Apple Pay for Transit Now Works in These 12 U.S. Cities
Several major U.S. cities support the Apple Pay for transit feature that Apple has rolled out, providing a simple way for those who use public transportation to pay for rides. ‌Apple Pay‌ for transit works in Atlanta, the Bay Area, Boston, Chicago, Los Angeles, New York, Orange County, Philadelphia, Portland, San Diego, Seattle, and Washington, DC. Some of these cities have supported ‌Apple Pay‌ for transit purposes for several years, and in others like Atlanta, support is new as of 2026. Atlanta launched its tap-to-pay MARTA contactless system in March 2026, allowing iPhone and Apple Watch users to tap to pay their fares at rail station fare gates using the Apple Wallet app. Cities that support ‌Apple Pay‌ for transit allow iPhone owners to turn on Express Mode to pay for transit fares without needing to unlock their device and authenticate with Face ID or Touch ID. A card for Express Transit can be selected by opening up the Wallet and ‌Apple Pay‌ section of the Settings app and tapping on the Express Transit Card option to make a selection. When a credit or debit card is associated with Express Mode, it can be used to pay for transit automatically with no authentication. On iPhone models that support power reserve, transit payments can also be made when the iPhone is out of battery. Power reserve works for up to five hours after an iPhone dies, and it is available on the iPhone XS and later. Some cities support adding a credit or debit card to the Wallet app for transit, while others require a specific transit card to be added to the Wallet app. The Bay Area works with the Clipper app or a credit card. Chicago's system only works with the Ventra card, LA's transit works with the TAP card, and Portland's transit system works with the Hop card. In some locations, there's also support for fare capping. With New York's OMNY system, for example, subway and local bus fares are capped at $35 per week. As long as you use the same device each time you tap pay for a ride, rides after the $35 cap will be free for the rest of the seven-day period. LA's TAP system and OC's Wave system also support fare capping for ‌Apple Pay‌. The iPhone 6s and 2016 iPhone SE and later all support Express Mode with ‌Apple Pay‌ for transit purposes. Express Mode also works on the Apple Watch Series 1 or later as long as watchOS 5.2.1 or later is installed. ‌Apple Pay‌ for transit also works in several cities around the world, including London, Paris, Hong Kong, Tokyo, Toronto, Beijing, and Shanghai. When traveling, you will need to look into how transit works in the city you're in, but it is a simple way to use public transportation because there's no need to pre-purchase travel tickets at a kiosk. Apple has a website where the different transit systems are explained.Related Roundup: Apple PayTags: Apple Wallet, Express TransitRelated Forum: Apple Music, Apple Pay/Card, iCloud, Fitness+This article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Claude Gains Integrations With Adobe, Blender, SketchUp and Other Creative Apps
Anthropic today updated Claude with new connectors aimed at creative professionals, adding integrations for Ableton, Adobe, Affinity, Autodesk Fusion, Blender, Resolume Arena and Wire, SketchUp, and Splice. Connectors are tools that Claude can use to access other platforms and help with completing tasks. Anthropic says that Claude can open up new ways for creatives to work and take on larger-scale projects. Ableton - Allows users to ask questions about the official product documentation for Live and Push. Adobe - More than 50 tools across Creative Cloud apps like Photoshop, Premiere, and Express are available. Affinity - The Affinity connector lets users automate repetitive production tasks and generate custom features. Autodesk Fusion - Fusion subscribers can create and modify 3D models through conversations with Claude. Blender - The Blender connector adds a natural-language interface for the Python API. Users can analyze and debug Blender scenes, build custom scripts to batch-apply changes to objects, and add new tools to the Blender interface. Blender's documentation is also available. Resolume Arena and Wire - Visual artists can control Arena, Avenue, and Wire in real time with natural language. SketchUp - Users can describe an idea to Claude as a starting point for a 3D model and then open it in SketchUp for further revision. Splice - Music producers can search Splice's catalog of royalty-free samples. Anthropic suggests that Claude can be helpful for multiple creative tasks, offering tutoring for complex tools, writing scripts and plugins for software, translating formats and restructuring data, and completing repetitive production work.Tag: AnthropicThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

YouTube Tests AI-Powered 'Ask YouTube' Conversational Search Feature
YouTube is testing a new search feature that it says is meant to feel more like a conversation than a search interface. Users are able to ask complex questions in natural language, receive results that include video and text, and then ask follow-up questions. The new search option is part of YouTube Labs, an opt-in program that lets YouTube Premium subscribers gain early access to experimental features and prototypes. YouTube Labs is available to U.S. users, and subscribers sign up on the YouTube Labs website. According to YouTube, subscribers who opt in to try the new search can enter a prompt in the search bar, like "plan a 3-day road trip between San Francisco and Santa Barbara," and then select the Ask YouTube option to get the results. Search results include AI summary text, short videos, and long videos, with relevant segments in videos highlighted. The Ask YouTube search interface suggests some search prompts, such as "unique ideas for a backyard water feature," "plan a living room redesign using thrifted items," and "how to make a traditional French omelet." Other YouTube Labs features in testing right now include Beyond the Beat AI details when listening to radio and mixes in the YouTube Music app, and VibeCheck, an AI coaching feature that provides tips on Shorts videos before they're published. The updated search feature will be in testing until June 8.This article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

iOS 27 to Add New Apple Intelligence Photo Editing Tools
Apple will add new Apple Intelligence photo editing tools to the Photos app in iOS 27, iPadOS 27, and macOS 27, reports Bloomberg. On-device ‌Apple Intelligence‌ will be able to make subtle changes to image quality, positioning, and focus, with the new capabilities joining Clean Up, the sole AI editing feature that Apple has released to date. The ‌Photos‌ app in ‌iOS 27‌, iPadOS 27, and ‌macOS 27‌ will have an ‌Apple Intelligence‌ Tools section when editing an image. Options will include Extend, Enhance, and Reframe. Extend - Extend generates additional image content beyond the original frame of the photo, filling in scenery when changing the crop of an image. This tool will support expanding the edges of an image with zoom gestures. Enhance - Uses AI to automatically tweak color, lighting, and other image parameters, similar to how the auto editing feature works now. Reframe - When used with spatial photos, Reframe will let users change the perspective of an image after it's captured. Apple apparently hasn't gotten the tools working perfectly, so Extend and Reframe could be delayed or scaled back. Clean Up, Apple's existing AI tool, still has issues even a year and a half after launching. It is able to remove unwanted objects from an image, but it is not as good at filling in missing information as other AI tools from smartphone makers like Samsung and Google. More on the features coming in ‌iOS 27‌, including Siri updates, can be found in our iOS 27 roundup. ‌iOS 27‌ will be previewed at the WWDC 2026 keynote that's set to take place on June 8, 2026.Related Roundup: iOS 27Tag: Apple IntelligenceThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Apple Weather App Experiencing Outage
If you've noticed the Apple Weather app isn't loading weather data right now, you're not alone. The app appears to be experiencing an outage. According to Apple's System Status page, the Weather app may be slow or unavailable for some users. The problem started at 11:36 a.m. Eastern Time and is ongoing. Reports on social media suggest that the Weather app is slow to load for some, and is not loading data for others. We'll update this article when the issue has been resolved.This article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Tim Cook Meets With Commerce Secretary Howard Lutnick Ahead of CEO Transition
Apple CEO Tim Cook met with United States Secretary of Commerce Howard Lutnick on Monday. The U.S. Department of Commerce shared details on the meeting on social media, and said that Lutnick wished Cook well, commending his "remarkable leadership and lasting contributions to American technology." Last week, Apple announced that Cook would be stepping down from his role as CEO on September 1, 2026, with current hardware engineering chief John Ternus set to take over. Cook's visit with Lutnick was his first high-level Trump administration meeting since last week's transition news. Cook does not plan to leave Apple, and will instead transition to executive chairman, where he will "assist with certain aspects of the company, including engaging with policymakers around the world." In a letter to employees, Cook said that he is healthy and that he plans to be at Apple "for a long time" in his new role. "Apple will be my top priority," he said. "It's who I am at my core, and I can't imagine it any other way." Cook told employees that he believes he can help strengthen Apple's global relationships. Cook has navigated two Trump presidencies so far, maintaining a positive relationship with the Trump administration and earning tariff exemptions for Apple. Cook personally donated $1 million to Trump's inaugural fund in 2025, and he presented Trump with a custom gift featuring a glass plaque with a 24-karat gold base after promising Apple would invest a total of $600 billion in the U.S. over a four-year period. Trump last week said that he has "always been a big fan" of Cook, and that the two had a "long and very nice relationship." Trump said he was pleased with Cook's outreach efforts. "I was very impressed with myself to have the head of Apple calling to 'kiss my ass,'" said Trump. According to Trump, he solved a "fairly large problem" for Cook during his first term, and he said he would help Cook where possible when Cook is not "too aggressive" in what he asks for. Ahead of announcing his transition to a new role, Cook said in an early April interview that the Trump administration was "very accessible," and willing to "engage." Cook explained that he felt engagement and communication were important values, giving some insight into how he is approaching his new position. But engagement for me, not just in the U.S. but around the world, is so important because it is very complex, working through local laws, local customs, local culture, local regulations. Every country is its own story. Everybody looks at things differently. The only way you get a feel for that is to sit before someone and communicate and engage. If you went in my conference room, you would see the Teddy Roosevelt quote 'It is not the critic who counts.' I've never believed that just yelling from the sideline about plus or minus was a good strategy. Your voice just goes into the wind. So you'll see me everywhere, and you'll wonder 'oh, he's meeting with somebody that has a different view than him.' I think that's good. I think it's good. I think a problem in the world right now is that it's so polarized and different views aren't shared or discussed. They just become hardened. And I don't think that's good. With Cook taking on communication with policymakers around the world, incoming CEO John Ternus will be able to spend more time focusing on Apple's growth, and he won't be exposed to the same criticism that Cook has faced for his relationship with Trump and other world leaders. Cook is still in Washington and he attended today's State Arrival Ceremony for King Charles III and Queen Camilla, who began their four-day state visit on Monday. Cook may also attend the State Dinner this evening.Tag: Tim CookThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

M4 vs. M5 MacBook Air Buyer's Guide
Apple last month announced a new MacBook Air, introducing the M5 chip, faster wireless connectivity, double the base storage, and a more capable charger, while simultaneously discontinuing the M4 model. So how does the new machine compare? The M5 MacBook Air starts at $1,099 for the 13-inch model and $1,299 for the 15-inch, a $100 increase over the equivalent M4 models. In exchange, base storage doubles from 256GB to 512GB, and Apple says the new SSD delivers twice the read and write speeds of the previous generation. Education pricing is also available directly from Apple and typically shaves at least $100 off the price. The main upgrade between the two models is the chip. Compared to the M4, the M5 delivers: Up to 15% faster multithreaded CPU performance Up to 30% faster overall graphics performance Up to 45% faster ray tracing performance 27.5% higher unified memory bandwidth In addition to these general performance claims, Apple published a set of specific real-world workload results showing measurable gains in AI-driven applications: 4×+ peak GPU compute performance for AI 3.6× faster time to first token (LLM) 1.8× faster Topaz Video Enhance AI processing 1.7× faster Blender ray-traced rendering 2.9× faster AI speech enhancement in Premiere Pro Beyond raw performance, the M5 introduces several meaningful architectural changes. The GPU includes a dedicated Neural Accelerator in every core, a hardware addition absent from the M4, and Apple is exposing this via new Metal 4 developer APIs with Tensor capabilities. The ray tracing engine advances to its third generation, and dynamic caching moves to its second generation. Memory bandwidth rises from 120 GB/s to 153 GB/s, enabled by the move from TSMC's second-generation 3nm process (N3E) to its third-generation ‌3nm‌ process (N3P). The M5 ‌MacBook Air‌ also gains Apple's N1 wireless chip, bringing Wi-Fi 7 and Bluetooth 6 in place of the M4 model's Wi-Fi 6E and Bluetooth 5.3. ‌MacBook Air‌ (2025) ‌MacBook Air‌ (2026) Apple M4 chip Apple M5 chip Based on A18 chip from 2024's iPhone 16 Based on A19 Pro chip from 2025's iPhone 17 Pro 4 performance + 6 efficiency cores 4 super cores + 6 efficiency cores Made with TSMC's second-generation ‌3nm‌ node (N3E) Made with TSMC's third-generation ‌3nm‌ node (N3P) No integrated Neural Accelerators Integrated Neural Accelerator in every GPU core Metal 3 developer APIs Metal 4 developer APIs with Tensor APIs to program GPU Neural Accelerators Second-generation ray tracing engine Third-generation ray tracing engine First-generation dynamic caching Second-generation dynamic caching Shader cores Enhanced shader cores 120 GB/s memory bandwidth 153 GB/s memory bandwidth Apple N1 chip Wi-Fi 6E Wi-Fi 7 Bluetooth 5.3 Bluetooth 6 (Apple N1 chip) Support for up to two external displays when the lid is open Support for up to two external displays simultaneously over a single Thunderbolt port; one display up to 8K at 60Hz or 5K at 120Hz 30W USB-C Power Adapter 40W Dynamic Power Adapter with 60W Max 256GB base storage, up to 2TB 512GB base storage, up to 4TB Introduced in March 2025 Introduced in March 2026 Started at $999 (13-inch), $1,199 (15-inch) Starts at $1,099 (13-inch), $1,299 (15-inch) For users whose workloads include on-device AI inference, complex 3D rendering, or other GPU-bound and memory-intensive tasks, the jump from M4 to M5 is significant. The combination of per-core Neural Accelerators, higher memory bandwidth, and the new GPU architecture produces multi-fold speed-ups in specific AI operations. In environments where time-to-result directly affects workflow such as local LLMs, diffusion models, video enhancement, or ray-traced production, the M5 represents a meaningful step-change. For typical day-to-day usage including browsing, office work, media playback, and basic editing, the difference is highly unlikely to be perceptible in any way. The M4 was already a high-performance chip that routinely exceeded the demands of normal Mac workloads, and for the overwhelming majority of M4 ‌MacBook Air‌ owners, there is clearly no general-purpose reason to upgrade. For new buyers choosing between the two models, the M5 is the more straightforward long-term choice. The doubled base storage alone changes the value calculus, and when you consider that Apple previously charged $200 to upgrade the M4 Air from 256GB to 512GB, the M5 effectively costs $100 less than a comparably configured M4 model would have at launch. If future-proofing is a priority and you intend to keep the machine for many years, the M5 model will be better equipped to handle increasingly prevalent on-device AI workloads as they mature. Related Roundup: MacBook AirBuyer's Guide: MacBook Air (Buy Now)Related Forum: MacBook AirThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Apple Vision Pro Used in World-First Cataract Surgery
Apple's Vision Pro has hit another medical-use milestone, with a New York ophthalmologist becoming the first surgeon to perform cataract surgery using the spatial computing headset. Dr. Eric Rosenberg of SightMD completed the initial procedure in October 2025 and has since performed hundreds of additional cases using ScopeXR, a surgical platform he co-developed for Apple's mixed reality device. ScopeXR streams live feeds from 3D digital surgical microscopes directly into the Vision Pro, which lets the surgeon view the operative field in stereoscopic 3D while overlaying preoperative diagnostic data. The platform also supports real-time remote collaboration, allowing surgeons to virtually join procedures and see exactly what the operating surgeon sees. "We are now able to bring the world's best surgeon into any operating room, at any hour, from anywhere on the planet," said Dr. Rosenberg in a company press release. "From residents performing their first cases to surgeons facing unexpected complications, this technology democratizes access to expertise and that will save vision."It's another example of Apple's move toward enterprise and professional use cases for Vision Pro, with widespread consumer adoption beleaguered by the headset's $3,499 starting price and bulky form factor. Apple has increasingly leaned into specialized applications in fields like medicine, aviation training, and industrial design - markets where the device's capabilities can justify its cost, in other words. The headset was never expected to be mass-market from day one, according to Apple. Even so, enthusiasm is said to have cooled far faster than anticipated. Based on the latest reports, there are now no Apple Vision headsets in active development, with the company's focus pivoting to lightweight smart glasses, where Meta has already seen success. Last October, Apple introduced an updated Vision Pro model featuring the M5 chip, the first hardware revision of the device.Related Roundup: Apple Vision ProBuyer's Guide: Vision Pro (Buy Now)Related Forum: Apple Vision ProThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Apple Announces 'Ted Lasso' Season Four Streaming Date
Apple today announced that its hit comedy-drama series "Ted Lasso" is returning for a fourth season starting Wednesday, August 5. One new episode will follow every Wednesday through October 7. "Ted Lasso" is one of the most popular shows ever released on the Apple TV streaming service. The eponymous character Ted Lasso, played by Jason Sudeikis, starts off as a small-time football coach from Kansas who is hired to coach a professional soccer team in England, despite having no experience coaching soccer. In the fourth season, Apple says Lasso returns to England to take on his biggest challenge yet: coaching a second division women's soccer team. "Throughout the course of the season, Ted and the team learn to leap before they look, taking chances they never thought they would," said Apple. Fan favorites such as Hannah Waddingham, Juno Temple, Brett Goldstein, Brendan Hunt, and Jeremy Swift are all set to return in the fourth season. The third season of "Ted Lasso" was released in 2023, so there has been a long wait for a fourth season. The series has won several major awards since it debuted in 2020, with its overall positive tone making it a popular comfort show.Tags: Apple TV Service, Apple TV ShowsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

AirPods Pro 3 Return to $199.99 Low Price on Amazon
Amazon today has the AirPods Pro 3 available for $199.99, down from $249.00. This is a match of the all-time low price on the AirPods Pro 3, and it's accompanied by a solid deal on the AirPods 4. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. This model of the AirPods Pro launched in September 2025 and has 2x better Active Noise Cancellation than the previous generation, better audio quality, a revised fit that's meant to improve comfort and stability, Live Translation for in-person conversations, and heart rate sensing for workouts. $49 OFFAirPods Pro 3 for $199.99 You can also get the AirPods 4 for $99.00, down from $129.00. This is a second-best price on the AirPods 4, which is the base model without Active Noise Cancellation. Amazon provides a May 4 estimated delivery date for free shipping, with faster delivery options for Prime members. $30 OFFAirPods 4 for $99.00 Head to our full Deals Roundup to get caught up with all of the latest deals and discounts that we've been tracking over the past week. Deals Newsletter Interested in hearing more about the best deals you can find in 2026? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

20th Anniversary iPhone's 'Liquid Glass' Display to Make Bezels Vanish
Apple's 20th-anniversary iPhone will use a new type of curved screen technology that more effectively hides the display bezels from the user's line of sight for a purer viewing experience, claims a Chinese leaker. Apple is reportedly planning a radical redesign for the 20th-anniversary iPhone that could feature a display that curves around all four edges of the device. To achieve this, Apple will reportedly use an equal-depth quad-curved panel supplied by Samsung, and it sounds like it's going to be quite different from typical curved screens. According to leaker Ice Universe, "It is not a traditional quad curved display, nor is it anything like the curved screen solutions we have seen on Android phones over the years." This is said to be down to its extremely subtle curvature, but there are apparently other factors that could come into play. "What truly creates the visual impact may be a sophisticated combination of optical refraction, light guiding structures, and carefully engineered visual illusion," said Ice Universe, writing in a post on X. "The end result could be a display where the bezel nearly disappears from sight, while edge viewing remains natural and undisturbed."Apple will also reportedly adopt a Samsung-made OLED technology called COE (Color Filter on Encapsulation) to make the 20th-anniversary iPhone's display brighter and thinner than previous panels. Apple may refer to it as a "Liquid Glass Display," in a nod to its latest software interface redesign, claims the leaker. Apple may define its next generation display as "Liquid Glass Display."It is not a traditional quad curved display, nor is it anything like the curved screen solutions we have seen on Android phones over the years. The curvature itself could be extremely subtle. What truly... pic.twitter.com/onj81yNWQf— Ice Universe (@UniverseIce) April 27, 2026 To mark the 20th-anniversary of the iPhone in 2027, Apple ideally wants an uninterrupted display with no cutouts for the most visual impact, but concealing the Face ID system and selfie camera under the panel is going to be a challenge. Display analyst Ross Young has said that Apple won't have under-display ‌Face ID‌ ready to go for a 2027 iPhone, but other leakers think it's possible. If Apple can't get everything under the display, we may see under-display ‌Face ID‌ and then a small hole-punch cutout on the front for the front-facing camera.Tags: 20th-Anniversary iPhone, Ice UniverseThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Apple Introduces App Store Monthly Subscriptions With 12-Month Commitment
Apple today announced the launch of a new subscription option for App Store developers: monthly subscriptions with a 12-month commitment. The new option allows developers to offer subscribers discounted pricing typically associated with an annual subscription but paid on a monthly basis to keep payments more affordable. This new payment option allows you to offer subscribers more affordable options. People can cancel their subscription at any time, which will prevent the subscription from renewing after they've completed their agreed-to payments to fulfill their commitment.Apple says that the new feature provides transparency to users by allowing them to easily view the number of completed and remaining payments they've made toward their annual commitment. Apple will also send email and optional push notifications ahead of renewals. Developers can begin creating these new subscription types in ‌App Store‌ Connect and testing them in Xcode starting today, and they will go live to users on iOS 26.4 and equivalent versions for other platforms next month alongside the launch of iOS 26.5 and related updates. Notably, it appears the United States and Singapore will be excluded from these subscriptions for the time being, and there's no word on when they might roll out in these markets.Tag: App StoreThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Spotify Launches Fitness Hub With 1,400+ Peloton Workouts
Spotify today launched a new Fitness hub, bringing over 1,400 on-demand Peloton workout classes to Premium subscribers alongside a range of free content from independent wellness creators. The Peloton classes span strength, cardio, yoga, pilates, barre, meditation, stretching, and outdoor run and walk, and require no specialist equipment. Peloton's bike workouts are not included. The catalog is available in the U.S., UK, Australia, Germany, Austria, Canada, Mexico, Sweden, and Spain, with Spotify saying it will expand to more countries over time. Both free and Premium subscribers can access curated playlists and content from a range of established wellness creators, including Yoga With Kassandra, Caitlin K'eli Yoga, Sweaty Studio, Chloe Ting, Pilates Body by Raven, Abi Mills Wellness, and Sophiereidfit. The Peloton partnership content, featuring instructors such as Rebecca Kennedy, Ally Love, and Rad Lopez, is available to Premium subscribers only, ad-free. The Fitness hub includes an onboarding questionnaire that asks users what type of movement they want, how hard they want to push, and their experience level, then generates a personalized starter pack. Classes are primarily in English, with select options in Spanish and German. Offline downloads are supported, and users can switch between watching a class on TV and listening on a phone or smart speaker in audio-only mode. Nearly 70% of Premium subscribers apparently work out monthly, and there are more than 150 million fitness playlists active on the platform. Fitness and workout content also ranks among the top use cases for the company's recently launched AI-powered Prompted Playlist feature. The Fitness hub is accessible by searching "fitness" in the Spotify app's Search tab, or via the "Browse all" menu.Tags: Peloton, SpotifyThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Fourth macOS Tahoe 26.5 Beta Now Available for Developers
Apple today provided the fourth beta of an upcoming macOS Tahoe 26.5 update to developers for testing purposes, with the update coming a week after the third beta. Developers can download the ‌macOS Tahoe‌ 26.5 update by opening up the System Settings app, selecting the General category, and then choosing Software Update. Beta Updates will need to be enabled, and a free developer account is required. No new features were found in the first three ‌macOS Tahoe‌ 26.5 betas, and it's likely the update primarily focuses on bug fixes and performance improvements.Related Roundup: macOS TahoeRelated Forum: macOS TahoeThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Apple Seeds Fourth iOS 26.5 and iPadOS 26.5 Betas to Developers
Apple today seeded the fourth betas of upcoming iOS 26.5 and iPadOS 26.5 updates to developers for testing purposes, with the software coming a week after Apple released the third betas. Registered developers can download the betas from the Settings app on the iPhone or iPad by going to the General section and selecting Software Update. iOS 26.5 and iPadOS 26.5 do not include new Siri capabilities, suggesting any ‌Siri‌ updates are being held until iOS 27. The Maps app has a Suggested Places feature for recommending locations to visit nearby based on trends and recent searches, plus Apple is laying the groundwork for ads in the Apple Maps app. Apple is continuing to test end-to-end encryption (E2EE) for RCS messages between iPhone and Android users. Apple included the feature in the iOS 26.4 beta, but removed it before the update launched to the public. In the European Union, Apple is testing proximity pairing, notification forwarding, and Live Activities for third-party wearables like earbuds and smartwatches. The functionality will allow third-party wearables to have many of the same features as the Apple Watch and AirPods. More detail on what's new in iOS 26.5 can be found in our iOS 26.5 beta features guide.Related Roundups: iOS 26, iPadOS 26Related Forum: iOS 26This article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Apple Releases Fourth watchOS 26.5, tvOS 26.5 and visionOS 26.5 Betas
Apple today provided developers with the fourth betas of upcoming watchOS 26.5, tvOS 26.5, and visionOS 26.5 betas for testing purposes. The software comes a week after Apple released the third betas for each platform. The software updates are available through the Settings app on each device, and because these are developer betas, a free developer account is required. There's no word on what's in the software as of yet. watchOS, tvOS, and visionOS often get few features in each new beta, with updates primarily focusing on bug fixes and performance improvements. Nothing new was found in the first three betas. Related Roundups: Apple TV, Apple Vision Pro, watchOS 26Buyer's Guide: Apple TV (Don't Buy), Vision Pro (Buy Now)Related Forums: Apple TV and Home Theater, Apple Vision Pro, Apple WatchThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Apple Hit With Unfair Labor Practice Charge for Refusing to Transfer Unionized Towson Workers
The IAM Union representing Apple employees in Towson, Maryland today said that it is filing an Unfair Labor Practice charge [PDF] against Apple with the National Labor Relations Board. The union is accusing Apple of unlawful discrimination against unionized workers. Earlier this month, Apple announced plans to close the Towson Apple Store alongside two other Apple locations in Connecticut and California. The Towson store was the first Apple retail location to unionize in the U.S. back in 2022. With most store closures, employees are relocated automatically to nearby stores, but Apple said the union rules at the Towson location prevented it from moving the workers to other stores. Apple instead said that Towson employees are "eligible to apply for open roles at Apple in accordance with the collective bargaining agreement." The IAM Union said at the time that it was "outraged" by Apple's decision, and that there was nothing in the agreement that prevented employees from being relocated. IAM said Apple's claim was false, and that it raised "serious concerns" that the closure was a "cynical attempt to bust the union." In today's filing, the IAM Union complained that Apple allowed employees at two non-union stores to transfer to other locations, but forced Towson employees to reapply for positions through the same process as external candidates. "This is about whether workers are treated fairly under the law or punished for exercising their rights," said IAM Union International President Brian Bryant. "Apple is denying union-represented workers the same opportunities it is giving to others -- and doing so because these workers chose to organize. That is discrimination, and it is exactly what federal labor law is designed to prevent." The union has asked Apple to reverse its decision and give Towson workers the same opportunity to transfer to other retail locations. The three stores that Apple is closing are located in struggling shopping malls that are slowly shutting down and losing foot traffic.Tag: Apple StoreThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

MacBook Neo Still Seeing Extended Delivery Estimates at Apple, But Amazon and Walmart Have Stock
Apple's MacBook Neo has recently been struck by delayed delivery estimates on Apple.com, due to the notebook's booming popularity. However, both Walmart and Amazon offer deliveries as soon as tomorrow, and even feature small discounts on the Neo. Following its launch in March, the ‌MacBook Neo‌ has become a big hit for Apple, with the company struggling to keep the computer in stock online and in Apple stores. As of writing, Apple.com quotes a 2-3 week delivery estimate on every model of the Neo in the U.S. and many other countries. If you want to prioritize saving a bit of money, Amazon has every model of the MacBook Neo for $9 off this week. Free delivery options place the Neo arriving as soon as May 2, while Prime members can get same-day shipping on the 256GB models in many locations. Over at Walmart, you won't find any discounts, but you will find similarly quick delivery estimates. Select locations should see delivery estimates as soon as April 28 through April 29 on every model of the ‌MacBook Neo‌. If you have Walmart+ instead of Amazon Prime, this could be a better option despite the lack of a straight cash discount. The ‌MacBook Neo‌ is Apple's low-cost Mac, priced at $599 for the 256GB model and $699 for the 512GB model with Touch ID. Students can get the computer for even cheaper at $499 through Apple's education store on its website. If you're shopping for the new M5 MacBook Air, Amazon is currently hosting big $150 discounts on nearly every model. Prices now start at $949.99 for the 512GB 13-inch model. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running.Related Roundup: MacBook NeoBuyer's Guide: MacBook Neo (Buy Now)Related Forum: MacBook NeoThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Apple Planning to Launch Two New 'Ultra' Products in the Next Year
Apple has decided to market two of its new products over the next year as "Ultra" devices, Macworld reports. Citing sources familiar with the matter, the report claims that Apple's first foldable iPhone will be called the "iPhone Ultra." The device will become the highest end option in the lineup. The ‌iPhone Ultra‌ will not be considered part of the iPhone 18 iPhone lineup, despite arriving alongside the iPhone 18 Pro and ‌iPhone 18 Pro‌ Max. This would be just like how the iPhone Air is not considered to be part of the iPhone 17 series. Although Apple is hoping to ship the ‌iPhone Ultra‌ alongside the ‌iPhone 18 Pro‌, it may launch a few weeks later and with scarcer availability. Moreover, Apple is apparently planning to release a "MacBook Ultra" later this year or in early 2027. It will feature an OLED panel and a touchscreen, sitting above the MacBook Pro in the lineup at a "significantly" higher price point. While the device was originally intended to launch later this year, it is now likely pushed back by several months due to memory supply chain shortages. Apple already offers M-series Ultra chips, the Apple Watch Ultra, and CarPlay Ultra. "Ultra" branding for the foldable iPhone and OLED MacBook was previously rumored by Bloomberg, which added that "AirPods Ultra" could also be on the way.Related Roundups: iPhone Fold, MacBook ProTags: iPhone Ultra, MacBook Ultra, MacworldBuyer's Guide: MacBook Pro (Buy Now)Related Forum: MacBook ProThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

OpenAI Reportedly Working on an AI Smartphone to Rival iPhone
OpenAI is working on a smartphone in what appears to be a significant reversal from previous reports that the company had no plans to enter the phone market, according to supply chain analyst Ming-Chi Kuo. Kuo shared the findings from his latest supply chain checks in a post on X, saying MediaTek and Qualcomm are the chosen chip partners and Luxshare Precision Industry is the exclusive manufacturing partner, with mass production scheduled for 2028. Exact chip specifications and additional suppliers are expected to be finalized by late 2026 or the first quarter of 2027. Kuo argues that the smartphone remains uniquely positioned for AI agent use because it is the only device that captures a user's full real-time state, including location, activity, communication, and context, which he describes as the most important input for real-time AI agent inference. He claims that AI agents will fundamentally change how people interact with a phone, shifting the focus from launching individual apps to completing tasks through a more continuous, context-aware interface. He argues that fully controlling both the operating system and the hardware is the only way for the company to deliver a comprehensive AI agent service, and that a subscription-bundled business model could enable OpenAI to build a developer ecosystem around those agents. Kuo suggests that Luxshare, which has long sought to reduce its dependence on Apple supply chain work, could benefit substantially from an early position in what he frames as the next generation of smartphone hardware. The development represents a notable reversal in OpenAI's publicly stated hardware strategy. Previous reports have consistently described the company's hardware ambitions as centered on non-phone form factors developed in collaboration with Jony Ive, the former Apple design chief whose startup io Products was acquired by OpenAI for $6.5 billion. Those plans include a smart speaker, which is likely the first product to launch, along with smart glasses, a smart lamp, and potentially earbuds. OpenAI Chief Global Affairs Officer Chris Lehane has said the first hardware announcement is expected in the second half of 2026, with launch around early 2027. OpenAI CEO Sam Altman posted on X the same day Kuo published his analysis, writing that it "feels like a good time to seriously rethink how operating systems and user interfaces are designed." Such a device would obviously put OpenAI in direct competition with Apple's iPhone.Tags: Ming-Chi Kuo, OpenAIThis article, "" first appeared on MacRumors.comDiscuss this article in our forums

Read more »

Copilot’s agentic capabilities in Word, Excel, and PowerPoint are generally available
From first draft to final polish, Copilot acts as a true collaborator, taking action while you stay in control. The post appeared first on Microsoft 365 Blog.

Read more »

Bring your everyday business apps into the flow of work with agents in Microsoft 365 Copilot
Microsoft 365 Copilot can now bring your go-to apps directly into the conversation, which closes the gap between AI-powered insight and real, in-app action. The post appeared first on Microsoft 365 Blog.

Read more »

New and improved: Multi-agent orchestration, connected experiences, and faster prompt iteration
Learn what’s new in Copilot Studio: Multi-agent systems are now generally available, plus recent updates to the Prompt Editor and governance controls. The post appeared first on Microsoft 365 Blog.

Read more »

Copilot Cowork: Now available in Frontier
Today, Copilot Cowork—designed for long-running, multi-step work in Microsoft 365—is available via the Frontier program. The post appeared first on Microsoft 365 Blog.

Read more »

Vulnerability Summary for the Week of April 20, 2026
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info Thinkphp--ThinkPHP ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoking functions through the routing parameter. Attackers can craft requests to the index.php endpoint with malicious function parameters to execute system commands with application privileges. 2026-04-22 9.8 CVE-2018-25270 ExploitDB-45978Official Product HomepageProduct ReferenceVulnCheck Advisory: ThinkPHP 5.0.23 Remote Code Execution via invokefunction  Elba--ELBA5 ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and execute arbitrary commands with SYSTEM level permissions. Attackers can connect to the database using default connector credentials, decrypt the DBA password, and execute commands via the xp_cmdshell stored procedure or add backdoor users to the BEDIENER table. 2026-04-22 9.8 CVE-2018-25272 ExploitDB-45905Official Product HomepageVulnCheck Advisory: ELBA5 5.8.0 Remote Code Execution via Database Access  Lizardsystems--Terminal Services Manager Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious input file with shellcode and jump instructions that overwrite the SEH handler pointer to execute calc.exe or other payloads when imported through the add computers wizard. 2026-04-22 8.4 CVE-2018-25259 ExploitDB-46058Official Product HomepageVulnCheck Advisory: Terminal Services Manager 3.1 Buffer Overflow SEH  Magix--MAGIX Music Editor MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload, paste it into the Server field via the CD menu's FreeDB Proxy Options, and trigger code execution when settings are accepted. 2026-04-22 8.4 CVE-2018-25260 ExploitDB-46056Official Product HomepageProduct ReferenceVulnCheck Advisory: MAGIX Music Editor 3.1 Buffer Overflow via SEH  Iperiusbackup--Iperius Backup Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism that allows local attackers to execute arbitrary code by supplying a malicious file path. Attackers can create a backup job with a crafted payload in the external file location field that triggers a buffer overflow when the backup job executes, enabling code execution with application privileges. 2026-04-22 8.4 CVE-2018-25261 ExploitDB-46059Official Product HomepageVulnCheck Advisory: Iperius Backup 5.8.1 Local Buffer Overflow SEH  faleemi--Faleemi Desktop Software Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exception handler (SEH) overwrite. Attackers can craft a malicious payload and paste it into the Device alias field within the Managing Log interface to execute arbitrary code with calculator proof-of-concept execution. 2026-04-26 8.4 CVE-2018-25263 ExploitDB-45492Product ReferenceVulnCheck Advisory: Faleemi Desktop Software 1.8.2 Local Buffer Overflow SEH  Lizardsystems--LanSpy LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode, triggering code execution through SEH chain manipulation and controlled jumps. 2026-04-22 8.4 CVE-2018-25265 ExploitDB-46018Official Product HomepageVulnCheck Advisory: LanSpy 2.0.1.159 Local Buffer Overflow  Lizardsystems--LanSpy LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payload with 688 bytes of padding followed by 4 bytes of controlled data to crash the application or potentially achieve code execution. 2026-04-22 8.4 CVE-2018-25268 ExploitDB-45968Official Product HomepageVulnCheck Advisory: LanSpy 2.0.1.159 Local Buffer Overflow via Scan Field  Securimport--iSmartViewPro iSmartViewPro 1.5 contains a structured exception handling (SEH) buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to overwrite SEH records and execute shellcode with application privileges. 2026-04-26 8.4 CVE-2018-25283 ExploitDB-45349Product ReferenceVulnCheck Advisory: iSmartViewPro 1.5 Buffer Overflow via SavePath Parameter  Cewe-Photoworld--CEWE Photoshow CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data into the email address and password fields to trigger a denial of service condition. 2026-04-26 7.5 CVE-2018-25294 ExploitDB-45211Official Product HomepageProduct ReferenceVulnCheck Advisory: CEWE Photoshow 6.3.4 Buffer Overflow Denial of Service  Fortra--GoAnywhere MFT The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being guessed via Brute Force. 2026-04-21 7.3 CVE-2025-14362 https://fortra.com/security/advisories/product-security/FI-2026-002  Back to top Medium Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info Angryip--Angry IP Scanner for Linux Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the application by supplying malformed input to the port selection field. Attackers can craft a malicious string containing buffer overflow patterns and paste it into the Preferences Ports tab to trigger an application crash. 2026-04-22 6.2 CVE-2018-25262 ExploitDB-46038Official Product HomepageVulnCheck Advisory: Angry IP Scanner for Linux 3.5.3 Denial of Service  Acutesystems--TransMac TransMac 12.2 contains a buffer overflow vulnerability in the license key input field that allows local attackers to crash the application by submitting an oversized string. Attackers can generate a payload file containing 4000 bytes of data, paste it into the License Key field, and trigger a denial of service condition. 2026-04-26 6.2 CVE-2018-25264 ExploitDB-45493VulnCheck Advisory: TransMac 12.2 Denial of Service via License Key Field  Angryip--Angry IP Scanner Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to crash the application by supplying an excessively large string. Attackers can generate a file containing a massive buffer of repeated characters and paste it into the unavailable value field in the display preferences to trigger a denial of service. 2026-04-22 6.2 CVE-2018-25266 ExploitDB-45993Official Product HomepageVulnCheck Advisory: Angry IP Scanner 3.5.3 Denial of Service via Preferences Buffer Overflow  Ultraiso--UltraISO UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH and SE handler records. Attackers can craft a malicious filename string with 304 bytes of data followed by SEH record overwrite values and paste it into the Output FileName field to trigger a denial of service crash. 2026-04-22 6.2 CVE-2018-25267 ExploitDB-45996Official Product HomepageVulnCheck Advisory: UltraISO 9.7.1.3519 Buffer Overflow via Output FileName  icewarp--ICEWARP Client ICEWARP 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encoded payloads in object and embed tags. Attackers can craft emails containing data URIs with embedded scripts that execute in the client when the email is viewed, compromising user sessions and stealing sensitive information. 2026-04-22 6.1 CVE-2018-25269 ExploitDB-45974Official Product HomepageVulnCheck Advisory: ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection  Textpad--Textpad Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through the Run command interface. Attackers can paste a 5000-byte payload into the Command field via Tools > Run to trigger a buffer overflow that crashes the application. 2026-04-22 6.2 CVE-2018-25271 ExploitDB-45956Official Product HomepageProduct ReferenceVulnCheck Advisory: Textpad 8.1.2 Denial of Service via Run Command  Acutesystems--CrossFont CrossFont 7.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by submitting an oversized payload in the License Key field. Attackers can generate a malicious file containing 4000 bytes of data, paste it into the License Key input field, and trigger an application crash when processing the input. 2026-04-26 6.2 CVE-2018-25273 ExploitDB-45494VulnCheck Advisory: CrossFont 7.5 Denial of Service via License Key Field  infrarecorder--InfraRecorder InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an application crash. 2026-04-26 6.2 CVE-2018-25274 ExploitDB-45413VulnCheck Advisory: InfraRecorder 0.53 Denial of Service via txt File Import  faleemi--Faleemi Plus Faleemi Plus 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can paste a 2000-byte payload into the Camera name and DID number fields during camera addition to trigger an application crash. 2026-04-26 6.2 CVE-2018-25275 ExploitDB-45414Product ReferenceVulnCheck Advisory: Faleemi Plus 1.0.2 Denial of Service via Buffer Overflow  Br-Software--PixGPS PixGPS 1.1.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized string to the folder path input field. Attackers can craft a payload exceeding 6000 bytes and paste it into the 'Folder with picture files' field to trigger a denial of service condition. 2026-04-26 6.2 CVE-2018-25277 ExploitDB-45381Product ReferenceVulnCheck Advisory: PixGPS 1.1.8 Buffer Overflow Denial of Service  Picajet--PicaJet FX PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields via the Help menu's Register PicaJet dialog to trigger an application crash. 2026-04-26 6.2 CVE-2018-25278 ExploitDB-45383VulnCheck Advisory: PicaJet FX 2.6.5 Denial of Service via Registration Fields  Convertimagetotext--jiNa OCR Image to Text jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert the file to PDF. 2026-04-26 6.2 CVE-2018-25279 ExploitDB-45380Product ReferenceVulnCheck Advisory: jiNa OCR Image to Text 1.0 Denial of Service via PNG  ZenMap--ZenMap Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import functionality to cause the program to consume excessive system resources and crash. 2026-04-26 6.2 CVE-2018-25282 ExploitDB-45357Product ReferenceVulnCheck Advisory: Nmap 7.70 Denial of Service via XML Entity Expansion  Hdtune--HD Tune Pro HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the folder/file name field. Attackers can trigger a denial of service by entering a 6000-byte payload through the File > Options > Save dialog's folder/file name input field. 2026-04-26 6.2 CVE-2018-25284 ExploitDB-45298Official Product HomepageProduct ReferenceVulnCheck Advisory: HD Tune Pro 5.70 Denial of Service via Options Dialog  Hdtune--Easy PhotoResQ Easy PhotoResQ 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Folder/filename field. Attackers can input a 6000-byte payload through the File Options dialog to trigger a denial of service condition. 2026-04-26 6.2 CVE-2018-25286 ExploitDB-45300Official Product HomepageVulnCheck Advisory: Easy PhotoResQ 1.0 Buffer Overflow Denial of Service  Editorsoftware--StyleWriter StyleWriter 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a 6000-byte payload into the Pattern to Find or Advice Message fields in the Add Pattern dialog to trigger a denial of service condition. 2026-04-26 6.2 CVE-2018-25288 ExploitDB-45250Official Product HomepageProduct ReferenceVulnCheck Advisory: StyleWriter 1.0 Denial of Service via Pattern Input  Ezbsystems--Softdisk Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help menu's Enter Registration Code dialog to cause a denial of service. 2026-04-26 6.2 CVE-2018-25289 ExploitDB-45245Official Product HomepageProduct ReferenceVulnCheck Advisory: Softdisk 3.0.3 Buffer Overflow Denial of Service  Ezbsystems--Easyboot Easyboot 6.6.0 contains a buffer overflow vulnerability in the Replace Text function that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by accessing File > Tools > Replace Text and pasting a 7000-byte payload into the text fields to cause a denial of service. 2026-04-26 6.2 CVE-2018-25290 ExploitDB-45241Official Product HomepageVulnCheck Advisory: Easyboot 6.6.0 Buffer Overflow Denial of Service  Pj64-Emu--Project64 Project64 2.3.2 contains a buffer overflow vulnerability in the Plugin Directory settings field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 6000-byte payload into the Plugin Directory field through the Options > Settings > Directories interface to trigger an application crash when settings are reopened. 2026-04-26 6.2 CVE-2018-25291 ExploitDB-45229Official Product HomepageVulnCheck Advisory: Project64 2.3.2 Denial of Service via Plugin Directory  Bome--Restorator Bome Restorator 1793 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can create a malicious payload exceeding 4000 bytes and paste it into the Name input field to trigger an application crash and denial of service. 2026-04-26 6.2 CVE-2018-25292 ExploitDB-45223Official Product HomepageProduct ReferenceVulnCheck Advisory: Bome Restorator 1793 Denial of Service via Buffer Overflow  Mersenne--Prime95 Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an excessively long string in the optional proxy password field. Attackers can trigger a denial of service by entering a 6000-byte payload into the proxy password parameter, causing the application to crash when processing the connection settings. 2026-04-26 6.2 CVE-2018-25293 ExploitDB-45226Official Product HomepageProduct ReferenceVulnCheck Advisory: Prime95 29.4b7 Denial of Service via Proxy Password Field  P10--ObserverIP Scan Tool ObserverIP Scan Tool 1.4.0.1 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the IP input field. Attackers can paste a 2000-byte buffer of repeated characters into the IP field and trigger a search operation to cause an application crash. 2026-04-26 6.2 CVE-2018-25295 ExploitDB-45204Official Product HomepageProduct ReferenceVulnCheck Advisory: ObserverIP Scan Tool 1.4.0.1 Denial of Service via IP Field  Wansview--Wansview Wansview 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can inject 2000-byte payloads into the Camera name and DID number fields during camera addition to trigger application crashes. 2026-04-26 6.2 CVE-2018-25297 ExploitDB-45194VulnCheck Advisory: Wansview 1.0.2 Denial of Service via Buffer Overflow  94Cb--Carbon Forum Carbon Forum 5.9.0 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript code through the Forum Name field in dashboard settings. Attackers with admin privileges can store JavaScript payloads in the Forum Name field that execute in the browsers of all users visiting the forum, enabling session hijacking and data theft. 2026-04-22 6.4 CVE-2024-58344 ExploitDB-52043Official Product HomepageProduct ReferenceVulnCheck Advisory: Carbon Forum 5.9.0 Persistent XSS via Forum Name Field  GitLab--GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service under certain conditions by exhausting server resources by making crafted requests to a discussions endpoint. 2026-04-22 6.5 CVE-2025-0186 HackerOne Bug Bounty Report #2915694https://gitlab.com/gitlab-org/gitlab/-/work_items/511312https://about.gitlab.com/releases/2026/04/22/patch-release-gitlab-18-11-1-released/  GitLab--GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service by overwhelming system resources under certain conditions due to insufficient resource allocation limits in the GraphQL API. 2026-04-22 6.5 CVE-2025-3922 HackerOne Bug Bounty Report #3098035https://gitlab.com/gitlab-org/gitlab/-/work_items/537422https://about.gitlab.com/releases/2026/04/22/patch-release-gitlab-18-11-1-released/  Picajet--RoboImport RoboImport 1.2.0.72 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields and click Register to trigger an application crash. 2026-04-26 5.5 CVE-2018-25276 ExploitDB-45382Product ReferenceVulnCheck Advisory: RoboImport 1.2.0.72 Denial of Service via Registration Fields  Infiltration-Systems--Infiltrator Network Security Scanner Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a 6000-byte payload into the Scan Target field and trigger a denial of service condition when the Scan button is clicked. 2026-04-26 5.5 CVE-2018-25280 ExploitDB-45390Product ReferenceVulnCheck Advisory: Infiltrator Network Security Scanner 4.6 Denial of Service  Maxprog--iCash iCash 7.6.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload through the Connect to Server dialog. Attackers can paste a 7000-byte string into the Host field and click Connect to trigger an application crash. 2026-04-26 5.5 CVE-2018-25281 ExploitDB-45388VulnCheck Advisory: iCash 7.6.5 Denial of Service via Connect to Server  Fathom--Fathom Fathom 2.4 contains a buffer overflow vulnerability in the Authorization Code field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 6000-byte payload into the Authorization Code field and click Activate to trigger a denial of service condition. 2026-04-26 5.5 CVE-2018-25285 ExploitDB-45294Official Product HomepageProduct ReferenceVulnCheck Advisory: Fathom 2.4 Denial of Service via Authorization Code Buffer Overflow  Hdtune--Drive Power Manager Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition. 2026-04-26 5.5 CVE-2018-25287 ExploitDB-45299Official Product HomepageVulnCheck Advisory: Drive Power Manager 1.10 Denial of Service via Name Field  P10--Central Management Software P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 2000-byte payload into the password field and click login to trigger an application crash and denial of service. 2026-04-26 5.5 CVE-2018-25296 ExploitDB-45207Official Product HomepageVulnCheck Advisory: P10 Central Management Software 1.4.13 Denial of Service  Fortra--GoAnywhere MFT Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decryption of data. 2026-04-21 5.8 CVE-2025-1241 https://fortra.com/security/advisories/product-security/FI-2026-001  OpenSC--OpenSC Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs 2026-04-23 5.7 CVE-2025-13763 https://access.redhat.com/security/cve/CVE-2025-13763RHBZ#2417581https://github.com/OpenSC/OpenSC/security/advisories/GHSA-2v44-fq35-98vvhttps://github.com/OpenSC/OpenSC/wiki/CVE-2025-13763  HCLSoftware--BigFix Service Management (SM) HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access.  An attacker with access to the network traffic can sniff packets from the connection and uncover the data. 2026-04-21 5.3 CVE-2025-31981 https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127605  IBM--Security Verify Directory (Container) IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to malicious file upload by not validating file type. A privileged user could upload malicious files into the system that can be sent to victims for performing further attacks against the system. 2026-04-22 5.5 CVE-2025-36074 https://www.ibm.com/support/pages/node/7268907  hubspotdev--HubSpot All-In-One Marketing Forms, Popups, Live Chat The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.32 via the leadin/public/admin/class-adminconstants.php file. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract a list of all installed plugins and their versions which can be leveraged for reconnaissance and further attacks. 2026-04-24 4.3 CVE-2025-11762 https://www.wordfence.com/threat-intel/vulnerabilities/id/2a8c62e6-f459-433a-b0c4-c79285ea7fe9?source=cvehttps://research.cleantalk.org/CVE-2025-11762https://plugins.trac.wordpress.org/browser/leadin/tags/11.3.33/public/admin/class-adminconstants.php  Back to top Low Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info HCLSoftware--BigFix Service Management (SM) HCL BigFix Service Management is susceptible to HTTP Request Smuggling.  HTTP request smuggling vulnerabilities arise when websites route HTTP requests through web servers with inconsistent HTTP parsing. HTTP Smuggling exploits inconsistencies in request parsing between front-end and back-end servers, allowing attackers to bypass security controls and perform attacks like cache poisoning or request hijacking. 2026-04-21 3.7 CVE-2025-31958 https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124209  Back to top Severity Not Yet Assigned PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info NWCLARK--Storable Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow. 2026-04-21 not yet calculated CVE-2017-20230 https://github.com/Perl/perl5/issues/15831https://github.com/Perl/perl5/commit/a258c17c6937f79529c8319a829310e09cdbd216.patchhttps://metacpan.org/release/RURBAN/Storable-3.05/changeshttps://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242533.htmlhttps://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242703.html  Seeyon Internet Software--A8-V5 Collaborative Management Software Seeyon OA A8 contains an unauthenticated arbitrary file write vulnerability in the /seeyon/htmlofficeservlet endpoint that allows remote attackers to write arbitrary files to the web application root by sending specially crafted POST requests with custom base64-encoded payloads. Attackers can write JSP webshells to the web root and execute them through the web server to achieve arbitrary OS command execution with web server privileges. Exploitation evidence was first observed by the Shadowserver Foundation on 2021-03-26 (UTC). 2026-04-21 not yet calculated CVE-2019-25714 https://sourceforge.net/software/product/A8/https://web.archive.org/web/20190821034711/http://wyb0.com/posts/2019/seeyon-htmlofficeservlet-getshell/https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E8%87%B4%E8%BF%9Coa/%E8%87%B4%E8%BF%9C%20OA%20A8%20htmlofficeservlet%20getshell%20%E6%BC%8F%E6%B4%9E/https://static-aliyun-doc.oss-cn-hangzhou.aliyuncs.com/download/pdf/90916/Security_Notification_reseller_en-US.pdfhttps://www.broadcom.com/support/security-center/attacksignatures/detail?asid=31713https://www.fortiguard.com/encyclopedia/ips/48874/seeyon-office-anywhere-htmlofficeservlet-arbitrary-file-uploadhttps://www.vulncheck.com/advisories/seeyon-office-anywhere-oa-a8-unauthenticated-arbitrary-file-write-via-htmlofficeservlet  Unknown--Email Encoder The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). 2026-04-20 not yet calculated CVE-2024-7083 https://wpscan.com/vulnerability/7aeb6891-e159-4ed8-b1a9-a551140c9fcc/  Semantic MediaWiki--Semantic MediaWiki Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the '/index.php/Speciaal:GefacetteerdZoeken' endpoint parameter. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. 2026-04-21 not yet calculated CVE-2025-10354 https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-semantic-mediawiki  EfficientLab, LLC--Controlio EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected service runs as NT AUTHORITYSYSTEM. 2026-04-23 not yet calculated CVE-2025-10549 https://r.sec-consult.com/controliohttps://kb.controlio.net/hc/en-us/articles/45777908471185-Client-Update-April-15-2026-ver-1-3-95  Fudo Security--Fudo Enterprise Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain administrator-only resources via improperly protected API endpoints. This includes sensitive information such as system logs and parts of system configuration settings. This vulnerability has been fixed in version 5.6.3 2026-04-20 not yet calculated CVE-2025-13480 https://www.fudosecurity.com/product/enterprisehttps://cert.pl/en/posts/2026/04/CVE-2025-13480https://download.fudosecurity.com/documentation/fudo/5_6/rn/RN_5.6.3.pdf  Zervit--portable HTTP/Web server Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is caused by inadequate validation of user-supplied input. An attacker can exploit this vulnerability by sending malicious requests. If the vulnerability is successfully exploited, the application can be made to stop responding, resulting in a DoS condition. It is possible to manually restart the application. 2026-04-21 not yet calculated CVE-2025-13826 https://www.incibe.es/en/incibe-cert/notices/aviso/incorrect-input-validation-zervit-portable-httpweb-server  ATRODO--Net:Dropbear Net:Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net:Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437. 2026-04-21 not yet calculated CVE-2025-15638 https://www.cve.org/CVERecord?id=CVE-2016-6129https://www.cve.org/CVERecord?id=CVE-2018-12437https://metacpan.org/release/ATRODO/Net-Dropbear-0.14/source/dropbear/libtomcrypt/changes  PHP Point Of Sale--PHP Point Of Sale HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specific_customer', ussing 'start_date_formatted' y 'end_date_formatted' parameters. 2026-04-21 not yet calculated CVE-2025-41011 https://www.incibe.es/en/incibe-cert/notices/aviso/html-injection-php-point-sale-0  Zeon Global Tech--Zeon Academy Pro SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'. 2026-04-21 not yet calculated CVE-2025-41029 https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-zeon-academy-pro-zeon-global-tech  Back to top

Read more »

‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty
A 24-year-old British national and senior member of the cybercrime group "Scattered Spider" has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan admitted his role in a series of text-message phishing attacks in the summer of 2022 that allowed the group to hack into at least a dozen major technology companies and steal tens of millions of dollars worth of cryptocurrency from investors.

Read more »

Most secure browser for Mac in 2026
For most Mac users, your browser is where a lot of online life happens — reading emails, logging into accounts, using web apps, shopping, and banking. It’s also where a small mistake can lead to a bigger problem, whether that means downloading something that looked harmless or signing into a phishing page that seemed real […] The post appeared first on The Mac Security Blog.

Read more »

Patch Tuesday, April 2026 Edition
Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dubbed "BlueHammer." Separately, Google Chrome fixed its fourth zero-day of 2026, and an emergency update for Adobe Reader nixes an actively exploited flaw that can lead to remote code execution.

Read more »

Why more Mac attacks now rely on social engineering
Recent security findings suggest a change in how Mac users are being targeted. Instead of searching for technical gaps in software, attackers are finding ways to ask users to run commands themselves. This pattern shows up across different reports, from fake apps that look legitimate to scam pages that guide users into pasting commands into […] The post appeared first on The Mac Security Blog.

Read more »

The new Intego Antivirus is here — everything you need to know about Intego ONE
Intego ONE is Intego’s new all-in-one Mac security app, built to make protection easier to manage in one place. Instead of juggling separate tools, you get antivirus protection, firewall protection, SmartClean, and VPN in one Mac-focused app, depending on your plan. If you’ve used Intego products before, the shift is straightforward — fewer moving parts […] The post appeared first on The Mac Security Blog.

Read more »

Russia Hacked Routers to Steal Microsoft Office Tokens
Hackers linked to Russia's military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security experts warned today. The spying campaign allowed state-backed Russian hackers to quietly siphon authentication tokens from users on more than 18,000 networks without deploying any malicious software or code.

Read more »

The ultimate guide to Mac security
Macs have a strong security foundation. That’s true — and it’s worth appreciating. But “safer than” doesn’t mean “safe from.” Modern Mac threats don’t always look like the classic virus people imagine. A lot of today’s attacks rely on social engineering, fake installers, stolen credentials, and the simple reality that people download things, click prompts, […] The post appeared first on The Mac Security Blog.

Read more »

How to Choose the Right iPhone (2026): A Simple Guide
While the latest iPhone is the best and fastest model every year, you might not need its features. Apple sells several iPhone models; here's how to choose the right iPhone for your needs. The post appeared first on The Mac Security Blog.

Read more »

Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab
An elusive hacker who went by the handle "UNKN" and ran the early Russian ransomware groups GandCrab and REvil now has a name and a face. Authorities in Germany say 31-year-old Russian Daniil Maksimovich Shchukin headed both cybercrime gangs and helped carry out at least 130 acts of computer sabotage and extortion against victims across the country between 2019 and 2021.

Read more »

Which Apple Watch Model Is Right for You (2026)?
In 2024, you have three models of Apple Watch to choose from. Whether you want a simple watch, a fancy watch, or one for outdoors, there is an Apple Watch for you. The post appeared first on The Mac Security Blog.

Read more »

Users are unable to access Admin Center.
Status: MonitoringA fix has been applied to the Admin Center, and we're now monitoring for any adverse effects. We'll continue to keep the incident open until we can confirm normal operations for the Admin Center.

Read more »

Duplicated values in X-Forwarded-For header
Apr 28, 18:34 UTCUpdate - We are continuing to investigate this issue.Apr 28, 18:31 UTCInvestigating - Cloudflare is investigating duplicated values in the X-Forwarded-For header. Origins depending on this header may exhibit unexpected behavior.

Read more »

Emerging Service Issue – Connectivity Issues – Chennai (IN-MAA)
Apr 28, 17:17 UTCIdentified - Our team is investigating an emerging service issue affecting the network and connectivity in our Chennai (IN-MAA) data center. Customers may see intermittent delays and timeouts during peak traffic hours in the region.If you are seeing impact that may be related, please open a Support Ticket.

Read more »

Service delays and timeouts across Zapier.com
Status: InvestigatingWe’re seeing delays and timeouts affecting parts of Zapier. Our team is investigating and working to restore normal performance. What you might notice Slower responses or failed actions in places that depend on signing in or loading account information. Some Zaps and background tasks may also run more slowly or time out. Experiences that use AI or chat-style features may also be affected. What we know Our systems are under a heavier load than usual. We’ve narrowed the problem to unusually high demand on account-related requests and are working to confirm what’s driving it and how to safely reduce the load. What we’re doing We’re focused on stabilizing performance and will share more as we have concrete progress. Next update We expect to post another update within about 30 minutes. We’re sorry for the trouble this causes and thank you for your patience. Questions? Contact our Support team: https://zapier.com/app/get-helpAffected components Support (Degraded performance) Website (Degraded performance) Login (Degraded performance)

Read more »

UPDATE: **Title:** Investigating issues with slow loading of AppSheet **Description:** We are experiencing an issue with AppSheet beginning at Tuesday, 2026-04-28 00:30 PDT. Our engineering team continues to investigate the issue. We will provide an update by Tuesday, 2026-04-28 09:00 PDT with current details. We apologize to all who are affected by the disruption. **Symptoms:** Affected customers would experience slow loading times and internal server errors for AppSheet apps. **Workaround:** None at this time.
Incident began at 2026-04-28 07:30 (times are in Coordinated Universal Time (UTC)).Title: Investigating issues with slow loading of AppSheet Description: We are experiencing an issue with AppSheet beginning at Tuesday, 2026-04-28 00:30 PDT. Our engineering team continues to investigate the issue. We will provide an update by Tuesday, 2026-04-28 09:00 PDT with current details. We apologize to all who are affected by the disruption. Symptoms: Affected customers would experience slow loading times and internal server errors for AppSheet apps. Workaround: None at this time. Affected products: AppSheet

Read more »

Elevated Authentication Latency in DUO6
Apr 28, 10:22 EDTInvestigating - We are investigating elevated authentication latency affecting customers . Authentication requests are continuing to succeed at this time, but customers may experience slower-than-normal response times and degraded performance during login attempts. Our team is actively working to identify the cause and restore normal performance as quickly as possible.

Read more »

Network Performance Issues in IST
Apr 28, 08:45 UTCIdentified - The issue has been identified, and we are implementing a fixApr 28, 08:41 UTCInvestigating - We are currently investigating network performance issues in IST

Read more »

Increased HTTP Errors in YUL
Apr 28, 05:00 UTCResolved - Cloudflare saw an increased level of HTTP errors in YUL between 04:55 UTC - 05:25 UTC.

Read more »

“Unable to verify identity. Please try again.” Error when transferring ownership between Team members.
Status: IdentifiedUsers have reported that transferring ownership between Team members returns the following error. Unable to verify identity. Please try again. Our Engineering team is looking into the issue and working to identify the root cause. We'll continue to update you as we have more information.

Read more »

CMB (Colombo) on 2026-04-28
THIS IS A SCHEDULED EVENT Apr 28, 05:30 - 07:30 UTCApr 27, 18:28 UTCScheduled - We will be performing scheduled maintenance in CMB (Colombo) datacenter on 2026-04-28 between 05:30 and 07:30 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network interfaces in this datacentre may become temporarily unavailable.You can now subscribe to these notifications via Cloudflare dashboard and receive these updates directly via email, PagerDuty and webhooks (based on your plan): https://developers.cloudflare.com/notifications/notification-available/#cloudflare-status.

Read more »

500 error when viewing upcoming invoices
Status: InvestigatingWe're currently investigating an issue where loading upcoming invoices on the billing page can return errors (HTTP 500) instead of showing invoice details. We will update the page as soon as we have more information. If you have any questions, please reach out to our Support Team - https://zapier.com/app/get-helpAffected components Website (Degraded performance)

Read more »

SLC (Salt Lake City) on 2026-04-27
Apr 27, 10:45 UTCIn progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Apr 27, 10:40 UTCScheduled - We will be performing scheduled maintenance in SLC (Salt Lake City) datacenter on 2026-04-27 between 10:45 and 12:45 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network interfaces in this datacentre may become temporarily unavailable.You can now subscribe to these notifications via Cloudflare dashboard and receive these updates directly via email, PagerDuty and webhooks (based on your plan): https://developers.cloudflare.com/notifications/notification-available/#cloudflare-status.

Read more »

Turnstile Challenge Issues
Apr 27, 06:15 UTCInvestigating - Cloudflare is investigating a potential issue with the Turnstile challenge platform. Users may experience failed challenges solve attempts.Further details will be provided as more information becomes available.

Read more »

Network Performance Issues in Brazil
Apr 27, 04:50 UTCResolved - This incident has been resolved.Apr 27, 04:25 UTCMonitoring - Cloudflare is investigating issues with Network Performance in Brazil. Customers may observe increase disconnects and CNI tunnel degradation. We are working to analyze and mitigate this problem. More updates to follow shortly.

Read more »

YUL (Montréal) on 2026-04-28
THIS IS A SCHEDULED EVENT Apr 28, 06:00 - 16:00 UTCApr 25, 17:20 UTCScheduled - We will be performing scheduled maintenance in YUL (Montréal) datacenter on 2026-04-28 between 06:00 and 16:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network interfaces in this datacentre may become temporarily unavailable.You can now subscribe to these notifications via Cloudflare dashboard and receive these updates directly via email, PagerDuty and webhooks (based on your plan): https://developers.cloudflare.com/notifications/notification-available/#cloudflare-status.

Read more »

Apple MacBook Air M4 13.6″ Laptop (2025) for $899 + free shipping
B&H Photo Video offers the Apple MacBook Air M4 13.6″ Laptop (2025) in Silver for $899. That’s $100 off and the lowest price we found by at least $50. Shipping is free. Deal ends April 30 at 11:59 ET. Buy Now at B&H Photo Video Features 13.6″ Liquid Retina display 10-core Apple M4 chip 16GB […]

Read more »

Apple Accessory Discount w/ Mac Computer Purchase: 15% off + free shipping
When you buy select Mac computers at Best Buy, save 15% off Magic Keyboard, Magic Mouse, or Magic Trackpads. There is a limit of one accessory discount per order. This deal ends June 27. Shop Now at Best Buy

Read more »

Apple iPad Air 11″ M3 512GB WiFi + Cellular for $799 + free shipping w/ Prime
That's the best price we've ever seen, at $50 under our October mention. Buy Now at Amazon

Read more »

Refurbished 2nd-Gen Apple iPad Air 9.7″ 16GB WiFi Tablet (2014) for $86 + free shipping
DailySteals has the Refurbished 2nd-Gen Apple iPad Air 9.7″ 16GB WiFi Tablet (2014) for $85.99 after coupon code “BPAD8”. That’s $213 below the original price. It includes a 90-day warranty. Shipping is free. Deal ends May 7. Buy Now at dailysteals

Read more »

Refurb Apple MacBook Pro 12th-Gen. i5 13.3″ Laptop for $282 + free shipping
These are typically over $300 elsewhere right now. A 1-year Allstate warranty applies. Shipping is free. Buy Now at eBay

Read more »

Refurb Apple iPad Air 7 M3 11″ 256GB WiFi Tablet (2025) for $574 + free shipping
Bag this $125 savings right now. A 1-year Allstate warranty applies. Shipping is free. Buy Now at eBay

Read more »

Refurb Apple 11″ iPad Pro 3 128GB (2021) for $455 + free shipping
Bag this one better than half off right now. A 1-year Allstate warranty applies. Shipping is free. Buy Now at eBay

Read more »

Apple iPad Air 13″ M2 128GB WiFi Tablet (2025) for $499 + free shipping
Use promo code "VIPOUTLETAPR26" to drop the price. That makes for a really strong deal, it's the best we've seen and around $200 less than the going rate elsewhere today. Shipping is free. Coupon ends April 30 2026. Buy Now at eBay

Read more »

Refurb Apple MacBook Air 13.3″ M1 Laptop (2020) for $302 + free shipping
That's a savings of $597. A 1-year Allstate warranty applies. Buy Now at eBay

Read more »

Apple Mac Trade-In Deals at Best Buy: Up to $775 off
Get up to $775 in trade-in value toward an M5 Series MacBook Air or MacBook Pro when you trade in a qualifying Mac laptop (M1, M2, or M3). Trade-in values may vary and are subject to change at any time. You'll receive your credit via a Best Buy Gift Card. Shop Now at Best Buy

Read more »

Refurbished 24-inch iMac Apple M4 Chip with 8-Core CPU and 8-Core GPU – Purple – FWUH3LL/A – $1,099.00
Refurbished 24-inch iMac Apple M4 Chip with 8-Core CPU and 8-Core GPU - Purple – FWUH3LL/A $1,099.00 $1,299.00  −15% Originally released October 2024 24-inch 4.5K Retina display 16GB unified memory 256GB SSD 12MP Center Stage camera with support for Desk View Two Thunderbolt / USB 4 ports Product page on the Apple Store…

Read more »

Refurbished 24-inch iMac Apple M4 Chip with 8-Core CPU and 8-Core GPU – Purple – FWUH3LL/A – $1,099.00
Refurbished 24-inch iMac Apple M4 Chip with 8-Core CPU and 8-Core GPU - Purple – FWUH3LL/A $1,099.00 $1,299.00  −15% Originally released October 2024 24-inch 4.5K Retina display 16GB unified memory 256GB SSD 12MP Center Stage camera with support for Desk View Two Thunderbolt / USB 4 ports Product page on the Apple Store…

Read more »

Apple Device Accessory: 10% off w/ Trade-in + free shipping
Trade in your old iPhone, iPad, Mac or watch and bag a 10% discount on a wide selection of accessories. View the full list of eligible trade-in and promotional items on page. Shipping is free Shop Now at Apple

Read more »

TabletKeyer A16 11″ Magic Keyboard for iPad for $35.90 + free shipping
Apply coupon code "9L9NJ4X6" for a savings of $36. Buy Now at Amazon Features Compatible Devices Floating Cantilever Design: Your Personal Viewing & Typing Station Precision Touchpad & Shortcut Keys: Master Your Workflow 7-Color RGB Backlit & Breathing Light: Type in Style, Day or Night

Read more »

TabletKeyer A16 11″ Magic Keyboard for iPad for $35.90 + free shipping
Apply coupon code "9L9NJ4X6" for a savings of $36. Buy Now at Amazon Features Compatible Devices Floating Cantilever Design: Your Personal Viewing & Typing Station Precision Touchpad & Shortcut Keys: Master Your Workflow 7-Color RGB Backlit & Breathing Light: Type in Style, Day or Night

Read more »