Pixelmator Pro isn't dead, and is coming to iPad
Pixelmator Pro is being enhanced with an iPad version, Apple has confirmed, with a tablet version of the app coming as part of the Apple Creator Studio.Pixelmator Pro on iPad - Image Credit: AppleApple acquired the team behind Pixelmator Pro in late 2024, but aside from some feature updates in June, it seemed like Apple hadn't done much to the art app. On Tuesday, Apple confirmed that big changes are on the way.Forming part of the new Apple Creator Studio, Pixelmator Pro is promoted as a key image-editing tool in the app collection. While already fully-featured on the Mac, the main thrust of the announcement for the app is its traversal over to iPad. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple Creator Studio brings new apps, features, and subscription pricing to Mac and iPad
The much-anticipated Apple Creator Studio has been revealed, and it is a subscription service that brings Pixelmator Pro to the iPad, in a bundle with Final Cut Pro, Logic Pro, and more.One much wanted feature is that Pixelmator Pro is coming to the iPad — image credit: AppleApple Creator Studio was first rumored in November 2025, but something of the sort has been hoped for since Apple bought Pixelmator Pro in November 2024. The chief hope was that this image editor would finally come to the iPad, and now it has.Alongside it are the existing Final Cut Pro and Logic Pro for iPad. These have been available on iPad for a subscription, while their Mac counterparts remained a one-time purchase. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Pages, Numbers, Keynote, and Freeform are becoming freemium apps
Apple has long made its own productivity apps completely free to use on any of its hardware, but that’s about to change. While core features will remain free, Pages, Numbers, Keynote, and Freeform are set to get AI and premium content which will require a paid subscription … more…

Read more »

Further examination could explain why iOS 26’s adoption rates are so low
Macworld Last week I wrote an article about iOS 26’s adoption rates, which, according to StatCounter research, are historically low. But it turns out that the numbers might not be as bad as originally thought. The thing the report may have missed was a change Apple has made to the way Safari reports version numbers. As Nick Heer points out over on Pixel Envy, Safari on iOS, iPadOS, and visionOS stopped listing the current version of the operating system as of the launch of the 26.0 OSes last year. Or at least, it stopped listing it in the same way. Heer quotes the User-Agent string for Safari 18.6 on iOS: Mozilla/5.0 (iPhone; CPU iPhone OS 18_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Mobile/15E148 Safari/604.1 And compares it the UA string for Safari 26.0 on iOS: Mozilla/5.0 (iPhone; CPU iPhone OS 18_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1 As you can see, the correct iOS version is still present later in the string, but the section referring to iPhone OS is now frozen on 18.6. That’s the part which StatCounter could have been using for its data, and that explains why so few iPhone users are showing up as running iOS 26, and so many are still apparently running iOS 18. (If you’re wondering why Apple would do this, or even suspecting a deliberate attempt to disguise poor adoption rates, it’s worth noting that the company already made this switch on macOS as of Catalina several years ago, as I noticed when I tried to find out if macOS 26.0 had seen a similarly low adoption rate. Maybe that should have been a clue, although it’s not like Tahoe hasn’t taken its share of lumps, too.) The remaining mystery is why there are any iOS 26 users at all in StatCounter’s data. One possibility, discussed by software engineer Jeff Johnson in a sternly worded blog, is that these are all iPhone owners running third-party browsers: Chrome, Firefox, Dolphin, and so on, rather than Safari. Which makes sense, since the version reporting is specifically a Safari issue… although at that point a total of 15 percent (considering that they have to be both using a third-party browser and running iOS 26) sounds remarkably high. Safari has a huge market share on the iPhone. Either way, the data is likely flawed, and iOS 26 probably isn’t doing quite as badly as it initially seemed. Its actual performance is hard to gauge and depends on who you ask; Tom Rolfe of TapSmart, for example, kindly emailed me to say his site’s data points to adoption of around 70 percent, which would be perfectly decent, and to suggest that many iPhone owners haven’t even heard of Liquid Glass, let alone allowed it to influence their choice to upgrade or not. You can argue, though, that visitors to a niche Tips & Tricks for iPhone & iPad site would skew toward very high adoption of the latest version of iOS. Nevertheless, the fact remains that iOS 26 adoption rates are significantly lower than for iOS 18. TelemetryDeck suggests it could be around 55 percent, significantly down from 78 percent the year before, which seems plausible based on the outcry over iOS 26’s divisive changes. Plus, if adoption was the same or higher than for iOS 18, we’d expect Apple to have pushed out data pointing to this by now. Whatever the truth, we won’t know for sure until Apple chooses to let us. Expect discussion of this topic at the next Apple event, and watch out for any peculiar framing in the way the company discloses the numbers.

Read more »

Score Super Duolingo for $20 off: Unlock ad-free language learning and unlimited hearts!
A discounted year of Super Duolingo removes ads and other friction so you can practice more, travel smarter and quickly learn a new language. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Apple introduces Apple Creator Studio, a subscription to creative apps for $12.99/mo or $129/year
Apple on Tuesday unveiled Apple Creator Studio, a collection of creative apps designed to put studio-grade power into the hands of… The post appeared first on MacDailyNews.

Read more »

Apple announces Pixelmator Pro is coming to iPad
Apple acquired the app-making team at Pixelmator in late 2024, with the acquisition closing nearly one year ago. Now, in the first major change since the acquisition, Pixelmator Pro is coming to iPad alongside the launch of Apple Creator Studio. more…

Read more »

You can't read much into Mac sales shipment data, but IDC keeps trying
In a comparison between 2024 and 2025, IDC claims that Apple's Mac had the least sales growth of all PC vendors. While that may be true, the report lacks context.14-inch MacBook ProMarket research firm IDC has now been running for over 60 years, yet at times its reports are more like guesswork. In all fairness, they practically have to be since it's now just over seven years since Apple reported sales volumes by unit.Prior to that, Apple reported actual sales while most firms revealed the number of devices shipped to stores and inventory. Apple figures were dead-on, but now IDC has to use its sampling methodology for all of its research. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple debuts ‘Apple Creator Studio’ subscription, here’s what you get
Apple has announced Apple Creator Studio, which it describes as a “groundbreaking collection of powerful creative apps designed to put studio-grade power into the hands of everyone.” Apple Creator Studio will launch on the App Store on Wednesday, January 28, and will cost $12.99 per month or $129 per year. There will also be a one-month free trial offer. more…

Read more »

'Are You Dead?' iOS app helps lonely people stay safe in China
The morbidly-named "Are You Dead?" has topped the App Store in China, as a way for people living alone to get some help if they don't check in every day. Here's how it works.Are You Dead/Demumu is in the App StoreThe continuing advancement of technology has made it simultaneously easier to make contact with people and to become lonelier than ever. One app in China has attempted to combat the worst elements of solitude by giving families minimal reassurance about their loved ones.Demumu, also known as "Are You Dead?," is an app that has become popular in China as a literal app-based "dead man's switch." Originally released in May 2025, BBC News reports the local name "Si-le-ma" sounds like "E-le-ma," a Chinese food delivery app called "Are you Hungry?" Continue Reading on AppleInsider | Discuss on our Forums

Read more »

macOS 26 windows are hard to resize because they aren’t really rounded
One of the things I noticed after upgrading to macOS 26 was that I would sometimes fail when trying to resize windows – I’d tried to grab the corner, but nothing would happen. It turns out that this isn’t clumsiness on my part, but rather a design error by Apple – and that’s because the corners of windows aren’t really rounded … more…

Read more »

macOS 26 windows are hard to resize because they aren’t really rounded
One of the things I noticed after upgrading to macOS 26 was that I would sometimes fail when trying to resize windows – I’d tried to grab the corner, but nothing would happen. It turns out that this isn’t clumsiness on my part, but rather a design error by Apple – and that’s because the corners of windows aren’t really rounded … more…

Read more »

macOS 26 windows are hard to resize because they aren’t really rounded
One of the things I noticed after upgrading to macOS 26 was that I would sometimes fail when trying to resize windows – I’d tried to grab the corner, but nothing would happen. It turns out that this isn’t clumsiness on my part, but rather a design error by Apple – and that’s because the corners of windows aren’t really rounded … more…

Read more »

AI PCs’ Unmet Promise Dragging Down Adoption
AI PCs were marketed as transformative, but confusing messaging, underpowered hardware, and a lack of compelling use cases have left buyers unconvinced. The post appeared first on TechNewsWorld.

Read more »

Apple didn’t do its Siri Gemini deal for you and I, but it’s still good news
Apple yesterday confirmed reports that it was partnering with Google’s Gemini to provide the AI features for Siri and more. The primary reason for the announcement couldn’t have been made any clearer by the way the company chose to release the news … more…

Read more »

Not convinced of macOS Tahoe’s terrible design? Here’s the best (worst) example
Macworld First, it was Liquid Glass. Then it was the icons. And then it was the icons again (though it’s a different set of icons). Now, there’s something else about macOS Tahoe’s redesign that annoys the heck out of users: the curves, specifically the curves on the windows. In Tahoe, Apple decided to make the corner radius on windows more rounded. The thing is, as software developer Norbert Heger points out, doing this affects the interface for resizing a window. When you move the pointer to a corner to expand or contract a window, the curved corner actually creates less of an area for users to instinctively click and drag. In fact, most of the area where you can click to resize now lies outside the instinctive area. For example, in the animation below, you’ll see that when the pointer moves towards the corner of the window, the ability to resize activates outside of the window. Going outside the window is not an intuitive move. Foundry In this next animation, you can see what happens when you approach the corner from inside the window. The resizing activation doesn’t occur until you are very close to the border, which gives the impression that you need to be very precise with where you click, unless you are aware that you can click outside the window. Foundry Heger calculates that 75 percent of the window corner lies outside of the activation range. If the corner wasn’t rounded, 62 percent of that area would be inside the clickable range. Effectively, the curved corners have reduced the usability of this basic feature by a not-insignificant amount. All these UI flaws and bugs have to make you wonder, did the people who came up with Taho’s UI changes have any idea what they were doing? It’s as if the user experience wasn’t considered at all. Well, now that Apple’s Vice President of Human Interface Design is leaving, perhaps there’s a chance the company will fix what’s broken.

Read more »

Apple Santa Rosa Plaza to move to larger location — again
Continuing Apple's program of relocating stores to larger premises, Apple Santa Rosa Plaza is moving to nearby Montgomery Village.The current Apple Santa Rosa Plaza — image credit: AppleAs part of its four-year plan of opening or renovating stores around the world, Apple has been moving ones in the US, the UK, and Japan, to larger premises. Now its Santa Rosa Plaza store in California is the latest to move, with a new and larger site opening on January 23, 2026.It's the second such move for the store in its 22-year history. Originally opened in October 2004 on Santa Rosa Plaza, it was a 1,500-square-foot store. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple tests real-world Car Key performance with major car makers
Apple is participating in a week-long event intended to test the real-world performance of the standard behind Car Key. Participating carmakers in the Plugfest event organized by the Car Connectivity Consortium include BMW, General Motors, Hyundai, Mercedes, Rivian, and VW … more…

Read more »

The state of Apple and AI: The good (Gemini), the bad (xAI), and the ugly (Grok)
Macworld It’s been a good 15 or 20 minutes, so let’s check in on how things are going in the wacky world of AI. Apple made a big announcement on Monday, confirming previous rumors that its next generation of AI will be based on Google’s Gemini. The fact that Apple’s announcement of this went to CNBC’s Jim Cramer tells you pretty much all you need to know about who this message is for. As it turns out, someone else has a message for Wall Street investors, too: Nvidia CEO Jensen Huang says AI doomerism has ‘done a lot of damage’ and is ‘not helpful to society’. And by “society” he means Jensen Huang. Look, this bubble isn’t going to inflate itself, people. And Jensen’s Huang’s collection of expensive Tom Ford jackets isn’t going to pay for itself, either. Bubbles don’t bother Huang because once Nvidia sells its boards to AI companies, it’s no skin off its nose if the AI companies go under. It must be very annoying to have people complain about literally every tech trend that requires your hardware to perform. First, people complained about crypto, then NFTs, and now AI! What, are you also going to complain about the relentless assassinbots built entirely out of Nvidia cards?! There’s just no pleasing some people! “When 90% of the messaging is all around the end of the world and the pessimism, and I think we’re scaring people from making the investments in AI that makes it safer, more functional, more productive, and more useful to society.” Nvidia CEO Jensen Haung, as quoted by Fortune (Jnauary 8, 2026) You mean like this? “Elon Musk’s Grok AI posted CSAM image following safeguard lapses” Look, look, everyone just calm down. It’s already been fixed! “Masterful Gambit: Musk Attempts to Monetize Grok’s Wave of Sexual Abuse Imagery” Sorry, did the Macalope say “fixed”? He meant monetized. It’s been monetized. Yes, world-class genius and definitely not a ketamine addict Elon Musk’s solution is just to put that particular “feature”–the “feature” of making non-consensual sexual imagery of adults and children–behind a paywall. Problem = solved. If you’d like to receive regular news and updates to your inbox, sign up for our newsletters, including The Macalope and Apple Breakfast, David Price’s weekly, bite-sized roundup of all the latest Apple news and rumors.Foundry It’s hard to take Huang’s complaints about nay-saying driving away investment dollars when, in the same week, Grok was found to be generating CSAM, the company that makes it raised $20 billion in funding. Oh, nooo. Just $20 billion? When they’re providing so much… value? For… society… and stuff? Why so negative… about the… CHILD PORNOGRAPHY?! Whoo, boy. You know… the Macalope’s just gonna… he’s gonna… he needs a minute. He’ll be back in second. [INTERMISSION WHILE THE MACALOPE GOES OUTSIDE AND STARES AT CLOUDS FOR A WHILE] Okay, the Macalope’s back. Phew. Just. Wow. This is not why the Macalope got into writing about technology, okay? Still, it’s a good thing xAI is getting that extra cash because it turns out Grok is just Claude in a trench coat. …xAI staff had been using Anthropic models—specifically via the Cursor IDE—to accelerate their own development. VentureBeat, January 9. 2026 An AI in a trench coat that hangs out around the elementary school. Despite Grok’s pay-for-CSAM mode and a strongly-worded letter from some senators, both X and the dedicated Grok app are still available on both the Apple App Store and Google Play store. And it’s really hard to figure out why other than not wanting to piss off Musk. Here’s the relevant Apple App Store developer guideline: “Apps should not include content that is offensive, insensitive, upsetting, intended to disgust, in exceptionally poor taste, or just plain creepy.” These are apps that create images of children in sexual contexts, and they are not being removed because Tim Cook and Apple do not want to draw the ire of the most overcompensating billionaire of all time, who happens to have ties to the Trump administration. This, despite being asked by several U.S. senators to remove the apps and having them blocked in Malaysia and Indonesia. Apple’s only response this week was to tout its record-breaking year for services revenue. Hashtag courage. As The Verge’s Elizabeth Lopatto alludes, what is the point of being one of the biggest companies in the world with vast amounts of cash at your fingertips when you can’t even control your own app store? Newsflash for Apple, you can never be sufficiently obsequious enough to satisfy a bully. Lo and behold, it turns out an area father of 14 and interested party has some concerns about the Apple/Google deal. Hey, why not pick Grok for Apple Intelligence?! If it’s good enough for the App Store… The Macalope has said repeatedly that there is some real utility to AI. The problem is less AI than the people running AI companies, who care only for getting rich off of jamming it in everything from smartphones to smoke alarms to probably actual jam and care nothing about the social responsibility that Jensen Huang gives lip service to. Somehow, inexplicably, one company seems to be getting the moment right: Dell’s CES 2026 chat was the most pleasingly un-AI briefing I’ve had in maybe 5 years. Sorry, the Macalope may be having an episode. Did that say “Dell”? It’s not that Dell doesn’t care about AI or AI PCs anymore, it’s just that over the past year or so it’s come to realize that the consumer doesn’t. Well… you live long enough, you see everything.

Read more »

Apple @ Work Podcast: Assesing the most exciting features for IT with Apple’s recent software ugprades
Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional-grade platform all the solutions necessary to seamlessly and automatically deploy, manage & protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. In this episode of Apple @ Work, Weldon Dodd joins the show to talk about Kandji becoming Iru, what he’s looking forward to this year from Apple, and our “dream” features for IT admins from Apple. more…

Read more »

An $80 mechanical keyboard that travels well—and types better
Macworld TL;DR: The Keychron K3 is an ultra-slim, wireless, customizable mechanical keyboard that delivers a premium typing feel for just $79.99 (MSRP $104.99) with free shipping. If you love mechanical keyboards but hate bulky boards that feel like workout equipment, the Keychron K3 Version 3 hits just right. It’s ultra-slim, wireless, customizable, and surprisingly powerful—especially at $79.99 with free shipping. The K3 features a compact 75% layout, which keeps all the keys you actually use while saving valuable desk space. It connects via Bluetooth 5.2 (up to three devices) or USB-C, making it perfect for bouncing between a laptop, tablet, and desktop without missing a beat. Typing is where this keyboard really shines. The new Keychron Milk POM low-profile switches are pre-lubed, smooth, and satisfyingly quiet, delivering a premium feel in a design that’s 33% slimmer than traditional mechanical keyboards. Add in hot-swappable support, and you can fine-tune your typing experience without soldering or stress. Customization fans will appreciate QMK firmware and the Keychron Launcher web app, which lets you remap keys, create macros, and tailor shortcuts across macOS, Windows, and Linux. The RGB backlighting offers 22+ effects, while redesigned stabilizers and interior acoustic foam keep keystrokes solid and controlled. Get the Keychron K3 mechanical keyboard while it’s on sale for $79.99 (MSRP $104.99) with free shipping. Keychron K3 QMK Wireless Mechanical Keyboard – RGB Backlight (Red Switch/Hot Swappable)See Deal StackSocial prices subject to change.

Read more »

OpenAI’s first device might take on the AirPods
OpenAI’s first consumer product may be AI-powered earbuds, designed by Jony Ive and positioned as a direct AirPods rival. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

How to import and export Markdown with Apple Notes in iOS 26
Apple Notes iOS 26 iPhones can import and export Markdown-formatted documents, offering an easy way to move plain text to other apps and services.Getting Markdown in and out of Notes is incredibly easy with iOS 26The Notes app has come preinstalled on all iPhones since the first one launched in 2007. But in recent years, it's received some significant updates, and the release of iOS 26 was no different.One of the key updates means that people who write in Markdown can now more easily import and export their notes. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

iOS 26.3 beta 2 hints at upcoming end-to-end encryption for RCS messages
Last March, Apple announced plans to support end-to-end encryption (E2EE) for RCS messages, following the standardization of the feature by the GSM Association. After nearly a year of silence on that front, today’s betas suggest that Apple is moving closer to rolling it out. more…

Read more »

Apple and Big Tech could win big with potential American takeover of Greenland
As renewed talks of a U.S. acquisition of Greenland intensify under President Donald Trump, tech investors — including Magnificent Seven… The post appeared first on MacDailyNews.

Read more »

PSA: Google Chrome 151 to drop support for macOS 12 Monterey
The Chrome Platform Status blog has confirmed that Chrome 150 will be the last version compatible with macOS 12. Here’s what that means. more…

Read more »

WhatsApp testing emoji-based sticker suggestions on iOS
The latest WhatsApp TestFlight build introduces sticker suggestions, eliminating the extra steps of having to open and sift through the sticker panel. Here’s how it works. more…

Read more »

No, Google Gemini will not be taking over your iPhone, Apple Intelligence, or Siri
A lot of Apple faithful are angry about Google AI slop invading their devices, claiming that Siri will be run by Gemini, and Google will get a boatload of user data — and none of that is true. Here's what's really going on.Google Gemini will be used as a new foundation for Apple's AI strategyApple's original launch of a more personal Siri and Apple Intelligence powered by app intents was delayed due to an admitted problem with their initial approach. Doom and gloom headlines persisted since, suggesting Apple is a failure in the AI race and that it should simply close up shop and outsource AI to a third party.What has happened instead is something that should have been expected, and has somewhat been rumored, all along — Apple is licensing a Google Gemini model to help make Apple Foundation Models better. The deal isn't a one-for-one swap of Apple Foundation Models for Gemini ones, but instead a system that will let Apple keep using its proprietary models while providing zero data to Google. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Who Benefited from the Aisuru and Kimwolf Botnets?
Our first story of 2026 revealed how a destructive new botnet called Kimwolf rapidly grew to infect more than two million devices by mass-compromising a vast number of unofficial Android TV streaming boxes. Today, we'll dig through digital clues left behind by the hackers, network operators, and cybercrime services that appear to have benefitted from Kimwolf's spread.

Read more »

The Kimwolf Botnet is Stalking Your Local Network
The story you are reading is a series of scoops nestled inside a far more urgent Internet-wide security advisory. The vulnerability at issue has been exploited for months already, and it's time for a broader awareness of the threat. The short version is that everything you thought you knew about the security of the internal network behind your Internet router probably is now dangerously out of date.

Read more »

Happy 16th Birthday, KrebsOnSecurity.com!
KrebsOnSecurity.com celebrates its 16th anniversary today! A huge "thank you" to all of our readers -- newcomers, long-timers and drive-by critics alike. Your engagement this past year here has been tremendous and truly a salve on a handful of dark days. Happily, comeuppance was a strong theme running through our coverage in 2025, with a primary focus on entities that enabled complex and globally-dispersed cybercrime services.

Read more »

Dismantling Defenses: Trump 2.0 Cyber Year in Review
The Trump administration has pursued a staggering range of policy pivots this past year that threaten to weaken the nation’s ability and willingness to address a broad spectrum of technology challenges, from cybersecurity and privacy to countering disinformation, fraud and corruption. These shifts, along with the president’s efforts to restrict free speech and freedom of the press, have come at such a rapid clip that many readers probably aren’t even aware of them all.

Read more »

Most Parked Domains Now Serving Malicious Content
Direct navigation -- the act of visiting a website by manually typing a domain name in a web browser -- has never been riskier: A new study finds the vast majority of "parked" domains -- mostly expired or dormant domain names, or common misspellings of popular websites -- are now configured to redirect visitors to sites that foist scams and malware.

Read more »

Computer Virus Protection Tips and How to Remove a Virus from Your Computer
Computer viruses continue to be a widespread and costly problem, affecting everyone from casual computer users to major organizations. Some of the most damaging incidents in history started with small actions that could have happened to anyone. The Melissa virus spread in 1999 because thousands of people opened what looked like a normal email attachment. […] The post appeared first on The Mac Security Blog.

Read more »

Microsoft Patch Tuesday, December 2025 Edition
Microsoft today pushed updates to fix at least 56 security flaws in its Windows operating systems and supported software. This final Patch Tuesday of 2025 tackles one zero-day bug that is already being exploited, as well as two publicly disclosed vulnerabilities.

Read more »

Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill
A sprawling academic cheating network turbocharged by Google Ads that has generated nearly $25 million in revenue has curious connections to a Kremlin-connected oligarch whose Russian university builds drones for Russia's war against Ukraine.

Read more »

SMS Phishers Pivot to Points, Taxes, Fake Retailers
China-based phishing groups blamed for non-stop scam SMS messages about a supposed wayward package or unpaid toll fee are promoting a new offering, just in time for the holiday shopping season: Phishing kits for mass-creating fake but convincing e-commerce websites that convert customer payment card data into mobile wallets from Apple and Google. Experts say these same phishing groups also are now using SMS lures that promise unclaimed tax refunds and mobile rewards points.

Read more »

Vulnerability Summary for the Week of November 24, 2025
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info 0x4m4--HexStrike AI By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server's normal privilege; typically, this is root. There is no attempt to sanitize these arguments in the default configuration of this MCP server at the affected version (as of commit 2f3a5512 in September of 2025). 2025-11-30 9.1 CVE-2025-35028 https://takeonme.org/gcves/GCVE-1337-2025-00000000000000000000000000000000000000000000000000111111111111111111111111000000000000000000000000000000000000000000000000000000011  AMD--AMD Prof Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability. 2025-11-24 7.1 CVE-2025-48510 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9019.html  AMD--Xilinx Run Time (XRT) Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability. 2025-11-24 8 CVE-2025-52538 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability 2025-11-24 7.3 CVE-2025-0003 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in crash or denial of service. 2025-11-24 7.3 CVE-2025-0005 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface (AXI), potentially resulting in loss of confidentiality, integrity, and/or availability. 2025-11-24 7.3 CVE-2025-52539 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  ASR--Lapwing_Linux Out-of-bounds Read vulnerability in ASR1903ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26. 2025-11-26 7.4 CVE-2025-13735 https://www.asrmicro.com/en/goods/psirt?cid=41  blubrry--PowerPress Podcasting plugin by Blubrry The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the 'powerpress_edit_post' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2025-11-27 8.8 CVE-2025-13536 https://www.wordfence.com/threat-intel/vulnerabilities/id/d420ee49-e7b3-43d8-a263-8a93abd1133c?source=cvehttps://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3068https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3012https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L2368https://plugins.trac.wordpress.org/changeset/3402635/  Chanjet--CRM A vulnerability has been found in Chanjet CRM up to 20251106. The impacted element is an unknown function of the file /tools/upgradeattribute.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-11-30 7.3 CVE-2025-13788 VDB-333792 | Chanjet CRM upgradeattribute.php sql injectionVDB-333792 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #690084 | Chanjet CRM V1.0 SQL Injectionhttps://github.com/Bellingham-max/CVE/issues/1  code-projects--COVID Tracking System A vulnerability was detected in code-projects COVID Tracking System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument code results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. 2025-11-24 7.3 CVE-2025-13585 VDB-333349 | code-projects COVID Tracking System login.php sql injectionVDB-333349 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699840 | code-projects COVID Tracking System V1.0 SQL Injectionhttps://github.com/beamyou/CVE/issues/4https://code-projects.org/  code-projects--Jonnys Liquor A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. 2025-11-24 7.3 CVE-2025-13582 VDB-333346 | code-projects Jonnys Liquor GET Parameter detail.php sql injectionVDB-333346 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699554 | code-projects Jonnys Liquor 1.0 /detail.php SQL injectionhttps://github.com/rassec2/dbcve/issues/5https://code-projects.org/  code-projects--Library System A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2025-11-24 7.3 CVE-2025-13578 VDB-333342 | code-projects Library System Login index.php sql injectionVDB-333342 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699536 | code-projects Library System 1.0 index.php SQL Injectionhttps://github.com/rassec2/dbcve/issues/4https://code-projects.org/  code-projects--Question Paper Generator A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. 2025-11-24 7.3 CVE-2025-13583 VDB-333347 | code-projects Question Paper Generator POST Parameter signupscript.php sql injectionVDB-333347 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699591 | code-projects question paper 1.0 /signupscript.php SQL Injectionhttps://github.com/rassec2/dbcve/issues/6https://code-projects.org/  cursor--cursor Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arbitrary code execution. 2025-11-26 9.8 CVE-2025-62354 https://hiddenlayer.com/sai_security_advisor/2025-11-cursor/  Dassault Systmes--DELMIA Service Process Engineer A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. 2025-11-24 8.7 CVE-2025-10555 https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10555  Dassault Systmes--ENOVIA Product Manager A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. 2025-11-24 8.7 CVE-2025-10554 https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10554  DirectoryThemes--Tiger The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the 'paypal-submit.php' file not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. 2025-11-27 9.8 CVE-2025-13675 https://www.wordfence.com/threat-intel/vulnerabilities/id/4750b57e-7d8d-49d7-bbbf-46483eb97bd9?source=cvehttps://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995  DirectoryThemes--Tiger The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the plugin allowing a user to update the user role through the $user- >set_role() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator. 2025-11-27 8.8 CVE-2025-13680 https://www.wordfence.com/threat-intel/vulnerabilities/id/645f60ad-c8e5-47ec-94f1-960de4ef7838?source=cvehttps://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995  Eaton--Eaton Galileo Software Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead into an attacker with local access to execute unauthorized code or commands. This security issue has been fixed in the latest version of Galileo which is available on the Eaton download center. 2025-11-27 7.3 CVE-2025-59890 https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1024.pdf  Elated Themes--FindAll Listing The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.5. This is due to the 'findall_listing_user_registration_additional_params' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. Note: The vulnerability can only be exploited if the FindAll Membership plugin is also activated, because user registration is in that plugin. 2025-11-27 9.8 CVE-2025-13538 https://www.wordfence.com/threat-intel/vulnerabilities/id/14981949-271c-4f98-a6a1-b00619f1436d?source=cvehttps://themeforest.net/item/findall-business-directory-theme/24415962  Elated Themes--FindAll Membership The FindAll Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.4. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'findall_membership_check_facebook_user' and the 'findall_membership_check_google_user' functions. This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site which can easily be created by default through the temp user functionality, and access to the administrative user's email. 2025-11-27 9.8 CVE-2025-13539 https://www.wordfence.com/threat-intel/vulnerabilities/id/a856a96a-68d2-462d-b523-840668980807?source=cvehttps://themeforest.net/item/findall-business-directory-theme/24415962  factionsecurity--faction FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction's extension framework permits untrusted extension code to execute arbitrary system commands on the server when a lifecycle hook is invoked, resulting in remote code execution (RCE) on the host running Faction. Due to a missing authentication check on the /portal/AppStoreDashboard endpoint, an attacker can access the extension management UI and upload a malicious extension without any authentication, making this vulnerability exploitable by unauthenticated users. This issue has been patched in version 1.7.1. 2025-11-26 9.7 CVE-2025-66022 https://github.com/factionsecurity/faction/security/advisories/GHSA-xr72-2g43-586whttps://github.com/factionsecurity/faction/commit/c6389f1c76175b7c1c68d1a87b389311b16c62c3  fugue-project--fugue Fugue is a unified interface for distributed computing that lets users execute Python, Pandas, and SQL code on Spark, Dask, and Ray with minimal rewrites. In version 0.9.2 and prior, there is a remote code execution vulnerability by pickle deserialization via FlaskRPCServer. The Fugue framework implements an RPC server system for distributed computing operations. In the core functionality of the RPC server implementation, I found that the _decode() function in fugue/rpc/flask.py directly uses cloudpickle.loads() to deserialize data without any sanitization. This creates a remote code execution vulnerability when malicious pickle data is processed by the RPC server. The vulnerability exists in the RPC communication mechanism where the client can send arbitrary serialized Python objects that will be deserialized on the server side, allowing attackers to execute arbitrary code on the victim's machine. This issue has been patched via commit 6f25326. 2025-11-25 8.8 CVE-2025-62703 https://github.com/fugue-project/fugue/security/advisories/GHSA-xv5p-fjw5-vrj6https://github.com/fugue-project/fugue/commit/6f25326779fd1f528198098d6287c5a863176fc0  geoserver--geoserver GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap. However, this input is not sufficiently sanitized or restricted, allowing an attacker to define external entities within the XML request. This issue has been patched in GeoServer 2.25.6, GeoServer 2.26.3, and GeoServer 2.27.0. 2025-11-25 8.2 CVE-2025-58360 https://github.com/geoserver/geoserver/security/advisories/GHSA-fjf5-xgmq-5525https://osgeo-org.atlassian.net/browse/GEOS-11682  GitLab--GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an unauthenticated user to cause a Denial of Service condition by sending specifically crafted requests containing malicious JSON payloads. 2025-11-26 7.5 CVE-2025-12571 GitLab Issue #579168HackerOne Bug Bounty Report #3362239  GL-Inet--GL-AXT1800 A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. 2025-11-24 8.3 CVE-2025-44018 https://talosintelligence.com/vulnerability_reports/TALOS-2025-2230  HCL Software--iNotes HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote, unauthenticated attacker can specially craft a URL to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials. 2025-11-25 8.1 CVE-2025-0248 https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127032  Huawei--HarmonyOS Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality. 2025-11-28 9.3 CVE-2025-64314 https://consumer.huawei.com/cn/support/bulletinlaptops/2025/11/  Huawei--HarmonyOS Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 2025-11-28 8.4 CVE-2025-58302 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability. 2025-11-28 8.4 CVE-2025-58303 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 2025-11-28 8 CVE-2025-58310 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 2025-11-28 7.3 CVE-2025-58308 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability. 2025-11-28 7.3 CVE-2025-58316 https://consumer.huawei.com/en/support/bulletin/2025/11/  Janitza--UMG 96-PA An unauthenticated remote attacker can send a specially crafted Modbus read command to the device which leads to a denial of service. 2025-11-24 7.5 CVE-2025-41729 https://certvde.com/de/advisories/VDE-2025-094  kiteworks--security-advisories Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0. 2025-11-29 7.1 CVE-2025-53896 https://github.com/kiteworks/security-advisories/security/advisories/GHSA-23h2-3jj8-58hm  kiteworks--security-advisories Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances to intercept upstream communication which could lead to an escalation of privileges. This issue has been patched in version 9.1.0. 2025-11-29 7.2 CVE-2025-53899 https://github.com/kiteworks/security-advisories/security/advisories/GHSA-5gx5-vcpp-8cr5  Logpoint--SIEM An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability. 2025-11-27 8.5 CVE-2025-66359 https://servicedesk.logpoint.com/hc/en-us/articles/29158899698333-XSS-Vulnerability-due-to-insufficient-input-validation  Mattermost--Mattermost Mattermost versions 10.12.x

Read more »

Cybersecurity Best Practices: Essential Tips for Modern Mac Security
Cybersecurity affects every person who uses a device, connects to the internet, pays bills online, or stores important files digitally. The rise of cloud services, mobile apps, and complex online accounts has created new opportunities for criminals to target individuals. Mac users benefit from strong built-in protections, but threats now focus less on operating systems […] The post appeared first on The Mac Security Blog.

Read more »

13-inch M3 iPad Airs on sale for $70-$110 off Apple’s MSRP
Take $70-$110 off 13-inch M3 WiFi iPad Airs at Amazon as part of their current sales. Shipping is free: - 13" 128GB WiFi M3 iPad Air: $689, $110 off MSRP - 13" 256GB WiFi M3 iPad Air: $789, $110 off MSRP - 13" 512GB WiFi M3 iPad Air: $999, $100 off MSRP - 13" 1TB WiFi M3 iPad Air: $1229, $70 off MSRP Be sure to order from Amazon itself rather than a third-party seller. These are the lowest prices currently available for new 13" M3-powered iPad Airs. For the latest prices & sales, keep an eye on our iPad Air Price Tracker, updated daily.

Read more »

11-inch M3 iPad Airs on sale for $100-$110 off Apple’s MSRP
Take $100-$110 off 11-inch M3 iPad Airs at Amazon as part of their current sales. Shipping is free: - 11" 128GB WiFi M3 iPad Air: $499, $100 off MSRP - 11" 256GB WiFi M3 iPad Air: $599, $100 off MSRP - 11" 512GB WiFi M3 iPad Air: $789, $110 off MSRP - 11" 1TB WiFi M3 iPad Air: $989, $119 off MSRP Be sure to order from Amazon itself rather than a third-party seller. These are the lowest prices currently available for new 11" M3-powered iPad Airs. For the latest prices & sales, keep an eye on our iPad Air Price Tracker, updated daily.

Read more »

13-inch M5 iPad Pros on sale for up to $200 off Apple’s MSRP
Amazon has Apple's 13-inch M5 WiFi iPad Pros on stock today and on sale for $100-$200 off MSRP. Shipping is free. These are the lowest 13" iPad Pro prices currently available: - 13" 256GB M5 iPad Pro: $1149 $150 off MSRP - 13" 512GB M5 iPad Pro: $1399 $100 off MSRP - 13" 1TB M5 iPad Pro: $1799 $100 off MSRP - 13" 2TB M5 iPad Pro: $2099 $200 off MSRP For the latest prices and sales, see our iPad Pro Price Tracker, updated daily.

Read more »

11-inch M5 iPad Pros on sale for $50-$148 off Apple’s MSRP
Amazon has Apple's 11-inch M5 WiFi iPad Pros on stock today and on sale for $50-$148 off MSRP. Shipping is free. These are the lowest 11" iPad Pro prices currently available: - 11" 256GB M5 iPad Pro: $949 $50 off MSRP - 11" 512GB M5 iPad Pro: $1099 $100 off MSRP - 11" 1TB M5 iPad Pro: $1499 $100 off MSRP - 11" 2TB M5 iPad Pro: $1851 $148 off MSRP For the latest prices and sales, see our iPad Pro Price Tracker, updated daily.

Read more »

Take $283 off Apple’s 16-inch MacBook Pros with the latest sale prices at Amazon
Amazon has 16-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) on sale for up to $283 off Apple's MSRP as part of their current sales. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller: - 16" M4 Pro MacBook Pro (24GB/512GB/Black): $2239, $260 off MSRP - 16" M4 Pro MacBook Pro (24GB/512GB/Silver): $2249, $250 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB/Black): $2649, $250 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB/Silver): $2616, $283 off MSRP These are the lowest sale prices on new 16" Apple MacBook Pros right now. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Mac mini with M4 Pro CPU on sale for $1289, $110 off Apple’s MSRP
Amazon has M4 Pro Mac minis on sale for $110 off Apple's MSRP, only $1289. This model has 24GB of memory and 512GB of SSD storage. Shipping is free. Their price is the lowest currently available for this popular mini: - Mac mini M4 Pro (24GB/512GB): $1289, $110 off MSRP For the latest prices and sales, keep an eye on our Mac mini Price Tracker, updated daily.

Read more »

Apple’s most affordable iPads are on sale for $50 off MSRP, from $299
Amazon has Apple's 11th-generation A16 WiFi iPads in stock on sale for $50 off MSRP right now. Shipping is free: - 11" 11th-generation 128GB WiFi iPads: $299 $50 off MSRP - 11" 11th-generation 256GB WiFi iPads: $399 $50 off MSRP - 11" 11th-generation 512GB WiFi iPads: $599 $50 off MSRP Amazon's prices are the lowest iPads prices currently available for 11th-generation models. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.

Read more »

Apple AirPods Pro 3 on sale for $199, save $50
Amazon has Apple AirPods Pro 3 on sale for $50 off MSRP, including free shipping: - AirPods Pro 3: $199, $50 off Their price is the lowest we've seen so far for these new AirPods Pro models. Keep an eye on our AirPods Price Tracker for the latest prices and deals, updated daily.

Read more »

Apple’s 14-inch M5-powered MacBook Pros with 16GB of RAM on sale for $200 off MSRP, starting at $1399
Amazon is offering $200 discounts on new 14" M5 MacBook Pros with 16GB of memory, each including free shipping: - 14" M5 MacBook Pro (16GB/512GB/Black): $1399, MSRP $1599 - 14" M5 MacBook Pro (16GB/512GB/Silver): $1399, MSRP $1599 - 14" M5 MacBook Pro (16GB/1TB/Black): $1599, MSRP $1799 - 14" M5 MacBook Pro (16GB/1TB/Silver): $1599, MSRP $1799 These are the lowest prices available for new M5 MacBook Pros right now. For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Amazon has 15-inch M4 MacBook Airs on sale for $200 off Apple’s MSRP
Amazon has all 15" M4 MacBook Airs on sale for $200 off Apple's MSRP, starting at only $999. Be sure to select Amazon as the seller, rather than a third-party: - 15" M4 MacBook Air (16GB/256GB): $999, $200 off - 15" M4 MacBook Air (16GB/512GB): $1199, $200 off - 15" M4 MacBook Air (24GB/512GB/): $1399, $200 off Their prices are the lowest available for new 15" M4 MacBook Airs anywhere. For the latest sales & prices, see our 15" MacBook Air Price Tracker, updated daily.

Read more »

Amazon continues to offer 13-inch M4 MacBook Airs for as little as $799
Amazon has all 13" M4 MacBook Airs on sale for $200 off Apple's MSRP, starting at only $799. Be sure to select Amazon as the seller, rather than a third-party: - 13" M4 MacBook Air (16GB/256GB): $799, $200 off - 13" M4 MacBook Air (16GB/512GB): $999, $200 off - 13" M4 MacBook Air (24GB/512GB): $1199, $200 off These are the lowest 13-inch M4 MacBook Air prices currently available at Apple retailers. For the latest sales & prices see our 13" MacBook Air Price Tracker, updated daily.

Read more »

B&H is offering a $200 discount on new 16-inch M4 Pro MacBook Pros
B&H Photo has 16-inch MacBook Pros with M4 Pro CPUs in stock right now and on sale for $200 off Apple's MSRP. B&H offers free 1-2 day shipping to most US addresses: - 16" M4 Pro MacBook Pro (24GB/512GB): $2299, $200 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2699, $200 off MSRP These are among the lowest prices currently available for 16" M4 Pro MacBook Pros at Apple retailers. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »