News

Apple acquires startups to improve its Calendar apps and more

Between 2024 and 2025, Apple bought several startups to improve its Calendar application, its assembly lines and more generally its AI skill, according to the French blog MacGeneration. Several Apple acquisitions that have come under the radar have been reported...

Apple and Amazon seek combined $223,000 in sanctions against a prominent class action law firm

Apple and Amazon have asked for a combined $223,000 in sanctions against a prominent class action law firm, accusing it of dragging out litigation over the price of iPhones and iPads after the initial plaintiff in the case sought to drop out, reports Reuters. Last...

More MacTech News

Opinion

Analyst predicts features of the iPhone 17, iPhone 18, and iPhone 19

Talk about a powerful crystal ball! In a new Medium post, analyst Ming-Chi Kuo offers his predictions for the iPhone 17, iPhone 18, and iPhone 19 that will likely arrive in 2025, 2026, and 2027. He says the high-end iPhone 17 model is expected to feature an upgraded...

More Opinion

Scanners

Friday May 09
11:06 pm
Brazilian court reverses course and now demands iPhone sideloading within 90 days | 9 to 5 Mac
Brazilian court reverses course and now demands iPhone sideloading within 90 days
Following a significant defeat in the U.S. on its case against Epic Games, Apple was just dealt another blow, this time in Brazil. Last March, the company successfully reversed a decision that would have compelled it to enable sideloading for users in Brazil within 90 days. The decision stemmed from an antitrust ruling that declared the App Store’s anti-steering rules illegal. Today, the decision was reversed once again. more…
Read more »
10:10 pm
Bluetooth 6.1 is here, before Bluetooth 6 devices hit the shelves | Macworld
Bluetooth 6.1 is here, before Bluetooth 6 devices hit the shelves
Macworld We don’t have iPhones with Bluetooth 6 yet—in fact, only a couple second-tier Android phones even claim to support it so far. But that’s not stopping the Bluetooth group, which is keeping with its twice-a-year cadence and announcing the Bluetooth 6.1 spec. You’ll recall the Bluetooth 6 spec added an impressive new Channel Sounding capability that would give it centimeter-accurate location and distance tracking similar to Ultra Wideband, in addition to some new features that can improve latency and throughput. The Bluetooth 6.1 update is focused on a new feature called Randomized RPA (Resolvable Private Address). This feature allows for the timing of RPA address changes, which improves privacy. Your Bluetooth device and those it connects to can change address at times that can’t be predicted, which makes it harder for snooping devices to track your activity or location. To improve power efficiency, this address change operation can be offloaded to the Bluetooth controller instead of the device’s CPU, which will save battery life. We expect the first premium phones to support Bluetooth 6 sometime this fall, and that could very well include the iPhone 17. It’s quite possible those will support these new Bluetooth 6.1 features as well, especially given Apple’s enthusiasm for privacy and power efficiency.
Read more »
09:18 pm
Save up to 55% on the stylish Baseus Picogo MagSafe power bank | Macworld
Save up to 55% on the stylish Baseus Picogo MagSafe power bank
Macworld Picture this: you’re on the go, your boss calls and you have to pick up the phone for a meeting. The meeting keeps getting longer and longer and, suddenly, your phone’s low-battery warning pops up. Instead of scrambling for power cable, you just take out the Baseus Picogo MagSafe portable power bank and magnetically connect it to the back of your phone. Crisis averted! Of course, the scenario may differ. You may be at a concert, you may be running late to meet a friend, or you may be trying to catch an Uber late at night—whatever the situation, a power bank like the Baseus Picogo can solve the problem for you. The Baseus Picogo MagSafe portable chargers are absolutely gorgeous, with a slim build and a sleek design. The aluminum alloy casing makes it easy for heat to dissipate, thus avoiding overheating during charging, plus they feature an AI monitoring chip that checks temps thousands of times every hour. The wear-resistant silicone surface is soft to the touch and leaves no messy fingerprints. This tiny power bank from Baseus is super-thin, so you’ll barely even feel the difference when you have it magnetically attached to the back of your iPhone (or your Android phone with a MagSafe case). Its edges are curved, so they won’t dig into your hand, either, which is such a smart detail. The device is also light enough that it won’t bother you to hold it while using your phone. There are two versions of the Baseus Picogo, and which you choose depends on your charging needs. Both 5,000mAh and 10,000mAh capacity versions are available. The 5,000mAh Picogo is only 0.3 inches thick and weighs 4.6oz, so you’ll barely even feel that you’re holding it. The 10,000mAh version is a bit thicker, measuring 0.5 inches, and weighing 7.8oz. Still, the devices otherwise have the same size, measuring just 2.62 inches in length and 3.93 inches in height. A key difference between these devices is their charging output, for both wired and wireless connections. The 5,000mAh Picogo delivers 7.5W wireless charging, but you can also use a type-C-to-C cable if you want a faster recharge–this can reach up to 20W. Don’t worry, the cable comes in the package. For the 10,000mAh Picogo, you can expect faster 15W Qi2-certified wireless charging and 27W wired charging via the USB-C port. Another thing to consider when making your choice is that the 5,000mAh Picogo typically offers a single recharge for your phone, while the 10,000mAh should deliver two full recharges. Of course, this all depends on your phone’s battery capacity. Since we know price matters, you should know the Baseus Picogo is on sale over at Amazon. The 5,000mAh Picogo costs $26.99 right now, a 55% discount from its MSRP. The 10,000mAh version is a bit more expensive, and and you can get it for $39.99, 20% under its MSRP. These deals are not going to last forever, so you should definitely move fast if you want to get one of these Baseus Picogo MagSafe power banks. The Baseus Picogo 5,000mAh is $26.99Buy now at Amazon The Baseus Picogo 10,000mAh is $39.99Buy now at Amazon
Read more »
09:14 pm
Jony Ive’s work on OpenAI device driven by the ‘unintended consequences’ of Apple’s iPhone | Mac Daily News
Jony Ive’s work on OpenAI device driven by the ‘unintended consequences’ of Apple’s iPhone
Former Apple designer Jony Ive says the work on his next product is driven by owning the “unintended consequences” associated with the iPhone… The post appeared first on MacDailyNews.
Read more »
08:40 pm
Apple Watch Ultra 3: Three new features are coming later this year | 9 to 5 Mac
Apple Watch Ultra 3: Three new features are coming later this year
Apple Watch Ultra, outside of a very nice new titanium black, hasn’t been meaningfully upgraded since 2023. But later this year that’s going to change when the Apple Watch Ultra 3 arrives. Here are three new features coming to the next-generation Apple Watch Ultra 3. more…
Read more »
08:18 pm
Apple Music launches new ‘Viral Chart’ made up of top Shazam searches | Mac Daily News
Apple Music launches new ‘Viral Chart’ made up of top Shazam searches
Apple is launching a new global Viral Chart playlist in Apple Music that consists of tracks people are finding through the company’s Shazam… The post appeared first on MacDailyNews.
Read more »
08:00 pm
HomeKit Weekly: Eve Energy gains Matter energy reporting, Android enhancements, and Home Assistant certification | 9 to 5 Mac
HomeKit Weekly: Eve Energy gains Matter energy reporting, Android enhancements, and Home Assistant certification
is one of those smart home products that just works. It’s been a staple in my HomeKit setup for years thanks to its reliability, privacy-first design, and native HomeKit support. Eve Energy is picking up some notable upgrades that expand its usefulness even further. more…
Read more »
07:53 pm
This handy trick made Apple Intelligence’s Writing Tools much more useful on my Mac | 9 to 5 Mac
This handy trick made Apple Intelligence’s Writing Tools much more useful on my Mac
One of the few useful Apple Intelligence features that have actually made it to Mac users so far is Writing Tools. They offer a quick (albeit imperfect) way to proofread, change, summarize, or compose text with a mixture of Apple’s own models and OpenAI’s ChatGPT. However, there is a clever workaround to address one of its most annoying shortcomings. more…
Read more »
07:12 pm
Apple Pay support now available on PlayStation 5 | 9 to 5 Mac
Apple Pay support now available on PlayStation 5
PlayStation 5 users now have an additional way to complete purchases of games and other content on their consoles: Apple Pay. Here’s how it works. more…
Read more »
07:03 pm
Can Apple catch up in AI and fix its embarrassing Siri digital assistant? | Mac Daily News
Can Apple catch up in AI and fix its embarrassing Siri digital assistant?
Apple, once a pioneer in consumer technology, has notably lagged behind in the AI revolution, trailing rivals like xAI, OpenAI, Google, and… The post appeared first on MacDailyNews.
Read more »
06:53 pm
iPhone fold: All the rumors about Apple's first foldable, and when it might launch | AppleInsider
iPhone fold: All the rumors about Apple's first foldable, and when it might launch
The supply chain leaks about Apple's foldable iPhone have been increasing in frequency, and it may be only about a year away. Here's what the rumor mill believes is in the works.Apple's foldable iPhone could debut in 2026.While 2025 could see the release of an ultra-thin iPhone 17 Air or iPhone 17 Slim, the year after may prove to be even more interesting. Multiple sources and reports over the years have said that Apple was working on products with foldable displays, the first of which is expected to be an entirely new iPhone model.Though other smartphone manufacturers, such as Samsung, have outright embraced the concept of foldable displays, with the Galaxy Fold and Galaxy Z Flip, Apple has yet to release such a device. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
06:39 pm
Apple TV+ has three big new releases coming very soon | 9 to 5 Mac
Apple TV+ has three big new releases coming very soon
Apple TV+ has hit its stride this year, finding big success with Severance, The Studio, and Your Friends & Neighbors. But there’s more right around the corner. Here are three big new Apple TV+ releases coming soon. more…
Read more »
06:38 pm
iOS 18.5 coming next week: Here’s everything new | 9 to 5 Mac
iOS 18.5 coming next week: Here’s everything new
iOS 18.5 is the next software update coming for iPhone users. Here’s everything you need to know about what’s new in iOS 18.5 and when it will be released. Plus, what comes next… more…
Read more »
06:02 pm
Epic Games submits ‘Fortnite’ to Apple’s App Store for review | Mac Daily News
Epic Games submits ‘Fortnite’ to Apple’s App Store for review
Epic Games submitted "Fortnite" to Apple’s App Store a month after Judge Yvonne Gonzalez Rogers of the Northern District of California… The post appeared first on MacDailyNews.
Read more »
05:43 pm
Amazon slashes 15-inch MacBook Air M4 (24GB RAM, 512GB SSD) to record low $1,434 | AppleInsider
Amazon slashes 15-inch MacBook Air M4 (24GB RAM, 512GB SSD) to record low $1,434
With ample screen real estate in the thin-and-light chassis, Apple's 15-inch MacBook Air is great for traveling — made even better by a steeper price drop on Amazon this weekend.Grab lower prices on Apple's M4 MacBook Air.Amazon has some of the top MacBook Air deals available this May, but the steeper $165 price drop on the 15-inch M4/24GB/512GB spec in Starlight is especially enticing. With the extra memory (24GB vs 16GB found in the standard model), you can enjoy enhanced performance when running multiple apps simultaneously.Save $165 on Amazon Continue Reading on AppleInsider | Discuss on our Forums
Read more »
05:40 pm
After everything, Epic Games submits new 'Fortnite' to US App Store review | AppleInsider
After everything, Epic Games submits new 'Fortnite' to US App Store review
Epic has resubmitted "Fortnite" to Apple for review, aiming to bring the game back to the U.S. App Store nearly four years after the developer violated its agreement, and Apple pulled the title.Fortnite could return to U.S. App Store soonIn August 2020, Epic willingly violated Apple's App Store rules by allowing players the option to purchase Fortnite's in-game currency directly, rather than through Apple's payment system. This violation not only resulted in the game's removal from the App Store, it kicked off a lengthy legal battle between the two tech giants.Now it seems like Epic is looking to bring Fortnite back to the iPhone and iPad. On Friday, the company posted on X that it had submitted the game for review. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
05:27 pm
ESPN’s new flagship streaming service nails the perfect name | 9 to 5 Mac
ESPN’s new flagship streaming service nails the perfect name
ESPN is launching a new, flagship streaming service this fall that combines everything you get from its network channels into one standalone streamer. Official details on the streamer are coming next week, but the name just leaked, and I think we all owe Disney a round of applause. more…
Read more »
05:24 pm
‘It is not illegal to charge fees,’ Apple tells Brazilian regulator on NFC probe | 9 to 5 Mac
‘It is not illegal to charge fees,’ Apple tells Brazilian regulator on NFC probe
Apple Pay and the iPhone’s NFC sensor have long been the subject of disputes around the globe. Last year, the European Commission compelled Apple to grant developers access to the NFC reader, and more recently, the company expanded this access in other regions due to increasing regulatory pressure. Now, a new national payment system in Brazil has a regulatory body taking an even closer look at the iPhone’s NFC, and it appears the company isn’t willing to budge. more…
Read more »
05:20 pm
My, that’s a loud lamp you have, Sonos [Update: Ikea partnership ends] | Cult of Mac
My, that’s a loud lamp you have, Sonos [Update: Ikea partnership ends]
Sonos and Ikea partnered for more than eight years on speakers built into household objects, but now it's over. (via Cult of Mac - Apple news, rumors, reviews and how-tos)
Read more »
04:59 pm
Apple said to use Brazil for lower-tariff iPhones, despite denials | AppleInsider
Apple said to use Brazil for lower-tariff iPhones, despite denials
Sao Paulo media claims that reports of iPhone manufacturer Foxconn expanding in Brazil is correct, even though Apple has said it will not increase production, and isn't trying to beat US tariffs.Foxconn's existing facility in Brazil — image credit: FoxconnFor years, Apple has been working to reduce its over-reliance on China as a single or major source of iPhones, and those moves have seen its suppliers establish facilities in several other countries. According to Apple, however, its production in Brazil is expressly for making iPhones to be sold locally and as of late April 2025, will continue to be so.Apple was responding to a report in local publication Exame, which claimed Foxconn was expanding its facilities in order that it could make iPhones for export to the US. The report was unclear on details, but did say that the expansion was at Foxconn's plant in Jundiai, southeast Brazil. Continue Reading on AppleInsider | Discuss on our Forums
Read more »
04:39 pm
iOS 19 could bring AI to the Calendar app per just-revealed acquisition | 9 to 5 Mac
iOS 19 could bring AI to the Calendar app per just-revealed acquisition
Apple acquires companies all the time, but most of them we don’t hear about. Thanks to a recent EU disclosure, however, we know that one 2024 acquisition is likely to lead to the first Apple Intelligence features for the Calendar app—possibly as soon as iOS 19. more…
Read more »
04:38 pm
Epic Games says it has submitted Fortnite to the U.S. App Store for review | 9 to 5 Mac
Epic Games says it has submitted Fortnite to the U.S. App Store for review
Update: . The ball is now in Apple’s court to approve the app submission. If Fortnite does return to the U.S. App Store this week, it won’t be before Friday. That’s according to Epic Games CEO Tim Sweeney, who shared an update on the long-awaited comeback today. more…
Read more »
04:00 pm
Apple analyst Ming-Chi Kuo predicts bi-annual iPhone release schedule | Mac Daily News
Apple analyst Ming-Chi Kuo predicts bi-annual iPhone release schedule
Apple analyst Ming-Chi Kuo predicts a significant shift in Apple’s iPhone release strategy, moving to a bi-annual schedule from 2025 to 2027… The post appeared first on MacDailyNews.
Read more »
03:59 pm
Apple’s ambitious chip roadmap includes AI, glasses, and ‘advanced’ Macs | Macworld
Apple’s ambitious chip roadmap includes AI, glasses, and ‘advanced’ Macs
Macworld While everyone is wondering what’s going on with Siri and what court will rule against Apple next, actual products are in the works deep within Apple itself, including work on the next-gen chips that will be in several products coming in the future. According to a report this week by Bloomberg’s Mark Gurman, the new chips include the M6 and M7 chips that will be used in the Mac lineup. Apple is expected to release the M5 chip in the MacBook Pro this November, so the M6 won’t appear until next year, and the M7 likely in 2027. Gurman also said that Apple is working on an “advanced Mac chip in development dubbed Sotra.” No details were provided on any of the upcoming chips. 2026 marks the 20th anniversary of the MacBook, and Apple reportedly has big plans for the M6 MacBook Pro, including a display update to OLED. Previous reports have said that the M6 will be a 2nm chip, but that the new production process could be more expensive to use than the current enhanced 3nm one. Along with an unpredictable tariff situation, it’s possible that the price of the MacBook Pro could increase next year, or the anniversary model could be delayed until 2027. What’s more interesting are the chips Apple is making for some undisclosed future devices, which include processors for smart glasses along the lines of the Ray-Ban Meta glasses. The chips for the glasses are reportedly based on the Apple Watch S-series chip, but modified to be more power efficient and be able to control the cameras that are installed in the glasses. Gurman says they won’t go into product until the end of 2026 or in 2027, which means an actual glasses product won’t appear for at least two years. The Apple glasses appear to be a separate product line from the current Vision Pro. Gurman states that the idea is AR-focused, superimposing notifications and other helpful information into view, but he also cautions that “AR remains years away from being practical.” It’s possible that if Apple’s glasses aren’t AR-enabled, they will be like the Ray-Ban Meta glasses, which record video, take photos, play audio, and support voice functions. Other new chips for Apple wearables include a chip codenamed Nevis for an Apple Watch with a camera, and a chip codenamed Glennie for camera-equipped AirPods. These products are scheduled for 2027. Past reports have indicated that Apple is making servers specifically for the handling of AI processing, and Gurman reports that this project could be ready in 2027. The AI server chips could “have double, quadruple, or eight times the number of main processing and graphics cores as today’s M3 Ultra.” Many Apple Intelligence features utilize on-device processing, but for Apple to take further steps into implementing more complex AI features, it has to rely on cloud processing. Gurman states that these new servers would help Apple “catch up” to other AI services from Nvidia and Google. Other chips in development include follow-ups to the C1 modem that debuted in the iPhone 16e, including the C2 for the high-end iPhones in 2026, and a “higher-end” C3 for 2027. Apple also continues to work on a sensor and chip system for monitoring blood glucose levels on the Apple Watch.
Read more »
03:58 pm
9to5Mac Daily: May 9, 2025 – Apple’s smart glasses and foldable iPhone | 9 to 5 Mac
9to5Mac Daily: May 9, 2025 – Apple’s smart glasses and foldable iPhone
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by CardPointers: The best way to maximize your credit card rewards. 9to5Mac Daily listeners can exclusively save 30% and get a $100 Savings Card. more…
Read more »
03:46 pm
Deals: M4 MacBook Air $836 low, M4 MacBook Pro $277 off, M4 Pro Mac mini $214 off, iPad (A16) $278, more | 9 to 5 Mac
Deals: M4 MacBook Air $836 low, M4 MacBook Pro $277 off, M4 Pro Mac mini $214 off, iPad (A16) $278, more
We have another busy day in Apple deals today folks, with some new all-time Amazon pricing across several of the latest releases. The M4 MacBook Air in Midnight has hit a new all-time low at $836 – the rest of the lineup is still $150 off – while the most affordable M4 MacBook Pro is $277 off to deliver the lowest price we have ever tracked online. The M4 Mac mini deals continue as well – the 24GB M4 and 24GB M4 Pro are also now at the lowest prices to date – and the new iPad (A16) is now starting under $278. But there’s a whole lot more than that down below as well. more…
Read more »
03:32 pm
Security Bite: Down the rabbit hole of neat, lesser-known Terminal commands (Pt. 2) | 9 to 5 Mac
Security Bite: Down the rabbit hole of neat, lesser-known Terminal commands (Pt. 2)
9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. I’ve recently fallen into the rabbit hole of lesser-known Terminal features. These past months, I covered everything from enabling Touch ID for sudo authentication to cleaning up public Wi-Fi connections stored on your Mac. But this week, I want to share even more neat features you probably didn’t know Terminal could do. These can be helpful if you’re an everyday Mac user or managing an enterprise fleet. In this edition of Security Bite, allow me to elevate your command line prowess further. more…
Read more »
03:20 pm
After denying initial report, Apple might expand iPhone assembly in Brazil after all | 9 to 5 Mac
After denying initial report, Apple might expand iPhone assembly in Brazil after all
In early April, Brazilian business magazine Exame reported that Apple was looking to increase iPhone assembly at both Foxconn facilities in Jundiaí, São Paulo, as a workaround to President Trump’s tariffs, which Apple denied. Now, Exame is doubling down on its original report. more…
Read more »
03:16 pm
macOS 16’s major redesign could be like Big Sur all over again | 9 to 5 Mac
macOS 16’s major redesign could be like Big Sur all over again
Next month, Apple will unveil its new designs for iOS 19, iPadOS 19, and macOS 16. One reported goal of the redesigns is building more consistency between the various platforms. For the Mac, that means we could have another Big Sur situation on our hands. more…
Read more »
03:13 pm
Inside Apple Weather: get the most out of Apple's own forecasting app | AppleInsider
Inside Apple Weather: get the most out of Apple's own forecasting app
Apple's Weather app has existed for a long time, and has evolved a great deal in the last few years — here's everything you need to know to master the Weather app.Inside Apple's Weather appApple's Weather app shipped with the original iPhone in 2007. And, since 2007, it's appeared on every iteration of the iPhone and the iPod Touch.For the first seven years, Apple sourced its weather data from Yahoo! Weather. This was clunky, and awkward, as Yahoo! Weather used data from The Weather Channel to provide data to Apple. Continue Reading on AppleInsider | Discuss on our Forums
Read more »

Older posts

Friday May 09
10:19 pm
Six iPhone Safety Tools You Should Know About | MacRumors
Six iPhone Safety Tools You Should Know About
Apple is known for its privacy policies that keep user data collected to a minimum, but the company has also worked to incorporate many safety features into its devices. From summoning help when you can't to making sure you're not being tracked or followed, the iPhone has tools that are meant to keep you safe. We've rounded up some of the most important options that everyone should be reminded about. Emergency SOS If you're in danger or there's a medical emergency, the ‌iPhone‌ has ways to quickly summon help by automatically calling emergency services. The Emergency SOS feature will dial the local emergency helpline based on your location, so it's available even when you're traveling. In the United States, for example, activating it dials 911. In the UK, it dials 999, and in Europe, 112. With Emergency SOS, you don't need to know the emergency number for the country you're in, which can be a relief when you just need help as soon as possible. There are several setup options for Emergency SOS, so you can choose the one that works best for you. There are two automatic calling options where you can dial immediately by either holding the side button and a volume button together or pressing the side button five times in rapid succession. There's also an option where you'll need to use a swipe to place the call, which eliminates accidental activations. Emergency SOS can be set up in the Emergency SOS section of the Settings app. Toggle on one of the two activation options if you want auto calling. If you don't want auto calling, turn off both toggles. The gestures still work the same way, but using them will bring you to the ‌iPhone‌ shut down screen where you can use a single swipe to place an emergency call. Emergency SOS is always on and available even if you don't have the automatic options enabled. Note: This screen for emergency services has another important function that's worth knowing about. It will lock your ‌iPhone‌ so that it won't unlock with Face ID, and your passcode will be needed to access your data. If you're ever asked to hand over your phone to someone, you can quickly use one of the two gestures to disable ‌Face ID‌. In the U.S., you can't be compelled to provide your passcode to law enforcement. You can, however, be required to unlock your ‌iPhone‌ with a facial scan or fingerprint. Emergency SOS will work over a cellular connection, Wi-Fi, and on the ‌iPhone‌ 14 or later, satellite if a standard connection is not available. Emergency SOS via Satellite will also work on a phone that does not have cellular service, but the auto calling features require a SIM. If you have emergency contacts set, they will be notified with a text message if you need to use Emergency SOS. Medical ID Medical ID provides your relevant medical information and emergency contacts to first responders if you're in an accident, so it's useful to keep it up to date and available. It includes your name, age, allergies, and emergency contact numbers, along with a photo, language spoken, height, weight, blood type, medications, and medical conditions including pregnancy. You can set up your own Medical ID in the Health app settings. Open up the Settings app, scroll down to Apps, look for the Health app, and tap into it. From there, tap into each category to add data. Alternatively, open the Health app, tap on your profile picture, and tap Medical ID. If you're in an emergency situation and there's an unresponsive ‌iPhone‌ user, it's also good to know how to get to the Medical ID information. From the Lock Screen, swipe up to the Passcode interface, tap on Emergency, and then tap on Medical ID in the bottom left of the display. You can also press the side button five times, or hold the side button and the volume button together to get to the Medical ID interface. Crash Detection With the ‌iPhone‌ 14 or later, the gyroscope and accelerometer in the ‌iPhone‌ can detect a car crash, alerting emergency services. Crash Detection can have some false alarms and early on, there were problems when people were skiing or on rollercoasters, but Apple has worked to refine it. Crash Detection is enabled automatically on the ‌iPhone‌ 14 or later, but you can double check that it's on by going to Emergency SOS in the Settings app and scrolling down to the "Call After Severe Crash" option. If Crash Detection is activated, the ‌iPhone‌ will play an alarm and start a countdown before the call is placed, so there is time to cancel it if there's movement that causes the feature to detect a crash when there hasn't been one. Location Sharing With the Find My app and location sharing, you can share your location with trusted friends and family members. Location sharing can be good for peace of mind, because it ensures that someone always knows where you are. This isn't always desirable because you're not going to want to share your whereabouts with someone unsafe, but it's good to know about. You can share your location for different lengths of time, including for an hour, until the end of the day, or indefinitely. One of the easiest ways to share your location with someone is to open up the ‌Find My‌ app, tap on the People tab, and then tap the "+" button to select a contact. You can also share from the Messages app and the Contacts app. The ‌Find My‌ app's People tab will show you who you're sharing your location with so you can turn it off, but you can also go to the Privacy and Security section of the ‌iPhone‌ Settings app, tap on Location Services, and then select Share My Location to see who can view your location. Check In If you don't want to permanently share your location with someone, or you just want extra oversight when you're using a ride share service or taking a late night walk, you can use the Check In feature. With Check In, you can choose a person that will see your current location, your intended destination, and the approximate time that it will take you to get there. Check In can also be tied to a workout, so that it's active while the workout is in progress, or it can be a simple timer that's not linked to a specific route. If you're using Check In with a destination, it ends when you arrive. With a timer, it prompts you to respond within 15 minutes of when the timer ends to make sure you're okay, and with a workout, it sends a notification when the workout ends. If you do not arrive at your destination or tap a prompt when a timer ends, the person on the other end of the Check In procedure will get an alert. From there, the person can see your starting location, the route you took, your current or most recent location, when you last unlocked your ‌iPhone‌, or, if you have an Apple Watch, when it was removed. It also includes the connectivity status of your devices and battery level. Data is only shared if you do not respond to Check In prompts, and you can also choose to share a more limited amount of data that includes only your most recent location. Check In is a Messages feature, and you can use it by choosing a conversation in the Messages app, tapping on the "+" button, and selecting Check In. To change the parameters, tap on the Edit button. Safety Check Safety Check is an important feature that walks you through all of the privacy settings on your ‌iPhone‌, and it's worth using every now and then. It lets you know which people, apps, and devices can see your personal information like location. Safety Check can be initiated by opening the Settings app, selecting Privacy and Security, and scrolling down to Safety Check. There is an Emergency Reset option, and a Manage Sharing and Access option. Emergency Reset immediately resets the data sharing permissions of all of your apps, and it stops sharing your location both with people and apps. It's good in situations where a disgruntled partner or friend might be able to track you. Manage Sharing and Access is the option most people will want to use. In this interface, the ‌iPhone‌ walks through what you are sharing with people, including location, photos, calendars, passwords, activity, home devices, notes, and more. You can see these settings on a person by person basis, or an overview of how many people have access to each category by tapping on the "Information" button. You'll also be able to see what information you're sharing publicly through shared albums or notes, and which apps have access to your data.This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:57 pm
Epic Games Submits Fortnite to U.S. App Store | MacRumors
Epic Games Submits Fortnite to U.S. App Store
As promised, Epic Games today submitted Fortnite to the U.S. App Store, and if approved by Apple, it will mark the first time that the Fortnite app has been available in the United States since 2020. Fortnite will include options to purchase in-app currency from the web rather than through in-app purchase, which is what got the game banned to begin with. This time, though, Apple has been ordered to allow all developers, including ‌Epic Games‌, to direct customers to purchase options that are available outside of the ‌App Store‌. ‌Epic Games‌' U.S. developer account has been banned since the initial Apple vs. ‌Epic Games‌ battle in 2020, so ‌Epic Games‌ is using the developer account that it established in Sweden to submit Fortnite to the ‌App Store‌. ‌Epic Games‌ created a Swedish ‌App Store‌ account last year in order to create an ‌Epic Games‌ app marketplace in the European Union, as allowed by the Digital Markets Act. ‌Epic Games‌ CEO Tim Sweeney said that the company has "conversed" with Apple about the plan, and that Apple is aware that ‌Epic Games‌ is submitting Fortnite using the ‌Epic Games‌ Sweden subsidiary that it established for the EU. Sweeney has not confirmed whether Apple said that's okay, and it's not clear if Apple will approve the ‌App Store‌ submission. In an interview this week, Sweeney said he would be "very surprised" if Apple "decided to brave the geopolitical storm of blocking a major app from iOS." When ‌Epic Games‌ first made a new developer account in the EU, Apple shut it down due to Epic's pattern of untrustworthy behavior. ‌Epic Games‌ complained to EU regulators, and regulators in turn started questioning Apple. At that point, Apple decided to reinstate the account after ‌Epic Games‌ pledged to follow the alternative marketplace rules. During the Apple vs. ‌Epic Games‌ legal battle, Apple was at no point ordered to allow Fortnite to return to the ‌App Store‌, and the case in fact suggested that Apple was well within its rights to terminate Epic's account, and under no obligation to allow Fortnite in the ‌App Store‌ at all. It's possible Apple will not allow ‌Epic Games‌ to use its European developer account to submit Fortnite given that the U.S. account is still banned, but Apple might not want to further anger the judge overseeing the case. Apple has also already approved external purchase links in Spotify, Kindle, Patreon, and other apps. As of now, Apple is required to allow developers to add links and buttons to their apps directing customers to digital purchase options available outside of the ‌App Store‌, and more importantly, Apple is not allowed to collect a commission on these purchases. Apple has filed an emergency motion with the Ninth Circuit Court of Appeals to pause the "extraordinary" ruling that it argues requires it to give up "core aspects of its business operations." Apple has specifically asked the appeals court to allow it to charge fees for purchases made using external links while the appeals process is playing out, with the company also requesting control over how those links are displayed. Apple asked the appeals court to issue a ruling by May 28, but until Apple hears back, the ‌App Store‌ link changes that are in place will stand.Tags: App Store, Epic Games, Epic Games vs. Apple, FortniteThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:35 pm
The MacRumors Show: After iPhone 17 – What to Expect in 2026 and Beyond | MacRumors
The MacRumors Show: After iPhone 17 – What to Expect in 2026 and Beyond
On this week's episode of The MacRumors Show, we talk through how the iPhone lineup is rumored to change after the release of the iPhone 17 lineup later this year, looking at what to expect in 2026, 2027, and beyond. Subscribe to The MacRumors Show YouTube channel for more videos Apple's recently rumored ‌iPhone‌ roadmap beyond the ‌iPhone 17‌ reveals a significant strategic shift in both release cadence and product positioning. With increasing competition, an expanding lineup, and evolving manufacturing logistics—particularly the move away from China toward production in India—Apple is exploring a staggered release schedule designed to avoid marketing fatigue and maintain focus across the six main ‌iPhone‌ models that are expected to be on sale by the end of next year. In spring 2026, Apple may introduce the "iPhone 17e" as a refresh of the lower-cost model introduced this year. The major wave of change begins in fall 2026, with the launch of the "‌iPhone‌ 18 Air," "‌iPhone‌ 18 Pro," and "‌iPhone‌ 18 Pro Max." The Pro models are expected to introduce under-display Face ID for the first time, reducing the need for a visible sensor array and leaving only a small camera hole at the top-left corner of the display. It remains unclear how this change will affect the presence or function of the Dynamic Island. Camera upgrades are also expected, including a variable aperture 48MP main lens and a likely new Samsung sensor for the ultra-wide camera. Other enhancements include Apple's in-house "C2" modem and an "A20" chip made with TSMC's upcoming 2nm process. Fall 2026 is also expected to mark the debut of Apple's first foldable ‌iPhone‌. Featuring a book-style design, the device will offer a 5.7-inch outer display and a 7.8-inch inner display. Apple reportedly aims to beat competitors with a superior hinge mechanism crafted from titanium and stainless steel, and a display with a nearly invisible crease. Unlike other flagship iPhones, the foldable model will use Touch ID embedded in the power button instead of Face ID, likely due to internal space constraints. It will also purportedly include just two rear cameras, a high-density battery, and an impressively slim profile: 4.5mm when open, and 9–9.5mm when closed. In spring 2027, the base "‌iPhone‌ 18" and "‌iPhone‌ 18e" models will follow. In fall 2027, Apple is expected to introduce the "iPhone 19 Air" with a larger display, exceeding the 6.6 inches of the previous two Air models. The "‌iPhone‌ 19 Pro" and "‌iPhone‌ 19 Pro Max"—possibly branded to mark the 20th anniversary of the iPhone—will feature a "bold" redesign, incorporating more glass and, for the first time, an under-display front camera. The result will likely be a true edge-to-edge screen without notches or cutouts, fulfilling a long-standing vision for a seamless all-display ‌iPhone‌. The second-generation foldable ‌iPhone‌ is also scheduled for fall 2027, building on the first model with further refinements and enhanced durability. While plans for spring 2028 are less concrete, it's likely that the standard "‌iPhone‌ 19" and potentially "‌iPhone‌ 19e" models will arrive then, continuing the new spring/fall rollout rhythm. Looking even further ahead, Apple's ambitions may go beyond smartphones altogether. According to remarks from Apple executive Eddy Cue this week, the ‌iPhone‌ could be obsolete within a decade, replaced by AI-powered wearables and ambient computing experiences. The MacRumors Show has its own YouTube channel, so make sure you're subscribed to keep up with new episodes and clips. Subscribe to The MacRumors Show YouTube channel! You can also listen to ‌The MacRumors Show‌ on Apple Podcasts, Spotify, Overcast, or your preferred podcasts app. You can also copy our RSS feed directly into your podcast player. If you haven't already listened to the previous episode of The MacRumors Show, catch up to hear our discussion about the updated Apple Watch lineup coming later this year. Subscribe to ‌The MacRumors Show‌ for new episodes every week, where we discuss some of the topical news breaking here on MacRumors, often joined by interesting guests such as John Gruber, Mark Gurman, Kevin Nether, Jon Prosser, Luke Miani, Matthew Cassinelli, Brian Tong, Quinn Nelson, Jared Nelson, Eli Hodapp, Mike Bell, Sara Dietschy, iJustine, Jon Rettinger, Andru Edwards, Arnold Kim, Ben Sullins, Marcus Kane, Christopher Lawley, Frank McShan, David Lewis, Tyler Stalman, Sam Kohl, Federico Viticci, Thomas Frank, Jonathan Morrison, Ross Young, Ian Zelbo, and Rene Ritchie. ‌The MacRumors Show‌ is on X @MacRumorsShow, so be sure to give us a follow to keep up with the podcast. You can also head over to The MacRumors Show forum thread to engage with us directly. Remember to rate and review the podcast, and let us know what subjects and guests you would like to see in the future.Tag: The MacRumors ShowThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:13 pm
Apple Acquisition Hints at Upgraded Calendar App on iOS 19 or Beyond | MacRumors
Apple Acquisition Hints at Upgraded Calendar App on iOS 19 or Beyond
Apple acquired Canadian startup Mayday Labs in April 2024, according to a European Commission listing, spotted by French blog MacGeneration. The acquisition had not received widespread attention from tech publications until now. Apple is legally required to report certain acquisitions to the European Commission, under the terms of the EU's Digital Markets Act. Mayday Labs founder Jeremy Bell confirmed that his company had been acquired in a since-deleted April 2024 blog post, but he did not mention Apple at that time. Apple acquired the startup's intellectual property, and the rights to make employment offers to certain employees, according to the European Commission. Mayday Labs had developed an AI-powered calendar, task manager, and scheduling assistant for the iPhone, iPad, and Mac. The all-in-one app used AI to automatically schedule your events and tasks at ideal times, and it could learn your scheduling preferences and daily patterns over time to further optimize your calendar. Mayday's website says its app worked best when you used it with others. For example, it could automatically schedule a meeting at a time where both you and a co-worker were available. It also offered automatic rescheduling for flexibility. The app was shut down shortly after the acquisition. It would be reasonable to assume that some of Mayday's features and technologies could be added to Apple's Calendar app across the iPhone, iPad, and Mac, under the Apple Intelligence umbrella. More than a year has passed since the acquisition, so perhaps some of these changes will debut as early as iOS 19, iPadOS 19, and macOS 16, which will be unveiled at Apple's annual developers conference WWDC next month. Apple already integrated its Calendar and Reminders apps on iOS 18, as a stepping stone. The European Commission's website lists six other companies that Apple has acquired since September 2023, including Pointable, Betteromics, Drishti, DarwinAI, Datakalab, and Blueye. Many of these companies were working on AI technologies, for the enterprise, manufacturing, life sciences, and more. Some of the acquisitions were well publicized, but Mayday Labs and a few others went somewhat under the radar on a relative basis.Related Roundup: iOS 19Tag: CalendarThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
03:41 pm
Set Up a Recovery Contact for Your Apple Account | MacRumors
Set Up a Recovery Contact for Your Apple Account
Losing your Apple Account password can make your digital life a misery, as it can leave you locked out of the account that you use to manage your Apple devices, unable to access your iCloud data and manage your app and service subscriptions. In this scenario, Apple can't just reset your password for you, especially if your have two-factor authentication enabled. Setting up a recovery key is one alternative solution, but in such cases you can't change your password unless you have a trusted second device as well as the recovery key. In an effort to make things easier, Apple allows you to set up an account recovery contact that can help make sure you always have access to your account, even if you forget your Apple Account password or device passcode. Your recovery contact is someone who can verify your identity and help you regain access to your account and all of your data if you ever get locked out. Who Should Be My Recovery Contact? Your recovery contact should be a person you know and trust, such as a family member or a close friend. They will need an iOS device of their own running iOS 15 or iPadOS 15 or later, or a Mac running macOS Monterey or later, and they must be over the age of 13. They'll also need two-factor authentication turned on for their own account and a passcode set up on their device. Invite Someone to Be Your Recovery Contact Note: If you're on a Mac, you can find the same options as above in System Settings ➝ Apple Account. Open the Settings app on your iOS device and tap your Apple Account banner at the top of the main menu. Tap Sign In & Security. Under "Recovery Methods," tap Recovery Contacts. Read the onscreen information, then tap Add Recovery Contact... and authenticate. Choose a recovery contact. If you're part of a Family Sharing group, eligible contacts will appear in the options. Alternately, tap Choose Someone Else to search your contacts. Tap Next, and the following screen lets you send your chosen contact a message letting them know you've added them as your recovery contact. You can send the default message or edit it before sending. Tap Send when you're ready, then tap Done. Remember to save the person's phone number so that you can contact them if you need help with account recovery. Help Someone Regain Access to Their Account If you are someone's designated recovery contact, here's how you can help them. They'll first have to verify some of their Apple Account account information, and then they'll contact you over the phone or in person. The following steps show how you go about generating and sharing a recovery code that they can then enter on their device. On Mac, the same options can be found in System Settings ➝ Apple Account. Open the Settings app on your iOS device and tap your Apple Account banner at the top of the main menu. Tap Sign In & Security ➝ Account Recovery. Tap your contact's name, then tap Get Recovery Code. When your friend is ready, read them their recovery code. Once they've entered it on their device, they'll be able to reset their password and regain access to their Apple Account.Remove Yourself As a Recovery Contact If you no longer want to be someone's recovery contact, follow these steps on your iOS device. On Mac, the same options can be found in System Settings ➝ Apple Account. Open the Settings app on your iOS device and tap your Apple Account banner at the top of the main menu. Tap Sign In & Security ➝ Account Recovery. Under "Account Recovery For," tap the person's name. Tap Remove Contact.After completing these steps, the contact will automatically receive a message explaining that you're no longer their account recovery contact. Note: To set up the recovery contact feature, all of the Apple devices associated with your account must be upgraded to iOS 15/iPadOS 15 or later, or macOS Monterey or later. Apple Watch models must be upgraded to watchOS 8 or later. You will not be able to use the recovery contact feature until you upgrade all of your devices or remove them from your Apple Account.This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
03:32 pm
Apple's 11th Gen iPad Drops to New Low Price of $277.78 on Amazon | MacRumors
Apple's 11th Gen iPad Drops to New Low Price of $277.78 on Amazon
The new 11th generation iPad has continued to drop in price all week, and Amazon today has introduced a new record low price on the tablet. You can get the 128GB Wi-Fi iPad for $277.78 in Pink, down from $349.00, which beats the previous low price by about $10. Note: MacRumors is an affiliate partner with Amazon. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. Prices have been fluctuating on the 128GB Wi-Fi iPad throughout the day, so if you're interested be sure to place your order soon before they expire. If it does disappear, the other colors are still available at solid second-best prices of $299.00. $71 OFF128GB Wi-Fi iPad for $277.78 $50 OFF256GB Wi-Fi iPad for $399.00 $50 OFF512GB Wi-Fi iPad for $599.00 There are also numerous discounts on cellular models, starting at $449.00 for the 128GB model. Amazon is providing an estimated delivery of mid-to-late May for free shipping, while Prime members should be able to get the tablets a bit sooner. $50 OFF128GB Cellular iPad for $449.00 $50 OFF256GB Cellular iPad for $549.00 $70 OFF512GB Cellular iPad for $729.00 The 11th generation iPad is mainly a spec bump for the tablet line, now featuring the A16 chip and more storage, with the same design as the 10th generation iPad. The new ‌iPad‌ starts with 128GB of storage, and is also available in 256GB and a new 512GB configuration. The previous model was only available in 64GB and 256GB configurations. If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week. Deals Newsletter Interested in hearing more about the best deals you can find in 2025? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
03:01 pm
Best Buy's Spring Sale Features Record Low Prices on iPads, MacBook Air, Powerbeats Pro 2, and More | MacRumors
Best Buy's Spring Sale Features Record Low Prices on iPads, MacBook Air, Powerbeats Pro 2, and More
Best Buy has introduced major discounts across a number of Apple products this week, including MacBook Air, iPad Air, iPad mini, iPad, and Apple Watch. These discounts coincide with Best Buy's Mother's Day sale, which features savings on a collection of tech categories like headphones, wearables, photography, and more. Note: MacRumors is an affiliate partner with Best Buy. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. Top Picks Apple Pencil Pro - $99.00 ($30 off) Powerbeats Pro 2 - $199.99 ($50 off) Apple Watch Series 10 - $299.00 ($100 off) iPad mini 7 - $399.00 ($100 off) M3 iPad Air - $499.00 ($100 off) M4 MacBook Air - $849.00 ($150 off) M4 MacBook Air Starting with the 13-inch models, Best Buy has $150 off all three of the new configurations of the M4 MacBook Air. Prices start at $849.00 for the 256GB model, then raise to $1,049.00 for the 16GB/512GB model and $1,249.00 for the 24GB/512GB model. The latter two deals are solid second-best prices on the computer, while the 256GB is a match of the best price we've ever tracked. $150 OFF13-inch M4 MacBook Air (256GB) for $849.00 $150 OFF13-inch M4 MacBook Air (16GB/512GB) for $1,049.00 $150 OFF13-inch M4 MacBook Air (24GB/512GB) for $1,249.00 Moving to the larger display models, Best Buy is matching the all-time low prices on two 15-inch models of the M4 MacBook Air, but Amazon has the best prices around on the 24GB/512GB model. $150 OFF15-inch M4 MacBook Air (256GB) for $1,049.00 $150 OFF15-inch M4 MacBook Air (16GB/512GB) for $1,249.00 $165 OFF15-inch M4 MacBook Air (24GB/512GB) for $1,434.00iPad Mini 7 Best Buy is providing record low prices on every model of the iPad mini 7, starting at $399.00 for the 128GB Wi-Fi tablet, down from $499.00. Colors on sale at this price include Blue, Purple, Space Gray, and Starlight. $100 OFF128GB Wi-Fi iPad mini 7 for $399.00 $100 OFF256GB Wi-Fi iPad mini 7 for $499.00 $100 OFF512GB Wi-Fi iPad mini 7 for $699.00 You can also get the 256GB Wi-Fi iPad mini 7 for $499.00 and the 512GB Wi-Fi iPad mini 7 for $699.00, both $100 discounts and available in multiple colors. Of course, you'll also find every cellular iPad mini 7 on sale at Best Buy, including the 128GB cellular iPad mini 7 available for $549.00 and the 256GB cellular iPad mini 7 available for $649.00, both $100 off. 11th Gen iPad In terms of deals on the 11th generation iPad, Best Buy has every model on sale at record low prices, with two exceptions. You'll find better deals on the 128GB Wi-Fi and 256GB Wi-Fi models at Amazon right now, with the 128GB Wi-Fi iPad on sale for $277.78 and the 256GB Wi-Fi iPad on sale for $377.78. Both of these are $71 discounts and new best-ever prices. $71 OFF128GB Wi-Fi iPad for $277.78 $71 OFF256GB Wi-Fi iPad for $377.78 $50 OFF512GB Wi-Fi iPad for $599.00 Otherwise, you'll find every model available for $50 off on Best Buy today, matching their record low prices. There are also numerous discounts on cellular models, starting at $449.00 for the 128GB model. $50 OFF128GB Cellular iPad for $449.00 $50 OFF256GB Cellular iPad for $549.00 $50 OFF512GB Cellular iPad for $749.00M3 iPad Air For the M3 iPad Air, Best Buy has $100 off every model of the 2025 tablet. Our list below focuses on Wi-Fi models, but you'll also find many cellular models on sale at $100 off right now. $100 OFF11-inch M3 iPad Air (128GB Wi-Fi) for $499.00 $100 OFF13-inch M3 iPad Air (128GB Wi-Fi) for $699.00 The 128GB cellular 11-inch iPad Air is available for $649.00 and the 128GB cellular 13-inch iPad Air is available for $849.00, both $100 discounts. 11-inch M3 iPad Air 128GB Wi-Fi - $499.00, down from $599.00 256GB Wi-Fi - $599.00, down from $699.00 512GB Wi-Fi - $799.00, down from $899.00 1TB Wi-Fi - $999.00, down from $1,099.00 13-inch M3 iPad Air 128GB Wi-Fi - $699.00, down from $799.00 256GB Wi-Fi - $799.00, down from $899.00 512GB Wi-Fi - $999.00, down from $1,099.00 1TB Wi-Fi - $1,199.00, down from $1,299.00 Apple Watch Series 10 Best Buy has a match of the all-time low prices on nearly every Apple Watch Series 10 model, starting at $299.00 for the 42mm GPS device. You'll find both GPS and cellular watches on sale at Best Buy, with multiple band styles available as well. $100 OFFApple Watch Series 10 (42mm GPS) for $299.00 $100 OFFApple Watch Series 10 (46mm GPS) for $329.00Apple Watch SE In addition to Series 10 deals, Best Buy is discounting the 40mm GPS Apple Watch SE to $169.00 today, down from $249.00. This is the best price we've tracked so far in 2025, and it's available in Starlight, Silver, and Midnight Aluminum color options. $80 OFFApple Watch SE (40mm GPS) for $169.00 Additionally, you can get the 44mm GPS Apple Watch SE at an all-time low price of $199.00 today on Best Buy, down from $279.00. This one is also available in Midnight, Silver, and Starlight Aluminum colors, and multiple band sizes. $80 OFFApple Watch SE (44mm GPS) for $199.00 If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week. Deals Newsletter Interested in hearing more about the best deals you can find in 2025? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
02:26 pm
Will the iPhone 17 Air Have Good Battery Life? Here's What Rumors Say | MacRumors
Will the iPhone 17 Air Have Good Battery Life? Here's What Rumors Say
The widely-rumored iPhone 17 Air is expected to be the thinnest iPhone ever, but will that significantly impact the device's battery life? Below, we recap rumors about the iPhone 17 Air's battery life. Last week, The Information's Wayne Ma said the iPhone 17 Air will have "worse" battery life compared to previous iPhone models. In internal testing, Apple determined that the percentage of users who will be able to use the iPhone 17 Air for a full day on a single charge will be between 60% and 70%, according to his reporting. For other iPhone models, the report said that this metric falls between 80% and 90%. The report said the lesser battery life is due in part to the iPhone 17 Air's ultra-thin design. According to Apple supply chain analyst Ming-Chi Kuo, the device will measure just 5.5mm at its thinnest point, but the rear camera bar will be thicker. To mitigate this problem, the report said that Apple is planning to release a battery case as an optional accessory for the iPhone 17 Air. Apple last released battery cases for the iPhone 11 lineup, followed by the since-discontinued MagSafe Battery Pack for the iPhone 12 series and newer. The case would presumably charge the iPhone 17 Air via the device's USB-C port. Not everyone agrees that the iPhone 17 Air will have worse battery life, though. In March, Bloomberg's Mark Gurman said the iPhone 17 Air's battery life would be "on par with current iPhones." He said Apple made hardware and software optimizations to make the device more power efficient, but he did not elaborate. There are three rumored features for the iPhone 17 Air that could aid battery life, including a higher-density battery, Apple's power-efficient C1 modem, and the lack of an Ultra Wide camera providing more internal space for a larger battery. The lower-end iPhone 16e with the C1 modem has the longest battery life of any 6.1-inch iPhone model ever, although that device is obviously not as thin as the iPhone 17 Air is expected to be. All in all, there is a still a lack of certainty about the iPhone 17 Air's battery life, with rumors currently conflicting. The device is not expected to be released until September, so hopefully some additional reports will help to paint a clearer picture.Related Roundup: iPhone 17 AirThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
01:19 pm
Former Apple Design Chief Jony Ive Reflects on Company Culture, Iconic Products, and a Warning for the Tech Industry | MacRumors
Former Apple Design Chief Jony Ive Reflects on Company Culture, Iconic Products, and a Warning for the Tech Industry
Apple's former Chief Design Officer Jony Ive has given a rare and wide-ranging interview at Stripe Sessions 2025, offering new insights into his design philosophy, his time at Apple, and his current work at his design collective, LoveFrom. In a one-hour conversation with Stripe co-founder Patrick Collison, Ive reflected on the personal and professional experiences that have shaped his career, beginning with his early exposure to Apple products as a student in the UK. Recalling his first encounter with the original Macintosh, Ive described it as a transformative moment that revealed the values of its creators. "What we make stands testament to who we are," he said. He characterized the Mac as a "bicycle for the mind," a phrase popularized by Steve Jobs, and noted how it inspired his eventual relocation to California in the early 1990s. Ive joined Apple in 1992 after a brief period of consulting and quickly rose through the company's ranks to lead the Industrial Design Group, where he oversaw the development of many of Apple's most iconic products, including the iMac, iPod, iPhone, and Apple Watch. He emphasized that the work of design at Apple was deeply rooted in its culture; describing a variety of internal practices intended to cultivate empathy and collaboration among the design team, including weekly shared meals.One of the things I thought was great was that every Friday morning, I asked that one person on the design team would make breakfast for the whole team. And we took it in turns. He also described working from each other's homes and creating informal settings where designers could build personal relationships, which he said translated directly into the care embedded in the company's products. According to Ive, these rituals were foundational to Apple's approach to creating user experiences. "Make things for each other," he said. Ive continued to emphasize attention to detail and the belief that seemingly minor aspects of product design carry significant weight. He referenced the design of Apple's packaging an as example of how everyday experiences could convey respect and consideration for the user.I had such a clear awareness that in designing a certain solution — for example, how we managed a cable that's in a box — I knew that millions of people would engage with this little tab. Ive said that such design choices were not arbitrary, but instead formed part of a broader ethic of care. He quoted Jobs, saying, "You can express gratitude to the species through what you make." Now nearly six years removed from Apple, Ive leads LoveFrom, an independent design collective he co-founded in 2019 with longtime collaborator Marc Newson. The group remains largely private in its operations but has gradually expanded its public profile. The studio's work includes product design, architecture, software, and branding. One of its most prominent recent contributions was the official coronation identity for King Charles III. According to Ive, LoveFrom is guided by the same principles that shaped his career at Apple, but the collective's mission has evolved. Ive sees each project as an opportunity to "sincerely elevate the species." The LoveFrom team includes not only designers but also musicians and typographers. Ive warned that designers and technologists today must remain vigilant about the unintended consequences of their work. He argued that positive intentions do not absolve creators from the outcomes of their products and stressed the importance of accountability.Even if you're innocent in your intention, if you're involved in something that has poor consequences, you need to own it. Ive also addressed broader concerns about the technology industry, including the rapid pace of innovation and the social implications of modern devices and platforms. I actually think that something that I feel conscious of is that I think generally in the valley and generally in our... industry, I think joy in humans has been missing. And the products that we're all developing, they're complicated, aren't they? And sometimes joy gets confused with being trivial. The interview marked a rare public appearance by Ive, who has typically maintained a low profile since his departure from Apple in 2019. He did not address collaboration with OpenAI on a new AI-focused hardware project.Tags: Jony Ive, LoveFromThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
01:09 pm
Bluetooth 6.1 Update Set to Improve Privacy, Battery Life of iPhone Accessories | MacRumors
Bluetooth 6.1 Update Set to Improve Privacy, Battery Life of iPhone Accessories
The Bluetooth Special Interest Group (SIG) has released Bluetooth 6.1 as part of its new bi-annual update schedule. The update introduces Randomized Resolvable Private Address (RPA), a feature designed to enhance both privacy and power efficiency. This new feature makes tracking Bluetooth devices a lot more difficult because it randomizes the timing of device address changes, instead of just using predictable intervals. It also offloads address change operations to the controller device, which should help extend the battery life of the accessory device. The specification follows Bluetooth 6.0, which arrived in September 2024. That update brought Channel Sounding for centimeter-level location accuracy, lower latency, and faster scanning capabilities, all of which could theoretically enhance the iPhone's Precision Finding feature. For iPhone users, the upcoming iPhone 17 series expected to be released in September will likely support Bluetooth 6.0 and possibly incorporate the new 6.1 features. All in all, it should bring improved privacy protections and better battery performance when using Bluetooth accessories. With Bluetooth now on a twice-yearly release schedule, the next update, Bluetooth 6.2, is expected to arrive by the end of 2025 with additional refinements and features.Tags: Bluetooth, Bluetooth SIGThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
Thursday May 08
11:10 pm
Apple Working on Chips for New Macs and AI Servers | MacRumors
Apple Working on Chips for New Macs and AI Servers
Apple's chip team is working on new processors for more powerful Macs and future artificial intelligence features that will power Apple Intelligence, reports Bloomberg. Chips codenamed "Komodo" will likely be M6 chips that will follow this year's M5 chips, while chips codenamed "Borneo" will be Apple's future M7 processors. Another more advanced Mac chip that will debut in the future is codenamed "Sotra." Apple is designing chips that will be used for AI servers as well, and they are Apple's first processors made specifically for that purpose. The server chips will process ‌Apple Intelligence‌ requests and will be used in Apple servers, serving the same purpose as the high-end Mac chips that Apple uses for servers now now. The server chips that Apple is working on are part of its "Baltra" project, and the chips are expected to be finished by 2027. Apple is working on multiple types of chips, including those with double, quadruple, and eight times the number of CPUs and GPUs as the current M3 Ultra. Apple is also developing specialized chips that will be used in future smart glasses that will rival the Meta Ray-Bans, as well as chips for AirPods and Apple Watch models equipped with cameras. Those products could launch as soon as 2027.Tags: Bloomberg, Mark GurmanThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
10:03 pm
PSA: Apple Card Daily Cash Back From T-Mobile Dropping to 2% in July | MacRumors
PSA: Apple Card Daily Cash Back From T-Mobile Dropping to 2% in July
Apple has partnered with multiple merchants to provide three percent Daily Cash back for Apple Card purchases, and T-Mobile has participated in the program since 2019. That's going to end in July, though, and Daily Cash back from T-Mobile will revert to the standard two percent when using Apple Pay. In its Daily Cash support document, Apple says that starting on July 1, 2025, using ‌Apple Card‌ with ‌Apple Pay‌ at T-Mobile will provide only two percent cash back, instead of the bonus three percent cash back. ‌Apple Card‌ users get two percent cash back for all purchases made with ‌Apple Pay‌, so there will no longer be any extra cash back beyond the two percent when transacting with T-Mobile, including for monthly bills. Apple is still offering three percent cash for ‌Apple Pay‌ purchases from Ace Hardware, Booking.com, ChargePoint, Duane Read, Exxon and Mobil gas stations, Nike, Uber, and Walgreens.Tags: Apple Card, T-MobileThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
09:52 pm
Apple Card Users Get a Free Six Month Uber One Trial | MacRumors
Apple Card Users Get a Free Six Month Uber One Trial
Apple Card holders are now eligible for a six-month free trial of the Uber One service, according to emails that Apple began sending out today. Uber One is a subscription service that includes $0 delivery fees for Uber Eats orders, up to 10 percent off eligible deliveries and pickup orders, and six percent Uber One credits for Uber rides. Apple says that the Uber One benefit for ‌Apple Card‌ is worth $9.99 per month, so the free trial is a $60 value. The six-month free trial will auto-renew at $9.99 per month after the trial period if the subscription is not canceled. A membership can be canceled in the Uber One section of the Uber app by going to Manage Membership and selecting the End Membership option. ‌Apple Card‌ owners can cancel before the six month trial ends and still get the full six months free. To get the deal, ‌Apple Card‌ holders need to use the exclusive link provided in the email about the promotion to sign up for an Uber One monthly subscription, using an ‌Apple Card‌ and Apple Pay as the payment method. Ensuring that the ‌Apple Card‌ is associated with the account and using ‌Apple Pay‌ to check out when purchasing a subscription are key to getting the free trial. The offer is valid for new or returning Uber One subscribers, but it is not available for existing Uber One subscribers. The Uber One trial is available in addition to the three percent Daily Cash back that ‌Apple Card‌ owners get for Uber and Uber Eats purchases. More information is available on Apple's Daily Cash support page.Tag: Apple CardThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
07:45 pm
Google Using AI to Combat Scams in Chrome | MacRumors
Google Using AI to Combat Scams in Chrome
Google today shared details on some of the new ways that it is incorporating artificial intelligence into its search products in order to combat online scams. In Chrome for the desktop, the Enhanced Protection mode for safer browsing now incorporates Gemini Nano, an on-device large language model. Gemini Nano is able to provide instant insight to users about websites that might be risky, even if it's a scam that hasn't been seen before. Google says that Gemini Nano is able to distill the varied, complex nature of websites, making it quicker for Google to adapt to new scam tactics. Specifically, Gemini Nano is used to protect users from remote tech support scams, but Google plans to expand it to more types of scams in the future. Google is using AI to cut down on specific scams in Chrome for Android. Google delivers AI-powered warnings for spammy or misleading notifications, prompting users to unsubscribe. This isn't a feature available on the desktop or iOS devices as of yet, but Google could expand it in the future.Tags: Google, Google ChromeThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
05:45 pm
Amazon Takes $100 Off Huge Collection of Apple Watch Series 10 Models, Available From $299 | MacRumors
Amazon Takes $100 Off Huge Collection of Apple Watch Series 10 Models, Available From $299
Amazon is offering numerous all-time low prices on Apple Watch Series 10 devices today, including both GPS and cellular models at $100 off original prices. If you want to build your band collection to match your new Apple Watch, be sure to check out Woot's BOGO free sale on Solo Loop and Braided Solo Loop bands. Note: MacRumors is an affiliate partner with Amazon. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. Amazon has the 42mm GPS Apple Watch Series 10 for $299.00, down from $399.00, as well as the 46mm GPS model for $329.00, down from $429.00. Both of these are record low prices on the Apple Watch Series 10, and they're available in numerous case colors and band styles, all of which you can find in the lists below. $100 OFFApple Watch Series 10 (42mm GPS) for $299.00 $100 OFFApple Watch Series 10 (46mm GPS) for $329.00 42mm GPS Apple Watch Series 10 Jet Black Aluminum Case with Black Sport Band (S/M) - $299.00, down from $399.00 Jet Black Aluminum Case with Ink Sport Loop - $299.00, down from $399.00 Rose Gold Aluminum Case with Plum Sport Loop - $299.00, down from $399.00 Rose Gold Aluminum Case with Light Blush Sport Loop - $299.00, down from $399.00 Silver Aluminum Case with Blue Cloud Sport Loop - $299.00, down from $399.00 Silver Aluminum Case with Denim Sport Band (S/M) - $299.00, down from $399.00 46mm GPS Apple Watch Series 10 Jet Black Aluminum Case with Black Sport Band (M/L) - $329.00, down from $429.00 Jet Black Aluminum Case with Ink Sport Loop - $329.00, down from $429.00 Rose Gold Aluminum Case with Light Blush Sport Band (M/L) - $329.00, down from $429.00 Rose Gold Aluminum Case with Plum Sport Loop - $329.00, down from $429.00 Silver Aluminum Case with Blue Cloud Sport Loop - $329.00, down from $429.00 Silver Aluminum Case with Denim Sport Band (M/L) - $329.00, down from $429.00 If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week. Deals Newsletter Interested in hearing more about the best deals you can find in 2025? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
05:14 pm
Apple's Camera Equipped AirPods and Apple Watch Could Launch as Soon as 2027 | MacRumors
Apple's Camera Equipped AirPods and Apple Watch Could Launch as Soon as 2027
Apple is working on versions of the AirPods and Apple Watch that incorporate a camera, and the devices could be ready to launch sometime around 2027, reports Bloomberg. Apple has developed a chip codenamed "Nevis" that will be used for its camera-equipped Apple Watch, while a chip codenamed "Glennie" will be incorporated into the AirPods. Apple is aiming to have the chips ready "by around 2027," and if the chips are available early enough in the year, we could see a launch that same year. Last year, Apple analyst Ming-Chi Kuo said that Apple wants to incorporate infrared cameras into the AirPods to provide an enhanced spatial audio experience with the Vision Pro and future devices, plus cameras could also potentially support in-air gesture control, identifying hand movements. Gurman has suggested that Apple is considering cameras that would "feed data to AI." As for the Apple Watch, a future model could incorporate a camera in the screen area, while an upcoming version of the Apple Watch Ultra could have a camera near the Digital Crown. The cameras would enable Visual Intelligence features to allow users to get information about their surroundings and more tailored directions. The cameras destined for the Apple Watch and AirPods won't likely be used for things like capturing photos or FaceTime, but would instead provide visual data for on-device AI features.Related Roundups: AirPods 4, AirPods Pro, Apple Watch 10, Apple Watch Ultra 2Tags: Bloomberg, Mark GurmanBuyer's Guide: AirPods (Buy Now), AirPods Pro (Don't Buy), Apple Watch (Caution), Apple Watch Ultra (Neutral)Related Forums: AirPods, Apple WatchThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
05:01 pm
Apple Designing Chips for Smart Glasses That Rival Meta Ray-Bans | MacRumors
Apple Designing Chips for Smart Glasses That Rival Meta Ray-Bans
Apple is working on new chips that are destined for smart glasses that would compete with Meta's Ray-Bans, reports Bloomberg. The chip is in development now, with Apple targeting mass production in 2026 or 2027 for a launch in the next two years or so. The Meta Ray-Ban smart glasses do not have augmented reality capabilities, but are equipped with a camera and AI functionality. Apple has been considering a competitor for at least a year, and has apparently decided to move forward with development. Apple's smart glasses will include cameras, microphones, and integrated AI, much like the Ray-Bans from Meta, and they would presumably have similar functions like snapping photos, recording video, and offering translation options. Apple could also integrate a Visual Intelligence-like feature for scanning the environment and describing objects, looking up information about products, and providing directions. The glasses will have multiple cameras included, so they could also potentially record spatial video. The chip that Apple is designing for the smart glasses is based on chips that are used in the Apple Watch. These SoCs use less energy than the chips in devices like the iPhone, and Apple has already optimized it to improve power efficiency. While Apple is designing the Ray-Ban like glasses to compete with Meta, it is still working on augmented reality glasses, but that product will not be ready for some time.Tags: Apple Glasses, Bloomberg, Mark GurmanThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
04:15 pm
Apple Promotes Vision Pro in New Mother's Day-Themed Ad | MacRumors
Apple Promotes Vision Pro in New Mother's Day-Themed Ad
Apple today shared a new spatial video that's designed to highlight the Vision Pro headset, demonstrating how the device can be used to make and preserve memories. For the video, two parents, Sam and Khulan, filmed their newborn son using iPhones that are capable of recording spatial video. Sam then edited the footage into a home video for Khulan to watch on the Apple Vision Pro, and the video shows Khulan's reaction to seeing the montage. The video has a Mother's Day theme as Mother's Day is this Sunday in the U.S, and it was created by longtime Apple ad agency TBWA/Media Arts Lab.Tag: Apple AdsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
03:08 pm
Turn a Long Webpage into a PDF with a Single iPhone Screenshot | MacRumors
Turn a Long Webpage into a PDF with a Single iPhone Screenshot
In iOS and iPadOS, Apple includes a built-in screenshot feature that also provides you with the ability to capture an entire webpage on your iPhone or iPad that you can then save or share with someone as a PDF document. By converting full‑page screenshots into PDFs directly within Safari, you can preserve the exact layout and content of lengthy articles, receipts, or social media threads in a single, shareable file. Using the feature also eliminates the need to stitch together multiple images or rely on third‑party apps, plus the text remains searchable and any images stay crisp. Here's how the feature works. Launch Safari and navigate to the webpage that you wish to capture. If your device lacks a Home button, press the power button located at the top of the device and the volume up button located on the right of the device at the same time to take a screenshot. Otherwise, press the Home button and the Sleep/Wake button simultaneously to capture a screenshot. A preview of the screenshot will pop up in the lower left of the display. Tap it to open up the Instant Markup interface. You'll have about five seconds before it disappears. Tap the Full Page tab in the upper right corner of the Markup interface, then tap the Crop icon at the top. Use the frame around the webpage to select what to capture by dragging the corners with your finger, then tap Done. Tap the Share sheet icon (the square with an arrow pointing out) to bring up a panel of share options and actions. From here, you can either share the captured webpage as a PDF document using the top two rows of icons, or save it somewhere (Save to Files, for example) using the Action menu options below. You can also use the Options button to name the file. Note that you can always use the Markup tools to edit your PDF before saving or sharing it.Tag: SafariThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
02:51 pm
Woot's Apple Watch Solo/Braided Loop Sale Offers Up to Two Free Bands When You Buy One | MacRumors
Woot's Apple Watch Solo/Braided Loop Sale Offers Up to Two Free Bands When You Buy One
Woot is still hosting a sale on Apple Watch Solo Loop and Braided Solo Loop bands, with a bit of a different ruleset compared to previous sales. This time, when you buy any Solo Loop or Braided Solo Loop at a discount on Woot, you'll get up to two extra bands for free. Note: MacRumors is an affiliate partner with Woot. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running. The way it works is when you purchase any Solo Loop band for the discounted price of $19.99 ($29 off), you will get two additional Solo Loop bands for free. When you purchase any Braided Solo Loop for the discounted price of $29.99 ($69 off), you will get one additional Braided Solo Loop band for free. BUY ONE GET 2 FREEApple Watch Bands at Woot The catch here is that you won't be able to pick out the color of the bands. You start by selecting the size of the band and Apple Watch model, then Woot will randomly select three Solo Loop bands or two Braided Solo Loop bands to send to you. Woot guarantees that each band will be a unique color and there will be no duplicate colors in each box. These are also in new condition and come individually packaged in their original Apple retail packaging, as well as with a one year Apple manufacturer limited warranty. Although there's a bit of risk at play in Woot's new sale, these are massive discounts on the Apple Watch bands, and it's a great way to expand your band collection and try out new colors. This sale will run through May 9 at 11:59 p.m. Central Time. If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week. Deals Newsletter Interested in hearing more about the best deals you can find in 2025? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season! Related Roundup: Apple DealsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
02:37 pm
iOS 19 Beta is a Month Away With These New Features for Your iPhone | MacRumors
iOS 19 Beta is a Month Away With These New Features for Your iPhone
The first iOS 19 beta is just one month away, and there are already many new features and changes that are expected with it. Apple should seed the first iOS 19 beta to developers immediately following the WWDC 2025 keynote, which is scheduled for Monday, June 9. Following beta testing, the update should be released to the general public in September. Below, we recap the key iOS 19 rumors so far. New Design With Floating Tab Bar iOS 19 is expected to introduce a new design that looks more like the visionOS operating system on the Apple Vision Pro headset. According to Front Page Tech's Jon Prosser, iOS 19 will have a glass-like appearance, with added translucency for menus, buttons, and other user interface elements. He also expects rounder app icons, and a new floating tab bar in Apple apps. Bloomberg's Mark Gurman also expects iOS 19 to have a visionOS-like design, and he believes the design changes will be the biggest since iOS 7. Stage Manager for iPhones Last month, a leaker known as Majin Bu claimed that iOS 19 will enable support for at least a limited version of Stage Manager on iPhone models with a USB-C port. In a blog post citing sources, the leaker said that when an iPhone with a USB-C port is connected to an external display, users will be able to take advantage of a Stage Manager-like interface with multiple apps open at once on the screen. However, he said that there might be more limitations compared to Stage Manager on iPads. iPhone models with a USB-C port include all iPhone 15 models and newer. iPhones with both Lightning and USB-C ports can already be connected to external displays, but only for basic screen mirroring. End-to-End Encryption for RCS In March, Apple said that it plans to add support for end-to-end encrypted RCS messages to the Messages app in future iOS, iPadOS, macOS, and watchOS software updates. That likely means iOS 19, macOS 16, and other corresponding updates. Apple promising end-to-end encryption for RCS messages indirectly confirms that it will be adopting the RCS Universal Profile 3.0 specification, which also includes several iMessage-like enhancements that were originally introduced in version 2.7 of the specification. iOS 18 supports RCS Universal Profile 2.4. Here are five new capabilities to expect for RCS conversations on iOS 19: End-to-end encryption, which will prevent Apple and any other third party from being able to read messages and attachments while they are being sent between devices In-line replies Edit messages Unsend messages Full-fledged Tapback support for RCS messages, ensuring they always workiMessage conversations with blue bubbles have supported end-to-end encryption by default since iOS 5. In addition, iMessage has supported in-line replies since iOS 14, while the options to edit and unsend iMessages were introduced with iOS 16. Apple has not indicated which iOS version will upgrade RCS, but iOS 19 or a follow-up update like iOS 19.1 or iOS 19.2 seems like a safe bet. Live Translate With AirPods At least some AirPods models will be getting a new live translation feature with iOS 19 and an accompanying firmware update, according to Gurman. Here is how that feature will work, according to his report:The capability will work like this: If an English speaker is hearing someone talk in Spanish, the iPhone will translate the speech and relay it to the user's AirPods in English. The English speaker's words, meanwhile, will be translated into Spanish and played back by the iPhone.Google already offers a similar Live Translate feature. He also said iOS 19 will have bolstered translation capabilities, which likely means improvements are coming to the Apple Translate app. Revamped Health App With Coaching Feature A revamped Health app is expected to debut as early as iOS 19.4 next year. Apple plans to offer a new AI-powered health coaching feature that offers personalized health recommendations, according to Gurman. The information provided by the coaching feature would be accompanied by videos from health experts that inform users about various health conditions and ways to make lifestyle improvements. For example, if the Apple Watch tracks poor heart-rate trends, a video could explain the risks of heart disease. Food tracking will be another big part of the revamped Health app, which could compete with the MyFitnessPal app, according to Gurman. Personalized Siri In March, Apple delayed the more personalized version of Siri that it previewed at WWDC last year. The company said it anticipated rolling out the Siri upgrades at some point "in the coming year," so the features could launch as part of iOS 19 later this year. However, they could also arrive as part of a later update, such as iOS 19.1 through iOS 19.4. Whenever they launch, the Siri upgrades will include understanding of a user's personal context, on-screen awareness, and deeper per-app controls. For example, during its WWDC 2024 keynote, Apple showed an iPhone user asking Siri about their mother's flight and lunch reservation plans based on info from the Mail and Messages apps. The more personalized Siri features will require an iPhone model that supports Apple Intelligence, so you will need an iPhone 15 Pro, iPhone 15 Pro Max, any iPhone 16 model, or any iPhone 17 model launching later this year. EU Changes In March, the European Commission announced a long list of changes that Apple is legally required to implement in future iOS 19 and iOS 20 updates. The announcement clarifies interoperability requirements that Apple is required to adhere to in the EU, under the Digital Markets Act, which has been fully enforced since March 2024. The changes will further open up the iPhone and its technologies to competing companies and devices, and Apple is not happy about it. Here are some of the key requirements: Third-party smartwatches must be able to display and interact with iOS notifications by the end of 2025, which likely means iOS 19.2 or earlier. Apple must make its automatic audio switching feature available to third-party headphones by June 1, 2026, which likely means iOS 19.4 or earlier. This is the feature that allows most AirPods and select Beats to automatically switch connection between Apple devices, such as a Mac and an iPhone. Apple must make changes to iOS that allow for third parties to offer equivalent AirDrop alternatives by June 1, 2026. Apple must make changes to iOS that allow for third parties to offer equivalent AirPlay alternatives by iOS 20, or the end of 2026. iOS 20 is expected to be released to the general public in September 2026.The entire list of changes can be found on the European Commission's website. Google Gemini Integration In court last month, Google CEO Sundar Pichai suggested that iOS 19 might include built-in Google Gemini integration. iPhone models with Apple Intelligence have already offered ChatGPT integration since iOS 18.2. With user permission, Siri can show ChatGPT answers directly in response to questions and other prompts. ChatGPT is also an option for Apple's system-wide Writing Tools feature, allowing users to generate text and images. Google Gemini would likely have similar integration across Siri and Writing Tools, becoming a second option alongside ChatGPT. Google Gemini is already available as an iPhone app. Compatibility According to a reliable source of iOS-related information, iOS 19 will be compatible with the iPhone 11 series and newer. This means that iOS 19 would not be available on the iPhone XS, iPhone XS Max, and iPhone XR, but those devices would continue to receive security updates. More Read our iOS 19 roundup for more details about the upcoming software update.Related Roundup: iOS 19This article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
12:38 pm
Apple Wanted Tim Cook to Appear as Himself in Comedy Show 'The Studio' | MacRumors
Apple Wanted Tim Cook to Appear as Himself in Comedy Show 'The Studio'
Apple wanted CEO Tim Cook to make a surprise cameo appearance on Apple TV+'s original comedy show "The Studio"—a request that was declined by the show's creator, Seth Rogen, in favor of an appearance from Netflix co-CEO Ted Sarandos, Business Insider reports. Episode eight of "The Studio" includes a brief scene in which Sarandos plays an exaggerated version of himself. The show's fictional studio executive, Matt Remick, encounters Sarandos in a bathroom at the Golden Globes, where Remick expresses confusion over the frequency with which Sarandos is thanked by winners during their acceptance speeches. Sarandos replies that the gratitude is not spontaneous, but required by contract. Rogen told Business Insider that Apple executives asked if the role could instead be filled by Apple CEO ‌Tim Cook‌ instead. "They asked if we could use ‌Tim Cook‌ instead, and we said no," he said. Sarandos's appearance on a rival platform is notable given the unusual nature of such cross-company collaboration at the executive level. ‌Apple TV‌+ has already ordered a second season of "The Studio" ahead of the series finale, which will be released on May 21. Tag: Tim CookThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
11:47 am
Google Maps Can Now Scan Your iPhone Screenshots for Places | MacRumors
Google Maps Can Now Scan Your iPhone Screenshots for Places
Google Maps has gained the optional ability to scan screenshots in your iPhone's photos and save any found locations to a dedicated list. Powered by the company's Gemini AI, the new feature lets Google Maps search for any screenshots in your photos, such as social media posts, news articles, and travel blogs, and capture them in the app under a new Screenshots List under the You tab. The feature scans for shots that include location information like names and addresses, and the app finds associated listings in Google Maps. Users can review those captures via a carousel, and Gemini will automatically identify the associated places and offer to save them with additional details. The feature's Auto-scan option requires that Google Maps is given the "Allow Access to All Photos" permisssions, so it's not like your photos automatically get scanned. Alternatively, users can browse their photos and manually import screenshots to review. Here's how Google describes the steps involved to save screenshots in Google Maps: Navigate to the You tab. At the top of the You tab, you'll see a Screenshots list with a badge that says "Try it out!" Tap the badge. This will open a video showing you how the feature works — you'll even be able to test it out alongside the video. You'll see a request to allow Google Maps access to your photos. Choose when it has access. (There's also a manual option if you don't want to give Maps full access, more on that later.) Next time you take a screenshot that includes location information, head to Google Maps after. If Maps recognizes a place, a message will pop up telling you that it has places ready for you to review. Tap "review," and decide if you want to save the image to your screenshots list or not. (You can add these images to other lists later, too, if you want.) You also have the option to upload screenshots manually: When you're in the app select the Screenshots list under the You tab. From there, you can upload screenshots manually. The rest of the process is the same! You'll see the saved places directly on your map or can get to the list through You tab to access while you're on the go. The new capability has rolled out to Google Maps for iOS (in U.S. English), and is likely to extend to other languages and regions soon.Tag: Google MapsThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
10:29 am
Apple's Foldable iPhone Display Tech May Set New Industry Standard | MacRumors
Apple's Foldable iPhone Display Tech May Set New Industry Standard
Apple's upcoming foldable iPhone will feature a new type of display panel developed by Samsung that has never been used in a foldable product, claims a source with links to Apple's supply chain. According to the account yeux1122 on the Korean Naver blog, the foldable iPhone will use a custom display process for which Apple will hold branding trademark rights, and that meets Apple's stringent requirements for thinness, power efficiency, and brightness levels. The report suggests Samsung has achieved a breakthrough in thinness by integrating the touch sensor directly into the display panel, reducing overall thickness by approximately 19% compared to current Galaxy Z Fold components. The engineering advancement is said to result in both a lighter build and more rigid display structure. According to industry analyst Ming-Chi Kuo, the book-style "iPhone Fold" will have a 7.8-inch inner display, a 5.5-inch outer display, two rear cameras, one front camera, a Touch ID power button instead of Face ID, and a high-density battery. He expects the device to be as thin as 4.5mm when unfolded, and between 9mm and 9.5mm when folded. Samsung uses a separate touch layer placed on top of the OLED in its current foldables, typically implemented using on-cell touch technology, rather than true in-cell integration. With on-cell touch for recent Samsung Galaxy Fold models, touch electrodes are deposited on the top layer of the OLED panel (under the cover film). The new display panel for Apple reportedly goes further and uses in-cell touch, which is Apple's standard for its iPhones. Here, the touch layer is integrated within the display's TFT layer, and offers lower thickness, faster response, and no lamination gap. In-cell touch is much harder to achieve on a foldable OLED due to the mechanical stress and durability concerns at the hinge. The display is being described as a "bar-type" design, suggesting that when unfolded, the screen will appear virtually identical to a standard iPhone, with no visible crease or hinge gap that typically characterizes foldable devices. Bloomberg's Mark Gurman recently said the foldable iPhone will have a "nearly invisible" crease when unfolded. Interestingly, the report claims that Samsung's recent push to dramatically reduce thickness in the upcoming Galaxy Z Fold 7 may have been a strategic move to satisfy Apple's manufacturing requirements as a display supplier. The Galaxy Z Fold 7 is expected to be significantly thinner than its predecessors. Reports suggest a folded thickness of approximately 9.5mm (including the camera bump) and an unfolded thickness of about 4.5mm. If accurate, this would be a notable reduction from the Galaxy Z Fold 6, which measures 12.2mm when folded and 5.6mm when unfolded. It would also make the Z Fold 7 one of the slimmest foldable smartphones available, rivaling even the Oppo Find N5 – the world's thinnest smartphone – which boasts an unfolded thickness of 4.2mm. Beyond the structural improvements, the new display technology being developed for Apple reportedly delivers significant enhancements in color reproduction and brightness performance, with gains in both peak and typical brightness levels. Foldable iPhone Expected Next Year: All the Rumored Features So Far Apple plans to release its first foldable iPhone next year, according to several reporters and analysts who cover the company, and it could have a premium price tag of over $2,000.Tags: Foldable iPhone, NaverThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »
09:04 am
Apple Seeks to Pause 'Extraordinary' App Store Ruling in Epic Games Battle | MacRumors
Apple Seeks to Pause 'Extraordinary' App Store Ruling in Epic Games Battle
Apple has filed an emergency motion asking the Ninth Circuit Court of Appeals to pause key parts of a recent ruling that dramatically changes how the App Store operates, following a contempt finding in its long-running legal battle with Fortnite maker Epic Games. In court documents filed Wednesday, Apple called the district court's order "extraordinary" and argued it unlawfully forces the company to permanently give up control over "core aspects of its business operations." "A federal court cannot force Apple to permanently give away free access to its products and services, including intellectual property," Apple's lawyers wrote in the motion. Apple is specifically seeking to halt two major provisions while its appeal moves forward: a ban on charging any commissions for purchases made through external links, and restrictions on Apple's ability to set conditions for how those links appear in iOS apps. The emergency filing comes after Judge Yvonne Gonzalez Rogers found Apple in contempt last week for violating her 2021 injunction, which required the company to allow developers to include links to alternative payment methods. The judge determined that internal company documents showed Apple deliberately violated her earlier order. Apple complied with the latest ruling immediately but is now asking for relief from what it describes as "punitive" measures that would cost it "hundreds of millions to billions" of dollars annually. The company wants the appeals court to issue a ruling by May 28. "These new rules are not temporary sanctions for non-compliance that Apple can purge," the filing states. "Instead, the district court took the highly irregular step of imposing new, different, and permanent restrictions." At the heart of the dispute is how Apple implemented the original 2021 injunction. After losing at trial, Apple created a new entitlement system that allowed developers to include links to external payment options, but imposed a 12-27% commission on purchases made through those links and restricted where the links could appear. Epic Games argued this framework violated both the letter and spirit of the court's order, and Judge Gonzalez Rogers ultimately agreed, finding that Apple's approach "undermine[d] the spirit of the injunction by limiting competition." In its emergency motion, Apple contends the judge exceeded her authority by essentially setting its prices at zero and taking control over how developers can present alternative payment options within apps. Several major apps including Spotify, Kindle, and Patreon have already updated their iOS apps to include direct links to external payment methods since the ruling took effect. Epic Games responded to Apple's emergency motion by calling it "a last ditch effort to block competition and extract massive junk fees at the expense of consumers and developers." The company added that it was "full speed ahead to bring Fortnite to iPhones and iPads in the U.S. this week."Tags: Apple Antitrust, App Store, Epic Games vs. AppleThis article, "" first appeared on MacRumors.comDiscuss this article in our forums
Read more »

Older posts

Wednesday April 30
04:00 pm
What’s new in Copilot Studio: April 2025 | Office for Mac
What’s new in Copilot Studio: April 2025
Computer use, connectors, customer managed keys, and more. The post appeared first on Microsoft 365 Blog.
Read more »
Wednesday April 23
01:00 pm
Microsoft 365 Copilot: Built for the era of human–agent collaboration | Office for Mac
Microsoft 365 Copilot: Built for the era of human–agent collaboration
Copilot is now your window into the world of agents, with new capabilities that lay the foundation for this next phase. The post appeared first on Microsoft 365 Blog.
Read more »
Wednesday March 26
02:45 am
Introducing Researcher and Analyst in Microsoft 365 Copilot | Office for Mac
Introducing Researcher and Analyst in Microsoft 365 Copilot
Introducing two, first-of-their-kind reasoning agents in Microsoft 365 Copilot. The post appeared first on Microsoft 365 Blog.
Read more »
Monday March 17
03:00 pm
New live chat in Microsoft Teams: Connecting customers and businesses effortlessly | Office for Mac
New live chat in Microsoft Teams: Connecting customers and businesses effortlessly
Introducing Live chat in Teams, a new way for small businesses to connect with customers, vendors, and partners. The post appeared first on Microsoft 365 Blog.
Read more »
Tuesday March 11
10:58 pm
Transform HR with AI-powered agents | Office for Mac
Transform HR with AI-powered agents
Human Resource (HR) professionals juggle numerous responsibilities as they strive to align organizational goals with human potential. In addition to hiring and retaining talent, they must manage a global workforce with hybrid models, ensure employee satisfaction, and maintain a strong employer brand. The post appeared first on Microsoft 365 Blog.
Read more »
09:06 pm
Unlocking autonomous agent capabilities with Microsoft Copilot Studio | Office for Mac
Unlocking autonomous agent capabilities with Microsoft Copilot Studio
At our AI Tour in London, we’re excited to announce a new set of capabilities that enable you to build autonomous agents, which will be in public preview at Microsoft Ignite 2024. These agents understand the nature of your work and act on your behalf—providing support across business roles, teams, and functions. The post appeared first on Microsoft 365 Blog.
Read more »
06:23 pm
Enabling agents in Microsoft 365 Copilot Chat | Office for Mac
Enabling agents in Microsoft 365 Copilot Chat
Agents play a significant role in how organizations are transforming their business process with AI. Soon agents created in Microsoft Copilot Studio agent builder and Copilot Studio will be available right from within Copilot Chat. The post appeared first on Microsoft 365 Blog.
Read more »

Reviews & KoolTools

Unbreakable Style: The Best Hardshell Phone Cases on the Market

Are you looking for the ultimate protection for your smartphone? Hardshell phone cases are the answer. These cases are designed to withstand impact. They keep your phone safe from drops and scratches. In a world full of choices, how do you find the best? We have...

Plugable’s 5-in-1 USB Hub expands your MacBook Pro or MacBook Air’s connection options

The new 5-in-1 USB-C hub from Plugable turns two Mac laptop ports into (as the name implies) five, including Ethernet and more. Designed specifically for MacBook Pro and MacBook Air models, the hub (with the moniker AMS-5IN1E) fits flush against the host Mac and adds...

More Reviews & KoolTools

Community and More

MacTech Events and COVID

Due to the pandemic, the regional MacTech Pro events were pushed into 2021 — as early as reasonably possible. This means at best, early in the third quarter of the year. But depending on guidance and public health, it could be later than that. Once there are details,...

More Community

Software & Services Scanners

Wednesday May 07
10:22 pm
Pakistani Firm Shipped Fentanyl Analogs, Scams to US | Krebs on Security
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
A Texas firm recently charged with conspiring to distribute synthetic opioids in the United States is at the center of a vast network of companies in the U.S. and Pakistan whose employees are accused of using online ads to scam westerners seeking help with trademarks, book writing, mobile app development and logo designs, a new investigation reveals.
Read more »
Friday May 02
12:52 am
xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs | Krebs on Security
xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
A employee at Elon Musk's artificial intelligence company xAI leaked a private key on GitHub that for the past two months could have allowed anyone to query private xAI large language models (LLMs) which appear to have been custom made for working with internal data from Musk's companies, including SpaceX, Tesla and Twitter/X, KrebsOnSecurity has learned.
Read more »
Wednesday April 30
09:54 pm
Alleged ‘Scattered Spider’ Member Extradited to U.S. | Krebs on Security
Alleged ‘Scattered Spider’ Member Extradited to U.S.
A 23-year-old Scottish man thought to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire fraud, conspiracy and identity theft. U.S. prosecutors allege Tyler Robert Buchanan and co-conspirators hacked into dozens of companies in the United States and abroad, and that he personally controlled more than $26 million stolen from victims.
Read more »
Monday April 28
01:32 pm
Vulnerability Summary for the Week of April 21, 2025 | US-CERT Alerts
Vulnerability Summary for the Week of April 21, 2025
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info AdeptLanguage--Adept Adept is a language for general purpose programming. Prior to commit a1a41b7, the remoteBuild.yml workflow file uses actions/upload-artifact@v4 to upload the mac-standalone artifact. This artifact is a zip of the current directory, which includes the automatically generated .git/config file containing the run's GITHUB_TOKEN. Seeing as the artifact can be downloaded prior to the end of the workflow, there is a few seconds where an attacker can extract the token from the artifact and use it with the Github API to push malicious code or rewrite release commits in the AdeptLanguage/Adept repository. This issue has been patched in commit a1a41b7. 2025-04-21 9.8 CVE-2025-32958 aeropage--Aeropage Sync for Airtable The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2025-04-26 8.8 CVE-2025-3914 ALBEDO Telecom--Net.Time - PTP/NTP clock (Serial No. NBC0081P) ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P) software release 1.4.4 is vulnerable to an insufficient session expiration vulnerability, which could permit an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception. 2025-04-24 8 CVE-2025-2185 Amazon--Amazon Ion Dotnet When reading binary Ion data through Amazon.IonDotnet using the RawBinaryReader class, Amazon.IonDotnet does not check the number of bytes read from the underlying stream while deserializing the binary format. If the Ion data is malformed or truncated, this triggers an infinite loop condition that could potentially result in a denial of service. Users should upgrade to Amazon.IonDotnet version 1.3.1 and ensure any forked or derivative code is patched to incorporate the new fixes. 2025-04-21 7.5 CVE-2025-3857 aonetheme--Service Finder Bookings The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Board WordPress Theme, is vulnerable to privilege escalation in all versions up to, and including, 5.1. This is due to a lack of restriction on user role in the 'nsl_registration_store_extra_input' function. This makes it possible for unauthenticated attackers to register an account on the site with an arbitrary role, including Administrator, when registering via a social login. The Nextend Social Login plugin must be installed and configured to exploit the vulnerability. 2025-04-25 9.8 CVE-2025-2470 arkenon--Frontend Login and Registration Blocks The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.7. This is due to the plugin not properly validating a user's identity prior to updating a password. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. 2025-04-24 8.8 CVE-2025-3607 artbees--Jupiter X Core The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.11 via deserialization of untrusted input from the 'file' parameter of the 'raven_download_file' function. This makes it possible for attackers to inject a PHP Object through a PHAR file. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. This vulnerability may be exploited by unauthenticated attackers when a form is present on the site with the file download action, and the ability to upload files is also present. Otherwise, this would be considered exploitable by Contributor-level users and above, because they could create the form needed to successfully exploit this. 2025-04-26 8.1 CVE-2025-2105 Ashraful Sarkar Naiem--License For Envato Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashraful Sarkar Naiem License For Envato allows PHP Local File Inclusion. This issue affects License For Envato: from n/a through 1.0.0. 2025-04-24 7.5 CVE-2025-39399 cajka--Verification SMS with TargetSMS The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvr_ajax_handler' function. This is due to a lack of validation on the type of function that can be called. This makes it possible for unauthenticated attackers to execute any callable function on the site, such as phpinfo(). 2025-04-24 8.3 CVE-2025-3776 Capturly--Capturly Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Capturly Capturly allows PHP Local File Inclusion. This issue affects Capturly: from n/a through 2.0.1. 2025-04-24 7.5 CVE-2025-39379 cedcommerce--Product Lister for eBay Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cedcommerce Product Lister for eBay allows PHP Local File Inclusion. This issue affects Product Lister for eBay: from n/a through 2.0.9. 2025-04-24 7.5 CVE-2025-39384 Centreon--Centreon BAM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon BAM (Boolean KPi Listing modules) allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1, from 24.04 before 24.04.5, from 23.10 before 23.10.10, from 23.04 before 23.04.10. 2025-04-22 7.2 CVE-2025-3767 Centreon--Centreon Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon centreon-web (User configuration form modules) allows SQL Injection. A user with high privileges is able to become administrator by intercepting the contact form request and altering its payload. This issue affects Centreon: from 22.10.0 before 22.10.28, from 23.04.0 before 23.04.25, from 23.10.0 before 23.10.20, from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4. 2025-04-24 7.2 CVE-2025-3872 Code Work Web--CWW Portfolio Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Code Work Web CWW Portfolio allows PHP Local File Inclusion. This issue affects CWW Portfolio: from n/a through 1.3.1. 2025-04-24 7.5 CVE-2025-39359 Code Work Web--Xews Lite Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Code Work Web Xews Lite allows PHP Local File Inclusion. This issue affects Xews Lite: from n/a through 1.0.9. 2025-04-24 7.5 CVE-2025-39383 Commvault--Command Center Innovation Release A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded by the target server, result in Remote Code Execution. This issue affects Command Center Innovation Release: 11.38. 2025-04-22 10 CVE-2025-34028 Commvault--Web Server Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells." Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217 for Windows and Linux platforms. 2025-04-25 8.8 CVE-2025-3928 ConnectWise--ScreenConnect ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys. It is important to note that to obtain these machine keys, privileged system level access must be obtained. If these machine keys are compromised, attackers could create and send a malicious ViewState to the website, potentially leading to remote code execution on the server. The risk does not originate from a vulnerability introduced by ScreenConnect, but from platform level behavior. This had no direct impact to ScreenConnect Client. ScreenConnect 2025.4 patch disables ViewState and removes any dependency on it. 2025-04-25 8.1 CVE-2025-3935 craftcms--cms Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892. 2025-04-25 10 CVE-2025-32432 danielpataki--ACF: Google Font Selector Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in danielpataki ACF: Google Font Selector allows Reflected XSS. This issue affects ACF: Google Font Selector: from n/a through 3.0.1. 2025-04-24 7.1 CVE-2025-39382 dorinabc--Create custom forms for WordPress with a smart form plugin for smart businesses Form builder for WordPress The The Create custom forms for WordPress with a smart form plugin for smart businesses plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. 2025-04-26 7.3 CVE-2025-2801 everestthemes--Grace Mag Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in everestthemes Grace Mag allows PHP Local File Inclusion. This issue affects Grace Mag: from n/a through 1.1.5. 2025-04-24 7.5 CVE-2025-39360 EverPress--BruteGuard Brute Force Login Protection Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress BruteGuard - Brute Force Login Protection allows Reflected XSS. This issue affects BruteGuard - Brute Force Login Protection: from n/a through 0.1.4. 2025-04-24 7.1 CVE-2025-39408 eyecix--JobSearch WP Job Board The JobSearch WP Job Board plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.8.8. This is due to improper configurations in the 'jobsearch_xing_response_data_callback', 'set_access_tokes', and 'google_callback' functions. This makes it possible for unauthenticated attackers to log in as the first connected Xing user, or any connected Xing user if the Xing id is known. It is also possible for unauthenticated attackers to log in as the first connected Google user if the user has logged in, without subsequently logging out, in thirty days. The vulnerability was partially patched in version 2.8.4. 2025-04-25 8.1 CVE-2024-11917 felipe152--Integrao entre Eduzz e Woocommerce The IntegraÃ§Ã£o entre Eduzz e Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wep_opcoes' function in all versions up to, and including, 1.7.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit the default registration role within the plugin's registration flow to Administrator, which allows any user to create an Administrator account. 2025-04-26 8.8 CVE-2025-3906 Franka Robotics--Franka Emika Robot Due to improper JSON Web Tokens implementation an unauthenticated remote attacker can guess a valid session ID and therefore impersonate a user to gain full access. 2025-04-24 8.1 CVE-2021-47663 Franka Robotics--Franka Emika Robot Due to missing authorization an unauthenticated remote attacker can cause a DoS attack by connecting via HTTPS and triggering the shutdown button. 2025-04-24 7.5 CVE-2021-47662 GitLab--GitLab An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. 2025-04-24 7.7 CVE-2025-1908 GL.iNet--GL-A1300 Slate Plus A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. Affected is an unknown function of the file plugins.so of the component RPC Handler. The manipulation leads to buffer overflow. It is recommended to upgrade the affected component. 2025-04-26 8 CVE-2025-2851 gopiplus@hotmail.com--Anything Popup Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus@hotmail.com Anything Popup allows Reflected XSS. This issue affects Anything Popup: from n/a through 7.3. 2025-04-24 7.1 CVE-2025-39397 H3C--GR-3000AX A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function EnableIpv6/UpdateWanModeMulti/UpdateIpv6Params/EditWlanMacList/Edit_List_SSID of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argument param leads to buffer overflow. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Other functions might be affected as well. 2025-04-22 8 CVE-2025-3854 HCL Software--HCL Leap Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters. 2025-04-24 7.1 CVE-2023-37534 Hitachi--Hitachi Ops Center Common Services Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before 11.0.0-04. 2025-04-22 7.1 CVE-2024-46899 Holest Engineering--Spreadsheet Price Changer for WooCommerce and WP E-commerce Light Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light allows PHP Local File Inclusion. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light: from n/a through 2.4.37. 2025-04-24 7.5 CVE-2025-39378 IBM--Hardware Management Console - Power Systems IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source. 2025-04-22 9.3 CVE-2025-1950 IBM--Hardware Management Console - Power Systems IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges. 2025-04-22 8.4 CVE-2025-1951 jauharixelion--Xelion Webchat The Xelion Webchat plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the xwc_save_settings() function in all versions up to, and including, 9.1.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. 2025-04-24 8.8 CVE-2025-3058 joedolson--My Tickets Accessible Event Ticketing The My Tickets - Accessible Event Ticketing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.16. This is due to the mt_save_profile() function not appropriately restricting access to unauthorized users to update roles. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their role to that of an administrator. 2025-04-24 8.8 CVE-2025-3761 Kiotviet--KiotViet Sync Cross-Site Request Forgery (CSRF) vulnerability in Kiotviet KiotViet Sync allows Stored XSS. This issue affects KiotViet Sync: from n/a through 1.8.4. 2025-04-24 7.1 CVE-2025-39381 kiranpatil353--Add custom page template The Add custom page template plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'acpt_validate_setting' function. This is due to insufficient sanitization of the 'template_name' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server. 2025-04-26 7.2 CVE-2025-3491 ludwigyou--WPMasterToolKit (WPMTK) All in one plugin The WPMasterToolKit (WPMTK) - All in one plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.2. This makes it possible for authenticated attackers, with Administrator-level access and above, to read and modify the contents of arbitrary files on the server, which can contain sensitive information. 2025-04-24 7.2 CVE-2025-3300 markparticle--WebServer A vulnerability was found in markparticle WebServer up to 1.0. It has been declared as critical. Affected by this vulnerability is the function Buffer::HasWritten of the file code/buffer/buffer.cpp. The manipulation of the argument writePos_ leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-21 7.3 CVE-2025-3845 markparticle--WebServer A vulnerability was found in markparticle WebServer up to 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file code/http/httprequest.cpp of the component Registration. The manipulation of the argument username/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-21 7.3 CVE-2025-3846 markparticle--WebServer A vulnerability classified as critical has been found in markparticle WebServer up to 1.0. This affects an unknown part of the file code/http/httprequest.cpp of the component Login. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-21 7.3 CVE-2025-3847 miraheze--ManageWiki ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQL injection when renaming a namespace in Special:ManageWiki/namespaces when using a page prefix (namespace name, which is the current namespace you are renaming) with an injection payload. This issue has been patched in commit f504ed8. A workaround for this vulnerability involves setting `$wgManageWiki['namespaces'] = false;`. 2025-04-21 8 CVE-2025-32956 mra13--WordPress Simple Shopping Cart The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.2 via the 'file_url' parameter. This makes it possible for unauthenticated attackers to view potentially sensitive information and download a digital product without paying for it. 2025-04-23 8.2 CVE-2025-3529 mra13--WordPress Simple Shopping Cart The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plugin uses the parameter 'product_tmp_two' for computing a security hash against price tampering while using 'wspsc_product' to display the product, allowing an unauthenticated attacker to substitute details from a cheaper product and bypass payment for a more expensive item. 2025-04-23 7.5 CVE-2025-3530 neoslab--Database Toolset The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). 2025-04-24 9.1 CVE-2025-3065 NIH--BRICS NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and thus allows unauthenticated users with a Common Access Card (CAC) to escalate privileges and compromise any account, including administrators. 2025-04-23 7.5 CVE-2025-27580 NVIDIA--NeMo Framework NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering. 2025-04-22 7.6 CVE-2025-23249 NVIDIA--NeMo Framework NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering. 2025-04-22 7.6 CVE-2025-23250 NVIDIA--NeMo Framework NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering. 2025-04-22 7.6 CVE-2025-23251 Odin_Design--Vikinger The Vikinger theme for WordPress is vulnerable to privilege in all versions up to, and including, 1.9.30. This is due to insufficient user_meta restrictions in the 'vikinger_user_meta_update_ajax' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to escalate their privileges to Administrator-level. 2025-04-25 8.8 CVE-2025-2238 PHPGurukul--COVID19 Testing Management System A vulnerability classified as critical was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-phlebotomist.php. The manipulation of the argument empid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 7.3 CVE-2025-3971 PHPGurukul--COVID19 Testing Management System A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /bwdates-report-result.php. The manipulation of the argument todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2025-04-27 7.3 CVE-2025-3972 PHPGurukul--COVID19 Testing Management System A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0. This affects an unknown part of the file /check_availability.php. The manipulation of the argument mobnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2025-04-27 7.3 CVE-2025-3973 PHPGurukul--COVID19 Testing Management System A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit-phlebotomist.php?pid=11. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2025-04-27 7.3 CVE-2025-3974 PHPGurukul--COVID19 Testing Management System A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /new-user-testing.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2025-04-27 7.3 CVE-2025-3976 Red Hat--Red Hat A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled. 2025-04-25 8.8 CVE-2025-3641 Red Hat--Red Hat A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled. 2025-04-25 8.8 CVE-2025-3642 Red Hat--Red Hat A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data-including names, contact information, and hashed passwords-via stack traces returned by specific API calls. Sites with PHP configured with zend.exception_ignore_args = 1 in the php.ini file are not affected by this vulnerability. 2025-04-25 7.5 CVE-2025-32044 Red Hat--Red Hat A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA). 2025-04-25 7.1 CVE-2025-3625 redis--redis Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password authentication is enabled on the Redis server, but no password is provided, the client can still cause the output buffer to grow from "NOAUTH" responses until the system will run out of memory. This issue has been patched in version 7.4.3. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways. Either using network access control tools like firewalls, iptables, security groups, etc, or enabling TLS and requiring users to authenticate using client side certificates. 2025-04-23 7.5 CVE-2025-21605 Samba--ppp The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges. 2025-04-22 9.3 CVE-2024-58250 SAP_SE--SAP NetWeaver (Visual Composer development server) SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system. 2025-04-24 10 CVE-2025-31324 SeaTheme--BM Content Builder The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ux_cb_tools_import_item_ajax AJAX action in all versions up to, and including, 3.16.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. 2025-04-25 8.8 CVE-2025-1279 Synology--DiskStation Manager (DSM) Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows remote attackers to read arbitrary files via unspecified vectors. 2025-04-23 7.5 CVE-2025-1021 Tecnick--TCExam CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 2025-04-22 8.8 CVE-2025-23176 TeconceTheme--Mayosis Core The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. 2025-04-25 7.5 CVE-2025-1565 ThemeMove--EduMall - Professional LMS Education Center WordPress Theme The Edumall theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.4 via the 'template' parameter of the 'edumall_lazy_load_template' AJAX action. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files can be uploaded and included. 2025-04-26 8.1 CVE-2025-2101 TOTOLINK--N150RT A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file /boafrm/formPortFw. The manipulation of the argument service_type leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 8.8 CVE-2025-3988 TOTOLINK--N150RT A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this vulnerability is an unknown functionality of the file /boafrm/formStaticDHCP. The manipulation of the argument Hostname leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 8.8 CVE-2025-3989 TOTOLINK--N150RT A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of the file /boafrm/formVlan. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 8.8 CVE-2025-3990 TOTOLINK--N150RT A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boafrm/formWdsEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 8.8 CVE-2025-3991 v1rustyle--Flynax Bridge The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. 2025-04-24 9.8 CVE-2025-3603 v1rustyle--Flynax Bridge The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. 2025-04-24 9.8 CVE-2025-3604 Vestel--AC Charger EVC04 Vestel AC Charger version 3.75.0 contains a vulnerability that could enable an attacker to access files containing sensitive information, such as credentials which could be used to further compromise the device. 2025-04-24 7.5 CVE-2025-3606 weDevs--Appsero Helper Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs Appsero Helper allows SQL Injection. This issue affects Appsero Helper: from n/a through 1.3.4. 2025-04-24 8.5 CVE-2025-39377 withstars--Books-Management-System A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. 2025-04-27 7.3 CVE-2025-3960 withstars--Books-Management-System A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0. This issue affects some unknown processing of the file /admin/article/list of the component Background Interface. The manipulation leads to missing authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. 2025-04-27 7.3 CVE-2025-3963 wp-configurator--Configurator Theme Core The Configurator Theme Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.4.7. This is due to the plugin not properly validating user meta fields prior to updating them in the database. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change escalate their privileges to Administrator. 2025-04-24 8.8 CVE-2025-3101 wpeverest--User Registration Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration allows Reflected XSS. This issue affects User Registration: from n/a through n/a. 2025-04-24 7.1 CVE-2025-39400 WPoperation--Arrival Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPoperation Arrival allows PHP Local File Inclusion. This issue affects Arrival: from n/a through 1.4.5. 2025-04-24 7.5 CVE-2025-32921 WPoperation--Opstore Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPoperation Opstore allows PHP Local File Inclusion. This issue affects Opstore: from n/a through 1.4.5. 2025-04-24 7.5 CVE-2025-39387 WPQuark--eForm - WordPress Form Builder The eForm - WordPress Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.18.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 2025-04-24 7.2 CVE-2025-1294 wpsoul--Greenshift animation and page builder blocks The Greenshift - animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_request() function in versions 11.4 to 11.4.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. The arbitrary file upload was sufficiently patched in 11.4.5, but a capability check was added in 11.4.6 to properly prevent unauthorized limited file uploads. 2025-04-22 8.8 CVE-2025-3616 WPXpro--Xpro Elementor Addons - Pro The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget. This is due to their only being client side controls when determining who can access the widget. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. 2025-04-26 8.8 CVE-2024-13808 Yoel Geva--Android App CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 2025-04-21 7.5 CVE-2025-23174 zamartz--Checkout Field Visibility for WooCommerce Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zamartz Checkout Field Visibility for WooCommerce allows PHP Local File Inclusion. This issue affects Checkout Field Visibility for WooCommerce: from n/a through 1.2.3. 2025-04-24 7.5 CVE-2025-39391 Zyxel--USG FLEX H series uOS firmware An incorrect permission assignment vulnerability in the PostgreSQL commands of the USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticated local attacker with low privileges to gain access to the Linux shell and escalate their privileges by crafting malicious scripts or modifying system configurations with administrator-level access through a stolen token. Modifying the system configuration is only possible if the administrator has not logged out and the token remains valid. 2025-04-22 7.8 CVE-2025-1731 Back to top Medium Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 201206030--novel-cloud A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the function RestResp of the file novel-cloud-master/novel-book/novel-book-service/src/main/resources/mapper/BookInfoMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 6.3 CVE-2025-3956 aeropage--Aeropage Sync for Airtable The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aeropageDeletePost' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts. 2025-04-26 4.3 CVE-2025-3915 AMTT--Hotel Broadband Operation System A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manager/system/nlog_down.php. The manipulation of the argument ProtocolType leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 4.7 CVE-2025-3983 Anps--Anps Theme plugin The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. 2025-04-26 6.5 CVE-2024-13812 Apereo--CAS A vulnerability was found in Apereo CAS 5.2.6 and classified as critical. Affected by this issue is the function saveService of the file cas-5.2.6webapp-mgmtcas-management-webapp-supportsrcmainjavaorgapereocasmgmtserviceswebRegisteredServiceSimpleFormController.java of the component Groovy Code Handler. The manipulation leads to code injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 5 CVE-2025-3984 Apereo--CAS A vulnerability was found in Apereo CAS 5.2.6. It has been declared as problematic. This vulnerability affects unknown code of the file cas-5.2.6corecas-server-core-configuration-metadata-repositorysrcmainjavaorgapereocasmetadatarestCasConfigurationMetadataServerController.java. The manipulation of the argument Name leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 4.3 CVE-2025-3986 Axis Communications AB--AXIS Camera Station Pro Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to either create files or change the content of files in an admin-protected location. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. 2025-04-23 6.1 CVE-2025-1056 Axis Communications AB--AXIS Camera Station Pro Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a file deletion when recording video. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. 2025-04-23 5.9 CVE-2025-0926 bdthemes--Element Pack Addons for Elementor Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder The Element Pack Addons for Elementor - Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets like Dual Button, Creative Button, Image Stack and more in all versions up to, and including, 5.10.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 2025-04-26 6.4 CVE-2025-1458 bitpressadmin--Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder The Contact Form by Bit Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.18.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. 2025-04-25 4.9 CVE-2025-2580 bplugins--Lottie Player- Great Lottie Player Solution The Lottie Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File uploads in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the uploaded file. 2025-04-24 6.4 CVE-2025-2579 buildwps--Prevent Direct Access Protect WordPress Files The Prevent Direct Access - Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access and modification of data| due to a misconfigured capability check on the 'pda_lite_custom_permission_check' function in versions 2.8.6 to 2.8.8.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to access and change the protection status of media. 2025-04-25 5.4 CVE-2025-3861 buildwps--Prevent Direct Access Protect WordPress Files The Prevent Direct Access - Protect WordPress Files plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'generate_unique_string' due to insufficient randomness of the generated file name. This makes it possible for unauthenticated attackers to extract sensitive data including files protected by the plugin if the attacker can determine the file name. 2025-04-25 5.3 CVE-2025-3923 checkpoint--Check Point Mobile Access For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties. 2025-04-27 5.4 CVE-2024-52888 cilium--cilium Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue. 2025-04-21 4 CVE-2025-32793 codeandreload--Custom Admin-Bar Favorites The Custom Admin-Bar Favorites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'menuObject' parameter in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. 2025-04-25 6.1 CVE-2025-3868 CodeCanyon--RISE Ultimate Project Manager A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php/team_members/save_profile_image/ of the component Profile Picture Handler. The manipulation of the argument profile_image_file leads to improper control of resource identifiers. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-22 4.3 CVE-2025-3855 codeprojects--News Publishing Site Dashboard A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument cat_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 6.3 CVE-2025-3968 codeprojects--News Publishing Site Dashboard A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-category.php of the component Edit Category Page. The manipulation of the argument category_image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 6.3 CVE-2025-3969 codeprojects--Patient Record Management System A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This affects an unknown part of the file /edit_rpatient.php.php. The manipulation of the argument id/lastname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 6.3 CVE-2025-3955 CODESYS--CODESYS Visualization An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing. 2025-04-23 5.3 CVE-2025-2595 cuba-platform--cuba CUBA Platform is a high level framework for enterprise applications development. Prior to version 7.2.23, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading excessively large files, potentially causing the server to run out of space and return HTTP 500 error, resulting in a denial of service. This issue has been patched in version 7.2.23. A workaround is provided on the Jmix documentation website. 2025-04-22 6.5 CVE-2025-32959 cuba-platform--jpawebapi The Cuba JPA web API enables loading and saving any entities defined in the application data model by sending simple HTTP requests. Prior to version 1.1.1, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in version 1.1.1. A workaround is provided on the Jmix documentation website. 2025-04-22 6.4 CVE-2025-32961 cuba-platform--restapi The CUBA REST API add-on performs operations on data and entities. Prior to version 7.2.7, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in version 7.2.7. A workaround is provided on the Jmix documentation website. 2025-04-22 6.4 CVE-2025-32960 dazhouda--lecms A vulnerability was found in dazhouda lecms 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/view/default/user_set.htm. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 4.3 CVE-2025-3978 dazhouda--lecms A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-password-ajax-1 of the component Password Change Handler. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 4.3 CVE-2025-3979 devitemsllc--ShopLentor WooCommerce Builder for Elementor & Gutenberg +20 Modules All in One Solution (formerly WooLentor) The ShopLentor - WooCommerce Builder for Elementor & Gutenberg +20 Modules - All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.2 via the woolentor_template_proxy function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application, and can be used to query and modify information from internal services. 2025-04-25 6.5 CVE-2025-3775 elextensions--ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value_filter' parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2025-04-24 6.5 CVE-2025-3280 FileZ--Client An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user. 2025-04-25 5 CVE-2025-2068 FileZ--Client A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user. 2025-04-25 5 CVE-2025-2069 FileZ--Client An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user. 2025-04-25 5 CVE-2025-2070 Franka Robotics--Franka Emika Robot Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames. 2025-04-24 5.3 CVE-2021-47664 GitLab--GitLab An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. 2025-04-24 6.5 CVE-2025-0639 GitLab--GitLab An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1. 2025-04-24 4.3 CVE-2024-12244 GL.iNet--GL-A1300 Slate Plus A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. It has been declared as problematic. This vulnerability affects unknown code of the component API. The manipulation leads to inefficient regular expression complexity. It is recommended to upgrade the affected component. 2025-04-26 5.7 CVE-2025-2811 Grafana--Grafana The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript. 2025-04-23 6.8 CVE-2025-2703 HCL Software--HCL Leap Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget. 2025-04-24 6.3 CVE-2024-30113 HCL Software--HCL Leap Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications. 2025-04-24 6.5 CVE-2024-30147 HCL Software--HCL Leap Insufficient default configuration in HCL Leap allows anonymous access to directory information. 2025-04-24 5.3 CVE-2023-45720 HCL Software--HCL Leap Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications. 2025-04-24 4.6 CVE-2022-44759 HCL Software--HCL Leap Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications. 2025-04-24 4.6 CVE-2022-44760 HCL Software--HCL Leap Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem. 2025-04-24 4.1 CVE-2024-30148 HCL Software--HCL SX HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive information, modify data, or other impacts. 2025-04-25 6.5 CVE-2024-30152 Heateor Support--Sassy Social Share URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Heateor Support Sassy Social Share allows Phishing. This issue affects Sassy Social Share: from n/a through 3.3.73. 2025-04-24 4.7 CVE-2025-39404 Hitachi--Hitachi Ops Center Common Services Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability. This issue affects Hitachi Ops Center Common Services: from 11.0.3-00 before 11.0.4-00. 2025-04-22 5.5 CVE-2025-2300 IBM--InfoSphere Information Server IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. 2025-04-23 6.3 CVE-2024-22351 IBM--InfoSphere Information Server IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system. 2025-04-23 4.3 CVE-2025-25045 IBM--Maximo Asset Management IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. 2025-04-25 5.5 CVE-2025-2986 IBM--WebSphere Application Server IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. 2025-04-22 4.1 CVE-2025-27907 iteachyou--Dreamer CMS A vulnerability was found in iteachyou Dreamer CMS up to 4.1.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/attachment/download of the component Attachment Handler. The manipulation of the argument ID leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 4.3 CVE-2025-3977 itwanger--paicoding A vulnerability was found in itwanger paicoding 1.0.3. It has been classified as critical. This affects an unknown part of the file /article/api/post of the component Article Handler. The manipulation of the argument articleId leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 5.4 CVE-2025-3967 itwanger--paicoding A vulnerability was found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/home?userId=1&homeSelectType=read of the component Browsing History Handler. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 4.3 CVE-2025-3966 jeremyshapiro--FuseDesk The FuseDesk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'successredirect' parameter in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 2025-04-24 6.4 CVE-2025-3832 jmix-framework--jmix Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, attackers could manipulate the FileRef parameter to access files on the system where the Jmix application is deployed, provided the application server has the necessary permissions. This can be accomplished either by modifying the FileRef directly in the database or by supplying a harmful value in the fileRef parameter of the `/files` endpoint of the generic REST API. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website. 2025-04-22 6.5 CVE-2025-32950 jmix-framework--jmix Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website. 2025-04-22 6.4 CVE-2025-32951 jmix-framework--jmix Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading excessively large files, potentially causing the server to run out of space and return HTTP 500 error, resulting in a denial of service. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website. 2025-04-22 6.5 CVE-2025-32952 kitae-park--Mang Board WP The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the board_header and board_footer parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. 2025-04-24 4.4 CVE-2025-3435 lamarant--Buddypress Force Password Change The Buddypress Force Password Change plugin for WordPress is vulnerable to authenticated account takeover due to the plugin not properly validating a user's identity prior to updating their password through the 'bp_force_password_ajax' function in all versions up to, and including, 0.1. This makes it possible for authenticated attackers, with subscriber-level access and above and under certain prerequisites, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their accounts. 2025-04-24 4.2 CVE-2025-3793 magepeopleteam--Booking and Rental Manager Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Booking and Rental Manager: from n/a through 2.3.8. 2025-04-24 5.3 CVE-2025-39390 Mattermost--Mattermost Mattermost versions 10.4.x
Read more »
Wednesday April 23
08:45 pm
DOGE Worker’s Code Supports NLRB Whistleblower | Krebs on Security
DOGE Worker’s Code Supports NLRB Whistleblower
A whistleblower at the National Labor Relations Board (NLRB) alleged last week that denizens of Elon Musk's Department of Government Efficiency (DOGE) siphoned gigabytes of data from the agency's sensitive case files in early March. The whistleblower said accounts created for DOGE at the NLRB downloaded three code repositories from GitHub. Further investigation into one of those code bundles shows it is remarkably similar to a program published in January 2025 by Marko Elez, a 25-year-old DOGE employee who has worked at a number of Musk's companies.
Read more »
Tuesday April 22
01:48 am
Whistleblower: DOGE Siphoned NLRB Case Data | Krebs on Security
Whistleblower: DOGE Siphoned NLRB Case Data
A security architect with the National Labor Relations Board (NLRB) alleges that employees from Elon Musk's Department of Government Efficiency (DOGE) transferred gigabytes of sensitive data from agency case files in early March, using short-lived accounts configured to leave few traces of network activity. The NLRB whistleblower said the unusual large data outflows coincided with multiple blocked login attempts from an Internet address in Russia that tried to use valid credentials for a newly-created DOGE user account.
Read more »
Wednesday April 16
03:59 am
Funding Expires for Key Cyber Vulnerability Database | Krebs on Security
Funding Expires for Key Cyber Vulnerability Database
A critical resource that cybersecurity professionals worldwide rely on to identify, mitigate and fix security vulnerabilities in software and hardware is in danger of breaking down. The federally funded, non-profit research and development organization MITRE warned today that its contract to maintain the Common Vulnerabilities and Exposures (CVE) program -- which is traditionally funded each year by the Department of Homeland Security -- expires on April 16.
Read more »
Tuesday April 15
03:27 am
Trump Revenge Tour Targets Cyber Leaders, Elections | Krebs on Security
Trump Revenge Tour Targets Cyber Leaders, Elections
President Trump last week revoked security clearances for Chris Krebs, the former director of the Cybersecurity and Infrastructure Security Agency (CISA) who was fired by Trump after declaring the 2020 election the most secure in U.S. history. The White House memo, which also suspended clearances for other security professionals at Krebs's employer SentinelOne, comes as CISA is facing huge funding and staffing cuts.
Read more »
Thursday April 10
03:31 pm
China-based SMS Phishing Triad Pivots to Banks | Krebs on Security
China-based SMS Phishing Triad Pivots to Banks
China-based purveyors of SMS phishing kits are enjoying remarkable success converting phished payment card data into mobile wallets from Apple and Google. Until recently, the so-called “Smishing Triad” mainly impersonated toll road operators and shipping companies. But experts say these groups are now directly targeting customers of international financial institutions, while dramatically expanding their cybercrime infrastructure and support staff.
Read more »
Wednesday April 09
03:09 am
Patch Tuesday, April 2025 Edition | Krebs on Security
Patch Tuesday, April 2025 Edition
Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft's most-dire "critical" rating, meaning malware or malcontents could exploit them with little to no interaction from Windows users.
Read more »
Friday April 04
04:37 pm
Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe | Krebs on Security
Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe
A Minnesota cybersecurity and computer forensics expert whose testimony has featured in thousands of courtroom trials over the past 30 years is facing questions about his credentials and an inquiry from the Federal Bureau of Investigation (FBI). Legal experts say the inquiry could be grounds to reopen a number of adjudicated cases in which the expert's testimony may have been pivotal.
Read more »

Older posts

Friday April 18
11:29 pm
A Two Parter! – The TouchArcade Show #613 | iOS App of Day
A Two Parter! – The TouchArcade Show #613
We have a sponsor for this episode! We are eternally grateful for Tursiops Studios, who you may remember as the … Continue reading ""
Read more »
Saturday April 05
02:42 am
The Reports of Our Death Have Been Mildly Exaggerated – The TouchArcade Show #612 | iOS App of Day
The Reports of Our Death Have Been Mildly Exaggerated – The TouchArcade Show #612
Hark, a new podcast is afoot? ‘Tis true, and it has been A WHILE, friends. Ten weeks to be exact. … Continue reading ""
Read more »

Saturday May 10
02:51 am
Multiple Destination SMS Carrier Partner Maintenance | Twilio
Multiple Destination SMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT May 9, 20:15 PDT - May 10, 00:00 PDTMay 9, 19:27 PDTScheduled - Our SMS carrier partner in the United States and Canada is conducting an emergency maintenance from 09 May 2025 at 20:15 PDT until 10 May 2025 at 00:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from United States and Canada handsets via subset of United States and Canada short codes.We are aware of the short notice and are working with our Carrier Partners to provide earlier notification where possible.
Read more »
Friday May 09
08:48 pm
SMS Delivery Delays to Algar Telecom Network in Brazil | Twilio
SMS Delivery Delays to Algar Telecom Network in Brazil
May 9, 13:48 PDTInvestigating - We are experiencing SMS delivery delays when sending messages to Algar Telecom Network in Brazil. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available.
Read more »
06:17 pm
Call Failures to Canada for a Subset of Canadian Twilio's Local Numbers | Twilio
Call Failures to Canada for a Subset of Canadian Twilio's Local Numbers
May 9, 11:17 PDTUpdate - We are observing Call Failures to Canada for a Subset of Canadian Twilio's Local Numbers. We are currently working with our carrier partner to resolve the issue. We expect to provide another update in 1 hour or as soon as more information becomes available.May 9, 11:04 PDTInvestigating - We are observing Call Failures to Canada for a Subset of Canadian Twilio's Local Numbers. We are currently working with our carrier partner to resolve the issue. We expect to provide another update in 1 hour or as soon as more information becomes available.May 9, 10:59 PDTIdentified - We are observing Call Failures to Canada for a Subset of Canadian Twilio's Local Numbers. We are currently working with our carrier partner to resolve the issue. We expect to provide another update in 1 hours or as soon as more information becomes available.
Read more »
04:45 pm
The Twitter service is currently paused | IFTTT
The Twitter service is currently paused
May 9, 09:45 PDTInvestigating - Paused services may be experiencing technical difficulties. All Applets using these services will resume once the technical difficulties are resolved.
Read more »
04:17 pm
SMS Delivery Delays to Telecall Network in Brazil | Twilio
SMS Delivery Delays to Telecall Network in Brazil
May 9, 09:17 PDTInvestigating - We are experiencing . Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 1 hours or as soon as more information becomes available.
Read more »
03:44 pm
SMS Delivery Receipts Delays to T-Mobile Network in United States of America via Toll Free | Twilio
SMS Delivery Receipts Delays to T-Mobile Network in United States of America via Toll Free
May 9, 08:44 PDTInvestigating - We are experiencing . Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available.
Read more »
01:49 pm
SMS Delivery Delays and Failures to Onvoy Spectrum Mobile in United States of America via Subset of Shortcodes & Longcodes | Twilio
SMS Delivery Delays and Failures to Onvoy Spectrum Mobile in United States of America via Subset of Shortcodes & Longcodes
May 9, 06:49 PDTInvestigating - We are experiencing SMS Delivery Delays and Failures to Onvoy Spectrum Mobile in United States of America via Subset of Shortcodes & Longcodes. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available.
Read more »
01:37 pm
Slack triggers experiencing significant delays or missing triggers | Zapier
Slack triggers experiencing significant delays or missing triggers
May 9, 06:37 PDTInvestigating - Users may have experienced delays with their Slack triggers, with slowdowns lasting approximately 10–20 minutes. This initially appeared to be resolved by 8th May 2025 - 17:34 UTC thanks to the efforts of our team. However, we are aware that the issue has resurfaced and are actively investigating it once again.We want to reassure users that no data loss has been observed. If you continue to encounter issues, please don’t hesitate to reach out to our support team at https://zapier.com/app/get-help.We sincerely apologize for the inconvenience and thank you for your continued patience.
Read more »
07:26 am
Small Subset of SMS Delivery Report not Updating From Sending to Sent | Twilio
Small Subset of SMS Delivery Report not Updating From Sending to Sent
May 9, 00:26 PDTInvestigating - We are experiencing . Our engineers are working to resolve the issue. We expect to provide another update in 1 hour or as soon as more information becomes available.
Read more »
06:19 am
Call Failures From Subscribers To A Subset of Twilio Germany Phone Numbers | Twilio
Call Failures From Subscribers To A Subset of Twilio Germany Phone Numbers
May 8, 23:19 PDTInvestigating - We are observing call failures to a subset of Twilio Germany phone numbers. We are currently working with our carrier partner to resolve the issue. We expect to provide another update in 2 hours or as soon as more information becomes available.
Read more »
01:46 am
SMS Delivery Delays to Zong Network in Pakistan. | Twilio
SMS Delivery Delays to Zong Network in Pakistan.
May 8, 18:46 PDTInvestigating - We are experiencing SMS delivery delays when sending messages to Zong network in Pakistan. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available.
Read more »
Thursday May 08
07:17 pm
The ecobee service is currently paused | IFTTT
The ecobee service is currently paused
May 8, 12:17 PDTInvestigating - Paused services may be experiencing technical difficulties. All Applets using these services will resume once the technical difficulties are resolved.
Read more »
05:43 pm
Elevated AI Gateway 401 API errors | CloudFlare
Elevated AI Gateway 401 API errors
May 8, 17:43 UTCInvestigating - Our team is investigating the root cause for an increase in 401 API errors from our AI Gateway service.
Read more »
04:22 pm
MAN (Manchester) on 2025-05-09 | CloudFlare
MAN (Manchester) on 2025-05-09
THIS IS A SCHEDULED EVENT May 9, 01:00 - 04:00 UTCMay 8, 16:14 UTCScheduled - We will be performing scheduled maintenance in MAN (Manchester) datacenter on 2025-05-09 between 01:00 and 04:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network interfaces in this datacentre may become temporarily unavailable.You can now subscribe to these notifications via Cloudflare dashboard and receive these updates directly via email, PagerDuty and webhooks (based on your plan): https://developers.cloudflare.com/notifications/notification-available/#cloudflare-status.
Read more »
04:21 pm
Guest Speaker Page Unavailable | Vimeo
Guest Speaker Page Unavailable
May 8, 12:21 EDTInvestigating - We are currently investigating this issue.
Read more »
02:53 pm
Reduced playback and API availability | Vimeo
Reduced playback and API availability
May 8, 10:53 EDTResolved - This incident has been resolved.May 8, 10:52 EDTMonitoring - A fix has been implemented and we are monitoring the results.
Read more »
02:52 pm
STL (St. Louis) on 2025-05-09 | CloudFlare
STL (St. Louis) on 2025-05-09
THIS IS A SCHEDULED EVENT May 9, 11:00 - 18:00 UTCMay 8, 14:44 UTCScheduled - We will be performing scheduled maintenance in STL (St. Louis) datacenter on 2025-05-09 between 11:00 and 18:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network interfaces in this datacentre may become temporarily unavailable.You can now subscribe to these notifications via Cloudflare dashboard and receive these updates directly via email, PagerDuty and webhooks (based on your plan): https://developers.cloudflare.com/notifications/notification-available/#cloudflare-status.
Read more »
01:45 pm
Slack triggers experiencing significant delays or missing triggers | Zapier
Slack triggers experiencing significant delays or missing triggers
May 8, 06:45 PDTIdentified - We are currently investigating an issue where some users are experiencing delays of 10-20 minutes or missing Slack triggers, causing some Zaps not to execute. We are working diligently to resolve this issue and restore normal function. We will keep you updated on our progress as we have more information. If you need further assistance, please reach out to our support team at: https://zapier.com/app/get-help. Many thanks for your patience!
Read more »
12:34 pm
SMS Delivery Delays to Movistar Network in Panama | Twilio
SMS Delivery Delays to Movistar Network in Panama
May 8, 05:34 PDTResolved - This incident has been resolved.May 8, 03:12 PDTMonitoring - We are seeing recovery in SMS delivery delays when sending messages to Movistar Network in Panama. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 2 hours or as soon as more information becomes available.May 8, 02:07 PDTUpdate - We are still experiencing SMS delivery delays when sending messages to Movistar Network in Panama. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 4 hours or as soon as more information becomes available.May 8, 00:09 PDTUpdate - We are still experiencing SMS delivery delays when sending messages to Movistar Network in Panama. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 2 hours or as soon as more information becomes available.May 7, 23:19 PDTInvestigating - We are still experiencing SMS delivery delays when sending messages to Movistar Network in Panama. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available.May 7, 22:52 PDTMonitoring - We are observing recovery in SMS delivery delays when sending messages to Movistar Network in Panama. We will continue monitoring the service to ensure a full recovery. We will provide another update in 2 hours or as soon as more information becomes available.May 7, 18:52 PDTUpdate - We are continuing to experience SMS delivery delays when sending messages to Movistar Network in Panama. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 4 hours or as soon as more information becomes available.May 7, 16:52 PDTUpdate - We are still experiencing SMS delivery delays when sending messages to Movistar Network in Panama. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 2 hours or as soon as more information becomes available.May 7, 15:52 PDTInvestigating - We are experiencing SMS delivery delays when sending messages to Movistar Network in Panama. Our engineers are working with our carrier partner to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available.
Read more »
08:36 am
Call Failures From Subscribers to Denmark Subset of Twilio Phone Numbers | Twilio
Call Failures From Subscribers to Denmark Subset of Twilio Phone Numbers
May 8, 01:36 PDTResolved - This incident has been resolved.May 7, 23:33 PDTMonitoring - We are observing recovery in call failures from subscribers to Denmark subset of Twilio Phone Numbers. We will continue monitoring the service to ensure a full recovery. We will provide another update in 2 hours or as soon as more information becomes available.May 7, 15:48 PDTUpdate - We continue experiencing Call failures from subscribers to Denmark Subset of Twilio Phone Numbers. We are currently working with our carrier partner to resolve the issue. We expect to provide another update in 8 hours or as soon as more information becomes available.May 7, 11:48 PDTUpdate - We continue by observing . We are currently working with our carrier partner to resolve the issue. We expect to provide another update in 4 hours or as soon as more information becomes available.May 7, 09:36 PDTUpdate - We are still observing . We are currently working with our carrier partner to resolve the issue. We expect to provide another update in 2 hours or as soon as more information becomes available.May 7, 08:39 PDTInvestigating - We are observing . We are currently working with our carrier partner to resolve the issue. We expect to provide another update in 1 hours or as soon as more information becomes available.
Read more »

Older posts

Showcase

Kool Tools: Pegasus3 Symply Edition

Promise Technology and Symply have launched the Pegasus3 Symply Edition, the next generation of the Pegasus desktop RAID storage system. The new system combines 40 Gb/s Thunderbolt 3 performance with Symply's storage management suite. The Pegasus3 Symply Edition is a...

Kool Tools: TimeCache

The Rolling Stones told us that time was on our side (or at least Mick Jagger's side). That's not always true, but with TimeCache (http://www.pandaware.com/timecache/index.html) for Mac OS X from PandaWare we can at least keep track of it. With TimeCache -- now...

Kool Tools: PDF Editor for Mac

Editing PDF files on Mac OS X can be tough, but a product from AnyBizSoft, a Wondershare company focused on PDF solutions, simplifies the process. PDF Editor for Mac, integrates AnyBizSoft's existing PDF to Word conversion technology. It not only enables users to edit...

Kool Tools: Aunsoft’s Video Converter for the Mac

Aunsoft Video Converter for Mac (http://www.aunsoft.com/video-converter-mac/) is a US$35 Mac video converting tool you can use to convert just about any type of video for use on a variety of Apple devices. What's more, it also boasts a several editing features. This...

More Showcase

Scanners “By The Numbers”

Thursday May 08
12:31 am
Get a 16-inch M4 Max MacBook Pro for $400 off Apple’s MSRP | MacPrices.net
Get a 16-inch M4 Max MacBook Pro for $400 off Apple’s MSRP
B&H Photo is offering a $400 discount on new 16-inch MacBook Pros with an M4 Max CPU. Free 1-2 day shipping is available to most US addresses: - 16" M4 Max MacBook Pro (48GB/1TB/Black or Silver): $3599, $400 off MSRP This is among the steepest discounts we've seen on a new 16" M4 Max MacBook Pro this year. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.
Read more »
Wednesday May 07
01:52 pm
Amazon is offering a $50 discount on Apple’s new 11th-generation A16 iPads | MacPrices.net
Amazon is offering a $50 discount on Apple’s new 11th-generation A16 iPads
Amazon has Apple's 11th-generation A16 iPads in stock on sale for $50 (or a little more) off MSRP this week. Shipping is free: - 11" 11th-generation 128GB WiFi iPads: $299 $50 off MSRP - 11" 11th-generation 256GB WiFi iPads: $399 $50 off MSRP - 11" 11th-generation 512GB WiFi iPads: $599 $50 off MSRP - 11" 11th-generation 128GB WiFi + Cellular iPads: $449 $50 off MSRP - 11" 11th-generation 256GB WiFi + Cellular iPads: $549 $50 off MSRP - 11" 11th-generation 512GB WiFi + Cellular iPads: $749 $50 off MSRP Amazon's prices are the lowest iPads prices currently available for 11th-generation models. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.
Read more »
12:15 pm
Apple’s M4-powered MacBook Airs are on sale for $150 off MSRP this week, starting at only $849 | MacPrices.net
Apple’s M4-powered MacBook Airs are on sale for $150 off MSRP this week, starting at only $849
B&H Photo has new 13" and 15" MacBook Airs with M4 CPUs on sale this week for $150 off Apple's standard MSRP. Prices start at only $849. Free 1-2 day delivery is available to most US addresses. Sale prices apply to most, but not all, colors--see their site for details: - 13" M4 MacBook Air (16GB/256GB): $849, $150 off - 13" M4 MacBook Air (16GB/512GB): $1049, $150 off - 13" M4 MacBook Air (24GB/512GB): $1249, $150 off - 15" M4 MacBook Air (16GB/256GB): $1049, $150 off - 15" M4 MacBook Air (16GB/512GB): $1249, $150 off - 15" M4 MacBook Air (24GB/512GB): $1449, $150 off These are the lowest prices available for new MacBook Airs. For the latest sales & prices, see our 13" MacBook Air Price Tracker and 15" MacBook Air Price Tracker, both updated daily.
Read more »
12:04 pm
B&H is offering a $200 discount on new 14-inch M4 MacBook Pros | MacPrices.net
B&H is offering a $200 discount on new 14-inch M4 MacBook Pros
B&H Photo has 14-inch M4 MacBook Pros on sale for $200 off Apple's standard MSRP right now. B&H offers free 1-2 day shipping to most US addresses: - 14" M4 MacBook Pro (16GB/512GB): $1399, $200 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1599, $200 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1799, $200 off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.
Read more »
Monday May 05
05:17 pm
Amazon is selling new 14-inch M4 Pro and M4 Max MacBook Pros for 15% off Apple’s MSRP | MacPrices.net
Amazon is selling new 14-inch M4 Pro and M4 Max MacBook Pros for 15% off Apple’s MSRP
Don't pay full price! Amazon has Apple's 14-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) on sale this week for up to 15% off MSRP. Shipping is free. These are the lowest prices currently available for M4 Pro and Max MacBook Pros. Be sure to select Amazon as the seller, rather than a third-party seller: - 14" M4 Pro MacBook Pro (24GB/512GB): $1695.88, 15% off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB): $2104.24, 12% off MSRP - 14" M4 Max MacBook Pro (36GB/1TB): $2886.01, 10% off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.
Read more »
05:00 pm
Amazon has new 16-inch MacBook Pros on sale this week for up to $479 off Apple’s MSRP | MacPrices.net
Amazon has new 16-inch MacBook Pros on sale this week for up to $479 off Apple’s MSRP
Don't pay full price! Amazon has 16-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) on sale this week for up to $479 off Apple's MSRP. Shipping is free. These are the lowest prices currently available for 16" MacBook Pros. Be sure to select Amazon as the seller, rather than a third-party seller: - 16" M4 Pro MacBook Pro (24GB/512GB): $2157.23, $342 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2629, $279 off MSRP - 16" M4 Max MacBook Pro (36GB/1TB): $3179, $320 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB): $3520.11, $479 off MSRP For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.
Read more »
04:43 pm
Amazon is offering a 15% discount on new Apple 14-inch M4 MacBook Pros this week | MacPrices.net
Amazon is offering a 15% discount on new Apple 14-inch M4 MacBook Pros this week
Amazon is offering a 13%-15% discount on Apple's 14-inch M4 MacBook Pros (in Black) this week. Shipping is free. These are the lowest prices currently available for M4 MacBook Pros among the Apple retailers we track. Be sure to select Amazon as the seller, rather than a third-party seller: - 14" M4 MacBook Pro (16GB/512GB): $1372.02, 14% off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1536.36, 15% off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1742.02, 13% off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.
Read more »
Sunday May 04
12:29 pm
Sunday Sale: $100 discount on Apple’s newest 7th generation iPad minis at Amazon | MacPrices.net
Sunday Sale: $100 discount on Apple’s newest 7th generation iPad minis at Amazon
Amazon is offering $100 discounts (up to 20% off) on Apple's newest 2024 WiFi iPad minis, each with free shipping. These are the lowest prices available for new minis among the Apple retailers we track: - 8.3" 128GB WiFi iPad mini: $399, $100 off MSRP - 8.3" 256GB WiFi iPad mini: $499, $100 off MSRP - 8.3" 512GB WiFi iPad mini: $699, $100 off MSRP For the latest prices and sales, see our iPad mini Price Tracker, updated daily.
Read more »
Friday May 02
11:13 am
B&H has 14-inch M4 MacBook Pros on sale for up to $170 off MSRP with free 1-2 day shipping | MacPrices.net
B&H has 14-inch M4 MacBook Pros on sale for up to $170 off MSRP with free 1-2 day shipping
B&H Photo has 14-inch M4 MacBook Pros on sale for up to $170 off MSRP right now. B&H offers free 1-2 day shipping to most US addresses: - 14" M4 MacBook Pro (16GB/512GB): $1449, $150 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1649, $150 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1829, $170 off MSRP These are currently the among lowest prices available for new M4-powered 14" MacBook Pros from the Apple retailers we track. For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.
Read more »
Thursday May 01
04:47 pm
15-inch M4 MacBook Airs on sale for $150 off Apple’s MSRP at B&H with free 1-2 day delivery | MacPrices.net
15-inch M4 MacBook Airs on sale for $150 off Apple’s MSRP at B&H with free 1-2 day delivery
B&H Photo has new 15" MacBook Airs with M4 CPUs on sale right now for $150 off Apple's MSRP. Prices start at $1049. Free 1-2 day delivery is available to most US addresses. Sale prices apply to most, but not all, colors--see their site for details: - 15" M4 MacBook Air (16GB/256GB): $1049, $150 off - 15" M4 MacBook Air (16GB/512GB): $1249, $150 off - 15" M4 MacBook Air (24GB/512GB): $1449, $150 off For the latest sales & prices, see our 15" MacBook Air Price Tracker, updated daily.
Read more »
11:55 am
13-inch M4 MacBook Airs on sale for $150 off Apple’s MSRP at B&H with free 1-2 day delivery | MacPrices.net
13-inch M4 MacBook Airs on sale for $150 off Apple’s MSRP at B&H with free 1-2 day delivery
B&H Photo has new 13" MacBook Airs with M4 CPUs on sale right now for $150 off Apple's MSRP. Prices start at only $849. Free 1-2 day delivery is available to most US addresses. Sale prices apply to most, but not all, colors--see their site for details: - 13" M4 MacBook Air (16GB/256GB): $849, $150 off - 13" M4 MacBook Air (16GB/512GB): $1049, $150 off - 13" M4 MacBook Air (24GB/512GB): $1249, $150 off For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.
Read more »
Wednesday April 30
08:10 pm
Clearance 14-inch MacBook Pros with M3 Pro CPU on sale starting at only $1399, $600-$700 off original MSRP | MacPrices.net
Clearance 14-inch MacBook Pros with M3 Pro CPU on sale starting at only $1399, $600-$700 off original MSRP
B&H Photo has clearance 14" M3 Pro MacBook Pros on sale for $600-$700 off original MSRP with prices available starting at $1399. B&H offers free 1-2 day delivery to most US addresses: - 14" 11-Core M3 Pro MacBook Pro (18GB RAM/512GB SSD): $1399 $600 off MSRP - 14" 12-Core M3 Pro MacBook Pro (18GB RAM/1TB SSD): $1699 $700 off MSRP These are the lowest available prices for last-generation 14" M3 Pro MacBook Pros. For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.
Read more »

Older posts

Friday May 09
02:37 pm
11th-Gen. Apple iPad A16 128GB 11″ Tablet (2025) for $267 + free shipping | DealNews iPads
11th-Gen. Apple iPad A16 128GB 11″ Tablet (2025) for $267 + free shipping
That's the lowest price we've seen. Available in Yellow at this price. Buy Now at Walmart
Read more »
Wednesday May 07
11:51 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Pink – G19M0LL/A – $1,249.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Pink – G19M0LL/A – $1,249.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Pink – G19M0LL/A $1,249.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 16GB unified memory 256GB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
Tuesday May 06
11:20 am
Refurb Apple MacBook Air M3 15″ Laptop (2024) for $770 + free shipping | DealNews Laptops
Refurb Apple MacBook Air M3 15″ Laptop (2024) for $770 + free shipping
It's the best price we've seen for this model in any condition. It includes a 1-year Allstate warranty. Buy Now at eBay
Read more »
Friday May 02
08:16 pm
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet- Silver – G1K10LL/A – $1,779.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet- Silver – G1K10LL/A – $1,779.00
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet- Silver – G1K10LL/A $1,779.00 Originally released October 2024 24-inch 4.5K Retina display² 24GB unified memory 1TB SSD¹ 12MP Center Stage camera with support for Desk View Four Thunderbolt 4 ports Gigabit Ethernet Product page on the Apple Store…
Read more »
08:16 pm
Refurbished 24-inch iMac Apple M4 Chip with 8-Core CPU and 8-Core GPU – Blue – G1E52LL/A – $1,439.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M4 Chip with 8-Core CPU and 8-Core GPU – Blue – G1E52LL/A – $1,439.00
Refurbished 24-inch iMac Apple M4 Chip with 8-Core CPU and 8-Core GPU - Blue – G1E52LL/A $1,439.00 Originally released October 2024 24-inch 4.5K Retina display² 16GB unified memory 1TB SSD¹ 12MP Center Stage camera with support for Desk View Two Thunderbolt / USB 4 ports Product page on the Apple Store…
Read more »
08:16 pm
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass – Purple – G1K7ALL/A – $1,949.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass – Purple – G1K7ALL/A – $1,949.00
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass - Purple – G1K7ALL/A $1,949.00 Originally released October 2024 24-inch 4.5K Retina display² 32GB unified memory 512GB SSD¹ 12MP Center Stage camera with support for Desk View Four Thunderbolt 4 ports Gigabit Ethernet Product page on the Apple Store…
Read more »
08:16 pm
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet- Purple – G1EU0LL/A – $1,609.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet- Purple – G1EU0LL/A – $1,609.00
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet- Purple – G1EU0LL/A $1,609.00 Originally released October 2024 24-inch 4.5K Retina display² 16GB unified memory 1TB SSD¹ 12MP Center Stage camera with support for Desk View Four Thunderbolt 4 ports Gigabit Ethernet Product page on the Apple Store…
Read more »
08:16 pm
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet- Pink – G1K66LL/A – $2,289.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet- Pink – G1K66LL/A – $2,289.00
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet- Pink – G1K66LL/A $2,289.00 Originally released October 2024 24-inch 4.5K Retina display² 32GB unified memory 2TB SSD¹ 12MP Center Stage camera with support for Desk View Four Thunderbolt 4 ports Gigabit Ethernet Product page on the Apple Store…
Read more »
08:16 pm
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass – Silver – G1EJ3LL/A – $1,779.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass – Silver – G1EJ3LL/A – $1,779.00
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass - Silver – G1EJ3LL/A $1,779.00 Originally released October 2024 24-inch 4.5K Retina display² 16GB unified memory 1TB SSD¹ 12MP Center Stage camera with support for Desk View Four Thunderbolt 4 ports Gigabit Ethernet Product page on the Apple Store…
Read more »
08:16 pm
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass – Pink – G1K62LL/A – $2,459.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass – Pink – G1K62LL/A – $2,459.00
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass - Pink – G1K62LL/A $2,459.00 Originally released October 2024 24-inch 4.5K Retina display² 32GB unified memory 2TB SSD¹ 12MP Center Stage camera with support for Desk View Four Thunderbolt 4 ports Gigabit Ethernet Product page on the Apple Store…
Read more »
08:16 pm
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet- Silver – G1K16LL/A – $2,289.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet- Silver – G1K16LL/A – $2,289.00
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet- Silver – G1K16LL/A $2,289.00 Originally released October 2024 24-inch 4.5K Retina display² 32GB unified memory 2TB SSD¹ 12MP Center Stage camera with support for Desk View Four Thunderbolt 4 ports Gigabit Ethernet Product page on the Apple Store…
Read more »
08:16 pm
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass – Green – G1K31LL/A – $2,119.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass – Green – G1K31LL/A – $2,119.00
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass - Green – G1K31LL/A $2,119.00 Originally released October 2024 24-inch 4.5K Retina display² 32GB unified memory 1TB SSD¹ 12MP Center Stage camera with support for Desk View Four Thunderbolt 4 ports Gigabit Ethernet Product page on the Apple Store…
Read more »
08:16 pm
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Green – G19H1LL/A – $1,389.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU – Green – G19H1LL/A – $1,389.00
Refurbished 24-inch iMac Apple M3 Chip with 8-Core CPU and 10-Core GPU - Green – G19H1LL/A $1,389.00 Originally released October 2023 24-inch 4.5K Retina display;² 4480-by-2520 resolution at 218 pixels per inch with support for 1 billion colors 24GB unified memory 256GB SSD¹ Magic Keyboard with Touch ID⁵ 1080p FaceTime HD camera Two Thunderbolt 4 (USB-C) ports Two USB 3 ports (up to 10Gb/s) Product page on the Apple Store…
Read more »
07:51 pm
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass – Pink – G1K6ALL/A – $1,949.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass – Pink – G1K6ALL/A – $1,949.00
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass - Pink – G1K6ALL/A $1,949.00 Originally released October 2024 24-inch 4.5K Retina display² 32GB unified memory 512GB SSD¹ 12MP Center Stage camera with support for Desk View Four Thunderbolt 4 ports Gigabit Ethernet Product page on the Apple Store…
Read more »
07:51 pm
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass – Pink – G1K6ALL/A – $1,949.00 | Refurb Tracker
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass – Pink – G1K6ALL/A – $1,949.00
Refurbished 24-inch iMac Apple M4 Chip with 10-Core CPU and 10-Core GPU, Gigabit Ethernet, Nano-texture glass - Pink – G1K6ALL/A $1,949.00 Originally released October 2024 24-inch 4.5K Retina display² 32GB unified memory 512GB SSD¹ 12MP Center Stage camera with support for Desk View Four Thunderbolt 4 ports Gigabit Ethernet Product page on the Apple Store…
Read more »

Older posts

No feed items found.