Three months after skipping iPhone 17 Pro, I’m starting to reconsider
Three months ago, I chose the iPhone Air over the iPhone 17 Pro. After years of using Pro models, I was excited by the prospect of something new and futuristic. But despite being very happy overall with my iPhone Air, I’ve recently started second-guessing my choice. more…

Read more »

Lead times across Apple’s iPhone 17 series are finally moderating
Lead times for Apple’s iPhone 17 series are finally easing as supply catches up with demand, according to JPMorgan. Analyst Samik Chatterjee… The post appeared first on MacDailyNews.

Read more »

Apple Pay promo offers 20% off at Adidas
Apple has announced a new limited-time Apple Pay promotion. The company says you can save 20% on online orders from Adidas when you check out with Apple Pay. more…

Read more »

These are Apple TV’s top 10 shows that are coming soon
Apple TV had its biggest year ever in 2025, but there’s a stacked lineup of new and returning shows premiering in early 2026. Here are the top 10 Apple TV shows coming soon. more…

Read more »

This $479 Mac mini is the best kind of last-minute holiday gift
Macworld Okay, so it might be a little late to get a new Mac delivered in time for Christmas, but there’s no reason you can’t get yourself a gift now that your shopping is done. And if you’re going to buy one, you might as well take advantage of the deal from Amazon, which is selling a M4 Mac mini with 16GB of RAM and a 256GB SSD for $479, a savings of $120 off the regular price and the best price we’ve ever seen. This model is the base configuration, which has a 10-core CPU and 10-core GPU, two front USB-C ports, three rear Thunderbolt 4/USB ports, gigabit ethernet, HDMI, and a headphone jack. You’ll need to provide your own display, as well as a keyboard and mouse, but you’ve probably got those already. In our review of the M4 Pro Mac mini, we marveled at its tiny design–it’s really, really, small. Don’t wait too long to pick up this Mac mini–with Christmas just around the corner, we don’t know how long these sales will last. Put in the order now, and before you know it, Santa will be gone but the Amazon truck will be just around the corner, too, ready to drop off your new Mac mini for $479. Saec 20% on an M4 Mac miniBuy now on Amazon

Read more »

Deals: 24GB M4 MacBook Air $300 off, Apple Pencil Pro, 240W Apple USB-C cable, final Best Buy 48-hr. flash sale, more
This close to Christmas, after basically months of incredible deals on Apple gear, I didn’t expect to be telling folks we have one of the best deals of the year on an M4 MacBook Air today. The most affordable 24GB M4 MacBook Air is headlining today’s 9to5Toys Lunch Break at $300 off the list price to undercut all of the best Black Friday deals that surfaced this year. That offers joins a chance to save on Apple Pencil Pro, Apple’s iPhone Air Bumper, official 240W USB-C cables, and Best Buy’s final 48-hour holiday flash sale. Scope it all out down below.  more…

Read more »

Price drop: This weather radar app gives you real-time data you can use
Stay ahead of inclement weather events with Weather Hi-Def Radar, a weather radar app that goes beyond your phone's usual weather alerts. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Macworld picks Apple’s biggest hits and misses of 2025
Macworld As 2025 comes to a close, Macworld is proud to present our Apple awards, a look back at the best and worst of everything released over the past 12 months. It was a busy year for Apple, with new products across its entire range of products, including iPhone, iPad, AirPods, Mac, and even Vision Pro. So join us as we recognize the products that made the most impact in 2025: iPhone/iOS Emma Rowley / Foundry iPhone of the Year:  iPhone 17 The iPhone 17 isn’t just the best iPhone of 2025; it’s the best iPhone of the last five years. Apple finally stopped holding back features that should be table stakes for an $800 phone. You get double the storage, 120Hz ProMotion, 50 percent higher peak brightness, always-on display, better cameras, and speed and battery life that both exceed last year’s Pro model. All without raising the price. There’s never been a better year not to go Pro. — Jason Cross Apple iOS feature of the year:  Tackling Spam Call Screening will silently answer unknown numbers and ask them to say why they’re calling, and you can see it all right on screen. It’s a great way to eliminate spam calls without missing legit calls from numbers that just aren’t in your contacts. Couple that with new spam filtering in Messages, as well as in the Phone app and FaceTime, and Apple is finally doing something about one of the biggest pain points of using a smartphone. There’s still a long way to go, but since upgrading to iOS 26 and enabling these features, I’ve noticed a big drop in the number of times a day I pick up my phone only to immediately hang up on a solicitation message. — Jason Cross Britta O’Boyle Color of the Year: Cosmic Orange For the company that ostracized beige as the default color in computing when it launched the out-there Bondi Blue iMac in 1998, Apple has been rather tame in terms of its recent color choices. The iPhone 17 Pro’s Cosmic Orange is therefore a refreshing shock to the system and a vibrant return to form. Orange is no longer restricted to traffic cones and dodgy Seventies furniture. The Apple Store should hand out sunglasses for the crowds picking up the vibrant new iPhone and ignoring the dark blue one. There’s even a growing range of orange accessories available for the new phone. — Simon Jary Apple Oddity of the Year: iPhone Pocket Readers of a certain vintage who still fondly remember when Apple released a pair of socks for its iPod back in 2004, were rocked once again with the unexpected—and indeed unasked-for—iPhone Pocket, which the company described as “a singular 3D-knitted construction designed to fully enclose iPhone, while expanding to fit your everyday items”. Designed in conjunction with the Issey Miyake design studio famous for Steve Jobs’ trademark turtleneck, the iPhone Pocket comes in eight crazy colors, including Peacock, Sapphire, and Cinnamon. We all laughed until it sold out in mere minutes. — Simon Jary Foundry Flop of the Year: Liquid Glass Liquid Glass was Apple’s bold new, all-encompassing design language that radically changed the look of Apple’s software across all of the OS 26 software updates. Alan Dye, Apple’s vice president of Human Interface Design, tried to channel his inner Jony Ive by describing it as making “even the simplest of interactions more fun and magical.” We didn’t get that. Instead, Liquid Glass is the worst example of flamboyance over function, the opposite of Ive’s philosophy. — Simon Jary Mac/macOS Foundry Mac of the Year: M3 Ultra Mac Studio Overall, 2025 was a quiet year for Mac hardware, but one Mac made a sizable impact on Apple’s lineup. The Mac Studio was a bit of a surprise because its M3 Ultra chip was released out of sequence with  Apple’s usual cadence. Still, in the Mac Studio, it’s the fastest Mac available, leaving the M2 Ultra Mac Pro behind—way behind. At thousands less, it basically renders the Mac Pro irrelevant to everyone who doesn’t really need an expansion card. With its exhilarating CPU speed, powerful GPU performance, and robust expandability, the Mac Studio became King of the Macs in 2025. — Roman Loyola Apple Chip of the Year: M5 To say, “Apple is on a roll,” undercuts how much momentum the company has with its chips. Apple silicon is downright killing it, and the M5 chip exemplifies why. Making its debut in the MacBook Pro, the M5 provides an ideal and unprecedented combination of processing speed, graphics power, and energy efficiency in a consumer-level chip. The M5 is so good that Apple felt that it could wait until next year to release the M5 Pro and Max variants. — Roman Loyola Foundry Disappointment of the Year: Mac Pro While every other Mac has some version of the M4 and the 14-inch MacBook Pro has an M5, Apple’s most expensive Mac still has the same M2 Ultra chip it got back in June 2023. Meanwhile, the Mac Studio with a superior M3 Ultra costs a couple of thousand dollars less, and I’m left to wonder: How can Apple charge upwards of $10,000 for a Mac with a two-plus-generation-old chip? There were plenty of opportunities to update the Mac Pro in 2025, but instead, Apple let it languish another year with the same aging processor. — Roman Loyola iPad/iPadOS Foundry iPad of the Year: iPad Pro M5 Apple updated three of its four iPads in 2025 (sorry iPad mini), but the M5 iPad Pro is really the only one that could be considered for this distinction. All three updates were essentially chip refreshes (A14 to A16 (iPad); M2 to M3 (iPad Air); M4 to M5 (iPad Pro), but only the iPad Pro delivered a noticeable boost over its predecessor. Add in 50 percent more entry-level RAM, faster Wi-Fi, and fast charging, and you’ve got an upgrade worthy of a pro. — Michael Simon Apple Update of the year: iPadOS 26 This year’s WWDC keynote was jam-packed with features, from Liquid Glass to Live Translation and revamped app designs. But the star of the show was iPadOS 26, which introduced a new interface that incorporated many of the visual and productivity elements users have wanted for years, with resizable windows, macOS-like multitasking, and a new lease on life. — Michael Simon Apple Watch David Price / Foundry Watch of the year: Apple Watch SE 3 Strictly speaking, the Series 11 was the best Apple Watch to come out this year (I find the Ultra models too bulky for everyday wear), but the SE 3 was without a doubt the one I’d recommend to a friend. It’s nearly as good and far better value. As part of the 2025 refresh, the SE gained an always-on display, a bigger and longer-lasting battery, improved scratch resistance, new health features and gestures, on-device Siri, and the option of 5G. And all that for $249! Forget the Series 11; this has everything you need from a smartwatch at an excellent price. — David Price Services Apple Apple TV show of the year: ‘Pluribus’ There’s something nerve-wracking about recommending a TV show in the middle of a run–particularly one as unpredictable as Pluribus. Who knows where it will go from here? But just six episodes into the debut season of this frequently funny, occasionally harrowing sci-fi drama, and even against strong competition from the second season of Severance, I feel (reasonably) confident naming this as the Apple TV show of the year. As you’d expect from a Vince Gilligan production, Pluribus flips seamlessly between slow-burn beauty and sudden shocking action, between grief and humor and mystery. And Rhea Seehorn is superb as the last unhappy woman in the world. Maybe it’ll go downhill at some point, but let’s enjoy the ride while it lasts. — David Price Foundry Service of the year: News + Apple TV and Music may get all the attention, but Apple News+ came into its own in 2025. Apple’s daily puzzles had long revolved around somewhat pedestrian offerings, such as crosswords and Sudoku, but a completely original concept, Emoji Game, quickly became a unique and highly entertaining option for users seeking original concepts. And for those of us who have grown sick of the fluff and intrusive ads we come across when Googling recipes, Apple News+ added a new search function that lets you find recipes and view the ingredients and directions in a clutter-free interface. Neat, right? It gets better. You can directly set timers based on the stated durations and add the listed ingredients to your Reminders app. — Mahmoud Itani

Read more »

iOS 26 lets you customize Liquid Glass on your iPhone, here’s how
iOS 26 launched in the fall, but with 26.1 and 26.2 updates it added more tools for customizing the new Liquid Glass design. And now that a new wave of users is upgrading to iOS 26 for the first time, here’s an overview of two ways to personalize your iPhone’s Liquid Glass style. more…

Read more »

American economy grows at fastest pace in years with much-better-than-expected 4.3% GDP gain
The American economy grew at its fastest pace in two years during the third quarter, with inflation-adjusted gross domestic product (GDP)… The post appeared first on MacDailyNews.

Read more »

Apple and Google Asking Some Employees With H-1B Visas To Avoid International Travel
Tech giants Google and Apple are asking some employees with H-1B visas to reconsider international travel, as their legal teams warned that visa processing delays could keep employees abroad for months, according to Business Insider. From a report: Law firms representing the tech giants sent memos advising staff who require visa stamps for reentry to stay in the U.S., warning that international travel could entangle them in visa screening delays following the introduction of a new social media screening requirement, according to the news agency. The policy subjects H-1B workers and their dependents to reviews of their social media histories. "Please be aware that some US Embassies and Consulates are experiencing significant visa stamping appointment delays, currently reported as up to 12 months," BAL Immigration Law, which represents Google, said in a memo obtained by Business Insider. The law firm said the delays were affecting H-1B, H-4, F, J and M visas. Read more of this story at Slashdot.

Read more »

Today in Apple history: Apple invents ‘slide to unlock’
On December 23, 2005, Apple filed a patent application for its iconic "slide to unlock" gesture for the iPhone. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

iOS 26.2 adds new features in six iPhone apps, details here
iOS 26.2 is available now, and it’s packed with a bunch of new features. Many of those features are additions to Apple’s built-in iPhone apps. Here’s everything new across six Apple apps in iOS 26.2. more…

Read more »

iPhone 18 Pro: Six new features are coming next year
Next year’s iPhone 18 lineup will bring a brand new foldable option, but the most popular models will no doubt be the iPhone 18 Pro and Pro Max. Here are six new features rumored for iPhone 18 Pro. more…

Read more »

Apple TV series ‘Bad Monkey,’ set in the Florida Keys, lured by $20.6 million tax credit to film in California
“Bad Monkey” embodies Florida through and through — set in the Keys, adapted from Carl Hiaasen’s novel, and with its first season fully… The post appeared first on MacDailyNews.

Read more »

Apple Fined $116 Million Over App Privacy Prompts
Apple has been fined $116 million by Italy's antitrust regulator over the "excessively burdensome" privacy rules it imposes on third-party apps. From a report: The Italian Competition Authority (AGCM) says that Apple abused its dominant app store market position by burdening developers with "disproportionate" terms around data collection that exceed privacy law requirements, compared to rules for native iOS apps. The fine specifically targets the App Tracking Transparency (ATT) policy Apple launched in 2021, which requires third-party developers to ask users for consent twice to track their data across other apps and websites. Apple's own apps can obtain this permission in a single tap. AGCM says that the burden of consenting twice led to a reduction in user consent rates for advertising profiling, thus harming developers whose business models depend upon revenue generated by personalized ads. Read more of this story at Slashdot.

Read more »

Apple's AI team is bigger than reported & strategy reinforced with latest restructure
The slow restructure of the Apple Intelligence team across 2025 reflects changes in internal strategy around AI rather than an individual failure. Here's how it all comes together for the 2026 relaunch.Apple Intelligence is about to relaunch with an LLM-backed SiriJohn Giannandrea's retirement didn't come as a surprise to many, as they view him as the central problem with Apple's AI strategy. However, even as he's leaving, Apple's strategy doesn't seem to be shifting, and the AI teams continue producing research.There have been about a dozen reports of various AI-adjacent team members and managers departing Apple in the past year. These reports do little to explain why these individuals leave, with the exception of a few being offered millions to do so, and they all lack context as to how Apple handles these departures. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Wondershare Filmora V15: Smarter editing powered by AI and built for real creators
Macworld Video editing today sits at a crossroads. Creators want professional results, but few have the time—or patience—for overly complex tools and fragmented workflows. Wondershare Filmora V15 is designed precisely for this moment, combining advanced AI-powered automation with professional-grade controls that remain approachable, intuitive, and fast. At its core, Filmora V15, from innovative creative solutions provider Wondershare, addresses two long-standing pain points: editing that feels slow and labor-intensive, and pro-level tools that are often inaccessible to non-experts. The solution is a smarter, more connected creative experience—one where AI handles the heavy lifting, while creators stay firmly in control. Wondershare AI Mate: your all-in-one creative editing partner The headline feature of Filmora V15 is AI Mate, an integrated AI assistant that fundamentally changes how users interact with the software. AI Mate offers four precise operating modes. AIGC Mode focuses on generating content assets—such as scripts and videos. Action Mode automatically break down multi-step tasks and execute the corresponding editing actions with a single click. In guide mode, instead of hunting through menus or tutorials, creators can simply ask for what they need using natural language. Auto Mode allows AI Mate to interpret the user’s intent and intelligently select and activate the most suitable mode from the above. For beginners, this feature dramatically lowers the learning curve. For experienced editors, it accelerates workflows and keeps creative momentum flowing. AI Mate turns Filmora into a collaborative editing partner—one that helps ideas move from concept to timeline without friction. Wondershare Foundational Algorithm Optimization: a new AI engine under the hood Filmora V15 also delivers major upgrades to its AI generation backbone through foundational algorithm optimization. The integration of Nano Banana Pro brings faster image generation, native lossless output, flexible aspect ratios, and significantly improved detail and text rendering for AI images. For AI video generation, Filmora V15 integrates Sora 2 and Veo 3.1, pushing text-to-video and image-to-video creation to a new level. These models deliver smoother motion, stronger multimodal understanding, more complete audio, and coherent long-form storytelling—all generated from a single prompt. The result is AI content that feels less mechanical and more cinematic. AI Extend and Smart Cutout: fix problems before they break flow Two standout AI editing tools focus on solving real-world editing frustrations. AI Extend allows creators to extend clips with text prompts—up to five seconds forward or eight seconds backward—making it easy to smooth transitions or fix timing issues without reshoots. Meanwhile, Smart Cutout has been upgraded for more precise subject detection and cleaner edge refinement. With minimal manual input, users can isolate subjects, remove backgrounds, or even apply outlines to highlight key elements—perfect for social, marketing, and educational content. Wondershare Audio made professional, instantly Sound quality is often the difference between amateur and professional content, and Filmora V15 makes audio control far more accessible. Loudness Normalization automatically adjusts audio to meet platform-specific LUFS/LKFS standards with one click, ensuring consistent volume across YouTube, podcasts, and social platforms. Audio Gain complements this by allowing batch gain adjustments across multiple clips, with flexible modes for fixed gain, relative changes, or peak normalization. Together, these tools remove guesswork from audio mixing and help creators sound polished without technical headaches. Precision tools that feel effortless Filmora V15 doesn’t rely on AI alone. It introduces professional tools designed to feel natural and visual rather than intimidating. The new Pen Tool lets editors draw motion paths directly in the frame, shaping curves, controlling speed, and designing custom transitions with precision. For data-driven storytelling, Animated Charts transform raw numbers into clear, animated visuals with one-click imports and customizable styles—ideal for business videos, explainers, and presentations. Wondershare A professional workflow without the complexity Underneath the surface, Filmora V15 supports advanced workflows with features like dual timelines, source and timeline previews, subprojects, and multi-track audio exports. Yet everything remains anchored in Filmora’s signature ease of use, supported by millions of built-in creative assets and AI-powered automation. Editing that moves with you Wondershare Filmora V15 represents a clear evolution in video editing: AI that accelerates creativity, professional tools that don’t overwhelm, and workflows designed around how creators actually work. The Premium version of Wondershare Filmora Video Editor costs just $6.67 a month or $79.99 a year, including 2,000 AI Credits, 100GB of Filmora Cloud Storage and much more. It’s not about replacing creativity with automation—it’s about removing friction, so ideas can move faster, stories can flow naturally, and professional results feel within reach for everyone. Watch how you can create engaging content with minimal effort on the Wondershare Filmora Video Editor YouTube channel. Wondershare

Read more »

Apple agrees to third-party App Store alternatives in Brazil
Apple is going to allow iPhone users in Brazil to pay for apps and services outside of the App Store itself, all to settle an investigation into supposed anti-competitive practices in the country.The App Store is still under threat in Brazil. Apple has had to deal with regulatory pressure to open up the iPhone to third-party app storefronts in a number of countries. Following an agreement with a regulator, it's doing the same in Brazil.On Tuesday, the Administrative Council for Economic Defense (CADE) in Brazil approved a cessation commitment term proposed by Apple, to put a stop to an investigation into anti-competitive practices. The deal, reported by Tecnoblog will last for three years, with Apple implementing changes under the agreement within 105 days. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

The Lowfree Flow84 is the mechanical keyboard Apple would make today [U: New model]
The Lowfree Flow84 is the latest episode in my on-again, off-again love affair with mechanical keyboards. I describe it as the mechanical keyboard Apple would make for a mix of good and bad reasons, but we’ll get to that! Update: There is a new version with touch sliders for volume and brightness – see the Pricing & conclusions section at the end. It’s one of a relatively new breed of low-profile mechanical keyboards, something that would have seemed a contradiction in terms just a few years earlier … more…

Read more »

Apple 2025 Review of the Year
Benjamin and Chance reflect on another year in Apple news. We cover all the big headlines from across the months, including the fallout of the Siri delays, the early iOS 26 redesign leaks, and the launch of all the new 2025 hardware like the iPhone 17 series. And in Happy Hour Plus, the pair check in on who won their annual prediction picks. Subscribe at 9to5mac.com/join. Sponsored by Copilot Money: The personal finance app to make your money yours. For a limited time, get 26% off your first year at try.copilot.money/9to5mac. Sponsored by Gusto: The online payroll and benefits software built for small businesses. Get three months free when you run your first payroll at gusto.com/happyhour. Sponsored by Shopify: In 2026, stop waiting and start selling with Shopify. Sign up for a $1 per month trial at shopify.com/happyhour. more…

Read more »

Apple Wallet’s iOS 26 boarding passes now offered by Southwest Airlines, joining United and Delta
Apple's iOS 26 update has brought significant enhancements to boarding passes in the Wallet app, introducing features like shareable… The post appeared first on MacDailyNews.

Read more »

Apple Vision Pro (M5) review three-months later: A flawed wonder
The M5 refresh makes the new Apple Vision Pro faster and improves some features, but it doesn't change the fact that the headset still doesn't have a long-term place in most people's homes.Apple Vision Pro three-month review: This might be the most reflective headset ever soldThe M5 Apple Vision Pro was released in October 2025 and is the first refresh of Apple's spatial computer. The new chip is the only real upgrade, although Apple does ship it with the new Dual Knit band.In truth, the new band might be the biggest upgrade Apple has made here. And, thankfully, you don't need to buy a new headset to get one — Apple will sell you one separately for $100. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Remembering Apple pioneers: In memoriam 2025
Our Apple in memoriam 2025 feature honors figures associated with the company -- Bill Atkinson, Michael Scott, Steve Hayden and Jane Goodall. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

What would you think of these iPhone Fold aspect ratios? [Poll]
We’ve so far been assuming that the iPhone Fold would have a familiar aspect ratio on the exterior display, opening out into an interior screen which is taller than it is wide. However, a recent report suggested that the interior screen will be wider than it is tall, and some physical mockups give us an indication of how this might look … more…

Read more »

Malware bypassed macOS Gatekeeper by abusing Apple's notarization proccess
A new variant of the MacSync Stealer uses a code-signed Swift application to get around Apple's macOS Gatekeeper protections.The malware gets around Gatekeeper by being a notarized appGatekeeper on macOS does a pretty good job at fending off malware and other harmful software that could steal a user's data. While attackers come up with various techniques to trick the user into bypassing Gatekeeper, a new delivery method simplifies the attack process considerably.Researchers at Jamf Threat Labs posted about a new variant of MacSync Stealer on Tuesday that uses a different method to attack macOS. A method that manages to take advantage of the notarization system Apple employs. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Free two-hour delivery from Apple Stores now available for a limited time
From December 22 through to noon on December 24, 2025, Apple is offering free two-hour delivery from its retail stores for qualifying devices, and in certain areas.Apple is offering free delivery for the holidays, on certain items and in certain locations — image credit: AppleAs it has in previous years, Apple is dropping its usual $9 fee for two-hour delivery. It's specifically for the remaining time until noon on Christmas Eve, and keeps the same conditions as this fast delivery usually have.That means that the items bought must be in stock. The Apple Store must be in a city, although Apple only says that stores in "most metros" are taking part. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Pirate group says it has scraped almost the whole of Spotify
Pirate site Anna’s Archive, which describes itself as “the largest truly open library in human history,” says that it has scraped 99.6% of all the music people listen to from Spotify. It says the total data downloaded is a little under 300TB in size and that it will be making this available for torrenting … more…

Read more »

Why my favorite iPhone apps of 2025 belong on your Home Screen too
Macworld 2025 has been a pretty momentous year in terms of the apps I used on my iPhone. Whether it was a new discovery that changed the way I work, or an old favorite that kept delivering, iOS apps helped improve my life in multiple ways. Hopefully, you experienced something similar. Here, I highlight those apps and explain why I’ve chosen them as my top picks over the last 12 months. Perhaps they could help you in similar ways throughout 2026. AI: ChatGPT Artificial intelligence (AI) has changed the world in unbelievable ways, with ChatGPT undoubtedly leading the charge. While Apple Intelligence struggled and floundered, OpenAI’s model went from strength to strength, and its ChatGPT iOS app showed how an AI app should work on iOS. I’ve found that ChatGPT is most valuable when it’s used in a targeted way or when you’re looking for a specific solution. Asking it vague, general questions is fine, but not where its real strength lies. No, ChatGPT was incredibly valuable to me in 2025 when I used it to find information that traditional methods just couldn’t locate. Using ChatGPT to resolve an Excel formula.Foundry For example, ChatGPT came in clutch time and time again with Microsoft Excel, of all things. I use Excel most days, and I often want to achieve a specific outcome using a formula, without knowing how to structure the actual formula that I need. But if I try to find the answer using Google, I get nowhere; the search engine is absolutely useless at understanding what I want. Ask ChatGPT, though, and it instantly has the correct answer drawn up in seconds. Better yet, I can ask it to adjust the formula, and it’ll tweak its solution, ready to go. It’s a glaring example of the deficiencies of modern search engines compared to AI. ChatGPT has helped me in countless other ways, big and small, where I’ve been left frustrated after searching forums or trying Google. If these methods get you nowhere, give ChatGPT a try. Just be sure to double-check the solution somewhere else, as OpenAI’s chatbot is still capable of the odd hallucination. Reading: Matter The most frequent way I use my iPhone is to read online content. Sometimes that means ceaselessly scrolling Reddit, while other times it means saving articles for later. Pocket used to be my read-it-later app of choice, but when Mozilla shut it down, I went searching for alternatives. The app I settled on was Matter. Like Pocket, Matter makes it incredibly easy to save articles from around the web thanks to its share sheet integration, web browser extension, and more. It’s even set up to import your saves from other like-minded apps in just a few taps, which made switching from Pocket utterly effortless. Matter for iPhoneFoundry It’s stuffed with handy extras, like a tool that will transcribe your podcasts so you can read along (with a built-in AirPods gesture for highlighting paragraphs), or a discovery feed of fresh articles you might like. It looks great and is plenty customizable, and it can speak your articles aloud in a convincingly natural AI voice if you don’t fancy reading. It’s ramped up my learning this year and has filled a Pocket-shaped hole in my digital life. Meditation: Down Dog Self-improvement and self-understanding are trending ideas these days, but you don’t have to go looking for some modish fad to improve your life–try out the ancient practice of meditation instead. It can leave you feeling calmer and with a better knowledge of yourself and your foibles, and there’s no better app I’ve found to help you do that than Down Dog’s Meditation. Down Dog for iPhoneFoundry While many alternatives offer you a pre-made meditation curriculum that you must follow to the letter, Down Dog takes the opposite approach by making almost everything customizable. You can change the meditation topic, the background music, the session’s theme, whether it’s guided or not–if it is, you can change the voice of the person leading the practice. Better yet, all the voices are recorded by real people without a trace of AI. Its wide range of adjustments means I can fine-tune each meditation session to my liking. However, I’m feeling on any given day, I know I’ll get something valuable out of the app because it adapts to me, not the other way around. Calendar: Fantastical Apple’s Calendar was my planning app of choice for years, although it was largely an unthinking choice. It was just there, ready to go. When I did start thinking about it, I realized I could do so much better. Enter Fantastical. Long a favorite of Apple fans, this app adds a wealth of features that Apple’s default app lacks, from a variety of views and customization options to natural language input and quick weather indicators for each day. You can set your day-to-day availability and let people make appointments with you, too. Fantasical for iPhoneFoundry I’m someone who regularly switches between the Apple ecosystem and my Windows PC, so Apple’s Calendar was never the ideal app for me because it doesn’t exist on Microsoft’s operating system. Fantastical, though, has a Windows app, letting me finally make the switch on all my devices. It’s never been easier for me to organize my day and stay on top of my schedule. Podcasts: Overcast I listen to a lot of podcasts, so it’s important that the app I use is up to scratch. The choice I’ve settled on is Overcast, and it ticks all the boxes for the kind of platform I’m after. Overcast for iPhoneFoundry Spend a little time with it, and it becomes obvious that this is an app made by someone who cares about podcasts. There’s a huge array of clever little touches and adjustable features that can make the app your own: you can change how far the back and forward buttons skip, for example, or enable the Smart Speed feature to cut down on silent moments without impacting sound quality. It’s all wrapped up in a clean, intuitive interface that’s easy on the eye (in both light and dark modes) and features many changeable options and elements. That makes it enjoyable to use and simple for anyone to pick up. Travel: Hopper There’s nothing quite like booking a vacation abroad to give you something to look forward to, but actually making it happen can be an exercise in frustration. That’s why I started using Hopper, and it’s helped make the process a whole lot smoother. Hopper can do a lot of things: offer up deals on hotels, for example, or give you a place to find a rental car. That’s all well and good, but it truly comes into its own when it comes to booking a flight. This is the app’s feature that I used the most. Hopper for iPhoneFoundry Search for a flight and Hopper presents a color-coded calendar showing the best (that is, cheapest) days on which to book a flight. This is often the difference between getting a bargain and spending a few hundred more dollars than you need to. Hopper combines this with price predictions, so if now’s not the right time to pull the trigger, it’ll let you know. If you’re not quite ready to book, you can also pay a little to freeze the price and protect against it rising–I never needed that feature, but it’s nice to know it’s there. Now, I never check flight prices without going through Hopper first. It’s a handy weapon in your arsenal if you love traveling and hate overpaying. Sports organization: Spond I’m a soccer fanatic: I love watching it, but most of all I love playing it. But trying to get everyone organized before practice or a game sucks when you’re trying to do it over Messages or email. Instead, I ditched those methods and switched to the Spond app this year, and it’s made a world of difference. This app is all about helping people manage sports groups and ensuring everyone shows up week after week. Club members can say whether they’ll be playing each match and pay their subs through their phone, while organizers can set the location and remind people to respond if they haven’t already. There’s handy contextual information, too, like directions to the pitch and a weather forecast for kick-off time. Spond for iPhoneFoundry Now, I don’t worry about haphazard communication and chaotic game days. Instead, I just handle everything in one place on my iPhone. I can’t say it’s made me play any better, but I’m working on that.

Read more »

Dismantling Defenses: Trump 2.0 Cyber Year in Review
The Trump administration has pursued a staggering range of policy pivots this past year that threaten to weaken the nation’s ability and willingness to address a broad spectrum of technology challenges, from cybersecurity and privacy to countering disinformation, fraud and corruption. These shifts, along with the president’s efforts to restrict free speech and freedom of the press, have come at such a rapid clip that many readers probably aren’t even aware of them all.

Read more »

Most Parked Domains Now Serving Malicious Content
Direct navigation -- the act of visiting a website by manually typing a domain name in a web browser -- has never been riskier: A new study finds the vast majority of "parked" domains -- mostly expired or dormant domain names, or common misspellings of popular websites -- are now configured to redirect visitors to sites that foist scams and malware.

Read more »

Computer Virus Protection Tips and How to Remove a Virus from Your Computer
Computer viruses continue to be a widespread and costly problem, affecting everyone from casual computer users to major organizations. Some of the most damaging incidents in history started with small actions that could have happened to anyone. The Melissa virus spread in 1999 because thousands of people opened what looked like a normal email attachment. […] The post appeared first on The Mac Security Blog.

Read more »

Microsoft Patch Tuesday, December 2025 Edition
Microsoft today pushed updates to fix at least 56 security flaws in its Windows operating systems and supported software. This final Patch Tuesday of 2025 tackles one zero-day bug that is already being exploited, as well as two publicly disclosed vulnerabilities.

Read more »

Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill
A sprawling academic cheating network turbocharged by Google Ads that has generated nearly $25 million in revenue has curious connections to a Kremlin-connected oligarch whose Russian university builds drones for Russia's war against Ukraine.

Read more »

SMS Phishers Pivot to Points, Taxes, Fake Retailers
China-based phishing groups blamed for non-stop scam SMS messages about a supposed wayward package or unpaid toll fee are promoting a new offering, just in time for the holiday shopping season: Phishing kits for mass-creating fake but convincing e-commerce websites that convert customer payment card data into mobile wallets from Apple and Google. Experts say these same phishing groups also are now using SMS lures that promise unclaimed tax refunds and mobile rewards points.

Read more »

Vulnerability Summary for the Week of November 24, 2025
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info 0x4m4--HexStrike AI By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server's normal privilege; typically, this is root. There is no attempt to sanitize these arguments in the default configuration of this MCP server at the affected version (as of commit 2f3a5512 in September of 2025). 2025-11-30 9.1 CVE-2025-35028 https://takeonme.org/gcves/GCVE-1337-2025-00000000000000000000000000000000000000000000000000111111111111111111111111000000000000000000000000000000000000000000000000000000011  AMD--AMD Prof Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability. 2025-11-24 7.1 CVE-2025-48510 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9019.html  AMD--Xilinx Run Time (XRT) Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability. 2025-11-24 8 CVE-2025-52538 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability 2025-11-24 7.3 CVE-2025-0003 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in crash or denial of service. 2025-11-24 7.3 CVE-2025-0005 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface (AXI), potentially resulting in loss of confidentiality, integrity, and/or availability. 2025-11-24 7.3 CVE-2025-52539 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  ASR--Lapwing_Linux Out-of-bounds Read vulnerability in ASR1903ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26. 2025-11-26 7.4 CVE-2025-13735 https://www.asrmicro.com/en/goods/psirt?cid=41  blubrry--PowerPress Podcasting plugin by Blubrry The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the 'powerpress_edit_post' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2025-11-27 8.8 CVE-2025-13536 https://www.wordfence.com/threat-intel/vulnerabilities/id/d420ee49-e7b3-43d8-a263-8a93abd1133c?source=cvehttps://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3068https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3012https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L2368https://plugins.trac.wordpress.org/changeset/3402635/  Chanjet--CRM A vulnerability has been found in Chanjet CRM up to 20251106. The impacted element is an unknown function of the file /tools/upgradeattribute.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-11-30 7.3 CVE-2025-13788 VDB-333792 | Chanjet CRM upgradeattribute.php sql injectionVDB-333792 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #690084 | Chanjet CRM V1.0 SQL Injectionhttps://github.com/Bellingham-max/CVE/issues/1  code-projects--COVID Tracking System A vulnerability was detected in code-projects COVID Tracking System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument code results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. 2025-11-24 7.3 CVE-2025-13585 VDB-333349 | code-projects COVID Tracking System login.php sql injectionVDB-333349 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699840 | code-projects COVID Tracking System V1.0 SQL Injectionhttps://github.com/beamyou/CVE/issues/4https://code-projects.org/  code-projects--Jonnys Liquor A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. 2025-11-24 7.3 CVE-2025-13582 VDB-333346 | code-projects Jonnys Liquor GET Parameter detail.php sql injectionVDB-333346 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699554 | code-projects Jonnys Liquor 1.0 /detail.php SQL injectionhttps://github.com/rassec2/dbcve/issues/5https://code-projects.org/  code-projects--Library System A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2025-11-24 7.3 CVE-2025-13578 VDB-333342 | code-projects Library System Login index.php sql injectionVDB-333342 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699536 | code-projects Library System 1.0 index.php SQL Injectionhttps://github.com/rassec2/dbcve/issues/4https://code-projects.org/  code-projects--Question Paper Generator A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. 2025-11-24 7.3 CVE-2025-13583 VDB-333347 | code-projects Question Paper Generator POST Parameter signupscript.php sql injectionVDB-333347 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699591 | code-projects question paper 1.0 /signupscript.php SQL Injectionhttps://github.com/rassec2/dbcve/issues/6https://code-projects.org/  cursor--cursor Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arbitrary code execution. 2025-11-26 9.8 CVE-2025-62354 https://hiddenlayer.com/sai_security_advisor/2025-11-cursor/  Dassault Systmes--DELMIA Service Process Engineer A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. 2025-11-24 8.7 CVE-2025-10555 https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10555  Dassault Systmes--ENOVIA Product Manager A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. 2025-11-24 8.7 CVE-2025-10554 https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10554  DirectoryThemes--Tiger The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the 'paypal-submit.php' file not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. 2025-11-27 9.8 CVE-2025-13675 https://www.wordfence.com/threat-intel/vulnerabilities/id/4750b57e-7d8d-49d7-bbbf-46483eb97bd9?source=cvehttps://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995  DirectoryThemes--Tiger The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the plugin allowing a user to update the user role through the $user- >set_role() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator. 2025-11-27 8.8 CVE-2025-13680 https://www.wordfence.com/threat-intel/vulnerabilities/id/645f60ad-c8e5-47ec-94f1-960de4ef7838?source=cvehttps://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995  Eaton--Eaton Galileo Software Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead into an attacker with local access to execute unauthorized code or commands. This security issue has been fixed in the latest version of Galileo which is available on the Eaton download center. 2025-11-27 7.3 CVE-2025-59890 https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1024.pdf  Elated Themes--FindAll Listing The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.5. This is due to the 'findall_listing_user_registration_additional_params' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. Note: The vulnerability can only be exploited if the FindAll Membership plugin is also activated, because user registration is in that plugin. 2025-11-27 9.8 CVE-2025-13538 https://www.wordfence.com/threat-intel/vulnerabilities/id/14981949-271c-4f98-a6a1-b00619f1436d?source=cvehttps://themeforest.net/item/findall-business-directory-theme/24415962  Elated Themes--FindAll Membership The FindAll Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.4. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'findall_membership_check_facebook_user' and the 'findall_membership_check_google_user' functions. This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site which can easily be created by default through the temp user functionality, and access to the administrative user's email. 2025-11-27 9.8 CVE-2025-13539 https://www.wordfence.com/threat-intel/vulnerabilities/id/a856a96a-68d2-462d-b523-840668980807?source=cvehttps://themeforest.net/item/findall-business-directory-theme/24415962  factionsecurity--faction FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction's extension framework permits untrusted extension code to execute arbitrary system commands on the server when a lifecycle hook is invoked, resulting in remote code execution (RCE) on the host running Faction. Due to a missing authentication check on the /portal/AppStoreDashboard endpoint, an attacker can access the extension management UI and upload a malicious extension without any authentication, making this vulnerability exploitable by unauthenticated users. This issue has been patched in version 1.7.1. 2025-11-26 9.7 CVE-2025-66022 https://github.com/factionsecurity/faction/security/advisories/GHSA-xr72-2g43-586whttps://github.com/factionsecurity/faction/commit/c6389f1c76175b7c1c68d1a87b389311b16c62c3  fugue-project--fugue Fugue is a unified interface for distributed computing that lets users execute Python, Pandas, and SQL code on Spark, Dask, and Ray with minimal rewrites. In version 0.9.2 and prior, there is a remote code execution vulnerability by pickle deserialization via FlaskRPCServer. The Fugue framework implements an RPC server system for distributed computing operations. In the core functionality of the RPC server implementation, I found that the _decode() function in fugue/rpc/flask.py directly uses cloudpickle.loads() to deserialize data without any sanitization. This creates a remote code execution vulnerability when malicious pickle data is processed by the RPC server. The vulnerability exists in the RPC communication mechanism where the client can send arbitrary serialized Python objects that will be deserialized on the server side, allowing attackers to execute arbitrary code on the victim's machine. This issue has been patched via commit 6f25326. 2025-11-25 8.8 CVE-2025-62703 https://github.com/fugue-project/fugue/security/advisories/GHSA-xv5p-fjw5-vrj6https://github.com/fugue-project/fugue/commit/6f25326779fd1f528198098d6287c5a863176fc0  geoserver--geoserver GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap. However, this input is not sufficiently sanitized or restricted, allowing an attacker to define external entities within the XML request. This issue has been patched in GeoServer 2.25.6, GeoServer 2.26.3, and GeoServer 2.27.0. 2025-11-25 8.2 CVE-2025-58360 https://github.com/geoserver/geoserver/security/advisories/GHSA-fjf5-xgmq-5525https://osgeo-org.atlassian.net/browse/GEOS-11682  GitLab--GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an unauthenticated user to cause a Denial of Service condition by sending specifically crafted requests containing malicious JSON payloads. 2025-11-26 7.5 CVE-2025-12571 GitLab Issue #579168HackerOne Bug Bounty Report #3362239  GL-Inet--GL-AXT1800 A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. 2025-11-24 8.3 CVE-2025-44018 https://talosintelligence.com/vulnerability_reports/TALOS-2025-2230  HCL Software--iNotes HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote, unauthenticated attacker can specially craft a URL to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials. 2025-11-25 8.1 CVE-2025-0248 https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127032  Huawei--HarmonyOS Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality. 2025-11-28 9.3 CVE-2025-64314 https://consumer.huawei.com/cn/support/bulletinlaptops/2025/11/  Huawei--HarmonyOS Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 2025-11-28 8.4 CVE-2025-58302 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability. 2025-11-28 8.4 CVE-2025-58303 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 2025-11-28 8 CVE-2025-58310 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 2025-11-28 7.3 CVE-2025-58308 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability. 2025-11-28 7.3 CVE-2025-58316 https://consumer.huawei.com/en/support/bulletin/2025/11/  Janitza--UMG 96-PA An unauthenticated remote attacker can send a specially crafted Modbus read command to the device which leads to a denial of service. 2025-11-24 7.5 CVE-2025-41729 https://certvde.com/de/advisories/VDE-2025-094  kiteworks--security-advisories Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0. 2025-11-29 7.1 CVE-2025-53896 https://github.com/kiteworks/security-advisories/security/advisories/GHSA-23h2-3jj8-58hm  kiteworks--security-advisories Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances to intercept upstream communication which could lead to an escalation of privileges. This issue has been patched in version 9.1.0. 2025-11-29 7.2 CVE-2025-53899 https://github.com/kiteworks/security-advisories/security/advisories/GHSA-5gx5-vcpp-8cr5  Logpoint--SIEM An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability. 2025-11-27 8.5 CVE-2025-66359 https://servicedesk.logpoint.com/hc/en-us/articles/29158899698333-XSS-Vulnerability-due-to-insufficient-input-validation  Mattermost--Mattermost Mattermost versions 10.12.x

Read more »

Cybersecurity Best Practices: Essential Tips for Modern Mac Security
Cybersecurity affects every person who uses a device, connects to the internet, pays bills online, or stores important files digitally. The rise of cloud services, mobile apps, and complex online accounts has created new opportunities for criminals to target individuals. Mac users benefit from strong built-in protections, but threats now focus less on operating systems […] The post appeared first on The Mac Security Blog.

Read more »

What Is a Network Security Key? How to Find Your Wi-Fi Password on Any Device
If you have ever tried connecting a new phone, laptop, tablet, or smart home device to your Wi-Fi network, you have likely been asked for something called a network security key. The name sounds technical, but it simply refers to the password that protects your wireless network. Understanding what a network security key is, how […] The post appeared first on The Mac Security Blog.

Read more »

Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’
A prolific cybercriminal group that calls itself "Scattered LAPSUS$ Hunters" made headlines regularly this year by stealing data from and publicly mass extorting dozens of major corporations. But the tables seem to have turned somewhat for "Rey," the moniker chosen by the technical operator and public face of the hacker group: Earlier this week, Rey confirmed his real life identity and agreed to an interview after KrebsOnSecurity tracked him down and contacted his father.

Read more »

Is Your Android TV Streaming Box Part of a Botnet?
On the surface, the Superbox media streaming devices for sale at retailers like BestBuy and Walmart may seem like a steal: They offer unlimited access to more than 2,200 pay-per-view and streaming services like Netflix, ESPN and Hulu, all for a one-time fee of around $400. But security experts warn these TV boxes require intrusive software that forces the user's network to relay Internet traffic for others, traffic that is often tied to cybercrime activity such as advertising fraud and account takeovers.

Read more »

Best Apple Holiday Sale: Take $250 off all 13-inch and 15-inch M4 MacBook Airs
Amazon has all 13" M4 MacBook Airs and 15" M4 MacBook Airs on Holiday sale for $250 off Apple's MSRP, starting at only $749. Be sure to select Amazon as the seller, rather than a third-party: - 13" M4 MacBook Air (16GB/256GB): $749, $250 off - 13" M4 MacBook Air (16GB/512GB): $949, $250 off - 13" M4 MacBook Air (24GB/512GB): $1149, $250 off - 15" M4 MacBook Air (16GB/256GB): $949, $250 off - 15" M4 MacBook Air (16GB/512GB): $1149, $250 off - 15" M4 MacBook Air (24GB/512GB/): $1349, $250 off Their prices are the lowest available for new M4 MacBook Airs anywhere and the best Holiday deal on Apple products available right now. For the latest sales & prices, see our 13" MacBook Air Price Tracker and 15" MacBook Air Price Tracker, both updated daily.

Read more »

Holiday Sale: Get an 11-inch A16 iPad today for $75 off MSRP, only $274
Walmart is offering a $75 Holiday discount on Apple's 11" A16 WiFi iPads, now priced at only $274. Sale price for online orders only, in-store price may vary. Order online and choose free shipping or free local store pickup (if available): - 11" 128GB WiFi A16 iPad: $274, $75 off MSRP - 11" 256GB WiFi A16 iPad: $374, $75 off MSRP - 11" 512GB WiFi A16 iPad: $574, $75 off MSRP These are the lowest Holiday sale prices currently available for Apple iPads. Note that not all colors are in stock at the time of this post (see their site for details). For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.

Read more »

Walmart has AirPods on Holiday sale right now starting at only $74
Walmart has Apple AirPods on Holiday sale on their online store for up to $55 off MSRP. Order online and choose free shipping or free local store pickup (if available): - AirPods 4: $74, $55 off - AirPods 4 with ANC: $139.99, $40 off - AirPods Pro 3: $199, $50 off These are the lowest Holiday sale prices available right now for Apple AirPods. Keep an eye on our AirPods Price Tracker for the latest prices and deals, updated daily.

Read more »

Walmart has clearance 13-inch M1 MacBook Airs on sale for only $599
Walmart has clearance, but new, Apple 13" M1 MacBook Airs (8GB RAM, 256GB SSD) available online for $599, $400 off original MSRP, in Space Gray, Silver, and Gold colors. These are new MacBooks for sale by Walmart directly, not a third-party seller. These sale prices are available for online orders only. Order online, and choose free shipping or free local store pickup (if available). Delivery is available as soon as December 23rd. Note that stock status may vary, check Walmart's site for availability. For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Mac Studio with M4 Max CPU on Holiday sale for $1799, $200 off Apple’s MSRP
B&H Photo has the standard-configuration Mac Studio model with Apple's M4 Max CPU in stock today and on Holiday sale for $200 off MSRP, now $1799 (10-Core CPU and 32GB RAM/512GB SSD). B&H also offers free 1-2 day shipping to most US addresses. Their price is the lowest available for this model. For the latest prices and sales, see our Mac Studio Price Tracker, updated daily.

Read more »

Apple’s new 14-inch M5 MacBook Pros remain on Holiday sale for $250 off MSRP, prices start at $1349
Amazon is offering $250 discounts on new 14" M5 MacBook Pros as part of their Holiday sales, each including free shipping: - 14" M5 MacBook Pro (16GB/512GB/Black): $1349.99, MSRP $1599 - 14" M5 MacBook Pro (16GB/512GB/Silver): $1349, MSRP $1599 - 14" M5 MacBook Pro (16GB/1TB/Black): $1549, MSRP $1799 - 14" M5 MacBook Pro (16GB/1TB/Silver): $1729, MSRP $1799 - 14" M5 MacBook Pro (24GB/1TB/Black): $1849, MSRP $1999 - 14" M5 MacBook Pro (24GB/1TB/Silver): $1799, MSRP $1999 These are the lowest prices available for new M5 MacBook Pros right now. For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Holiday Deal: Apple AirPods 4 for only $74, normally $129
Walmart has Apple AirPods 4 now on Holiday sale on their online store for $55 off MSRP, only $74. Order online and choose free shipping or free local store pickup (if available). This is the lowest price currently available for new AirPods among Apple's retailers: - AirPods 4: $74, $55 off Keep an eye on our AirPods Price Tracker for the latest prices and deals, updated daily.

Read more »

Apple’s 15-inch M4 MacBook Airs are back on Holiday sale again for $250 off MSRP, prices start at $949
Amazon has all 15" M4 MacBook Airs on Holiday sale again for $250 off Apple's MSRP, starting at only $949. Delivery is still available in time for Christmas. Be sure to select Amazon as the seller, rather than a third-party: - 15" M4 MacBook Air (16GB/256GB): $949, $250 off - 15" M4 MacBook Air (16GB/512GB): $1149, $250 off - 15" M4 MacBook Air (24GB/512GB/): $1349, $250 off These are the best Holiday sale prices currently available for 15" M4 MacBook Airs. For the latest sales & prices, see our 15" MacBook Air Price Tracker, updated daily.

Read more »

Holiday Sale: $70 off Apple’s 11-inch A16 iPad, now only $279
Walmart is offering a $70 Holiday discount on Apple's 11" A16 WiFi 128GB iPad, now priced at only $279. Sale price for online orders only, in-store price may vary. Order online and choose free shipping or free local store pickup (if available): - 11" 128GB WiFi A16 iPad: $279, $70 off MSRP For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.

Read more »

Take $440 off Apple’s 16-inch MacBook Pros with the latest Holiday sale prices
Amazon has 16-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) on sale for up to $440 off Apple's MSRP as part of their Holiday sales. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller: - 16" M4 Pro MacBook Pro (24GB/512GB/Black): $2199, $300 off MSRP - 16" M4 Pro MacBook Pro (24GB/512GB/Silver): $2190.08, $309 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB/Black): $2529, $370 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB/Silver): $2549, $350 off MSRP - 16" M4 Max MacBook Pro (36GB/1TB/Black): $3063.84, $436 off MSRP - 16" M4 Max MacBook Pro (36GB/1TB/Silver): $3059.76, $440 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB/Black): $3599, $400 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB/Silver): $3599, $400 off MSRP These are the lowest Holiday sale prices on new 16" Apple MacBook Pros right now. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Sunday Holiday Sale: Take $200-$250 off M4 MacBook Airs, prices start at only $749
Amazon has all 13" M4 MacBook Airs and 15" M4 MacBook Airs on Holiday sale for $200-$250 off Apple's MSRP, starting at only $749. Be sure to select Amazon as the seller, rather than a third-party: - 13" M4 MacBook Air (16GB/256GB): $749, $250 off - 13" M4 MacBook Air (16GB/512GB): $949, $250 off - 13" M4 MacBook Air (24GB/512GB): $1149, $250 off - 15" M4 MacBook Air (16GB/256GB): $999, $200 off - 15" M4 MacBook Air (16GB/512GB): $1199, $200 off - 15" M4 MacBook Air (24GB/512GB/): $1399, $200 off Their prices are the lowest available for new M4 MacBook Airs anywhere and represent one of the best Holiday deals on Apple products available right now. For the latest sales & prices, see our 13" MacBook Air Price Tracker and 15" MacBook Air Price Tracker, both updated daily.

Read more »

Holiday Sale: M4 Mac minis available starting at only $479
Amazon has M4 and M4 Pro Mac minis on Holiday sale starting at only $479 and ranging up to $120 off MSRP. Shipping is free: - Mac mini M4 (16GB/256GB): $479, $120 off MSRP - Mac mini M4 (16GB/512GB): $699, $100 off MSRP - Mac mini M4 (24GB/512GB): $923, $26 off MSRP - Mac mini M4 Pro (24GB/512GB): $1287, $112 off MSRP These are the lowest Holiday sale prices currently available on Mac minis. For the latest prices and sales, keep an eye on our Mac mini Price Tracker, updated daily.

Read more »