Block ads for life on 9 devices for just $19 (was $169.99)
Macworld TL;DR: Block ads on nine devices for life with an AdGuard Family Plan Lifetime Subscription on sale for $19. Ads are one of the most frustrating parts of being online, but you aren’t stuck with them. AdGuard is a comprehensive ad blocker tool that can get rid of pop-ups, banners, and so many other frustrating ads. Right now, a lifetime family plan is also on sale for $18.97 (reg. $169.99). AdGuard works across your devices to clean up your browsing so pages load cleaner and faster. Once it is installed, it filters out a wide range of ads and prevents tracking tools from collecting your data. If you spend a lot of time online for work or school, the difference can be noticeable right away, since pages feel less cluttered and more readable. The Family Plan supports up to nine devices, which makes it easy to cover everyone in the household. You can install it on Windows, macOS, Android, and iOS, and each device gets the same protections. The parental control settings also let you block adult content and other categories you don’t want kids to access, and it works quietly in the background without requiring constant adjustments. AdGuard also checks the websites you visit so you avoid known phishing links and malware pages. It is not a VPN, but it adds another level of protection by keeping your information private from trackers that follow your activity across sites. Until December 21 at 11:59 p.m. PT, you can get an AdGuard Lifetime Family Plan for $18.97 when you use code FAMPLAN. AdGuard Family Plan: Lifetime SubscriptionSee Deal StackSocial prices subject to change.

Read more »

This refurbished 2017 MacBook Pro is 80% off right now
Macworld TL;DR: Get a Grade A refurbished 2017 MacBook Pro with Intel Core i5, 8GB RAM, and 512GB SSD for just $299.97, down from $1,499. Looking for a reliable MacBook without the premium price tag? This refurbished 2017 MacBook Pro delivers pro-level performance at a fraction of the original cost. Right now, you can snag the 13-inch model with a 3.1GHz quad-core Intel Core i5 processor for just $299.97, a massive 80% discount off the $1,499 retail price. This isn’t some beaten-up hand-me-down. The Grade A refurbished MacBook Pro arrives in near-mint condition with minimal to zero scuffing. Under the hood, you get 8GB of RAM for smooth multitasking and a speedy 512GB SSD for quick app launches and ample storage. The Intel Core i5 can turbo boost up to 3.5GHz, making it more than capable of handling demanding tasks like video editing, coding, and creative work. The 13.3-inch Retina display with True Tone technology adjusts screen color automatically for better visibility and reduced eye strain, perfect for long work sessions. You also get the Touch Bar, Touch ID for secure login, and four Thunderbolt 3 ports for maximum connectivity. Battery life clocks in at up to 10 hours, so you can stay productive without constantly hunting for an outlet. Get this refurbished Apple MacBook Pro (2017) for $299.97 (reg. $1,499). Apple Macbook Pro (2017) 13″ i5 3.1GHz Touchbar 8GB RAM 512GB SSD Space Grey (Refurbished)See Deal StackSocial prices subject to change.

Read more »

Apple cancels ‘The Last Frontier’ after just one season
Apple has decided to cancel “The Last Frontier” after one season. Here are the details. more…

Read more »

ChatGPT has a Sora-powered Holiday easter egg
As Sam Altman teaser on X, you can prompt ChatGPT with a single emoji, and get a personalized Christmas-themed video made by Sora in return. Here’s how to do it. more…

Read more »

Apple TV’s newest nature docuseries is now available
‘Born to be Wild’ is narrated by Hugh Bonneville (Notting Hill, Paddington), and adds to Apple TV’s ever-increasing catalogue of natural world content. Watch the trailer below. more…

Read more »

Apple study shows how an AI-powered ISP could dramatically improve low-light iPhone photos
Apple researchers have developed an AI model that dramatically improves extremely dark photos by integrating a diffusion-based image model directly into the camera’s image processing pipeline, allowing it to recover detail from raw sensor data that would normally be lost. Here’s how they did it. more…

Read more »

New Powerbeats Fit ad starring Travis Scott features a new unreleased track and an old tweet
Beats’ new campaign, “Dare to Dream,” recreates Travis Scott’s childhood bedroom and the moment he manifested his path to becoming a global superstar. Watch it below. more…

Read more »

ESET Home Security Premium Review: Excellent protection, but there are bugs
Macworld At a glanceExpert's Rating Pros Excellent antiviral and malware protection, that caught everything Spam/phishing protection that caught 100% of the questionable websites during testing Simple, reliable VPN client Cons Installation and setup issue The Settings pane feels buried Assorted bugs, including the Scheduler function failing during testing Our Verdict ESET Home Security Premium offers genuinely excellent core protection features that caught nearly everything that was thrown at it, along with the most impressive spam and phishing filters we’ve seen to date on macOS, which is also accompanied by a reliable VPN client. Price When Reviewed This value will show the geolocated pricing text for product undefined Best Pricing Today Retailer Price ESET (first year, 1 device) $49.99 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket Price When ReviewedEssential: $49.99 a year for one device; Premium: $79.99 a year for one device Best Prices Today: Eset Home Security Retailer Price ESET (first year, 1 device) $49.99 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket 1 year, 1 Mac (Premium) $79.991 year, 1 Mac (Essential)$49.99 There’s intent, and there’s execution, and sometimes the two don’t always mesh perfectly, but still yield an impressive result. This is the case with ESET Home Security Premium, the latest offering from Slovakian security firm ESET. ESET, which is continuing its foray into the Mac marketplace, has subtly updated its offerings for 2025. The new version, which retails for $39.99/£27.99 and up for one device for one year at an introductory price point, requires macOS 10.12 (Sierra) or later to install and run, and a free 30-day trial period is in place that doesn’t require a credit or debit card to be entered, albeit you’ll have to set up an ESET account. The software is centered on its antiviral/anti-malware core and also features a VPN client that’s designed to get you up and running quickly without battling with the settings VPN users sometimes find themselves tied up with. If there’s a poignant obstacle to ESET Home Security Premium, it came early, and while it was easy enough to download the software from the ESET website, installation turned into a struggle. (And it was confusing that the software name switched to ESET Cyber Security). The software installs a number of extensions, proxies, and modules into macOS, which have to be granted permission, making the setup a bit more manual than might be expected, as opposed to a typical software installation. Once permission was granted for everything involved, the software hit a strange bug in installing its SSL certificate, which required troubleshooting, a Terminal command workaround, and reinstallation to allow the certificate to pass through and for normal web traffic to resume. This took some finagling, and perhaps it’s a unique case or something more widespread; it’s something for the developers to take a look at should it surface again. Where its core elements are concerned, ESET Home Security Premium knocks it out of the park. The antiviral/anti-malware function offers a typical scan mode, a custom scan mode, and allows you to submit viral samples to ESET to help identify viruses and offer updates to protect against them. [Find out how ESET compares to the best Mac Antivirus apps in our group test]. Scanning the computerFoundry The scanning module is capable of multiple simultaneous scans (such as a typical scan and a custom scan on a specific folder or external volume), and the feature offers both .zip and .dmg file format scan support, but has to be configured within a deeper scan.  As for the scan results themselves, these are impressive, and next to nothing out of an extensive sample library was in a position to get through outside of a few instances where you’d have to go through multiple warning screens and bypass macOS-level system protections to execute virus and malware samples. The software itself meshes well with the macOS’ Gatekeeper and Xprotect functions, pinning down just about everything before it has a chance to install itself and upend your system functionality. In addition to this, the scan essentially nukes the vast majority of the sample malware after it was decompressed, offering little to work with in the way of potential viral and malware infections, which proved impressive.  Foundry ESET seems to have heard the clarion call where its Protections module was concerned, and amidst the multitude of extensions the software installs, the software offers Computer, Network Access, and Web and Email protections, which, for the first time I’ve ever seen, were able to bat 1,000 on spam and phishing emails from my Gmail’s Spam folder. Here, the software provided adequate warnings as to links from questionable spam and phishing websites, but still allowed you to travel to the site if you wanted to. The sites offering free power tools that I’d won? There was a warning about this. The sites telling me I had a $17,000 Cash App payment that I didn’t know about? There was a warning. Websites offering questionable medical and casino access? The warning was there, and this proved genuinely impressive. ESET’s VPN client may be somewhat bare-bones compared to a dedicated client, but it excels in terms of reliability and ease of use. The proxy settings are useful; there’s an overall internet kill switch if needed, as well as easy geolocation options to choose the country and region you’re logging in from. This may not appease the hardcore VPN user who needs more extensive options, but it’s impressive for everyday use. VPN functionFoundry ESET’s settings feel a bit tucked away, but what’s there is actually remarkably impressive and gives you a huge amount of control over the modules, their performance, how strict the blocking and filters are, firewall settings, what kind of exception/whitelist can be built, and how external volumes are recognized and handled on your Mac. The settings are well-categorized, and there’s a remarkable amount of control to be had here should you decide to take a few minutes and play with things. This is coupled with a readily accessible Help and Support module, which adds quick access to ESET’s help page, technical support, and Knowledgebase, and acts as a useful jumping-off point to get to the section of the ESET website that you need.  Outside of the installation foibles and the issue of sorting out the SSL certificate, ESET Home Security Premium installed easily and performed well, albeit there are a few things that could use some attention. The .dmg and .zip scanning and removal feel a little strange, as the scan located these, but seemed to vary in how it handled them, which can arguably be adjusted in the settings. The settings themselves are a powerful chunk of the program, but feel buried, and a quick introduction/tutorial could readily point them out and encourage the user to adjust them as needed. A Scheduler function buried within the settings supposedly allows for scans and other functions to be programmed in and executed, but failed to activate after two tests, which raises an eyebrow and could stand some debugging. If there’s a motif with ESET Home Security Premium, it’s that this is a powerful set of tools, but without quite the polish that it requires to be a must-buy utility. The settings felt buried under layers with little drawing attention to them and what they were capable of, the installer offered a semi-battle royale to get the SSL certificate up and running, the application’s Scheduler feature felt tucked away and didn’t execute during testing, and despite an incredibly powerful element of protection where viruses, malware, spam, and phishing efforts were concerned, the application needs some debugging while ESET itself needs to decide which tools to present to the user instead of opting for minimal simplicity in its home screen interface.  In the end, ESET Home Security Premium is impressive and worth trying out, and some of its features are as impressive as I’ve ever seen, but it needs some debugging and polishing to get it over the final hurdle. Still, with a free 30-day trial in place and no credit or debit card needing to be entered, this may be worth trying out to see how it fits into your everyday Mac lifestyle.  Should you buy ESET Home Security Premium Some bugs and rough edges aside, ESET Home Security Premium offers an impressive value via its raw protection features. Elements such as antivirus and malware detection, email filtering, and commendable integration with macOS’ own security frameworks offer excellent performance, and the simple but powerful VPN client offers what’s needed for day-to-day users. This, combined with a 30-day trial, allows for a good evaluation period without having to surrender payment information.

Read more »

The Tim Cook era at Apple looks to be winding down
As we step into 2026, a historic leadership transition is unfolding at three of America's most pivotal corporate giants. We're talking… The post appeared first on MacDailyNews.

Read more »

This smartpen automatically digitizes anything you write
Enjoy the timeless feel of writing by hand with the perks of modern technology with the SyncPen 4 smartpen set. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Apple stops signing iOS 26.1, here’s what that means
If you’re running iOS 26.2 and had been thinking about downgrading, you missed your chance. Here are the details. more…

Read more »

You’ll soon lose access to ChatGPT’s Voice feature on macOS
If you rely heavily on ChatGPT’s Voice feature on the Mac app, be warned: the feature is going away early next year. Here are the details. more…

Read more »

iPhone 18 Pro rumors: Under-display Face ID, variable aperture cameras, more
The iPhone 18 Pro is nowhere near release, but plenty of claims have already been made about Apple's next flagship. Here's what the rumor mill thinks is coming.The iPhone 18 Pro is expected to deliver a multitude of improvements.With its 2025 iPhone lineup, Apple's high-end models underwent significant changes, both visually and functionally. Titanium was replaced with aluminum as the case material, and the familiar rear camera bump expanded into a rectangular camera plateau.Its planned successor, the iPhone 18 Pro, more than likely won't deliver significant design alterations. In many ways, we expect an iterative upgrade, but that doesn't mean it won't include major performance enhancements. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple TV drops ‘Pluribus’ season finale early: Stream the epic conclusion on Christmas Eve!
Fans of "Pluribus" get a holiday treat: no agonizing seven-day wait for the season one finale. Apple TV typically rolls out fresh episodes… The post appeared first on MacDailyNews.

Read more »

You can now watch Stanford’s 2025 SwiftUI development lectures for free
All 16 videos and supporting material from the Spring 2025 version of Stanford’s CS193p (Developing Applications for iOS using SwiftUI) course are now online, for free. more…

Read more »

9to5Mac Daily: December 19, 2025 – iPhone Fold, Apple Music news
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by Backblaze: Give yourself the gift of peace of mind. Till the end of the month, 9to5Mac listeners get 30% off with code 9to5Xmas.  more…

Read more »

This Mac superpower lets you copy text from any PDF [Pro Tip]
Trying to copy text from a PDF can be a nightmare. But the Mac has Live Text, a secret trick up its sleeve to make it dead simple. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

HomeKit Weekly: Aqara Hub M200 brings Matter support and new automation options to HomeKit
The smart home world is continually moving toward Matter, and Aqara is one of the companies driving this transition forward at a steady pace with its new products this year. Their latest hub, the Aqara Hub M200, replaces their older hubs and features a cleaner design, along with support for Matter. For HomeKit users, this means another step toward a future where more Aqara accessories can integrate seamlessly with the Home app, while still leveraging the benefits of Zigbee behind the scenes. more…

Read more »

A Request Regarding ‘Magic Link’ Sign-Ins and Apple’s Passwords App
I despise this design pattern, because it’s inherently slower than signing in using an email/password combination that was saved to my passwords app (which is Apple Passwords) and autofilled by my web browser. It’s not just a little slower but *a lot* slower.

Read more »

Gift guide: Last-minute HomeKit recommendations
Crafting a smart home ecosystem can be tricky. There are a lot of product categories, and it can be hard to know which ones to prioritize. Here are some of my go-to smart home recommendations for outfitting a smart home — and they all make great gifts this holiday season. more…

Read more »

Missing Safari’s full Toolbar? Here’s how to bring it back to your iPhone.
Hate the compact Safari browser controls in iOS 26? You can easily switch the iPhone Safari toolbar back to the full-featured design. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Holiday Deal Alert: $100 off Apple Watch Series 11; hits all-time low of $299
As of December 19th, select colors of the Apple Watch Series 11 (GPS, 42mm) are back down to their record-low price of $299, or $100 off… The post appeared first on MacDailyNews.

Read more »

iMessage is full of features you’re probably not using (but should) [Video]
It feels like every year, Apple quietly adds dozens of small features and improvements to the Messages app, but most of them fly under the radar. These aren’t flashy or eye-grabbing features, but they are the type of features that really help the quality of life and experience of the Messages app. If you are like most people, then you have probably been using the Messages app the same way for years, meaning you are barely scratching the surface of what the app can do. Here are some of the best Messages features that you need to know. more…

Read more »

Last call for Christmas: These $199 AirPods Pro 3 are the perfect gift
Macworld If you’re still doing some last-minute gift shopping and have no idea what to get, you really can’t go wrong with a pair of Apple AirPods Pro 3, especially since you can get them for $199, a $50 discount, and still get them in time to wrap and put under the tree. The AirPods Pro 3 are easily one of our favorite earbuds of the year. When we reviewed them, we gave them a 4.5-star rating and our Editors’ Choice award, and loved the sound quality and long battery life. And the new foam-infused tips solved one of the main issues we had with the AirPods Pro 2. These earbuds deliver better noise cancellation and a much-improved Transparency mode that will make having conversations while wearing them so much better. The Live Translation feature is also pretty awesome when you’re traveling. One really cool thing with these earbuds, however, is the fact that they come with heart rate monitoring, so they can keep track of your health while you’re exercising./ So there you go: The AirPods Pro 3 are under $200 — a pleasant surprise just in time for last-minute holiday shopping, so grab a pair before Santa shows up. The AirPods Pro 3 are down to $199 againBuy now at Amazon

Read more »

Dismantling Defenses: Trump 2.0 Cyber Year in Review
The Trump administration has pursued a staggering range of policy pivots this past year that threaten to weaken the nation’s ability and willingness to address a broad spectrum of technology challenges, from cybersecurity and privacy to countering disinformation, fraud and corruption. These shifts, along with the president’s efforts to restrict free speech and freedom of the press, have come at such a rapid clip that many readers probably aren’t even aware of them all.

Read more »

Most Parked Domains Now Serving Malicious Content
Direct navigation -- the act of visiting a website by manually typing a domain name in a web browser -- has never been riskier: A new study finds the vast majority of "parked" domains -- mostly expired or dormant domain names, or common misspellings of popular websites -- are now configured to redirect visitors to sites that foist scams and malware.

Read more »

Computer Virus Protection Tips and How to Remove a Virus from Your Computer
Computer viruses continue to be a widespread and costly problem, affecting everyone from casual computer users to major organizations. Some of the most damaging incidents in history started with small actions that could have happened to anyone. The Melissa virus spread in 1999 because thousands of people opened what looked like a normal email attachment. […] The post appeared first on The Mac Security Blog.

Read more »

Microsoft Patch Tuesday, December 2025 Edition
Microsoft today pushed updates to fix at least 56 security flaws in its Windows operating systems and supported software. This final Patch Tuesday of 2025 tackles one zero-day bug that is already being exploited, as well as two publicly disclosed vulnerabilities.

Read more »

Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill
A sprawling academic cheating network turbocharged by Google Ads that has generated nearly $25 million in revenue has curious connections to a Kremlin-connected oligarch whose Russian university builds drones for Russia's war against Ukraine.

Read more »

SMS Phishers Pivot to Points, Taxes, Fake Retailers
China-based phishing groups blamed for non-stop scam SMS messages about a supposed wayward package or unpaid toll fee are promoting a new offering, just in time for the holiday shopping season: Phishing kits for mass-creating fake but convincing e-commerce websites that convert customer payment card data into mobile wallets from Apple and Google. Experts say these same phishing groups also are now using SMS lures that promise unclaimed tax refunds and mobile rewards points.

Read more »

Vulnerability Summary for the Week of November 24, 2025
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info 0x4m4--HexStrike AI By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server's normal privilege; typically, this is root. There is no attempt to sanitize these arguments in the default configuration of this MCP server at the affected version (as of commit 2f3a5512 in September of 2025). 2025-11-30 9.1 CVE-2025-35028 https://takeonme.org/gcves/GCVE-1337-2025-00000000000000000000000000000000000000000000000000111111111111111111111111000000000000000000000000000000000000000000000000000000011  AMD--AMD Prof Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability. 2025-11-24 7.1 CVE-2025-48510 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9019.html  AMD--Xilinx Run Time (XRT) Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability. 2025-11-24 8 CVE-2025-52538 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability 2025-11-24 7.3 CVE-2025-0003 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in crash or denial of service. 2025-11-24 7.3 CVE-2025-0005 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface (AXI), potentially resulting in loss of confidentiality, integrity, and/or availability. 2025-11-24 7.3 CVE-2025-52539 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  ASR--Lapwing_Linux Out-of-bounds Read vulnerability in ASR1903ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26. 2025-11-26 7.4 CVE-2025-13735 https://www.asrmicro.com/en/goods/psirt?cid=41  blubrry--PowerPress Podcasting plugin by Blubrry The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the 'powerpress_edit_post' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2025-11-27 8.8 CVE-2025-13536 https://www.wordfence.com/threat-intel/vulnerabilities/id/d420ee49-e7b3-43d8-a263-8a93abd1133c?source=cvehttps://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3068https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3012https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L2368https://plugins.trac.wordpress.org/changeset/3402635/  Chanjet--CRM A vulnerability has been found in Chanjet CRM up to 20251106. The impacted element is an unknown function of the file /tools/upgradeattribute.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-11-30 7.3 CVE-2025-13788 VDB-333792 | Chanjet CRM upgradeattribute.php sql injectionVDB-333792 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #690084 | Chanjet CRM V1.0 SQL Injectionhttps://github.com/Bellingham-max/CVE/issues/1  code-projects--COVID Tracking System A vulnerability was detected in code-projects COVID Tracking System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument code results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. 2025-11-24 7.3 CVE-2025-13585 VDB-333349 | code-projects COVID Tracking System login.php sql injectionVDB-333349 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699840 | code-projects COVID Tracking System V1.0 SQL Injectionhttps://github.com/beamyou/CVE/issues/4https://code-projects.org/  code-projects--Jonnys Liquor A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. 2025-11-24 7.3 CVE-2025-13582 VDB-333346 | code-projects Jonnys Liquor GET Parameter detail.php sql injectionVDB-333346 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699554 | code-projects Jonnys Liquor 1.0 /detail.php SQL injectionhttps://github.com/rassec2/dbcve/issues/5https://code-projects.org/  code-projects--Library System A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2025-11-24 7.3 CVE-2025-13578 VDB-333342 | code-projects Library System Login index.php sql injectionVDB-333342 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699536 | code-projects Library System 1.0 index.php SQL Injectionhttps://github.com/rassec2/dbcve/issues/4https://code-projects.org/  code-projects--Question Paper Generator A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. 2025-11-24 7.3 CVE-2025-13583 VDB-333347 | code-projects Question Paper Generator POST Parameter signupscript.php sql injectionVDB-333347 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699591 | code-projects question paper 1.0 /signupscript.php SQL Injectionhttps://github.com/rassec2/dbcve/issues/6https://code-projects.org/  cursor--cursor Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arbitrary code execution. 2025-11-26 9.8 CVE-2025-62354 https://hiddenlayer.com/sai_security_advisor/2025-11-cursor/  Dassault Systmes--DELMIA Service Process Engineer A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. 2025-11-24 8.7 CVE-2025-10555 https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10555  Dassault Systmes--ENOVIA Product Manager A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. 2025-11-24 8.7 CVE-2025-10554 https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10554  DirectoryThemes--Tiger The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the 'paypal-submit.php' file not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. 2025-11-27 9.8 CVE-2025-13675 https://www.wordfence.com/threat-intel/vulnerabilities/id/4750b57e-7d8d-49d7-bbbf-46483eb97bd9?source=cvehttps://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995  DirectoryThemes--Tiger The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the plugin allowing a user to update the user role through the $user- >set_role() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator. 2025-11-27 8.8 CVE-2025-13680 https://www.wordfence.com/threat-intel/vulnerabilities/id/645f60ad-c8e5-47ec-94f1-960de4ef7838?source=cvehttps://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995  Eaton--Eaton Galileo Software Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead into an attacker with local access to execute unauthorized code or commands. This security issue has been fixed in the latest version of Galileo which is available on the Eaton download center. 2025-11-27 7.3 CVE-2025-59890 https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1024.pdf  Elated Themes--FindAll Listing The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.5. This is due to the 'findall_listing_user_registration_additional_params' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. Note: The vulnerability can only be exploited if the FindAll Membership plugin is also activated, because user registration is in that plugin. 2025-11-27 9.8 CVE-2025-13538 https://www.wordfence.com/threat-intel/vulnerabilities/id/14981949-271c-4f98-a6a1-b00619f1436d?source=cvehttps://themeforest.net/item/findall-business-directory-theme/24415962  Elated Themes--FindAll Membership The FindAll Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.4. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'findall_membership_check_facebook_user' and the 'findall_membership_check_google_user' functions. This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site which can easily be created by default through the temp user functionality, and access to the administrative user's email. 2025-11-27 9.8 CVE-2025-13539 https://www.wordfence.com/threat-intel/vulnerabilities/id/a856a96a-68d2-462d-b523-840668980807?source=cvehttps://themeforest.net/item/findall-business-directory-theme/24415962  factionsecurity--faction FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction's extension framework permits untrusted extension code to execute arbitrary system commands on the server when a lifecycle hook is invoked, resulting in remote code execution (RCE) on the host running Faction. Due to a missing authentication check on the /portal/AppStoreDashboard endpoint, an attacker can access the extension management UI and upload a malicious extension without any authentication, making this vulnerability exploitable by unauthenticated users. This issue has been patched in version 1.7.1. 2025-11-26 9.7 CVE-2025-66022 https://github.com/factionsecurity/faction/security/advisories/GHSA-xr72-2g43-586whttps://github.com/factionsecurity/faction/commit/c6389f1c76175b7c1c68d1a87b389311b16c62c3  fugue-project--fugue Fugue is a unified interface for distributed computing that lets users execute Python, Pandas, and SQL code on Spark, Dask, and Ray with minimal rewrites. In version 0.9.2 and prior, there is a remote code execution vulnerability by pickle deserialization via FlaskRPCServer. The Fugue framework implements an RPC server system for distributed computing operations. In the core functionality of the RPC server implementation, I found that the _decode() function in fugue/rpc/flask.py directly uses cloudpickle.loads() to deserialize data without any sanitization. This creates a remote code execution vulnerability when malicious pickle data is processed by the RPC server. The vulnerability exists in the RPC communication mechanism where the client can send arbitrary serialized Python objects that will be deserialized on the server side, allowing attackers to execute arbitrary code on the victim's machine. This issue has been patched via commit 6f25326. 2025-11-25 8.8 CVE-2025-62703 https://github.com/fugue-project/fugue/security/advisories/GHSA-xv5p-fjw5-vrj6https://github.com/fugue-project/fugue/commit/6f25326779fd1f528198098d6287c5a863176fc0  geoserver--geoserver GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap. However, this input is not sufficiently sanitized or restricted, allowing an attacker to define external entities within the XML request. This issue has been patched in GeoServer 2.25.6, GeoServer 2.26.3, and GeoServer 2.27.0. 2025-11-25 8.2 CVE-2025-58360 https://github.com/geoserver/geoserver/security/advisories/GHSA-fjf5-xgmq-5525https://osgeo-org.atlassian.net/browse/GEOS-11682  GitLab--GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an unauthenticated user to cause a Denial of Service condition by sending specifically crafted requests containing malicious JSON payloads. 2025-11-26 7.5 CVE-2025-12571 GitLab Issue #579168HackerOne Bug Bounty Report #3362239  GL-Inet--GL-AXT1800 A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. 2025-11-24 8.3 CVE-2025-44018 https://talosintelligence.com/vulnerability_reports/TALOS-2025-2230  HCL Software--iNotes HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote, unauthenticated attacker can specially craft a URL to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials. 2025-11-25 8.1 CVE-2025-0248 https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127032  Huawei--HarmonyOS Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality. 2025-11-28 9.3 CVE-2025-64314 https://consumer.huawei.com/cn/support/bulletinlaptops/2025/11/  Huawei--HarmonyOS Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 2025-11-28 8.4 CVE-2025-58302 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability. 2025-11-28 8.4 CVE-2025-58303 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 2025-11-28 8 CVE-2025-58310 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 2025-11-28 7.3 CVE-2025-58308 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability. 2025-11-28 7.3 CVE-2025-58316 https://consumer.huawei.com/en/support/bulletin/2025/11/  Janitza--UMG 96-PA An unauthenticated remote attacker can send a specially crafted Modbus read command to the device which leads to a denial of service. 2025-11-24 7.5 CVE-2025-41729 https://certvde.com/de/advisories/VDE-2025-094  kiteworks--security-advisories Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0. 2025-11-29 7.1 CVE-2025-53896 https://github.com/kiteworks/security-advisories/security/advisories/GHSA-23h2-3jj8-58hm  kiteworks--security-advisories Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances to intercept upstream communication which could lead to an escalation of privileges. This issue has been patched in version 9.1.0. 2025-11-29 7.2 CVE-2025-53899 https://github.com/kiteworks/security-advisories/security/advisories/GHSA-5gx5-vcpp-8cr5  Logpoint--SIEM An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability. 2025-11-27 8.5 CVE-2025-66359 https://servicedesk.logpoint.com/hc/en-us/articles/29158899698333-XSS-Vulnerability-due-to-insufficient-input-validation  Mattermost--Mattermost Mattermost versions 10.12.x

Read more »

Cybersecurity Best Practices: Essential Tips for Modern Mac Security
Cybersecurity affects every person who uses a device, connects to the internet, pays bills online, or stores important files digitally. The rise of cloud services, mobile apps, and complex online accounts has created new opportunities for criminals to target individuals. Mac users benefit from strong built-in protections, but threats now focus less on operating systems […] The post appeared first on The Mac Security Blog.

Read more »

What Is a Network Security Key? How to Find Your Wi-Fi Password on Any Device
If you have ever tried connecting a new phone, laptop, tablet, or smart home device to your Wi-Fi network, you have likely been asked for something called a network security key. The name sounds technical, but it simply refers to the password that protects your wireless network. Understanding what a network security key is, how […] The post appeared first on The Mac Security Blog.

Read more »

Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’
A prolific cybercriminal group that calls itself "Scattered LAPSUS$ Hunters" made headlines regularly this year by stealing data from and publicly mass extorting dozens of major corporations. But the tables seem to have turned somewhat for "Rey," the moniker chosen by the technical operator and public face of the hacker group: Earlier this week, Rey confirmed his real life identity and agreed to an interview after KrebsOnSecurity tracked him down and contacted his father.

Read more »

Is Your Android TV Streaming Box Part of a Botnet?
On the surface, the Superbox media streaming devices for sale at retailers like BestBuy and Walmart may seem like a steal: They offer unlimited access to more than 2,200 pay-per-view and streaming services like Netflix, ESPN and Hulu, all for a one-time fee of around $400. But security experts warn these TV boxes require intrusive software that forces the user's network to relay Internet traffic for others, traffic that is often tied to cybercrime activity such as advertising fraud and account takeovers.

Read more »

Vulnerability Summary for the Week of November 17, 2025
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info Patch Info ABB–ABB Ability Edgenius Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1. 2025-11-20 9.6 CVE-2025-10571 https://search.abb.com/library/Download.aspx?DocumentID=7PAA022088&LanguageCode=en&DocumentPartId=&Action=Launch  AMD–AMD StoreMI A DLL hijacking vulnerability in AMD StoreMIâ„¢ could allow an attacker to […]

Read more »

Cloud Security Tips: How to Protect Your Data in the Cloud
Cloud storage has become woven into the way people save, share, and collaborate on files. From personal photos to business documents, the cloud makes information easy to access from nearly any device. Yet this convenience can also create security risks. If an attacker gains access to a cloud account, they may be able to view […] The post appeared first on The Mac Security Blog.

Read more »

Mozilla Says It’s Finally Done With Two-Faced Onerep
In March 2024, Mozilla said it was winding down its collaboration with Onerep -- an identity protection service offered with the Firefox web browser that promises to remove users from hundreds of people-search sites -- after KrebsOnSecurity revealed Onerep's founder had created dozens of people-search services and was continuing to operate at least one of them. Sixteen months later, however, Mozilla is still promoting Onerep. This week, Mozilla announced their partnership with Onerep will officially end next month.

Read more »

The Cloudflare Outage May Be a Security Roadmap
An intermittent outage at Cloudflare on Tuesday briefly knocked many of the Internet's top destinations offline. Some affected Cloudflare customers were able to pivot away from the platform temporarily so that visitors could still access their websites. But security experts say doing so may have also triggered an impromptu network penetration test for organizations that have come to rely on Cloudflare to block many types of abusive and malicious traffic.

Read more »

Mac Studio with M4 Max CPU on Holiday sale for $1799, $200 off Apple’s MSRP
B&H Photo has the standard-configuration Mac Studio model with Apple's M4 Max CPU in stock today and on Holiday sale for $200 off MSRP, now $1799 (10-Core CPU and 32GB RAM/512GB SSD). B&H also offers free 1-2 day shipping to most US addresses. Their price is the lowest available for this model. For the latest prices and sales, see our Mac Studio Price Tracker, updated daily.

Read more »

Apple’s new 14-inch M5 MacBook Pros remain on Holiday sale for $250 off MSRP, prices start at $1349
Amazon is offering $250 discounts on new 14" M5 MacBook Pros as part of their Holiday sales, each including free shipping: - 14" M5 MacBook Pro (16GB/512GB/Black): $1349.99, MSRP $1599 - 14" M5 MacBook Pro (16GB/512GB/Silver): $1349, MSRP $1599 - 14" M5 MacBook Pro (16GB/1TB/Black): $1549, MSRP $1799 - 14" M5 MacBook Pro (16GB/1TB/Silver): $1729, MSRP $1799 - 14" M5 MacBook Pro (24GB/1TB/Black): $1849, MSRP $1999 - 14" M5 MacBook Pro (24GB/1TB/Silver): $1799, MSRP $1999 These are the lowest prices available for new M5 MacBook Pros right now. For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Holiday Deal: Apple AirPods 4 for only $74, normally $129
Walmart has Apple AirPods 4 now on Holiday sale on their online store for $55 off MSRP, only $74. Order online and choose free shipping or free local store pickup (if available). This is the lowest price currently available for new AirPods among Apple's retailers: - AirPods 4: $74, $55 off Keep an eye on our AirPods Price Tracker for the latest prices and deals, updated daily.

Read more »

Apple’s 15-inch M4 MacBook Airs are back on Holiday sale again for $250 off MSRP, prices start at $949
Amazon has all 15" M4 MacBook Airs on Holiday sale again for $250 off Apple's MSRP, starting at only $949. Delivery is still available in time for Christmas. Be sure to select Amazon as the seller, rather than a third-party: - 15" M4 MacBook Air (16GB/256GB): $949, $250 off - 15" M4 MacBook Air (16GB/512GB): $1149, $250 off - 15" M4 MacBook Air (24GB/512GB/): $1349, $250 off These are the best Holiday sale prices currently available for 15" M4 MacBook Airs. For the latest sales & prices, see our 15" MacBook Air Price Tracker, updated daily.

Read more »

Holiday Sale: $70 off Apple’s 11-inch A16 iPad, now only $279
Walmart is offering a $70 Holiday discount on Apple's 11" A16 WiFi 128GB iPad, now priced at only $279. Sale price for online orders only, in-store price may vary. Order online and choose free shipping or free local store pickup (if available): - 11" 128GB WiFi A16 iPad: $279, $70 off MSRP For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.

Read more »

Take $440 off Apple’s 16-inch MacBook Pros with the latest Holiday sale prices
Amazon has 16-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) on sale for up to $440 off Apple's MSRP as part of their Holiday sales. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller: - 16" M4 Pro MacBook Pro (24GB/512GB/Black): $2199, $300 off MSRP - 16" M4 Pro MacBook Pro (24GB/512GB/Silver): $2190.08, $309 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB/Black): $2529, $370 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB/Silver): $2549, $350 off MSRP - 16" M4 Max MacBook Pro (36GB/1TB/Black): $3063.84, $436 off MSRP - 16" M4 Max MacBook Pro (36GB/1TB/Silver): $3059.76, $440 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB/Black): $3599, $400 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB/Silver): $3599, $400 off MSRP These are the lowest Holiday sale prices on new 16" Apple MacBook Pros right now. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Sunday Holiday Sale: Take $200-$250 off M4 MacBook Airs, prices start at only $749
Amazon has all 13" M4 MacBook Airs and 15" M4 MacBook Airs on Holiday sale for $200-$250 off Apple's MSRP, starting at only $749. Be sure to select Amazon as the seller, rather than a third-party: - 13" M4 MacBook Air (16GB/256GB): $749, $250 off - 13" M4 MacBook Air (16GB/512GB): $949, $250 off - 13" M4 MacBook Air (24GB/512GB): $1149, $250 off - 15" M4 MacBook Air (16GB/256GB): $999, $200 off - 15" M4 MacBook Air (16GB/512GB): $1199, $200 off - 15" M4 MacBook Air (24GB/512GB/): $1399, $200 off Their prices are the lowest available for new M4 MacBook Airs anywhere and represent one of the best Holiday deals on Apple products available right now. For the latest sales & prices, see our 13" MacBook Air Price Tracker and 15" MacBook Air Price Tracker, both updated daily.

Read more »

Holiday Sale: M4 Mac minis available starting at only $479
Amazon has M4 and M4 Pro Mac minis on Holiday sale starting at only $479 and ranging up to $120 off MSRP. Shipping is free: - Mac mini M4 (16GB/256GB): $479, $120 off MSRP - Mac mini M4 (16GB/512GB): $699, $100 off MSRP - Mac mini M4 (24GB/512GB): $923, $26 off MSRP - Mac mini M4 Pro (24GB/512GB): $1287, $112 off MSRP These are the lowest Holiday sale prices currently available on Mac minis. For the latest prices and sales, keep an eye on our Mac mini Price Tracker, updated daily.

Read more »

Walmart if offering a $100 Apple Watch Series 11 Holiday discount this weekend
Walmart is now offering a $100 online discount on new Apple Watch Series 11 models as part of their Holiday sales. Sale prices for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 42mm Apple Watch Series 11 GPS: $299, save $100 - 46mm Apple Watch Series 11 GPS: $329, save $100 - 42mm Apple Watch Series 11 GPS + 5G: $399, save $100 - 46mm Apple Watch Series 11 GPS + 5G: $429, save $100 These are the lowest Holiday sale prices available for Apple Watch Series 11 models. For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

Apple Watch SE 3 on sale this weekend for $50 off MSRP, prices start at $199
Walmart has Apple Watch SE 3 models on sale on their online store for $50 off MSRP as part of their ongoing Holiday savings. Sale prices for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 40mm Apple Watch SE GPS: $199, $50 off MSRP - 44mm Apple Watch SE GPS: $229, $50 off MSRP - 40mm Apple Watch SE GPS + 5G: $249, $50 off MSRP - 44mm Apple Watch SE GPS + 5G: $279, $50 off MSRP These are the lowest Holiday prices available for Apple Watch SE 3 models. For the latest prices & deals, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

AirPods Pro 3 on Holiday Sale for $50 off Apple’s MSRP, now only $199
Amazon has Apple AirPods Pro 3 on Holiday sale for $50 off MSRP, including free shipping: - AirPods Pro 3: $199, $50 off Their price is the lowest we've seen so far for these new AirPods Pro models. Keep an eye on our AirPods Price Tracker for the latest prices and deals, updated daily.

Read more »

Holiday Sale: 24-inch iMacs for $150-$170 off MSRP
Amazon has Apple's 24-inch M4 iMacs on Holiday sale for $150-$170 off MSRP, starting at $1149, each including free shipping: - 24-inch M4 iMac (8-Core CPU, 16GB RAM, 256GB SSD): $1149, $150 off MSRP - 24-inch M4 iMac (10-Core CPU, 16GB RAM, 256GB SSD): $1349, $150 off MSRP - 24-inch M4 iMac (10-Core CPU, 16GB RAM, 512GB SSD): $1549, $150 off MSRP - 24-inch M4 iMac (8-Core CPU, 24GB RAM, 512GB SSD): $1729-1749, $150-$170 off MSRP Amazon's prices are the lowest available for one of these new iMacs. Note that stock can vary. Price posted above is the lowest price available for each standard configuration, regardless of color. For the latest prices and deals, see our iMac Price Tracker, updated daily.

Read more »

Holiday Sale: Apple 11-inch M3 iPads for $100-$50 off MSRP
Take $100-$50 off 11-inch M3 iPad Airs at Amazon as part of their ongoing Holiday sale. Shipping is free: - 11" 128GB WiFi M3 iPad Air: $499, $100 off MSRP - 11" 256GB WiFi M3 iPad Air: $599, $100 off MSRP - 11" 512GB WiFi M3 iPad Air: $824.99, $75 off MSRP - 11" 1TB WiFi M3 iPad Air: $1049, $50 off MSRP Be sure to order from Amazon itself rather than a third-party seller. These are the lowest prices currently available for new 11" M3-powered iPad Airs. For the latest prices & sales, keep an eye on our iPad Air Price Tracker, updated daily.

Read more »

27-inch 5K Studio Displays back in stock and on Holiday sale starting at $1368, up to $231 off MSRP
Amazon has Apple Studio Displays (Standard Glass) back in stock and on Holiday sale starting at $1368, up to $231 off MSRP. Shipping is free: - Studio Display (Tilt Adjustable): $1368 $231 off MSRP - Studio Display (Tilt & Height Adjustable): $1849 $150 off MSRP Their prices are the lowest available for Studio Displays among the retailers we track, and $1368 is the lowest price we've seen for a new Studio Display for the past few months. For the latest prices and sales, see our Studio Display Price Tracker, updated daily.

Read more »

2nd generation Apple HomePods on sale for $20 off MSRP with free 1-2 day shipping
B&H Photo has Apple's 2nd generation full-size HomePods (White or Midnight) on sale for $20 off MSRP. This is the steepest discount available on 2nd-gen HomePods among the Apple retailers we track. In addition, B&H offers free 1-2 day shipping on these models to most US addresses: - HomePod (White): $279, save $20 - HomePod (Midnight): $279, save $20 See our HomePod Price Tracker for the latest prices and deals from Apple and its resellers.

Read more »