2025 marked a record-breaking year for Apple services with remarkable growth
2025 was a record-breaking year for Apple services, marked by remarkable growth, global expansion, and continuous innovation… The post appeared first on MacDailyNews.

Read more »

Pluribus now has official merch for sale, here’s everything available
Pluribus season 2 may be a ways off, but you can now show your love for Apple TV’s popular series by getting official merchandise, with t-shirts, a hat, and hoodie all available. Here’s the full list. more…

Read more »

Apple TV scores 3 Golden Globe wins — but 3 hit shows strike out
When Apple TV wins 3 Golden Globes off of 14 nominations, it almost seems like a failure. But winners "The Studio" and "Pluribus" deserve it. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Apple's record-breaking year for Services is a preview for earnings
A few weeks before the holiday quarter earnings report, Apple senior vice president of services, Eddy Cue, has once more written a celebration of successes with Apple Music, Apple TV, and the App Store.Apple's services drove a giant 2025 for AppleAs Cue first did in 2023, Eddy Cue has summarized what he says is the "remarkable growth... and continuous innovation" of Apple Services in "record-breaking" 2025. Saying that the collection from the App Store through Apple Pay had been "shattering records.""We marked milestone anniversaries across services, including Apple Podcasts, Music, News, and more — each made possible by the artists, creators, journalists, and storytellers who bring these platforms to life," he said in a statement. Cue backed up his claims with some specifics: Continue Reading on AppleInsider | Discuss on our Forums

Read more »

PSA: Instagram password reset emails should be ignored
If you’ve received an Instagram password reset email, claiming that you requested it, you should ignore it. Malwarebytes reports that cybercriminals stole Instagram account details for 17.5 million users, but the social network claims that there was no security breach … more…

Read more »

Still holding onto a Monterey Mac? Here’s reason 151 to upgrade ASAP
Macworld If you’re running a Mac that boots into Monterey, it’s been time to upgrade for a while. You’ve missed out on Stage Manager, iPhone Mirroring, Apple Intelligence, and the whole Apple silicon transition, not to mention new hardware features such as Thunderbolt 4, ProMotion displays, a year and a half of security updates, and the whole Apple silicon transition. But if you’ve been holding out, here’s one more reason to finally upgrade: The next Chrome update, version 151, will no longer support macOS Monterey. According to the Chrome Platform Status page, Chrome will continue to work on Macs running Monterey, but will show a warning infobar, and won’t receive further feature or security updates.  Google says users who “need to update their computer to a support version of macOS,” if they want to receive future updates. For new installations of Chrome after 151, macOS 13+ will be required. Back in July, Google dropped support for macOS 11 Big Sur with version 138, so Ventura support might not be around for all that much longer. If you’re going to update, we recommend getting an Apple Silicon Mac that supports macOS Tahoe so you will guaranteed to get years of updates and security releases. Take a look at the best Apple Deals right now to grab a bargain.

Read more »

‘Severance’ and ‘Pluribus’ snubbed as Apple TV wins Best Comedy, Best Actor, and Best Actress at the 83rd Annual Golden Globe Awards
Apple TV on Sunday was honored with three wins at the 83rd Annual Golden Globe Awards, including Best Television Series… The post appeared first on MacDailyNews.

Read more »

Eddy Cue touts ‘record-breaking year’ for Apple services, including TV, Music, more
In a new press release today, Apple is celebrating the success of its services division throughout 2025. The company says that 2025 was a “record-breaking year for Apple services,” with milestones for Apple Music, Apple TV, and more. more…

Read more »

Two countries block Grok app over AI-generated CSAM as we await Apple’s response
Two countries have blocked the Grok app after it was widely used to generate non-consensual near-nude deepfakes of women and children. A third country is currently carrying out an investigation. Three US senators have asked Apple to temporarily remove both X and Grok from the US App Store due to “sickening content generation,” and we are still awaiting the company’s response … more…

Read more »

Apple's utter silence about AI-generated child porn on X is appalling yet unsurprising
We know you're reading, Apple. For maybe the first time in the '20s, do the right thing by users instead of your shareholders and block the child porn factory that is X and Grok until they make changes.Doing nothing about X and Grok on the App Store is Apple & Google worshipping the almighty dollarOnce again, Apple has chosen shareholders over users, willingly choosing to placate Elon Musk and leave X and Grok on the App Store. And all this, even as it still churns out child porn and deepfake nudes of the unwilling.Twitter and now X has a porn problem that's mostly gone uncorrected and unmoderated in the interest of "free speech absolutism." And it's gotten worse. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

The Sphere of Influence: How Lenovo Brought Vision Back to CES
At CES, Lenovo broke from industry incrementalism by outlining a unified AI roadmap that connects personal devices, data centers, and orchestration — positioning itself as a strategic leader, not just a hardware vendor. The post appeared first on TechNewsWorld.

Read more »

Wedbush expects monumental 2026 for Apple despite invisible AI strategy
Investment firm Wedbush says that 2026 should be a key year for Apple with a new Siri, new Google Gemini deal, and new iPhone 18 range — but definitely not a new CEO.Investment firm Wedbush expects the success of the iPhone 17 Pro to continueBack in December 2025, Wedbush raised its Apple price target to $350, chiefly over iPhone demand plus the expectation that 2026 will bring a new Siri. Now in a new note to investors seen by AppleInsider, it retains that valuation, but is doubling down on how AI, iPhone demand, and also staff turnover will make for what it calls a monumental year for Apple.While the detail of its new note to investors remains the same as in December, this time the firm's researchers have broken the analysis down into four key areas: Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple fights massive government overreach as India demands iOS source code
Apple is fighting many elements of a list of 83 security requirements proposed by the Indian government. This reportedly includes a requirement to hand over iOS source code. Reuters reports the government saying that it must be able to review the source code of all smartphones in order to allow vulnerabilities to identified … more…

Read more »

A toast to Apple’s littlest Mac as it turns 21
Macworld At Macworld Expo in January 2005, miniaturization was on Steve Jobs’s mind. Since the world was in the midst of iPod fever, most of the focus was on the tiny iPod Shuffle. But 21 years ago, Apple’s CEO also unveiled one of the most notable new Macs of all time. Yes, the Mac mini is now old enough to drink. As someone who has owned many different Mac minis over the years, I’m about to extoll the virtues of Apple’s tiny, versatile Mac wonder. But even I, a noted Mac mini lover, have to admit that the most important thing about the Mac mini was its price. It cost $499, which is still the lowest list price ever for a brand-new Mac. (Yes, it’s $828 in today’s dollars, but while you can get on-sale deals, refurbished models, and even an old M1 MacBook Air at Walmart, the cheapest list price for a current Mac at the moment is still $999 for the MacBook Air.) As Jobs pointed out, this price meant that Apple was cutting all the frills out of the Mac mini’s packaging: this was strictly BYODKM, or Bring Your Own Display, Keyboard, and Mouse. That base-model mini was also seriously underpowered. It had a 1.25GHz PowerPC G4 processor and a 40GB hard drive; if you paid $599, you could step both up, and you could even configure it up to $1,250–still without that display, keyboard, or mouse. Not even Bluetooth ($50) and Wi-Fi ($79) were standard! But still, you could walk out the doors of an Apple Store with a complete computer, capable of running Mac OS, for under $500. That’s a thing that hasn’t happened since. In those iPod-crazed days, Apple sensed that there was a real opportunity to build Mac sales among people who had fallen in love with the company’s hit music player. Part of the strategy that led to the Mac mini was the idea that it was a drop-in replacement for someone’s lousy old Windows PC. Where do you think you would BYODKM from? For Mac users, it might be an older Mac–but for PC users, it was the display, keyboard, and mouse they had attached to their PC. I’m sure the Mac mini was the impetus for some Windows switchers, and that $499 price tag might have gotten more people in the door of the Apple Store, only to see them leave with a more complete computer like an iMac, but the real influx of PC users to the Mac wouldn’t happen until Apple switched to Intel the next year. (The Intel Mac mini cost $599, by the way.) Steve’s dream, accomplished In many ways, the Mac mini marked the completion of a dream Steve Jobs had had a few years earlier. Introduced in 2000, the Power Mac G4 Cube was a similar dense, all-in-one Mac module. But the Cube was very expensive, had heating issues, had cosmetic flaws, and was such a flop that Apple put it “on ice” the very next year. In many ways, the Power Mac G4 Cube was like the Mac mini.Computer History Museum Still, you can see it, right? The Mac mini is basically the same idea as the G4 Cube, but engineered more practically. It was more affordable and much more compact (one-fifth the height!), and as a result, it’s outlasted the G4 Cube’s lifespan by two decades. The G4 Cube was always meant more as an art piece and a showcase for Apple design. The Mac mini, on the other hand, has proven to be a workhorse. It’s been used in schools and in server racks. In fact, I’d argue that the most important feature of the Mac mini is that it’s flexible enough to be used anywhere you might need a Mac, for any job. Stick it on a mixing board at a theater or church? Sure. Put it in a closet and let it talk to your weather station? I’ve been doing that for two decades. (And of course, the other great feature of the Mac mini: it’s a low-priced entry point to get a Mac on someone’s desk, when they might otherwise have used a PC.) The Mac mini’s secret weapon is that it’s a niche filler. Not of one niche, but all of them. Search for an identity In the mid-2010s, the Mac mini fell on hard times. An update in 2012 gave the device a quad-core processor, which allowed it to be much more powerful than previous models had dared to go. But there wasn’t another update for two years, and when that 2014 update came, there was no quad-core option to be had. By the time the Mac mini was updated again in 2018, it had been more than four years since an update and more than six years since the fastest Mac mini to date had been released. The mid-2010s were a tough time for the Mac mini, due to Apple’s inattentiveness.Foundry Mac mini fans like me were beside ourselves. There was a real question whether Apple was committed to the Mac mini or not. But that era was pretty rough for the entire Mac line, a combination of Apple’s wavering commitment to the Mac and the tough relationship it was having with its (increasingly beleaguered) chip supplier Intel. But then came the good news: In 2020, Apple unveiled a $699 Apple Silicon Mac mini with the full power of the M1 chip. A couple of years later, in early 2023, the Mac mini got an M2 update that included an M2 Pro chip–once again establishing that the Mac mini could be used for more powerful tasks. And then, in 2024, the greatest news of all: the Mac mini got its first redesign in 14 years. The new, super-tiny Mac mini started at $599 and could be configured all the way up to a much pricier M4 Pro with lots of RAM and storage. Apple Silicon has been a shot in the arm for the entire Mac line, but perhaps no Mac was teetering closer to oblivion than the Mac mini. Fortunately, Apple seems to have realized that it’s a good thing to have a tiny powerhouse Mac around that can fit into the cracks in various workflows. And at this point, it literally fits into tiny cracks, because it’s just that small. Finally, the Apple Silicon era has also given the Mac mini perhaps its strongest validation: it birthed a new product. What is the Mac Studio but a bigger, more powerful take on the original Mac mini concept? Today, the fastest Mac you can buy is a Mac Studio, meaning that the Mac mini’s influence can be felt from the bottom of its price list to the very top of the performance charts. Not bad for a $499 Mac designed to impress PC users who were expected to bring their own display, keyboard, and mouse along. Apple Mac mini (M4, 2024) Price When Reviewed: $599 | $799 | $999 Best Prices Today: $499.99 at Amazon$599 at Apple$729 at B&H Apple Mac mini (M4 Pro, 2024) Price When Reviewed: $1,399 Best Prices Today: $1,269.99 at Amazon$1289 at B&H$1296 at Walmart Read our full Apple Mac mini (M4 Pro, 2024) review

Read more »

'The Studio' and 'Pluribus' win at the Golden Globes awards
Apple TV hits "The Studio" and "Pluribus" have together won three awards at the 83rd Golden Globes ceremony.The Studio promotional art — image credit: AppleIn December 2025, it was announced that Apple TV had 14 nominations for the Golden Globes, across four series plus "F1: The Movie." Now in a ceremony at the Beverly Hilton in California, Apple TV took home three awards:Best Television Series - Musical or Comedy: The Studio Continue Reading on AppleInsider | Discuss on our Forums

Read more »

iPhone market share now bigger than Samsung, not just due to iPhone 17
After two years of Apple and Samsung being neck and neck in the smartphone market share stakes, iPhone market share beat out the Korean company by the end of last year, according to a new market intelligence report. Apple also enjoyed by far the largest year-on-year growth in smartphone shipments, and that wasn’t just due to the success of the iPhone 17 lineup … more…

Read more »

Apple TV comedy that mocked Golden Globes wins Golden Globe for best comedy
The story of the Apple TV comedy The Studio has come full circle, with the actual Golden Globes ceremony last night honoring the show with the Best Television Series – Musical or Comedy award, and star Seth Rogen for Best Performance by a Male Actor in a Comedy Series. It follows major wins at the Emmys and other awards shows since the show premiered in spring 2025. On a more serious note, Apple TV also picked up a Golden Globes win for Pluribus, with star Rhea Seehorn winning the award for best actress in a drama. This much-deserved recognition follows many years of her performances on Better Call Saul being overlooked by awards bodies. more…

Read more »

iOS 26’s failure shows what happens when you take customers for granted
Macworld I had a good time last week digging through OS adoption data and recreating my glory days as a high-school mathematician. But the numbers are decidedly less fun for Tim Cook. According to research by StatCounter, iOS 26’s adoption rate is less than a quarter of iOS 18’s at the same time in its release cycle, and that’s bad news for the iPhone. Why aren’t people installing iOS 26? The short answer is “Liquid Glass,” since the new design language has been so widely vilified that Apple was forced into an uncharacteristic backtrack to let people turn off some of its transparency effects. But if you’ll indulge me, there’s a longer answer that I’d like to explore a little. More than any other tech company, Apple’s success is built on loyalty. Its products tend to be more expensive, spec for spec, than those made by rivals, but customers buy them anyway because they trust the experience will be better and they want the company to prosper. Loyal Apple users view a walled-garden product ecosystem as a plus, not a minus, because they don’t want to leave. Even the Apple Store, which turned up anachronistically at the start of the century as other businesses were offloading their brick-and-mortar obligations, makes perfect sense when you understand that its purpose is not to sell units, but to evangelize the Apple lifestyle. It’s a loyalty factory. But a loyalty-based business model cuts both ways. As we see so often in online discourse, a strongly loyal user base will stand by its favored company, even rushing to its defense when things go wrong. Right up until they don’t. Provided the missteps are isolated, you should be okay. Apple Maps, for instance, was an embarrassing fumble when it launched in 2012, but at the time it felt like a rare mistake rather than a symptom of something larger. In recent years, by contrast, Apple’s software failures have become the rule, not the exception. Some of these have been a failure of quality control: a willingness to announce, or even release, software that isn’t fit for purpose. Many of the software features badged as Apple Intelligence fit in this category, as does Siri 1.0, whose performance seems unbelievably to be getting worse. Others represent the opposite problem: the inability to get a needed product out there, exemplified by Siri 2.0. As my colleague Jason Snell argues, 2025 may come to be remembered for what Apple didn’t deliver. Real artists ship. But there’s a third category, which doesn’t represent mistakes at all. These are the instances of deliberate enshittification: moments of greed, arrogance, and the belief that customer loyalty insulates the company from consequences. Such as the App Store becoming riddled with ads a few years back, a move which was so unpopular that Apple decided to do the same thing with Apple News, Stocks, and (as of next year) Maps. It’s even been caught pushing ads in iMovie. Why? Because the company thinks it can. It’s debatable whether the egregious design of last year’s OS updates falls under the category of arrogance or incompetence; perhaps it’s both. But the takeaway for Apple should be that customer loyalty is finite, and there are consequences when you consistently lower your quality-control standards. When your entire business is built on people liking you, it’s best not to take them for granted. Foundry Welcome to our weekly Apple Breakfast column, which includes all the Apple news you missed last week in a handy bite-sized roundup. We call it Apple Breakfast because we think it goes great with a Monday morning cup of coffee or tea, but it’s cool if you want to give it a read during lunch or dinner hours too. Trending: Top stories Got excuses? These 7 iOS 26 features will help you stick to your New Year’s goals. How doomed is Apple in 2026? Just wait and see, says the Macalope. macOS Tahoe’s icons are a mess, but not the ones you think. These expert AirPods Pro tips will take your earbuds to eleven. Simon Jary was at CES 2026 last week. Here are the new Mac and iPhone accessories he thinks Apple fans need to see. End of an era as last Intel MacBook Air is declared vintage. Podcast of the week 2026 could be one of the most memorable years in Apple’s history. In the latest episode of the Macworld podcast, we reveal what you can expect from Apple in the first half of the year. You can catch every episode of the Macworld Podcast on YouTube, Spotify, Soundcloud, the Podcasts app, or our own site. Reviews corner Acorn: A powerful but affordable photo-editing tool for Mac. myAir.0 OriMouse: Eye-catching, super-slim, foldable mouse. Carlinkit Mini Ultra 3: Turn wired CarPlay into wireless bliss. Satechi OntheGo 7-in-1: The most portable USB-C hub we’ve tested. The rumor mill This iPhone leak may be fake but it hides some very real truths. We might have just got our first sighting of the iPhone Fold screen. The iPhone 17e could arrive within weeks without a notch. Apple teases ‘something big’ coming to your devices in early 2026. Video of the week @macworld.com Everything Apple will release in 2026 #apple #hardware #ios #macos ♬ original sound – Macworld – Macworld Jason Cross reckons now is a good time to reveal everything Apple will launch in 2026. You can enjoy all our short-form video on TikTok or Instagram. Software updates, bugs, and problems It’s not you–a Logitech blunder borked your Mac mouse, but there’s a fix. This Google Chrome feature is why Roman Loyola is never going back to Safari. Apple secretly boosted Wi-Fi speeds on your Mac and iPad–here’s how to get it. iOS 26.3 beta gets a new background security update test. And with that, we’re done for this week’s Apple Breakfast. If you’d like to get regular roundups, sign up for our newsletters, including our new email from The Macalope–an irreverent, humorous take on the latest news and rumors from a half-man, half-mythical Mac beast. You can also follow us on Facebook, Threads, Bluesky, or X for discussion of breaking Apple news stories. See you next Monday, and stay Appley.

Read more »

Half price iPhone 13 battery replacement reportedly offered for users in China
Apple is claimed to have announced a half-price battery replacement service for iPhone 13 users in China.Apple's iPhone 13When it first came out, the iPhone 13 range and in particular the iPhone 13 Pro Max was said to be Apple's undisputed battery life champion. According to China's City News Service, however, there have subsequently been worldwide reports of battery swelling or performance degradation.That claim has not been verified, but the publication says that consequently Apple has announced a program to offer users in China a half-price battery replacement on any model of the iPhone 13 range. The program is said to have launched on January 7, 2026, and will run until April 30, 2026. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Best iMac deals and discounts right now
Macworld Best iMac deals available January 2026 These are the recommendations we would confidently give to our own friends and family. They are based on the best prices right now at hundreds of resellers of Apple products. Today’s best iMac deals: U.S. Apple Refurbished, M4 iMac (8-core GPU, 256GB): $1,099 ($200 off, MSRP $1,299) Apple Refurbished, M4 iMac (10-core GPU, 256GB): $1,269 ($230 off, MSRP $1,499) Amazon, M4 iMac (10-core GPU, 512GB): $1,556 ($143 off, MSRP $1,699) See more U.S. iMac deals below… Today’s best iMac deals: U.K. KRCS, M4 iMac (8-core GPU, 256GB), £1,234 (£65 off, RRP £1,299) Apple Refurbished, M4 iMac (8-core GPU, 256GB): £1,099 (£200 off, MSRP £1,299) Apple Refurbished, M4 iMac (10-core GPU, 256GB): £1,269 (£230 off, MSRP £1,499) See more U.K. iMac deals below… Last updated January 12, 2025 If you want to buy a iMac for less than the price Apple sets, you have come to the right place. We can help you find the best deals on a new iMac using our Best Prices Comparison that looks at all the stores that sell Apple Macs and finds the best prices right now. Whether it’s the latest iMac M4, or an older iMac model that you want to find on sale, we share the best prices you can get the iMac for.  How we find the best iMac deals To select the best iMac deals, our editors employ a comprehensive, year-round strategy that combines continuous market monitoring with expert evaluation of the deals based on our reviews, experience with the products and what to look for, and what to avoid. You can trust the deals Macworld identifies because: We check top resellers in the U.S. and the U.K. for the best prices throughout the year, ensuring we always have a finger on the pulse of the best savings. We use price comparison tools to watch resellers and compare their current discounts so we know who has the best deal right now. We also look at the Apple Refurbished store where you can often get good savings on a fully refurbished Mac with Apple’s full guarantee. We hand-pick deals based on the product’s long-term price history and our own in-depth reviews. We consider the product’s release cycle and whether a significant update is due soon. We also advise on whether a shopping event is likely to happen soon in which you might get an even better deal, or if you might be able to qualify for specific deals. We regularly check prices, but it’s worth checking various retailers in the price comparison tables below, as prices can fluctuate daily. If you want to buy a particular model you will find the best prices right now in the tables below. We also have a guide to the best Apple deals right now on all Apple products, including MacBook Air, MacBook Pro, Mac mini, iPhone, iPad, and Apple Watch.  Is now a good time to buy a new iMac? Foundry Now is a good time to buy a new 24-inch iMac, especially if you are looking for a complete desktop setup and can find one at a discount. The current model features the M4 chip and received significant upgrades, including a move to 16GB RAM as standard, when it was released in October 2024. The iMac is popular thanks to it’s integrated, vibrant 24-inch 4.5K Retina display and slim all-in-one design that is available in seven colors. However, the iMac is overpriced compared to its specifications, especially when compared to the Mac mini, which offers the same chip for a much lower starting price if you already own a monitor and peripherals. Additionally, some users are holding out for a larger-screened iMac, similar to the old 27-inch model or a new iMac Pro, but there are no concrete release dates for such a product, and it may never ship due to cost concerns and market demand. Given that the current M4 model is ow over a year old and very capable, waiting is only recommended if you don’t need a computer immediately and are holding out for a potential larger screen model that may or may not materialize. Another reason to wait is that iMac discounts and deals tend to be better during sales events, such as Black Friday and Prime Day in July and October. But we do tend to see discounts all year long. A good option it to look to Apple’s Refurbished Store where it sells refurbished Macs at a lower price (more information on that below). Additionally, if you are a higher education student you can take advantage of Apple’s education discounts and save a little money on the full price of Macs (and iPads). And in the summer months Apple gives away Apple Pencils or AirPods with the sale of certain Macs (and iPads) to students in its Higher Education offer. Which iMac to buy All M-series Macs support Apple Intelligence. Foundry The current model is the 24-inch iMac with the M4 chip, which Apple released in October 2024. This all-in-one computer is a strong choice for a wide range of users, from novices to those with demanding workloads, and serves as a complete setup with a computer, display, and input devices included. Apple offers several standard configurations for the M4 iMac. Prices start at $1,299 for the entry-level model that offers 16GB RAM, 256GB SSD, two Thunderbolt 4/USB-C ports, and an 8-core CPU, 8-core GPU. For another $200 you can get a 10-core CPU and 10-core GPU and four Thunderbolt 4/USB-C ports, but the same 256GB SSD. And at the top of the range you can get a 512GB SSD for another $200. While 256GB storage might be enough for you, especially if you are happy to supplement it with an iCloud subscription so that you can store your photos, music and documents in the cloud, if you did want more storage and the better version of the M4 chip you have to spend $1,699. When you consider that to get a similarly specced Mac mini would cost you $699 that’s an expensive display. So, our advice is to get an iMac if you want an iMac. But if you want to spend less and get more for your money get a Mac mini! We recommend: Apple Mac mini (M4, 2024) Price When Reviewed: $599 | $799 | $999 Best Prices Today: $499.99 at Amazon | $599 at Apple | $729 at B&H Best refurbished iMac deals One of the best places to look for iMac deals all year round is the Apple Refurbished Store. There, you’ll find huge iMac discounts, sometimes even on the latest models. These iMacs have been returned to Apple for various reasons, and then completely revamped for resale. One of the major benefits of buying a refurbished Mac from Apple is that it will come with a one-year warranty so Apple may fix or replace it for free should anything happen to it in that first year. You won’t be able to tell the difference between a refurbished iMac and a brand-new iMac, aside from the box it comes in, which is white to prevent people from buying them and attempting to sell them as new. Find out more about buying a refurbished iMac here. In the U.S. you can save more than $200 on the price of an M4 iMac. Apple Refurbished, M4 iMac (8-core GPU, 256GB): $1,099 ($200 off, MSRP $1,299) Apple Refurbished, M4 iMac (10-core GPU, 256GB): $1,269 ($230 off, MSRP $1,499) Get a refurbished Mac at Apple's refurbished store (U.S.) In the U.K. you can save more than £200 on the price of an M4 iMac. Apple Refurbished, M4 iMac (8-core GPU, 256GB): £1,099 (£200 off, MSRP £1,299) Apple Refurbished, M4 iMac (10-core GPU, 256GB): £1,269 (£230 off, MSRP £1,499) Get a refurbished Mac at Apple's refurbished store (U.K.) Best iMac deals right now: Price Comparison Tables These are the very best deals we are seeing right now. You’ll find our best U.S. and U.K. deals listed below. The best prices where you are based will appear in the boxes below, including Canada or Australia. Best iMac M4 deals iMac, M4, 8-core CPU/8-core GPU, 256GB/16GB unified memory, MSRP $1,299/£1,299 Retailer Price $1,192 View Deal $1208 View Deal $1249 View Deal $1259 View Deal $1299 View Deal $1299 View Deal Price comparison from over 24,000 stores worldwide View more prices Product Price Price comparison from Backmarket iMac, M4, 10-core CPU/10-core GPU, 256GB/16GB unified memory, MSRP $1,499/£1,499 Retailer Price $1,349 View Deal $1349 View Deal $1374.38 View Deal $1499 View Deal $1499 View Deal Price comparison from over 24,000 stores worldwide View more prices Product Price Price comparison from Backmarket iMac, M4, 10-core CPU/10-core GPU, 512GB/16GB unified memory, MSRP $1,699/£1,699 Retailer Price $1,549 View Deal $1549 View Deal $1554.56 View Deal $1699 View Deal $1699 View Deal Price comparison from over 24,000 stores worldwide View more prices Product Price Price comparison from Backmarket Where to buy an iMac You can buy an iMac directly from Apple in the US or at Apple UK, but there are plenty of stores and Apple Premium Resellers around the world that offer discounts on new and old Macs. Some Mac retailers offer great discounts on Apple products and Apple accessories, so you should be able to save a few hundred pounds off some iMac configurations. Beware, though. The Mac listed by the reseller may be an older model than the one Apple currently sells, and we do not recommend purchasing older iMacs that don’t feature the M4 chip, especially as they only have 8GB RAM. So be careful to check the age and spec of the machine being sold, and don’t automatically assume that it’s current. To get an idea of what the old model should be worth, take a look at Apple’s refurbished store to see what Apple is selling the older version for (and remember that buying from Apple, even if it’s refurbished, will mean you get a full year’s warranty). And for another way to save money on a new Apple product read about how you can trade in old products at Apple and other resellers and get money off. Read: How Apple trade-in works and saves you money. We regularly see Mac-related deals from the following U.K. and U.S. retailers: U.S. Want to buy a iMac from Apple? View the iMac in the Apple Store. Get your education discount: View the iMac in the Apple Education Store View the iMac at Amazon where we often see discounts. View the iMac at B&H Photo. View the iMac at Best Buy. View the iMac at Walmart. You can find the iMac at Adorama here. U.K. You can be sure that you are buying a Mac at the correct price at Apple. View the iMac in the Apple Store. Save money if you are a teacher or student. View the iMac in the Apple Education Store. Get a iMac from Amazon where we often see discounts. View the iMac at Amazon View the iMac at AO.com. You may find an iMac at Argos, although we only tend to see deals in conjunction with events like Black Friday. We often see great deals on iMac at EE. View the iMac at Currys, who also frequently offer discounts. View the iMac at Ebuyer. View the iMac at John Lewis, where we often see discounts. You can get an iMac from Laptops Direct here And you may also find discounts on the iMac at Very Apple has a number of Apple Premium Resellers in the UK who stock Macs and also offer other services: KRCS Insight iStore Select Western Computer Jigsaw From time to time, Amazon runs lightning deals, which could get you a discount if you act quickly. If you’ve found that you’re missing out on Amazon’s Lightning deals, which run for just a few hours and offer limited stock, we’d recommend signing up for Amazon’s 30-day free trial of Prime, which will get you access to deals 30 minutes before everyone else. Plus, you’ll get free next-day delivery with the Prime trial, as well as access to Prime Instant Video and more. Sign up for Prime here. Where to buy a refurbished iMac You can get refurbished Macs from other suppliers too, including the following refurbished MacBook and reconditioned Mac from the resellers listed below: In the U.S.: Apple Amazon Back Market Best Buy Gainsaver OWC Mac Of All Trades Refurb.me In the U.K.: Affordable Mac Apple Amazon BackMarket Hoxton Macs Laptops Direct MacFinder Mac 4 Sale Music Magpie Amazon also has a certified refurbished store for Apple products but we would advise against buying any products that are older than five years – most of the products we see on the Amazon refurbished store are unfortunately very old. Another place to look is BackMarket US and BackMarket UK, which sells refurbished Macs and other Apple products. We also recommend Hoxton Macs in the U.K. Best iMac Student Deals If you are a student you can save money with Apple all year round. Read: How to get an Apple student discount. to find out more. Also take a look at when Apple will be running its Back to School deal this year, when you can get a free pair of AirPods with your purchase.

Read more »

Dump the free apps—Office 2024 is worth it at this price
Macworld TL;DR: Microsoft Office 2024 Home for Mac or PC for $119.97 (MSRP $149.99) is a pay-once, use-forever upgrade that easily beats free apps—and your patience will thank you. We’ve all tried the free apps. They’re fine, sort of. Formatting breaks, spreadsheets get weird, and suddenly that “quick document” turns into a time sink. That’s why Microsoft Office still matters—and why this one-time MS Office 2024 Home purchase is such a win. For a one-time $119.97 payment (MSRP $149.99), you get the latest desktop versions of Word, Excel, and PowerPoint for Mac or PC, installed on one device and yours to keep. No monthly fees. No renewal reminders. Just modern upgrades of the classic Microsoft apps that actually work the way you expect them to. Excel gets smarter with dynamic arrays and AI-powered analysis tools that make sorting, filtering, and visualizing data far easier. PowerPoint now supports recording presentations with voice, video, and captions. Collaboration is smoother too, with real-time co-authoring, comments, chat, and version history built right into the apps. And yes, Office now includes AI-powered suggestions for writing, formatting, summarizing, and data analysis—helpful without being overbearing. Office Home 2024 is a modern, reliable productivity suite for anyone who’s ready to stop pretending free apps are good enough. Get lifetime access to Microsoft Office 2024 Home for Mac or PC for just $119.97 (MSRP $149.99). Microsoft Office 2024 Home for Mac or PC: One-Time PurchaseSee Deal StackSocial prices subject to change.

Read more »

Price war: Save $300 on Apple's 1TB 14-inch MacBook Pro with 20-core GPU
Amazon and B&H are competing for your business, with a $300 discount on Apple's upgraded M4 Pro 14-inch MacBook Pro with 1TB of storage.Save $300 on a 1TB M4 Pro 14-inch MacBook Pro with a 20-core GPU.With the $300 discount at Amazon and B&H Photo, you can pick up Apple's upgraded 14-inch MacBook Pro for $2,099 when ordered in Space Black.Save $300 on 14" MacBook Pro Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple launching ‘revamped’ Health app later this year with these four upgrades
Over the past year or so, we’ve heard a plethora of Health app related rumors. Tim Cook has stated that one of Apple’s largest contributions to society will be in health, and this series of upgrades will be a key part of that vision. We’ll be recapping those upgrades, and you should be seeing them on your iPhone in just a few months. more…

Read more »

9to5Mac Overtime 052: watchOS 26
Jeff and Fernando discuss Nintendo Switch 2 thoughts, watchOS 26, and tvOS 26. 9to5Mac Overtime is a weekly video-first podcast exploring fun and interesting observations in the Apple ecosystem, featuring 9to5Mac’s Fernando Silva & Jeff Benjamin. Subscribe to Overtime via Apple Podcasts and our YouTube channel for more. more…

Read more »

The best hardware and accessories of CES 2026 for Apple users
CES is over for another year, and it was full of products for Apple users. Here are the best items for your iPhone, Apple Watch, and Mac that appeared at the show in 2026.A CES signEvery year, thousands of manufacturers attend CES to promote their latest creations. In many cases, it was for products that works with the Apple ecosystem, including everything from robot vacuum cleaners to cables and accessories for your iPhone.Subscribe to AppleInsider on YouTube{"@context":"https://schema.org/","@type":"VideoObject","name":"Best Gear, Gadgets, & Accessories for APPLE Users at CES 2026!","description":"The best Apple gear and accessories I found at CES 2026 — all packed into one video!","thumbnailUrl":"https://i.ytimg.com/vi/v8XM2cd8J0g/hqdefault.jpg","uploadDate":"2026-01-10T23:43:12Z","duration":"PT31M43S","embedUrl":"https://www.youtube.com/watch/?v=v8XM2cd8J0g"} Continue Reading on AppleInsider | Discuss on our Forums

Read more »

This new Apple Intelligence feature in iOS 26 might be one of my all-time favorites
It’s been half a year since iOS 26 debuted in beta, so I’ve had quite a bit of time to sit with it. In a release with such a massive redesign, it’s easy for some of the smaller additional features to fly under the radar – but after giving iOS 26 my fair shot, I’ve come to really like one underlying feature in particular, and it has to do with screenshots. more…

Read more »

India wants iOS source code, and they're not going to get it
India is yet again attempting to bully Apple by demanding access to iOS source code. It's not going to work.A graphic Apple created for the launch of its online Apple Store in India in 2020 - Image credit: AppleWhile governments have tried to interfere with the management and security of mobile devices for years, India has somehow become one of the biggest thorns in Apple's side. In the latest salvo, India seems intent on forcing Apple to hand over its source code.A package of 83 security standards has been proposed that covers many different areas. According to Reuters, Apple, Google, Samsung, Xiaomi, and MAIT have objected due to there not being any global precedent for the demands, with it also revealing proprietary details. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Today in Apple history: iPod shuffle randomizes our music
On January 11, 2005, Steve Jobs introduced the iPod shuffle, a cheaper Apple music player that lacked a display and played songs at random. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Who Benefited from the Aisuru and Kimwolf Botnets?
Our first story of 2026 revealed how a destructive new botnet called Kimwolf rapidly grew to infect more than two million devices by mass-compromising a vast number of unofficial Android TV streaming boxes. Today, we'll dig through digital clues left behind by the hackers, network operators, and cybercrime services that appear to have benefitted from Kimwolf's spread.

Read more »

The Kimwolf Botnet is Stalking Your Local Network
The story you are reading is a series of scoops nestled inside a far more urgent Internet-wide security advisory. The vulnerability at issue has been exploited for months already, and it's time for a broader awareness of the threat. The short version is that everything you thought you knew about the security of the internal network behind your Internet router probably is now dangerously out of date.

Read more »

Happy 16th Birthday, KrebsOnSecurity.com!
KrebsOnSecurity.com celebrates its 16th anniversary today! A huge "thank you" to all of our readers -- newcomers, long-timers and drive-by critics alike. Your engagement this past year here has been tremendous and truly a salve on a handful of dark days. Happily, comeuppance was a strong theme running through our coverage in 2025, with a primary focus on entities that enabled complex and globally-dispersed cybercrime services.

Read more »

Dismantling Defenses: Trump 2.0 Cyber Year in Review
The Trump administration has pursued a staggering range of policy pivots this past year that threaten to weaken the nation’s ability and willingness to address a broad spectrum of technology challenges, from cybersecurity and privacy to countering disinformation, fraud and corruption. These shifts, along with the president’s efforts to restrict free speech and freedom of the press, have come at such a rapid clip that many readers probably aren’t even aware of them all.

Read more »

Most Parked Domains Now Serving Malicious Content
Direct navigation -- the act of visiting a website by manually typing a domain name in a web browser -- has never been riskier: A new study finds the vast majority of "parked" domains -- mostly expired or dormant domain names, or common misspellings of popular websites -- are now configured to redirect visitors to sites that foist scams and malware.

Read more »

Computer Virus Protection Tips and How to Remove a Virus from Your Computer
Computer viruses continue to be a widespread and costly problem, affecting everyone from casual computer users to major organizations. Some of the most damaging incidents in history started with small actions that could have happened to anyone. The Melissa virus spread in 1999 because thousands of people opened what looked like a normal email attachment. […] The post appeared first on The Mac Security Blog.

Read more »

Microsoft Patch Tuesday, December 2025 Edition
Microsoft today pushed updates to fix at least 56 security flaws in its Windows operating systems and supported software. This final Patch Tuesday of 2025 tackles one zero-day bug that is already being exploited, as well as two publicly disclosed vulnerabilities.

Read more »

Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill
A sprawling academic cheating network turbocharged by Google Ads that has generated nearly $25 million in revenue has curious connections to a Kremlin-connected oligarch whose Russian university builds drones for Russia's war against Ukraine.

Read more »

SMS Phishers Pivot to Points, Taxes, Fake Retailers
China-based phishing groups blamed for non-stop scam SMS messages about a supposed wayward package or unpaid toll fee are promoting a new offering, just in time for the holiday shopping season: Phishing kits for mass-creating fake but convincing e-commerce websites that convert customer payment card data into mobile wallets from Apple and Google. Experts say these same phishing groups also are now using SMS lures that promise unclaimed tax refunds and mobile rewards points.

Read more »

Vulnerability Summary for the Week of November 24, 2025
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info 0x4m4--HexStrike AI By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server's normal privilege; typically, this is root. There is no attempt to sanitize these arguments in the default configuration of this MCP server at the affected version (as of commit 2f3a5512 in September of 2025). 2025-11-30 9.1 CVE-2025-35028 https://takeonme.org/gcves/GCVE-1337-2025-00000000000000000000000000000000000000000000000000111111111111111111111111000000000000000000000000000000000000000000000000000000011  AMD--AMD Prof Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability. 2025-11-24 7.1 CVE-2025-48510 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9019.html  AMD--Xilinx Run Time (XRT) Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability. 2025-11-24 8 CVE-2025-52538 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability 2025-11-24 7.3 CVE-2025-0003 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in crash or denial of service. 2025-11-24 7.3 CVE-2025-0005 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface (AXI), potentially resulting in loss of confidentiality, integrity, and/or availability. 2025-11-24 7.3 CVE-2025-52539 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  ASR--Lapwing_Linux Out-of-bounds Read vulnerability in ASR1903ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26. 2025-11-26 7.4 CVE-2025-13735 https://www.asrmicro.com/en/goods/psirt?cid=41  blubrry--PowerPress Podcasting plugin by Blubrry The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the 'powerpress_edit_post' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2025-11-27 8.8 CVE-2025-13536 https://www.wordfence.com/threat-intel/vulnerabilities/id/d420ee49-e7b3-43d8-a263-8a93abd1133c?source=cvehttps://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3068https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3012https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L2368https://plugins.trac.wordpress.org/changeset/3402635/  Chanjet--CRM A vulnerability has been found in Chanjet CRM up to 20251106. The impacted element is an unknown function of the file /tools/upgradeattribute.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-11-30 7.3 CVE-2025-13788 VDB-333792 | Chanjet CRM upgradeattribute.php sql injectionVDB-333792 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #690084 | Chanjet CRM V1.0 SQL Injectionhttps://github.com/Bellingham-max/CVE/issues/1  code-projects--COVID Tracking System A vulnerability was detected in code-projects COVID Tracking System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument code results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. 2025-11-24 7.3 CVE-2025-13585 VDB-333349 | code-projects COVID Tracking System login.php sql injectionVDB-333349 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699840 | code-projects COVID Tracking System V1.0 SQL Injectionhttps://github.com/beamyou/CVE/issues/4https://code-projects.org/  code-projects--Jonnys Liquor A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. 2025-11-24 7.3 CVE-2025-13582 VDB-333346 | code-projects Jonnys Liquor GET Parameter detail.php sql injectionVDB-333346 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699554 | code-projects Jonnys Liquor 1.0 /detail.php SQL injectionhttps://github.com/rassec2/dbcve/issues/5https://code-projects.org/  code-projects--Library System A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2025-11-24 7.3 CVE-2025-13578 VDB-333342 | code-projects Library System Login index.php sql injectionVDB-333342 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699536 | code-projects Library System 1.0 index.php SQL Injectionhttps://github.com/rassec2/dbcve/issues/4https://code-projects.org/  code-projects--Question Paper Generator A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. 2025-11-24 7.3 CVE-2025-13583 VDB-333347 | code-projects Question Paper Generator POST Parameter signupscript.php sql injectionVDB-333347 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699591 | code-projects question paper 1.0 /signupscript.php SQL Injectionhttps://github.com/rassec2/dbcve/issues/6https://code-projects.org/  cursor--cursor Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arbitrary code execution. 2025-11-26 9.8 CVE-2025-62354 https://hiddenlayer.com/sai_security_advisor/2025-11-cursor/  Dassault Systmes--DELMIA Service Process Engineer A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. 2025-11-24 8.7 CVE-2025-10555 https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10555  Dassault Systmes--ENOVIA Product Manager A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. 2025-11-24 8.7 CVE-2025-10554 https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10554  DirectoryThemes--Tiger The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the 'paypal-submit.php' file not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. 2025-11-27 9.8 CVE-2025-13675 https://www.wordfence.com/threat-intel/vulnerabilities/id/4750b57e-7d8d-49d7-bbbf-46483eb97bd9?source=cvehttps://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995  DirectoryThemes--Tiger The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the plugin allowing a user to update the user role through the $user- >set_role() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator. 2025-11-27 8.8 CVE-2025-13680 https://www.wordfence.com/threat-intel/vulnerabilities/id/645f60ad-c8e5-47ec-94f1-960de4ef7838?source=cvehttps://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995  Eaton--Eaton Galileo Software Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead into an attacker with local access to execute unauthorized code or commands. This security issue has been fixed in the latest version of Galileo which is available on the Eaton download center. 2025-11-27 7.3 CVE-2025-59890 https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1024.pdf  Elated Themes--FindAll Listing The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.5. This is due to the 'findall_listing_user_registration_additional_params' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. Note: The vulnerability can only be exploited if the FindAll Membership plugin is also activated, because user registration is in that plugin. 2025-11-27 9.8 CVE-2025-13538 https://www.wordfence.com/threat-intel/vulnerabilities/id/14981949-271c-4f98-a6a1-b00619f1436d?source=cvehttps://themeforest.net/item/findall-business-directory-theme/24415962  Elated Themes--FindAll Membership The FindAll Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.4. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'findall_membership_check_facebook_user' and the 'findall_membership_check_google_user' functions. This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site which can easily be created by default through the temp user functionality, and access to the administrative user's email. 2025-11-27 9.8 CVE-2025-13539 https://www.wordfence.com/threat-intel/vulnerabilities/id/a856a96a-68d2-462d-b523-840668980807?source=cvehttps://themeforest.net/item/findall-business-directory-theme/24415962  factionsecurity--faction FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction's extension framework permits untrusted extension code to execute arbitrary system commands on the server when a lifecycle hook is invoked, resulting in remote code execution (RCE) on the host running Faction. Due to a missing authentication check on the /portal/AppStoreDashboard endpoint, an attacker can access the extension management UI and upload a malicious extension without any authentication, making this vulnerability exploitable by unauthenticated users. This issue has been patched in version 1.7.1. 2025-11-26 9.7 CVE-2025-66022 https://github.com/factionsecurity/faction/security/advisories/GHSA-xr72-2g43-586whttps://github.com/factionsecurity/faction/commit/c6389f1c76175b7c1c68d1a87b389311b16c62c3  fugue-project--fugue Fugue is a unified interface for distributed computing that lets users execute Python, Pandas, and SQL code on Spark, Dask, and Ray with minimal rewrites. In version 0.9.2 and prior, there is a remote code execution vulnerability by pickle deserialization via FlaskRPCServer. The Fugue framework implements an RPC server system for distributed computing operations. In the core functionality of the RPC server implementation, I found that the _decode() function in fugue/rpc/flask.py directly uses cloudpickle.loads() to deserialize data without any sanitization. This creates a remote code execution vulnerability when malicious pickle data is processed by the RPC server. The vulnerability exists in the RPC communication mechanism where the client can send arbitrary serialized Python objects that will be deserialized on the server side, allowing attackers to execute arbitrary code on the victim's machine. This issue has been patched via commit 6f25326. 2025-11-25 8.8 CVE-2025-62703 https://github.com/fugue-project/fugue/security/advisories/GHSA-xv5p-fjw5-vrj6https://github.com/fugue-project/fugue/commit/6f25326779fd1f528198098d6287c5a863176fc0  geoserver--geoserver GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap. However, this input is not sufficiently sanitized or restricted, allowing an attacker to define external entities within the XML request. This issue has been patched in GeoServer 2.25.6, GeoServer 2.26.3, and GeoServer 2.27.0. 2025-11-25 8.2 CVE-2025-58360 https://github.com/geoserver/geoserver/security/advisories/GHSA-fjf5-xgmq-5525https://osgeo-org.atlassian.net/browse/GEOS-11682  GitLab--GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an unauthenticated user to cause a Denial of Service condition by sending specifically crafted requests containing malicious JSON payloads. 2025-11-26 7.5 CVE-2025-12571 GitLab Issue #579168HackerOne Bug Bounty Report #3362239  GL-Inet--GL-AXT1800 A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. 2025-11-24 8.3 CVE-2025-44018 https://talosintelligence.com/vulnerability_reports/TALOS-2025-2230  HCL Software--iNotes HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote, unauthenticated attacker can specially craft a URL to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials. 2025-11-25 8.1 CVE-2025-0248 https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127032  Huawei--HarmonyOS Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality. 2025-11-28 9.3 CVE-2025-64314 https://consumer.huawei.com/cn/support/bulletinlaptops/2025/11/  Huawei--HarmonyOS Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 2025-11-28 8.4 CVE-2025-58302 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability. 2025-11-28 8.4 CVE-2025-58303 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 2025-11-28 8 CVE-2025-58310 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 2025-11-28 7.3 CVE-2025-58308 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability. 2025-11-28 7.3 CVE-2025-58316 https://consumer.huawei.com/en/support/bulletin/2025/11/  Janitza--UMG 96-PA An unauthenticated remote attacker can send a specially crafted Modbus read command to the device which leads to a denial of service. 2025-11-24 7.5 CVE-2025-41729 https://certvde.com/de/advisories/VDE-2025-094  kiteworks--security-advisories Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0. 2025-11-29 7.1 CVE-2025-53896 https://github.com/kiteworks/security-advisories/security/advisories/GHSA-23h2-3jj8-58hm  kiteworks--security-advisories Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances to intercept upstream communication which could lead to an escalation of privileges. This issue has been patched in version 9.1.0. 2025-11-29 7.2 CVE-2025-53899 https://github.com/kiteworks/security-advisories/security/advisories/GHSA-5gx5-vcpp-8cr5  Logpoint--SIEM An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability. 2025-11-27 8.5 CVE-2025-66359 https://servicedesk.logpoint.com/hc/en-us/articles/29158899698333-XSS-Vulnerability-due-to-insufficient-input-validation  Mattermost--Mattermost Mattermost versions 10.12.x

Read more »

Cybersecurity Best Practices: Essential Tips for Modern Mac Security
Cybersecurity affects every person who uses a device, connects to the internet, pays bills online, or stores important files digitally. The rise of cloud services, mobile apps, and complex online accounts has created new opportunities for criminals to target individuals. Mac users benefit from strong built-in protections, but threats now focus less on operating systems […] The post appeared first on The Mac Security Blog.

Read more »

13-inch M3 iPad Airs on sale for $70-$110 off Apple’s MSRP
Take $70-$110 off 13-inch M3 WiFi iPad Airs at Amazon as part of their current sales. Shipping is free: - 13" 128GB WiFi M3 iPad Air: $689, $110 off MSRP - 13" 256GB WiFi M3 iPad Air: $789, $110 off MSRP - 13" 512GB WiFi M3 iPad Air: $999, $100 off MSRP - 13" 1TB WiFi M3 iPad Air: $1229, $70 off MSRP Be sure to order from Amazon itself rather than a third-party seller. These are the lowest prices currently available for new 13" M3-powered iPad Airs. For the latest prices & sales, keep an eye on our iPad Air Price Tracker, updated daily.

Read more »

11-inch M3 iPad Airs on sale for $100-$110 off Apple’s MSRP
Take $100-$110 off 11-inch M3 iPad Airs at Amazon as part of their current sales. Shipping is free: - 11" 128GB WiFi M3 iPad Air: $499, $100 off MSRP - 11" 256GB WiFi M3 iPad Air: $599, $100 off MSRP - 11" 512GB WiFi M3 iPad Air: $789, $110 off MSRP - 11" 1TB WiFi M3 iPad Air: $989, $119 off MSRP Be sure to order from Amazon itself rather than a third-party seller. These are the lowest prices currently available for new 11" M3-powered iPad Airs. For the latest prices & sales, keep an eye on our iPad Air Price Tracker, updated daily.

Read more »

13-inch M5 iPad Pros on sale for up to $200 off Apple’s MSRP
Amazon has Apple's 13-inch M5 WiFi iPad Pros on stock today and on sale for $100-$200 off MSRP. Shipping is free. These are the lowest 13" iPad Pro prices currently available: - 13" 256GB M5 iPad Pro: $1149 $150 off MSRP - 13" 512GB M5 iPad Pro: $1399 $100 off MSRP - 13" 1TB M5 iPad Pro: $1799 $100 off MSRP - 13" 2TB M5 iPad Pro: $2099 $200 off MSRP For the latest prices and sales, see our iPad Pro Price Tracker, updated daily.

Read more »

11-inch M5 iPad Pros on sale for $50-$148 off Apple’s MSRP
Amazon has Apple's 11-inch M5 WiFi iPad Pros on stock today and on sale for $50-$148 off MSRP. Shipping is free. These are the lowest 11" iPad Pro prices currently available: - 11" 256GB M5 iPad Pro: $949 $50 off MSRP - 11" 512GB M5 iPad Pro: $1099 $100 off MSRP - 11" 1TB M5 iPad Pro: $1499 $100 off MSRP - 11" 2TB M5 iPad Pro: $1851 $148 off MSRP For the latest prices and sales, see our iPad Pro Price Tracker, updated daily.

Read more »

Take $283 off Apple’s 16-inch MacBook Pros with the latest sale prices at Amazon
Amazon has 16-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) on sale for up to $283 off Apple's MSRP as part of their current sales. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller: - 16" M4 Pro MacBook Pro (24GB/512GB/Black): $2239, $260 off MSRP - 16" M4 Pro MacBook Pro (24GB/512GB/Silver): $2249, $250 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB/Black): $2649, $250 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB/Silver): $2616, $283 off MSRP These are the lowest sale prices on new 16" Apple MacBook Pros right now. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Mac mini with M4 Pro CPU on sale for $1289, $110 off Apple’s MSRP
Amazon has M4 Pro Mac minis on sale for $110 off Apple's MSRP, only $1289. This model has 24GB of memory and 512GB of SSD storage. Shipping is free. Their price is the lowest currently available for this popular mini: - Mac mini M4 Pro (24GB/512GB): $1289, $110 off MSRP For the latest prices and sales, keep an eye on our Mac mini Price Tracker, updated daily.

Read more »

Apple’s most affordable iPads are on sale for $50 off MSRP, from $299
Amazon has Apple's 11th-generation A16 WiFi iPads in stock on sale for $50 off MSRP right now. Shipping is free: - 11" 11th-generation 128GB WiFi iPads: $299 $50 off MSRP - 11" 11th-generation 256GB WiFi iPads: $399 $50 off MSRP - 11" 11th-generation 512GB WiFi iPads: $599 $50 off MSRP Amazon's prices are the lowest iPads prices currently available for 11th-generation models. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.

Read more »

Apple AirPods Pro 3 on sale for $199, save $50
Amazon has Apple AirPods Pro 3 on sale for $50 off MSRP, including free shipping: - AirPods Pro 3: $199, $50 off Their price is the lowest we've seen so far for these new AirPods Pro models. Keep an eye on our AirPods Price Tracker for the latest prices and deals, updated daily.

Read more »

Apple’s 14-inch M5-powered MacBook Pros with 16GB of RAM on sale for $200 off MSRP, starting at $1399
Amazon is offering $200 discounts on new 14" M5 MacBook Pros with 16GB of memory, each including free shipping: - 14" M5 MacBook Pro (16GB/512GB/Black): $1399, MSRP $1599 - 14" M5 MacBook Pro (16GB/512GB/Silver): $1399, MSRP $1599 - 14" M5 MacBook Pro (16GB/1TB/Black): $1599, MSRP $1799 - 14" M5 MacBook Pro (16GB/1TB/Silver): $1599, MSRP $1799 These are the lowest prices available for new M5 MacBook Pros right now. For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Amazon has 15-inch M4 MacBook Airs on sale for $200 off Apple’s MSRP
Amazon has all 15" M4 MacBook Airs on sale for $200 off Apple's MSRP, starting at only $999. Be sure to select Amazon as the seller, rather than a third-party: - 15" M4 MacBook Air (16GB/256GB): $999, $200 off - 15" M4 MacBook Air (16GB/512GB): $1199, $200 off - 15" M4 MacBook Air (24GB/512GB/): $1399, $200 off Their prices are the lowest available for new 15" M4 MacBook Airs anywhere. For the latest sales & prices, see our 15" MacBook Air Price Tracker, updated daily.

Read more »

Amazon continues to offer 13-inch M4 MacBook Airs for as little as $799
Amazon has all 13" M4 MacBook Airs on sale for $200 off Apple's MSRP, starting at only $799. Be sure to select Amazon as the seller, rather than a third-party: - 13" M4 MacBook Air (16GB/256GB): $799, $200 off - 13" M4 MacBook Air (16GB/512GB): $999, $200 off - 13" M4 MacBook Air (24GB/512GB): $1199, $200 off These are the lowest 13-inch M4 MacBook Air prices currently available at Apple retailers. For the latest sales & prices see our 13" MacBook Air Price Tracker, updated daily.

Read more »

B&H is offering a $200 discount on new 16-inch M4 Pro MacBook Pros
B&H Photo has 16-inch MacBook Pros with M4 Pro CPUs in stock right now and on sale for $200 off Apple's MSRP. B&H offers free 1-2 day shipping to most US addresses: - 16" M4 Pro MacBook Pro (24GB/512GB): $2299, $200 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2699, $200 off MSRP These are among the lowest prices currently available for 16" M4 Pro MacBook Pros at Apple retailers. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »