tries to get its workforce as large as possible at its Zhengzhou facility in Henan province, China, so it can keep up with orders for Apple's iPhone. The swelling of the workforce to its potential maximum of 200,000 employees is a seasonal affair, with Foxconn typically offering bonuses to those who join the company's production lines. Read more...

Read more »

2 key items complete killer workstation [Setups]
Today's M2 MacBook Air setup was "done" just weeks ago. Now new additions boost iPad functionality and pump up sound. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Best Memorial Day 2023 deals: Save on the latest from Apple, Google, OnePlus, more
Memorial Day has now arrived and with it has come a collection of deals from all of the top retailers like Amazon, Best Buy, B&H, and many others. Giving you a chance to score some of the best prices of the year on the latest Apple products, Google smart home gear, TVs, and more, there is sure to be something on tap for everyone on sale. Head below for all of the best Memorial Day deals. more… The post appeared first on 9to5Mac.

Read more »

Momax power station packs 6 ports, 100W of power and wireless charging
This do-it-all charging station can juice up seven power-hungry devices at once, all at maximum speed. Cult of Mac readers get a discount! (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Soro app brings HomePod-like intercom to Sonos speakers
Back in 2020, Apple launched its handy intercom feature for HomePod and HomePod mini. Fast forward to 2023 and that feature isn’t yet native on Sonos speakers. Now Soro For Sonos has received an update that brings intercom capability and more. more… The post appeared first on 9to5Mac.

Read more »

Phishing Domains Tanked After Meta Sued Freenom
The number of phishing websites tied to domain name registrar Freenom dropped precipitously in the months surrounding a recent lawsuit from social networking giant Meta, which alleged the free domain name provider has a long history of ignoring abuse complaints about phishing websites while monetizing traffic to those abusive domains.

Read more »

When Does Your iPhone Become Unsafe to Use? – Intego Mac Podcast Episode 293
A new hacking tool, BrutePrint, can unlock lots of smartphones, but not iPhones. Router infections can be hard to remove, and we wonder why Apple got out of the wi-fi business. And we take a close look at whether it's safe to use an iPhone, if it can no longer run the latest version of iOS. The post When Does Your iPhone Become Unsafe to Use? – Intego Mac Podcast Episode 293 appeared first on The Mac Security Blog.

Read more »

Interview With a Crypto Scam Investment Spammer
Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. What follows is an interview with a Russian hacker responsible for a series of aggressive crypto spam campaigns that recently prompted several large Mastodon communities to temporarily halt new registrations. According to the hacker, their spam software has been in private use until the last few weeks, when it was released as open source code.

Read more »

Vulnerability Summary for the Week of May 15, 2023
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. NVD is sponsored by CISA. In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available. Vulnerabilities are based on the Common Vulnerabilities and Exposures (CVE) vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores: High: vulnerabilities with a CVSS base score of 7.0–10.0 Medium: vulnerabilities with a CVSS base score of 4.0–6.9 Low: vulnerabilities with a CVSS base score of 0.0–3.9 Entries may include additional information provided by organizations and efforts sponsored by CISA. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletin is compiled from external, open-source reports and is not a direct result of CISA analysis. High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source & Patch Info ideasoft --rental_module Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server.This issue affects Rental Module: before 23.05.15. 2023-05-20 10 CVE-2023-2712MISC wago -- multiple_products In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise. 2023-05-15 9.8 CVE-2023-1698MISC lost_and_found_information_system_project -- lost_and_found_information_system A vulnerability was found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this issue is the function manager_category of the file admin/?page=categories/manage_category of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-228884. 2023-05-12 9.8 CVE-2023-2668MISCMISC lost_and_found_information_system_project -- lost_and_found_information_system A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as critical. This affects an unknown part of the file admin/?page=categories/view_category of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-228885 was assigned to this vulnerability. 2023-05-12 9.8 CVE-2023-2669MISCMISC lost_and_found_information_system_project -- lost_and_found_information_system A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/?page=user/manage_user. The manipulation leads to improper access controls. The attack can be initiated remotely. VDB-228886 is the identifier assigned to this vulnerability. 2023-05-12 9.8 CVE-2023-2670MISCMISC lost_and_found_information_system_project -- lost_and_found_information_system A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file items/view.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-228888. 2023-05-12 9.8 CVE-2023-2672MISCMISC companymaps_project -- companymaps SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request. 2023-05-12 9.8 CVE-2023-29809MISCMISC judging_management_system_project -- judging_management_system SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the contestant_id parameter. 2023-05-12 9.8 CVE-2023-30246MISCMISC storage_unit_rental_management_system_project -- storage_unit_rental_management_system File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the update_settings parameter. 2023-05-12 9.8 CVE-2023-30247MISCMISC codesys -- multiple_products An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead to a denial-of-service condition, memory overwriting, or remote code execution. 2023-05-15 8.8 CVE-2022-47379MISC codesys -- multiple_products An authenticated remote attacker may use a stack based  out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. 2023-05-15 8.8 CVE-2022-47380MISC codesys -- multiple_products An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. 2023-05-15 8.8 CVE-2022-47381MISC codesys -- multiple_products An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. 2023-05-15 8.8 CVE-2022-47382MISC codesys -- multiple_products An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. 2023-05-15 8.8 CVE-2022-47383MISC codesys -- multiple_products An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. 2023-05-15 8.8 CVE-2022-47384MISC codesys -- multiple_products An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. 2023-05-15 8.8 CVE-2022-47385MISC codesys -- multiple_products An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. 2023-05-15 8.8 CVE-2022-47386MISC codesys -- multiple_products An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. 2023-05-15 8.8 CVE-2022-47387MISC codesys -- multiple_products An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. 2023-05-15 8.8 CVE-2022-47388MISC codesys -- multiple_products An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. 2023-05-15 8.8 CVE-2022-47389MISC codesys -- multiple_products An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution. 2023-05-15 8.8 CVE-2022-47390MISC google -- chrome Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker to potentially exploit heap corruption via crafted audio file. (Chromium security severity: High) 2023-05-12 8.8 CVE-2023-2457MISCMISC google -- chrome Use after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction. (Chromium security severity: High) 2023-05-12 8.8 CVE-2023-2458MISCMISC ideasoft -- rental_module Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass.This issue affects Rental Module: before 23.05.15. 2023-05-20 8.8 CVE-2023-2713MISC codesys -- development_system_v3 Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application. 2023-05-15 7.7 CVE-2022-4048MISC codesys -- multiple_products In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service. 2023-05-15 7.5 CVE-2022-47391MISC rosariosis -- rosariosis Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0. 2023-05-12 7.5 CVE-2023-2665CONFIRMMISC froxlor -- froxlor Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16. 2023-05-12 7.5 CVE-2023-2666CONFIRMMISC Back to top  Medium Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source & Patch Info codesys -- multiple_products Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may craft specific requests that use the vulnerability leading to a denial-of-service condition. 2023-05-15 6.5 CVE-2022-47378MISC codesys -- multiple_products An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead to a denial-of-service condition. 2023-05-15 6.5 CVE-2022-47392MISC codesys -- multiple_products An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation. 2023-05-15 6.5 CVE-2022-47393MISC lost_and_found_information_system_project -- lost_and_found_information_system A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-228883. 2023-05-12 6.1 CVE-2023-2667MISCMISC lost_and_found_information_system_project -- lost_and_found_information_system A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file classes/Master.php?f=save_inquiry of the component Contact Form. The manipulation of the argument fullname/contact/message leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-228887. 2023-05-12 6.1 CVE-2023-2671MISCMISC companymaps_project -- companymaps Cross Site Scripting (XSS) vulnerability in vogtmh cmaps (companymaps) 8.0 allows attackers to execute arbitrary code. 2023-05-12 6.1 CVE-2023-29808MISCMISCMISC jerryscript -- jerryscript Jerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component parser_parse_class at jerry-core/parser/js/js-parser-expr.c. 2023-05-12 5.5 CVE-2023-31913MISC jerryscript -- jerryscript Jerryscript 3.0 (commit 05dbbd1) was discovered to contain out-of-memory issue in malloc. 2023-05-12 5.5 CVE-2023-31914MISC jerryscript -- jerryscript Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the jmem_heap_finalize at jerry-core/jmem/jmem-heap.c. 2023-05-12 5.5 CVE-2023-31916MISC jerryscript -- jerryscript Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments at jerry-core/parser/js/js-parser.c. 2023-05-12 5.5 CVE-2023-31918MISC jerryscript -- jerryscript Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the jcontext_raise_exception at jerry-core/jcontext/jcontext.c. 2023-05-12 5.5 CVE-2023-31919MISC jerryscript -- jerryscript Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c. 2023-05-12 5.5 CVE-2023-31920MISC jerryscript -- jerryscript Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_big_uint_div_mod at jerry-core/ecma/operations/ecma-big-uint.c. 2023-05-12 5.5 CVE-2023-31921MISC ibm -- planning_analytics_local IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 250454. 2023-05-12 5.4 CVE-2023-28520MISCMISC ibm -- spectrum_protect IBM Spectrum Protect Plus Server 10.1.13, under specific configurations, could allow an elevated user to obtain SMB credentials that may be used to access vSnap data stores. IBM X-Force ID: 249325. 2023-05-12 4.9 CVE-2023-27863MISCMISC codesolz -- easy_ad_manager Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodeSolz Easy Ad Manager plugin

Read more »

When does an old iPhone become unsafe to use?
When Apple stops issuing security updates for older iPhones, they become unsafe to use. But exactly how long can you safely keep using an old iPhone? The post appeared first on The Mac Security Blog.

Read more »

Expect .zip and .mov domains to be used in phishing and malware attacks
Back in 2014, Google became the owner of several new “top-level domains.” Called a TLD for short, a top-level domain is the “dot-something” at the end of a domain name, for example .com or .net. Two of the new TLDs that Google registered were .zip and .mov. You probably recognize that .zip is also a […] The post appeared first on The Mac Security Blog.

Read more »

Urgent Patches: macOS Ventura 13.4, iOS 16.5 fix 3 actively exploited vulns
On Thursday, May 18, Apple released updates to all of its operating systems. The updates included new features as well as security-related fixes—including for three “actively exploited” vulnerabilities. Let’s take a look at the highlights of each update. In this article: Apple addresses three zero-day vulnerabilities macOS Ventura 13.4 macOS Monterey 12.6.6 macOS Big Sur […] The post appeared first on The Mac Security Blog.

Read more »

New Top-Level Domains, .Zip and .Mov; Geacon Malware; and Goggle to Delete Dormant Accounts
New top-level domains use common file extensions, and this could lead to confusion, and dangerous downloads. Apple announces a new personal voice modeling feature. And Google warns dormant users: log in, or get shut out. The post appeared first on The Mac Security Blog.

Read more »

Russian Hacker “Wazawaka” Indicted for Ransomware
A Russian man identified by KrebsOnSecurity in January 2022 as a prolific and vocal member of several top ransomware groups was the subject of two indictments unsealed by the Justice Department today. U.S. prosecutors say Mikhail Pavolovich Matveev, a.k.a. "Wazawaka" and "Boriselcin" worked with three different ransomware gangs that extorted hundreds of millions of dollars from companies, schools, hospitals and government agencies.

Read more »

Red Hat Security Advisory 2023-2898-01
- The libtar packages contain a C library for manipulating tar archives. The library supports both the strict POSIX tar format and many of the commonly used GNU extensions. Issues addressed include memory leak and out of bounds read vulnerabilities.

Read more »

Re-Victimization from Police-Auctioned Cell Phones
Countless smartphones seized in arrests and searches by police forces across the United States are being auctioned online without first having the data on them erased, a practice that can lead to crime victims being re-victimized, a new study found. In response, the largest online marketplace for items seized in U.S. law enforcement investigations says it now ensures that all phones sold through its platform will be data-wiped prior to auction.

Read more »

Memorial Day Sale: $70 off all Apple Watch Series 8 models
Apple has Certified Refurbished Apple Watch Series 8 models available on their online store for $70 off MSRP, starting at $329. Each Watch includes Apple’s standard one-year warranty, a new outer case, new band, and free shipping: – 41mm Apple Watch Series 8 GPS: $329, $70 off MSRP – 45mm Apple Watch Series 8 GPS: $359, $70 off MSRP – 41mm Apple Watch Series 8 […] The post first appeared on MacPrices.net.

Read more »

Memorial Day Sale: 14-inch Apple M2 Pro MacBook Pros for $250 off MSRP
Amazon has Apple’s 14-inch M2 Pros in stock and on sale today for $250 off MSRP. Prices start at $1749 including free delivery. These are the lowest prices currently available for new 14″ M2 Pro MacBook Pros from Apple’s retailers: – 14″ 10-Core M2 Pro MacBook Pro (Gray or Silver): $1749 $250 off MSRP – 14″ 12-Core M2 Pro MacBook Pro (Gray or Silver): $2249 […] The post first appeared on MacPrices.net.

Read more »

Apple set to show off new features of iOS 17 at WWDC 2023
Apple is set to unveil iOS 17 during the WWDC 2023 Keynote speech on June 5th. Here are, briefly, some of the expected features of the new release: When the iPhone is locked and in landscape mode, Apple iOS 17 will include a smart display-type feature which will let users view upcoming calendar appointments, notifications, and other pieces of information. Additionally, a journaling app will […] The post first appeared on MacPrices.net.

Read more »

Apple set to show off new features of iOS 17 at WWDC 2023
Apple is set to unveil iOS 17 during the WWDC 2023 Keynote speech on June 5th. Here are, briefly, some of the expected features of the new release: When the iPhone is locked and in landscape mode, Apple iOS 17 will include a smart display-type feature which will let users view upcoming calendar appointments, notifications, and other pieces of information. Additionally, a journaling app will […] The post first appeared on MacPrices.net.

Read more »

Memorial Day Weekend Sale: 13-inch Apple M2 MacBook Pros for $200 off MSRP, plus get free 1-2 day shipping
B&H Photo has 13″ MacBook Pros with Apple M2 processors in stock and on sale today for $200 off MSRP as part of their Memorial Day Weekend sale. Their prices are among the lowest currently available for M2 MacBook Pros from any Apple reseller. However, B&H also offers free 1-2 day shipping to most US addresses: – 2022 13″ MacBook Pro M2 CPU/256GB SSD/Gray or […] The post first appeared on MacPrices.net.

Read more »

Memorial Day Weekend Sale: $30 off Apple AirPods, $50 off AirPods Pro
Amazon has Apple AirPods on sale for up to 38% off MSRP as part of their Memorial Day Weekend sale. Shipping is free: – AirPods 2nd-generation: $99 $30 (38%) off – AirPods Pro 2nd-generation: $199.99 $50 (20%) off Their prices are the lowest available for these models. For the latest prices and sales, see our Apple AirPods Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Memorial Day Weekend Sale: $30 off Apple AirPods, $50 off AirPods Pro
Amazon has Apple AirPods on sale for up to 38% off MSRP as part of their Memorial Day Weekend sale. Shipping is free: – AirPods 2nd-generation: $99 $30 (38%) off – AirPods Pro 2nd-generation: $199.99 $50 (20%) off Their prices are the lowest available for these models. For the latest prices and sales, see our Apple AirPods Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Memorial Day Weekend Sale: Apple Watch Ultra models for up to $97 off MSRP
Amazon has Apple Watch Ultra models (Alpine Loop, Trail Loop, and Ocean Bands) on sale for up to $97 off MSRP, each including free shipping, as part of their Memorial Day Weekend sale. Their prices are the lowest currently available for Ultra Watches: – Green Alpine Loop: $749, $50 off MSRP – Orange Alpine Loop: $749, $50 off MSRP – Starlight Alpine Loop: $749, $50 […] The post first appeared on MacPrices.net.

Read more »

Memorial Day Weekend Sale: $100 off Apple iPad Airs
Amazon has 10.9″ M1 WiFi iPad Airs on sale for $100 off Apple’s MSRP, with prices starting at $499, as part of their Memorial Day Weekend sale. Their prices are the lowest available among the Apple retailers we track: – 10.9″ M1 Airs 64GB/WiFi: $499.99 $100 off MSRP – 10.9″ M1 Airs 256GB/WiFi: $649.99 $100 off MSRP – 10.9″ M1 Airs 64GB/WiFi: $649.99 $100 off […] The post first appeared on MacPrices.net.

Read more »

Memorial Day Weekend Sale: $100 off Apple iPad Airs
Amazon has 10.9″ M1 WiFi iPad Airs on sale for $100 off Apple’s MSRP, with prices starting at $499, as part of their Memorial Day Weekend sale. Their prices are the lowest available among the Apple retailers we track: – 10.9″ M1 Airs 64GB/WiFi: $499.99 $100 off MSRP – 10.9″ M1 Airs 256GB/WiFi: $649.99 $100 off MSRP – 10.9″ M1 Airs 64GB/WiFi: $649.99 $100 off […] The post first appeared on MacPrices.net.

Read more »

Memorial Day Weekend Sale: $100 off Apple iPad Airs
Amazon has 10.9″ M1 WiFi iPad Airs on sale for $100 off Apple’s MSRP, with prices starting at $499, as part of their Memorial Day Weekend sale. Their prices are the lowest available among the Apple retailers we track: – 10.9″ M1 Airs 64GB/WiFi: $499.99 $100 off MSRP – 10.9″ M1 Airs 256GB/WiFi: $649.99 $100 off MSRP – 10.9″ M1 Airs 64GB/WiFi: $649.99 $100 off […] The post first appeared on MacPrices.net.

Read more »

Memorial Day Weekend Sale: $100 off Apple iPad mini 6
Amazon is offering Apple’s 8.3″ iPad minis for $100 off MSRP, including free shipping, as part of their Memorial Day Weekend sale. Prices start at $399. Amazon’s prices are the lowest currently available for these minis from any Apple retailer we track: – 64GB WiFi iPad mini 6 (all colors): $399.99 $100 off MSRP – 256GB WiFi iPad mini 6 (all colors): $549.99 $100 off […] The post first appeared on MacPrices.net.

Read more »