Deals: Black Apple Watch Ultra 2 $250 off, iPhone 16 Pro Max $600+ off, Mac mini, AirPods, more
It is starting to come down to the wire for holiday shipping and pricing on Apple gear, so today’s 9to5Toys Lunch is bringing some of the best offers still live to the forefront. Firstly, you can still land Apple Watch Series 11 at $100 off with Christmas delivery joined by just about every Apple Watch Ultra 2 at $250 off as part of Best Buy’s 24-hour Tech the Halls sale. Those offers join the ongoing Black Friday pricing on M4 Mac mini from $479 as well as iPhone 16 Pro Max models at over $600 off the original list prices and what might be your last chance at holiday AirPods offers (Apple EarPods are $10 right now if there’s anybody out there that still wants those). Check it all out below.  more…

Read more »

The black Apple Watch Ultra 2 drops to $549 today only
Macworld Your last-minute holiday shopping is officially wrapped up thanks to this incredible Apple Watch deal: Best Buy is selling the black titanium Apple Watch Ultra 2 for $549 today only, a massive $250 off the original MSRP and the best price we’ve ever seen—even lower than Black Friday. Amazon has the same price for the natural titanium model, but also notes that it’s a limited-time deal. With built-in GPS and cellular connectivity, the Apple Watch Ultra 2 will keep you connected even without your phone nearby, making it ideal for hiking, swimming, and all sorts of sports. And of course, it’s an absolutely excellent device for tracking your health and workouts, providing detailed heart rate monitoring, sleep patterns, and even body temperature readings. You’ll even get hypertension alerts and a detailed Sleep Score as well as 36 hours of battery life on a single charge. We love the large screen and rugged design, but our favorite part? This deal is for the black titanium model, which is our favorite color of any Apple Watch. It looks incredible with the accents of the bright orange Action button and Digital Crown ring, and pairs well with any band. The main differences between this model and the Ultra 3 are LTE vs 5G, satellite connectivity, and slightly better battery life. Those are nice upgrades, but we don’t think they’re worth $250. So hurry up and grab the Watch Ultra 2 for $549 at Best Buy or Amazon! Buy now at Best Buy Buy now at Amazon

Read more »

Two brand new 2026 products could prove Apple’s ‘not first, but best’ motto
Apple will launch a lot of new products next year, including updated iPhones, iPads, Macs, and more. But there are two brand new 2026 products coming that have the chance to prove Apple’s “not first, but best” mantra once again. more…

Read more »

IDC: Worldwide foldable smartphone market to grow 30% YoY in 2026, boosted by Apple’s foldable iPhone
Worldwide foldable smartphone shipments are forecast to grow 10% year-on-year (YoY) in 2025 to 20.6 million units, according to IDC… The post appeared first on MacDailyNews.

Read more »

Best iPhone Deals: Find the new iPhone you want for less
Macworld Best iPhone deals available now In the U.K., Apple-certified resellers discount unlocked iPhones frequently, here are the best price-cuts we’ve seen this week. Unfortunately in the U.S. the only way to buy an iPhone is on a contract so the deals are specific to the carriers. Today’s best iPhone deals Amazon, iPhone 17 Pro 256GB: £1,049 (£50 off, RRP £1,099) Amazon, iPhone 16e (128GB): £549 (£50 off, RRP £599) Amazon, iPhone 16e (256GB): £649 (£50 off, RRP £699) Amazon, iPhone 16e (512GB): £849 (£50 off, RRP £899) AO, iPhone 16 (128GB): £669 (£30 off, RRP now £699) AO, iPhone 16 Pro (128GB): £899 (£100 off, RRP was £999) Last updated December 15, 2025 You don’t have to pay spend loads to own an iPhone. If you shop around you can find a bargain. Every month the Macworld team hunts down the best prices on iPhones at all major retailers and cellphone operators, saving you the hassle of finding the best iPhone deals. In this article, we reveal the best iPhone deals, contracts, and bundles available right now. We’ll help you find a discounted iPhone suitable for any budget, and cover all the currently available models, now including the iPhone 17, 17 Pro, 17 Pro Max and iPhone Air. You’ll also see deals on the iPhone 16, iPhone 16e and 16 Plus. We will continue to keep track of deals on the 16 Pro and 16 Pro Max, despite the fact that Apple no longer sells these handsets, because you can still buy them elsewhere. Also see our dedicated round-ups of the best iPhone deals: Where to get the best iPhone 17 deals iPhone 16e, 16 & iPhone 16 Pro deals (US) iPhone 16e, 16 & iPhone 16 Pro deals (UK) How we choose these iPhone deals To select the best iPhone deals, we combine years experience reviewing and using Apple iPhones with a rigorous process of tracking prices and identifying true value for our readers. This hands-on knowledge allows us to recognize a genuinely good deal versus a mediocre one. We track prices at major U.S. and U.K. retailers and carriers and our goal is to help you find a discounted iPhone for any budget. We track deals for the newest releases like the iPhone 17 and 17 Pro, as well as still-popular previous generations like the iPhone 16 and 15 series, ensuring a wide range of options. We only feature deals from trusted retailers and carriers, and ensure we read the fine print so there aren’t any tricks. iPhone 17 and iPhone 17 Pro: Are there deals? iPhone Air and iPhone 17 Pro.Eugen Wegmann In the U.S. the networks will offer you various incentives to sign up for an iPhone 17 or 17 Pro/Pro Max, you can find these below. In the U.K. you can get £50 off the price of the iPhone 17 Pro at Amazon. Over Black Friday you could save £100 on the price of the iPhone Air. Amazon, iPhone 17 Pro 256GB: £1,049 (£50 off, RRP £1,099) You can also save on the iPhone 16e at Amazon. As long as you don’t mind the fact that this iPhone only has one rear camera, we recommend that deal, but do bear in mind that Apple is thought to be planning the launch of the 17e for spring 2026. Best value iPhone carrier deals right now In the U.S., the only iPhone deals you can find come from carriers, and have a lot of strings attached. Typically, you have to buy a phone on a multi-year instalment plan and get your discount in the form of monthly bill credits. In the U.S.: AT&T: You can get up to $830 off the iPhone 17 when you trade in an eligible iPhone. The savings transform into monthly credits on your bill for the next 36 months. T-Mobile: The carrier offers the iPhone 17 for free when you switch to T-Mobile and add a line on the Experience plans. The money transforms into bill credits spread over the next 24 months. T-Mobile is offering $1,000 off an iPhone Air. Verizon: Save up to $830 with a trade-in and a new line. This offer is only available online. U.S. Cellular: You can get $999 off an iPhone Air at U.S. Cellular. Xfinity Mobile: If you trade in a qualifying phone you can get up to $830 off a new iPhone 17 series model. Boost Mobile: You can get $850 off the price of the iPhone 17 with Boost’s $65 per month plan. Other carriers to consider: Mint Mobile Optimum Mobile Best Buy (Best Buy will sell you an iPhone with AT&T or Verizon). Is now a good time to buy a new iPhone? Foundry The iPhone 17 series, including the iPhone Air and iPhone 17 Pro, launched in September 2025, so the current models are still very new and now is a good time to buy one. Generally the worse time to buy an iPhone is in the months before the new models arrive, which is why we suggest exercising some caution if it’s the iPhone 16e you are considering. The iPhone 16e is Apple’s cheapest iPhone, so it may well appear, but that model is expected to be replaced with the iPhone 17e in the spring of 2026. If you don’t mind that a new model is coming there are some deals on the older handset right now. An even better time to buy a new iPhone is during sales events, such as Amazon Prime Day in July and October, or in the Black Friday and Cyber Monday sale in November and early December. During that event Amazon was offering £100 off the new iPhone Air and the iPhone 16e, while in the U.S., carriers were providing significant promotions tied to trade-ins and new plans. Which iPhone should you buy? The best model for you will depend on your budget and what features you prioritize. iPhone 17: For most people, the iPhone 17 is considered the best all-around choice this year. It offers significant upgrades over the iPhone 16, including double the base storage (256GB) for the same starting price of $799/£799, a larger 6.3-inch ProMotion display, and improved cameras. This is a great choice for the majority of people. iPhone 17 Pro/Pro Max: These are the top-tier models with the best cameras, performance, and battery life. The iPhone 17 Pro Max boasts the longest battery life ever in an iPhone, with up to 37 hours of video playback. However, they come at a premium price, starting at $1,099/£1,099 and $1,199/£1,199 respectively. If you are an avid photographer, or like gaming on your iPhone, this is the one to choose. The Max option is the one for you if you value a really big screen. iPhone Air: This is a new, remarkably thin and light model for those who prioritize cutting-edge design. It’s impressively durable for its slim profile but makes compromises, such as having only a single rear camera and reduced battery life compared to other models. If you like to be the first to try new things and to show off the fact that you have something not many people have, and you love the sim design of the iPhone Air, this is the one for you. Anyron Copeman / Foundry iPhone 16 series: You can save money by opting for an older model like the iPhone 16e, which is a good budget option. However, the standard iPhone 16 is now considered less of a good deal compared to the iPhone 17, which offers twice the storage for only $100 more. Deals on discontinued models like the iPhone 16 Pro can be a great value if you find one. On a budget, the iPhone 16e is probably the best choice, want two cameras on the rear, the iPhone 16 is your best bet. iPhone 15 series: All of Apple’s currently sold iPhones support Apple Intelligence, the new suite of AI features. However, older discontinued models like the iPhone 15 and 15 Plus do not. While not having these features isn’t a major drawback right now, it may become more of a hindrance in the future. We would avoid the iPhone 15 for this reason. But if you find an iPhone 15 Pro for sale then at least it supports Apple Intelligence. For help deciding which iPhone to buy might like to read our detailed iPhone buying guide, and our comparison of every iPhone. Where to buy an iPhone on contract Most of the major networks will offer the iPhone at a discount if you meet certain conditions (usually opening new lines, or buying on multi-year instalment plans). Here are links to browse the latest deals: Optimum Mobile Verizon AT&T T-Mobile Boost Mobile U.K. shoppers should try the following U.K. providers: O2 Vodafone Three Virgin Mobile EE Sky Mobile Carphone Warehouse (use the comparison tool by clicking View Deals, and remember to tick the box labeled “Show total cost of ownership”) Best iPhone deals right now iPhone 17: From $799/£799 for 256GB; $999/£999 for 512GB Retailer Price Check Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket iPhone Air: From $999/£999 for 256GB; $1,199/£1,199 for 512GB; $1,399/£1,399 for 1TB Retailer Price $999 View Deal Check Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket iPhone 17 Pro: From $1,099/£1,099 for 256GB; $1,299/£1,299 for 512GB; $1,499/£1,499 for 1TB Retailer Price $1099 View Deal Check Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket iPhone 17 Pro Max: From $1,199/£1,199 for 256GB; $1,399/£1,399 for 512GB; $1,599/£1,599 for 1TB; $1,999/£1,999 for 2TB Retailer Price $1199 View Deal Check Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket iPhone 16e: From $599/£599 Retailer Price $599 View Deal Check Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket iPhone 16: Was $799/£799 for 128GB, Now $699/£699 New Refurbished Retailer Price $729.99 View Deal $829 View Deal $829.99 View Deal Check Price comparison from over 24,000 stores worldwide Product Price iPhone 16 128GB – Teal – Unlocked $702 View Deal iPhone 16 128GB – Ultramarine – Unlocked $702 View Deal iPhone 16 128GB – Pink – Unlocked $702 View Deal iPhone 16 128GB – Black – Unlocked $719.99 View Deal iPhone 16 128GB – White – Unlocked $724 View Deal Price comparison from Backmarket View more prices iPhone 16 Plus: Was $899/£899, now $799/£799 New Refurbished Retailer Price $819.97 View Deal $929 View Deal $929.99 View Deal Price comparison from over 24,000 stores worldwide Product Price iPhone 16 Plus 128GB – Black – Unlocked $721 View Deal iPhone 16 Plus 128GB – Pink – Unlocked $740 View Deal iPhone 16 Plus 128GB – Ultramarine – Unlocked $745.87 View Deal iPhone 16 Plus 128GB – Teal – Unlocked $749 View Deal iPhone 16 Plus 128GB – White – Unlocked $777 View Deal Price comparison from Backmarket View more prices iPhone 16 Pro: Was $999/£999 (discontinued) New Refurbished Retailer Price $899.99 View Deal $999 View Deal Apple $999 View Deal $999.99 View Deal Check Price comparison from over 24,000 stores worldwide Product Price iPhone 16 Pro 128GB – Black Titanium – Unlocked $819.99 View Deal iPhone 16 Pro 128GB – Natural Titanium – Unlocked $853 View Deal iPhone 16 Pro 128GB – Desert Titanium – Unlocked $853 View Deal iPhone 16 Pro 128GB – White Titanium – Unlocked $864.99 View Deal Price comparison from Backmarket iPhone 16 Pro Max: From $1,199/£1,199 (discontinued) New Refurbished Retailer Price $1099.99 View Deal $1199 View Deal $1199.99 View Deal Check Price comparison from over 24,000 stores worldwide Product Price iPhone 16 Pro Max 256GB – White Titanium – Unlocked $985 View Deal iPhone 16 Pro Max 256GB – Natural Titanium – Unlocked $1091 View Deal iPhone 16 Pro Max 256GB – Desert Titanium – Unlocked $1091 View Deal iPhone 16 Pro Max 256GB – Black Titanium – Unlocked $1091.99 View Deal Price comparison from Backmarket Where to buy an iPhone Apple is the obvious place to look for a new iPhone. You can purchase directly from Apple’s online store (there’s a separate U.K. store), which won’t give you savings, but does at least allow you to take advantage of trading in your old iPhone (see: How to sell or trade-in your old iPhone). We also have a complete guide to every iPhone Apple sells. In the U.K. Amazon U.K. regularly discounts iPhone models, so it’s well worth keeping an eye out there. If you think you’ll be doing lots of Amazon shopping, we’d recommend signing up to the 30-day free trial of Amazon Prime for free next-day delivery and access to deals 30 minutes early. You can sign up here. Amazon U.S. doesn’t always sell iPhones, and when it does it is usually in conjunction with one of the carriers. Some times we see Amazon savings on SIM-free iPhones. Amazon tends to sell refurbished iPhones in the U.S. It’s worth checking the price of the iPhones in the following U.S. stores, which occasionally provide solid savings: Amazon Walmart Best Buy And U.K. readers should try these shops: Amazon U.K. Argos AO Currys John Lewis Carphone Warehouse KRCS In addition, we recommend you check out our automatically updated price tables, embedded below, which gather the best prices from a wide range of retailers in your region. How to get a trade-in discount Don’t forget you can save when you trade in your old qualifying phone with Apple or other retailers participating in a trade-in program. Apple offers up to hundreds of dollars off your new iPhone when you trade in your old iPhone (but if your phone is older, you’ll likely get much less). You’ll have to select the trade-in option during purchase and answer a few questions about your existing phone model, storage capacity and condition. You’ll need to provide your IMEI number as well. Read about Apple’s Trade In scheme in the U.S. and U.K. In the U.K. you could get even more money off if you trade-in via Currys PC World. Head to Currys to see how much your device is worth. Amazon also offers some good trade-in values, so you should see if you can get more there. Check out Amazon’s Trade In program in the U.S. U.K. readers can see how Amazon trade-in process works here. Apple reseller KRCS also offers a trade-in scheme. Note that you can save money if you’ve got another iPhone to trade in, see: How to sell or trade in your old iPhone. How to get a good iPhone Refurbished deal If you want to save even more money you may want to consider buying a refurbished iPhone. Refurbished devices are thoroughly tested and repaired to work and look just like new. In the case of official Apple refurbished iPhones, you get a brand-new body and screen, box, accessories, battery, and warranty. It’s almost indistinguishable from buying a new iPhone. See our full guide to buying refurbished or second-hand iPhones for more. The first place to shop for a refurbished iPhone is at the Apple Refurbished Store. Now the iPhone 17 has launched, it is likely that Apple will soon offer refurbished iPhone 16 models for sale—they usually start showing up when the next model is released. Rest assured, the Apple Refurbished Store is where you can get the highest quality of refurbished iPhones. Good refurbished deals we are seeing on the Apple Refurbished store include: U.S.: 128GB iPhone 15 Pro (unlocked) for $679. U.K.: 256GB iPhone 15 Pro (unlocked) for £759. Apple’s not the only reseller to sell refurbished iPhones. You could also check the following stockists. Refurbished iPhone sellers in the U.S. Back Market: 30 days to change your mind plus a 12-month+ warranty. The iOutlet on eBay: Competitive pricing on refurbished devices. Also accepts iPads, Apple Watches, etc. Amazon Renewed Store: Purchases are backed by Amazon’s standard returns policy. “Renewed Guarantee” lets you get a refund or replacement within 1 year. Best Buy: You can return within 14 days if the item is “unopened or defective in any way.” Walmart: Refurbs are sourced from other sellers. Return policies vary but minimum requirements apply universally. Refurbished iPhone sellers in the U.K. Back Market: 30 days to change your mind and a 12-month+ warranty. Music Magpie: Offers refurbished iPhones, sometimes has sales that reduce prices further. Hoxton Macs: Hoxton Macs also sells refurbished iPhones. Reboxed: Come with a 12-month no quibble warranty. Use code MACWORLD10 and get £10 off on orders over £350  The iOutlet or The iOutlet on eBay: Competitive pricing. Accepts other gadgets such as iPads, Apple Watches, etc. Amazon Renewed Store: Amazon Renewed purchases are backed by Amazon’s standard returns policy and its “Renewed Guarantee” lets you get a refund or replacement within 1 year of receiving your product. Envirofone: Allows you to trade in your old phone for credit towards purchasing a refurbished phone. 4Gadgets: 12-month warranty for all online orders. Smartfone Store: Additional 10 percent discount for students and young people. Refurb-Phone: 12-month warranty. Allows returns within 14 days if you change your mind. The Big Phone Store: Says refurb phones “are thoroughly tested, repaired, and cleaned before being sent out.” Backed with a 12-month warranty. Laptops Direct: 12-month warranty on parts and labor.

Read more »

Tim Cook is only the seventh highest earning CEO in America
He made Apple into the world's first $4 trillion company, but Tim Cook's salary lags behind CEOs from Microsoft, Starbucks, Tesla, and others.Tim Cook seems to be taking his salary bravely — image credit: AppleIt's not like your heart should bleed for Tim Cook, since he's not exactly on minimum wage. Also, if you are going to get your company up to a $4 trillion market cap, you're not going to be an honorarium.Plus, now even though Fortune magazine puts Cook's 2024 take-home pay at $74.6 million, no one's salary seems large — not compared to Elon Musk. While it's tied to a deal that will take years to complete, Tesla shareholders recently voted to pay him $1 trillion. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

UK wants Apple and Google to block nude photos unless your age is verified
The UK will soon propose OS-level iPhone age verification to block nude images, aiming to protect children from online explicit content. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Holiday stocking stuffer special: Get 4 AirTags for $69.99 (30% off)
Amazon continues to launch last-minute Apple deals in a bid for your business, with today's AirTag discount knocking 30% off the 4-pack.Grab a holiday special on AirTags at Amazon, with the 4-pack $69.99 - Image credit: Apple, AmazonThe $69.99 price on a 4-pack of Apple AirTags is especially attractive, as it delivers a $30 discount off retail during the busy holiday travel season.Buy AirTag 4-pack for $69.99 Continue Reading on AppleInsider | Discuss on our Forums

Read more »

iRobot files for Chapter 11 bankruptcy after increased competition & tariff woes
Roomba maker iRobot has filed for bankruptcy protection and will change its ownership, but your robot vacuum cleaners will probably be fine.iRobot's Roomba, which will still work for a while at least. On Sunday, iRobot confirmed that it had commenced a pre-packaged Chapter 11 bankruptcy protection process. After warning its cash balance was running close to empty, it inevitably ran out, and has to fight for its survival.The third-quarter financial results in November confirmed the company was in trouble, with it having less than $25 million in cash and equivalents, as well as an almost $50 million drop in quarterly revenue. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

visionOS 26.2 adds big change for using Apple Vision Pro on the go
Last week Apple released feature-packed updates like iOS 26.2, iPadOS 26.2, and more. New features for visionOS 26.2 appeared minimal during the beta process, but it turns out, the update actually brought a big upgrade for using Apple Vision Pro on the go. more…

Read more »

Steve Wozniak’s quirky 30-year tradition: Paying with his own custom $2 bills
Apple co-founder Steve "Woz" Wozniak, known for his inventive spirit and playful pranks, has maintained a delightfully eccentric habit… The post appeared first on MacDailyNews.

Read more »

Jason Johnson discusses his new startup, Doma Home on HomeKit Insider
On this week's episode of the HomeKit Insider podcast, August co-founder Jason Johnson joins to talk about his new startup.HomeKit Insider PodcastGuest this week on the podcast is Jason Johnson. He's most known for co-founding the August smart security company with famed designer Yves Behar.August helped Apple create the lock spec for what was then HomeKit. Eventually, August was purchased by Yale/Assa Abloy, where Johnson assisted in moving August software onto millions of Yale locks globally. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

PSA: It’s not just you, Spotify is down
If Spotify is down for you this morning, you’re not alone. The streaming music service has a bit of the Monday blues. Spotify has confirmed that it is aware of problem affecting the service today and is investigating. more…

Read more »

Apple Car Key support appears imminent for Toyota vehicles
Apple appears to be preparing Apple Car Key support for Toyota vehicles, based on evidence found in Apple's backend systems.It's not clear yet which Toyota models will support Apple Car KeyToyota might soon let drivers unlock and start compatible vehicles with an iPhone or Apple Watch. The company hasn't made a public announcement yet, though.Apple Car Key, introduced in 2022, stores a digital car key in the Wallet app. It uses NFC to communicate with supported vehicles. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

iOS 26.2’s Home app has a new upgrade for adding accessories
Apple is rumored to launch five new Home products in the year ahead, and ahead of that renewed smart home push, iOS 26.2 has just added a key enhancement to make adding new accessories easier. more…

Read more »

Nemotron 3: Nvidia’s Open-Weight Engine for the Next AI Wave
Nemotron 3 shows how Nvidia is using open models, tooling, and data to turn raw compute into deployable intelligence and reinforce its full-stack AI strategy. The post appeared first on TechNewsWorld.

Read more »

‘Pluribus’ is the most-watched show in Apple TV history
“Pluribus” is an original series in which the most miserable person on Earth must save the world from viral happiness. Rhea Seehorn stars… The post appeared first on MacDailyNews.

Read more »

UK wants iPhones to require age verification for any nude images
After it blocked adult sites, the UK government is reportedly about to ask Apple and Google to prevent any explicit images without device age verification.UK ParliamentIt is already possible for parents to safeguard their children by restricting their access to age-inappropriate material on iPhone. But now according to the Financial Times, the UK wants smartphone users to have to verify their age in just the same way it now requires verification for adult websites.If the report is correct, the aim would be to encourage Apple and Google to do this, rather than directly require it. Reportedly, the UK government considered mandating nudity-detecting algorithms, but for now is going to ask the companies to consider it. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Toyota reportedly working on car key support in Apple Wallet
One of the world’s largest automakers is preparing support for Apple’s car key platform. A new report today says that Apple’s “backend has been updated to include Toyota in the list of companies that support Apple car key.” more…

Read more »

All-screen display for 20th anniversary iPhone gets closer to production
Apple's 20th anniversary iPhone will have a bezel-less design thanks to a four-sided bending OLED panel, with LG Display pushing to perfect manufacturing processes for the 2027 model.The 20th anniversary iPhone could lose the bezels completely, and look very different to current designsThe 2027 update to the iPhone will mark its 20th anniversary, and will be a big deal for Apple to celebrate. That means creating a model with a stand-out design, which is widely believed to be bezel-free.According to industry sources of DealSite, while Apple is working with both LG Display and Samsung Display on the screen, LG Display is actively pursuing orders for equipment to manufacture it. By contrast, Samsung Display is said to be a bit more cautious on the matter. Rumor Score: 🤔 Possible Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Kindle Ask this Book AI-powered feature launches in iOS app
If you’ve ever resumed reading a book after a break and can’t remember who one of the characters is or what happened in the last section you read, or you simply don’t understand the significance of one of the plot developments, a new Kindle Ask This Book feature is here to help … more…

Read more »

Facebook Messenger for macOS departs the desktop
The Facebook Messenger desktop app for macOS is being axed on December 15, forcing Mac users into using the web version, for better or worse.Facebook Messenger's shutting down on macOS, but you can still use it elsewhere. On October 15, Facebook revealed it was killing off support for its desktop Messenger apps, both for Mac and Windows. It gave a 60-day warning that the app would be no more, with it ceasing to work on December 15.At the time, Facebook had already pulled the app from the Mac App Store, preventing new downloads while still allowing existing installations to work. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Rob Enderle’s 2025 Tech Product of the Year
2025 delivered real-world technology that finally lived up to the promise of intelligent systems. Rob Enderle reveals the product that stood above the rest. The post appeared first on TechNewsWorld.

Read more »

PSA: Better mobile carrier deals may be yours for the asking
Competition between mobile carriers is now so intense that they are not only trying hard to poach customers from each other, but even fighting legal battles over their tactics. AT&T has sued T-Mobile over its EasySwitch tool, intended to allow customers to compare rates and receive a personalized deal from the self-proclaimed “uncarrier” … more…

Read more »

iPhone System Data and Other storage: What is it and how to get rid of it
Macworld I’m sure this sounds familiar: You’re trying to install the latest iOS release, upgrade to a new iPhone, take photos or record video, or just download that cool app everyone’s talking about, and your iPhone says the storage is full. You’ve already deleted every app you don’t think you need, and there’s still not enough space on your iPhone. So you open Settings, tap General, then iPhone Storage, and, sure enough, your iPhone is full. Worst of all, a huge chunk of it is just listed as Other (renamed System Data in iOS 15). What’s that supposed to mean? How do you get rid of it? The System Data/Other storage sections are mysterious and confusing, and there’s no one answer that works for everyone, but hopefully, this guide will help you deal with this problem. Latest iPhone release: iPhone 16e (March 2025), iPhone 17, iPhone Air, iPhone 17 Pro and 17 Pro Max (September 2025) Latest iOS release: iOS 26.2 (December 2025) Latest iOS beta: N/A How to view your iPhone storage To see how much storage all your apps and data are taking up on your iPhone’s storage, open the Settings app, select General, then iPhone Storage. At the top, you’ll see a bar graph showing your total iPhone storage and which types of data are filling it up. Beneath that, you’ll find a list of applications on your phone and how much room they take up, both for the app itself and its stored data. It may take several seconds for your iPhone to show the graph, as it takes time to scan and analyze its storage. Even after the chart first appears, you’ll want to wait several seconds more for it to stabilize, as the app list and storage sizes can change while your phone completes its analysis. You’ll find your iPhone storage details a few layers deep in the Settings app. What is System Data (or Other) on iPhone? Your iPhone Storage menu will divide that bar up top into familiar categories like Apps, Media, Photos, and Mail, but also a System Data (iOS 15 and later) or Other category that is sometimes very large. It’s common for System Data to be in the 5GB to 20GB range, but if it’s way over 20GB, it has probably grown out of control. You can scroll all the way down to the bottom of the app list where you will see iOS, which are the files required by the system and are usually around 10GB, and System Data, which are files other than apps and downloads that are collected by iOS. Tap on System Data to see how much space it is taking up. The System Data/Other category is big and varied because it’s a real catch-all category. It comprises system caches, logs, Siri voices (if you’ve downloaded more than one), updates, and so much more. One of the biggest culprits for System Data/Other growing out of hand is streaming lots of music and video. When you download video or music from the iTunes Store, TV app, or Music app, it’s indexed as Media. But streams have caches used to ensure smooth playback, and those are categorized as System Data/Other. Safari’s caches can start to grow pretty large, too. And if you send tons of texts with images or video, the caches for that can start to fill up a lot of space. Your iPhone is supposed to manage these caches to keep your storage from becoming completely full, but it doesn’t always do a great job. Clearing your Safari data might reduce the size of Other. We discuss how to delete Other storage on a Mac and how to delete System Data on a Mac separate articles. How to reduce the size of System Data/Other on an iPhone You can’t get rid of System Data/Other entirely, but you can sometimes reduce its size. First, let’s try clearing your Safari caches. Open Settings > Safari and choose Clear History and Website Data. If you have a lot of Safari tabs open on your iPhone, you might want to close most of them, too. You might also want to change Messages to save fewer old messages. Open Settings, then Messages, and scroll down to the Message History setting. By default, Keep Messages is set to Forever, but you may want to change it to 1 Year or even 30 Days to reduce the data that the Messages app caches. Just beware that doing this will mean old messages will be deleted–so if you have any messages you want to keep find a way to back them up. If you’re a heavy texter, your Messages app might be filling up your storage with a lot of data. Finally, go back to iPhone Storage and look at the apps list. Most of the apps store data that is categorized as Apps, but some will keep caches that are categorized as System Data/Other. If, say, the Podcasts app is taking up a couple of gigabytes of space, it’s likely mostly cached data. Deleting the app and re-downloading it might put a dent in the System Data/Other category. How to free up space taken up by iOS While Apple lets you delete stock iOS apps that you don’t want to free up space, the system still takes up quite a bit of room, in some cases 25GB or more. However, if you’re running an iPhone 15 Pro or later and have Apple Intelligence enabled, it’s taking up more than 10GB of space. Simply turning it off will help you reclaim it. Head over to the Apple Intelligence & Siri tab in Settings and flip the toggle. The free space won’t show up in storage immediately, but the system will be able to use that space to install updates and apps. And you can always turn it back on later. The nuclear option: Backup and reset your iPhone You can go through your iPhone trying to delete every little cache that could grow the size of System Data/Other storage, but if you really want to make it as small as possible, you need to back up your phone and reset it. This can take a little while. The best way to do this is to use your Mac or PC. On a Mac running macOS 10.15 Catalina or later: First, connect your iPhone to your Mac with the bundled USB-C-to-Lightning cable. When prompted on your iPhone, tap “Trust” and enter your passcode. In the Finder sidebar on your Mac, select your iPhone under Locations. Click the General tab. Select “Back up all of the data on your iPhone to this Mac.” To encrypt your backup data and protect it with a password, check the “Encrypt local backup” box. Click Back Up Now. Note: You can also connect your iPhone to your computer wirelessly if you set up syncing over Wi-Fi. Foundry On a Mac running macOS 10.14 Mojave or earlier, or a PC On a PC or a Mac with macOS 10.14 or earlier you can use iTunes to back up your phone. After you connect your iPhone to your Mac or PC, select your iPhone by clicking the little phone icon in the upper left, and under Backups, choose “This Computer” and check the “Encrypt local backup” box to protect your backup with a password. Then click the button to Back up now. Reset and restore When the backup is done, disconnect your iPhone, head to Settings > General > Reset, and select Erase All Content and Settings. This will return your iPhone to its factory settings, just like when you took it out of the box. When it restarts and it’s in the initial setup process, re-connect it to your computer with iTunes open, and follow the instructions on the screen to restore your device. This is the longest and most involved way to reduce the size of System Data/Other storage, but it’s also the best. There’s just no way to get it any smaller than it will be after a fresh reset and restore. Apple iPhone 14 Plus Read our review Price When Reviewed: £699 (was £799) DISCONTINUED Best Prices Today: $729.99 at Best Buy Apple iPhone 14 Pro Read our review Price When Reviewed: Was $999 DISCONTINUED Best Prices Today: $449.96 at Walmart | $999 at Visible

Read more »

Can Apple really fix Siri, or is it too far gone?
Macworld Lots of exclusives on Macworld last week, as our tireless code-breaker Filipe Esposito turned up clues to a mystery Apple smart home accessory, HomePod mini and AirTag upgrades, a new display, and much more. All the secrets of the future were laid bare. But the Esposito scoop that caught my eye concerned a rather older story. Siri, poor hapless Siri, has been the laughing stock of voice assistants for years. Some of the time it fails to hear you; other times it dives unwanted into the conversation even though nobody mentioned its name. (Surprisingly often this is triggered by dialogue on Apple TV shows; you’d think they’d check for that sort of thing.) It mishears the name of songs to an almost comical extent, it refuses to do what it’s told, and it behaves constantly with the infuriating confidence of the very stupid. Given that Siri is baked into pretty much every Apple product, you’d think that fixing it would be a top priority. Sure enough, back in June 2024, Apple announced that it was going to release a new enhanced version of Siri, powered by AI, to address all these problems. Although, of course, Apple didn’t actually acknowledge the problems, instead using vaguely positive phraseology about becoming “more natural, more contextually relevant, and more personal.” Eagle-eyed readers will have noticed that enhanced Siri still hasn’t arrived, a mere 18 months on; there are no signs of it becoming more natural, it remains blithely irrelevant, and the only personal thing about it is my choice of language when it gets a simple command wrong yet again. So it was… I won’t say pleasing, but I will say interesting to hear last week that it’s now looking likely to land in spring 2026 alongside the so-called HomePad. Which is better than nothing, as they say; at least the project hasn’t been completely cancelled, like AirPower or the slimmer and lighter version of Vision Pro. But another phrase that springs to mind is “Too little, too late.” Most obviously, Apple has squandered a great deal of trust and goodwill over the past couple of years by promising things that aren’t ready (and which may never have existed at all) and then failing to deliver them. Trust in a tech company’s honesty and competence is a vital asset. Do you trust Apple to provide worthwhile software updates for the life of your products, and to safeguard your security and privacy? If there’s a bug on your Mac, do you trust Apple to patch it in a timely fashion? Probably less so than was the case five years ago. It might seem entitled and fanboyish to take it personally when a corporation fails to launch an expected product. But in this case, it is personal: Siri’s performance, and Apple’s continued failure to address that performance, affects our daily experience with the iPhone, the Mac, the Apple Watch, and of course the HomePod. Siri 2.0 isn’t a new product we’ve been having to wait for, but a needed fix for the products we already have. And anyone who stayed inside Apple’s walled garden in hopes of the voice assistant getting better was kept there under false pretences. It all could have been so much better. Siri should be the user’s entry point to the Apple ecosystem, and the culmination of the company’s intuitive philosophy. No matter which device you’re using, no matter the operating system or the app, you simply say out loud what you want to happen. What could be more user-friendly? Almost anything, it turns out. For years now, customers have been trained to regard their Apple products with suspicion. If I use this device in the way that is theoretically the most convenient, they quickly come to understand, there is a good chance it will go wrong. Which is hardly the message Apple wants to send. And while spring could represent a new beginning for the beleaguered voice assistant, it will also mark the start of a very long and difficult process of reputational recovery. Foundry Welcome to our weekly Apple Breakfast column, which includes all the Apple news you missed last week in a handy bite-sized roundup. We call it Apple Breakfast because we think it goes great with a Monday morning cup of coffee or tea, but it’s cool if you want to give it a read during lunch or dinner hours too. Trending: Top stories Alex Blake reveals 8 Mac settings and features you’re not using but should. This test shows how bad Apple Intelligence is—and how much better it’s going to get. Hallelujah! Easier switching between iPhone and Android is on the way soon. Mahmoud Itani reveals 6 innovations in 2025 that prove Apple still has what it takes. How Matter has finally given Apple a path out of the HomeKit mess. Apple is facing its ‘biggest personnel shake-up in decades.’ But with numerous execs departing, the Macalope says good riddance. Podcast of the week What’s going on with Apple management? How will the changes affect the company? That’s all in the latest episode of the ‪Macworld Podcast‬. You can catch every episode on YouTube, Spotify, Soundcloud, the Podcasts app, or our own site. Reviews corner Apple Preview: A near-perfect PDF reader with limited editing tools. Rolling Square TAU 2: A keyring-sized mini power bank. TP-Link BE3600 Wi-Fi 7: Versatile, portable Wi-Fi router. Journey ARIA 3-in-1: Chic, lightweight magnetic travel charger. The rumor mill Apple’s next HomePod mini and AirTag upgrades surface in leaked internal code. Internal Apple code hints improved Siri will land next spring with ‘HomePad’ hub. Leaked code spills details of mystery Apple smart home accessory. Code leak reveals A19 iPad, M4 Air with Apple’s N1 chip likely coming soon. Video of the week What will be Tim Cook’s legacy? We discuss the possibilities in our latest short. Enjoy our video on TikTok or Instagram. @macworld.com What will be Tim Cook’s legacy? #apple ♬ original sound – Macworld – Macworld Software updates, bugs, and problems CarPlay is getting even better with these new iOS 26.2 features. iPhone 16e named ‘Bust of the Year’ (not in a good way) in MKBHD smartphone awards. Mystery solved: Here’s how to tell when your AirPods are updating. And with that, we’re done for this week’s Apple Breakfast. If you’d like to get regular roundups, sign up for our newsletters, including our new email from The Macalope–an irreverent, humorous take on the latest news and rumors from a half-man, half-mythical Mac beast. You can also follow us on Facebook, Threads, Bluesky, or X for discussion of breaking Apple news stories. See you next Monday, and stay Appley.

Read more »

iRobot has filed for bankruptcy – here’s what that means for Roomba owners
iRobot, the company which invented robot vacuum cleaners, has filed for Chapter 11 bankruptcy some 23 years after it first launched the Roomba range. While such company failures can often be extremely bad news for owners of smart home technology, there is reason for optimism in this case … more…

Read more »

If you care about the security of your iPhone, go update right now
Macworld New iOS and iPadOS updates don’t just add lots of new features to your iPhone. There are also updates to improve the security and reliability of your devices, and the latest release is no exception. There are 25 new security updates in iOS/iPadOS 26.2, and if you can’t or don’t want to update to iOS 26 yet, 20 of them are available in a separate iOS/iPadOS 18.7.3 release. Of particular note are a pair of WebKit vulnerabilities where “processing maliciously crafted web content may lead to arbitrary code execution.” Apple says it is aware of a report that these bugs were used in a highly sophisticated attack against specific targeted individuals, in a version of iOS prior to iOS 26. These are zero-day flaws, meaning they were previously unknown. There are quite a few similar WebKit fixes in these releases, in which race conditions, buffer overflows, and other memory tricks could be used to run code on your iPhone after visiting specifically crafted malicious web content. There are many other frameworks and apps with important security fixes as well, including some commonly used apps: App Store Impact: An app may be able to access sensitive payment tokens Description: A permissions issue was addressed with additional restrictions. CVE-2025-46288: floeki, Zhongcheng Li from IES Red Team of ByteDance. FaceTime Impact: Password fields may be unintentionally revealed when remotely controlling a device over FaceTime Description: This issue was addressed with improved state management. CVE-2025-43542: Yiğit Ocak Photos Impact: Photos in the Hidden Photos Album may be viewed without authentication Description: A configuration issue was addressed with additional restrictions. CVE-2025-43428: an anonymous researcher, Michael Schmutzer of Technische Hochschule Ingolstadt So if you’re on iOS 26, it’s best to update to iOS 26.2 as soon as possible. If you’re not on iOS 26 yet and don’t want to or can’t upgrade, be sure to grab iOS 18.7.3 instead. You can get either update by going to the Settings app, then General and Software Update.

Read more »

Apple and Google will be asked to block nude photos unless user age is verified
A new report says that the British government will be asking Apple and Google to block the taking and sharing of nude photographs unless the user has been verified to be an adult. Additionally, the report says that the government wants iOS and Android to prevent nude images even being displayed on the device unless the user has been verified as an adult … more…

Read more »

Apple’s 20th anniversary iPhone may wrap its display on all four sides
Apple may be planning its boldest iPhone redesign yet for its 20th anniversary with a display that curves on all four sides. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Computer Virus Protection Tips and How to Remove a Virus from Your Computer
Computer viruses continue to be a widespread and costly problem, affecting everyone from casual computer users to major organizations. Some of the most damaging incidents in history started with small actions that could have happened to anyone. The Melissa virus spread in 1999 because thousands of people opened what looked like a normal email attachment. […] The post appeared first on The Mac Security Blog.

Read more »

Microsoft Patch Tuesday, December 2025 Edition
Microsoft today pushed updates to fix at least 56 security flaws in its Windows operating systems and supported software. This final Patch Tuesday of 2025 tackles one zero-day bug that is already being exploited, as well as two publicly disclosed vulnerabilities.

Read more »

Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill
A sprawling academic cheating network turbocharged by Google Ads that has generated nearly $25 million in revenue has curious connections to a Kremlin-connected oligarch whose Russian university builds drones for Russia's war against Ukraine.

Read more »

SMS Phishers Pivot to Points, Taxes, Fake Retailers
China-based phishing groups blamed for non-stop scam SMS messages about a supposed wayward package or unpaid toll fee are promoting a new offering, just in time for the holiday shopping season: Phishing kits for mass-creating fake but convincing e-commerce websites that convert customer payment card data into mobile wallets from Apple and Google. Experts say these same phishing groups also are now using SMS lures that promise unclaimed tax refunds and mobile rewards points.

Read more »

Vulnerability Summary for the Week of November 24, 2025
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info 0x4m4--HexStrike AI By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server's normal privilege; typically, this is root. There is no attempt to sanitize these arguments in the default configuration of this MCP server at the affected version (as of commit 2f3a5512 in September of 2025). 2025-11-30 9.1 CVE-2025-35028 https://takeonme.org/gcves/GCVE-1337-2025-00000000000000000000000000000000000000000000000000111111111111111111111111000000000000000000000000000000000000000000000000000000011  AMD--AMD Prof Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability. 2025-11-24 7.1 CVE-2025-48510 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9019.html  AMD--Xilinx Run Time (XRT) Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability. 2025-11-24 8 CVE-2025-52538 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability 2025-11-24 7.3 CVE-2025-0003 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in crash or denial of service. 2025-11-24 7.3 CVE-2025-0005 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  AMD--Xilinx Run Time (XRT) A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface (AXI), potentially resulting in loss of confidentiality, integrity, and/or availability. 2025-11-24 7.3 CVE-2025-52539 https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html  ASR--Lapwing_Linux Out-of-bounds Read vulnerability in ASR1903ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26. 2025-11-26 7.4 CVE-2025-13735 https://www.asrmicro.com/en/goods/psirt?cid=41  blubrry--PowerPress Podcasting plugin by Blubrry The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the 'powerpress_edit_post' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2025-11-27 8.8 CVE-2025-13536 https://www.wordfence.com/threat-intel/vulnerabilities/id/d420ee49-e7b3-43d8-a263-8a93abd1133c?source=cvehttps://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3068https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3012https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L2368https://plugins.trac.wordpress.org/changeset/3402635/  Chanjet--CRM A vulnerability has been found in Chanjet CRM up to 20251106. The impacted element is an unknown function of the file /tools/upgradeattribute.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-11-30 7.3 CVE-2025-13788 VDB-333792 | Chanjet CRM upgradeattribute.php sql injectionVDB-333792 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #690084 | Chanjet CRM V1.0 SQL Injectionhttps://github.com/Bellingham-max/CVE/issues/1  code-projects--COVID Tracking System A vulnerability was detected in code-projects COVID Tracking System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument code results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. 2025-11-24 7.3 CVE-2025-13585 VDB-333349 | code-projects COVID Tracking System login.php sql injectionVDB-333349 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699840 | code-projects COVID Tracking System V1.0 SQL Injectionhttps://github.com/beamyou/CVE/issues/4https://code-projects.org/  code-projects--Jonnys Liquor A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. 2025-11-24 7.3 CVE-2025-13582 VDB-333346 | code-projects Jonnys Liquor GET Parameter detail.php sql injectionVDB-333346 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699554 | code-projects Jonnys Liquor 1.0 /detail.php SQL injectionhttps://github.com/rassec2/dbcve/issues/5https://code-projects.org/  code-projects--Library System A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2025-11-24 7.3 CVE-2025-13578 VDB-333342 | code-projects Library System Login index.php sql injectionVDB-333342 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699536 | code-projects Library System 1.0 index.php SQL Injectionhttps://github.com/rassec2/dbcve/issues/4https://code-projects.org/  code-projects--Question Paper Generator A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. 2025-11-24 7.3 CVE-2025-13583 VDB-333347 | code-projects Question Paper Generator POST Parameter signupscript.php sql injectionVDB-333347 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #699591 | code-projects question paper 1.0 /signupscript.php SQL Injectionhttps://github.com/rassec2/dbcve/issues/6https://code-projects.org/  cursor--cursor Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arbitrary code execution. 2025-11-26 9.8 CVE-2025-62354 https://hiddenlayer.com/sai_security_advisor/2025-11-cursor/  Dassault Systmes--DELMIA Service Process Engineer A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. 2025-11-24 8.7 CVE-2025-10555 https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10555  Dassault Systmes--ENOVIA Product Manager A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. 2025-11-24 8.7 CVE-2025-10554 https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10554  DirectoryThemes--Tiger The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the 'paypal-submit.php' file not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. 2025-11-27 9.8 CVE-2025-13675 https://www.wordfence.com/threat-intel/vulnerabilities/id/4750b57e-7d8d-49d7-bbbf-46483eb97bd9?source=cvehttps://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995  DirectoryThemes--Tiger The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the plugin allowing a user to update the user role through the $user- >set_role() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator. 2025-11-27 8.8 CVE-2025-13680 https://www.wordfence.com/threat-intel/vulnerabilities/id/645f60ad-c8e5-47ec-94f1-960de4ef7838?source=cvehttps://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995  Eaton--Eaton Galileo Software Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead into an attacker with local access to execute unauthorized code or commands. This security issue has been fixed in the latest version of Galileo which is available on the Eaton download center. 2025-11-27 7.3 CVE-2025-59890 https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1024.pdf  Elated Themes--FindAll Listing The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.5. This is due to the 'findall_listing_user_registration_additional_params' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. Note: The vulnerability can only be exploited if the FindAll Membership plugin is also activated, because user registration is in that plugin. 2025-11-27 9.8 CVE-2025-13538 https://www.wordfence.com/threat-intel/vulnerabilities/id/14981949-271c-4f98-a6a1-b00619f1436d?source=cvehttps://themeforest.net/item/findall-business-directory-theme/24415962  Elated Themes--FindAll Membership The FindAll Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.4. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'findall_membership_check_facebook_user' and the 'findall_membership_check_google_user' functions. This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site which can easily be created by default through the temp user functionality, and access to the administrative user's email. 2025-11-27 9.8 CVE-2025-13539 https://www.wordfence.com/threat-intel/vulnerabilities/id/a856a96a-68d2-462d-b523-840668980807?source=cvehttps://themeforest.net/item/findall-business-directory-theme/24415962  factionsecurity--faction FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction's extension framework permits untrusted extension code to execute arbitrary system commands on the server when a lifecycle hook is invoked, resulting in remote code execution (RCE) on the host running Faction. Due to a missing authentication check on the /portal/AppStoreDashboard endpoint, an attacker can access the extension management UI and upload a malicious extension without any authentication, making this vulnerability exploitable by unauthenticated users. This issue has been patched in version 1.7.1. 2025-11-26 9.7 CVE-2025-66022 https://github.com/factionsecurity/faction/security/advisories/GHSA-xr72-2g43-586whttps://github.com/factionsecurity/faction/commit/c6389f1c76175b7c1c68d1a87b389311b16c62c3  fugue-project--fugue Fugue is a unified interface for distributed computing that lets users execute Python, Pandas, and SQL code on Spark, Dask, and Ray with minimal rewrites. In version 0.9.2 and prior, there is a remote code execution vulnerability by pickle deserialization via FlaskRPCServer. The Fugue framework implements an RPC server system for distributed computing operations. In the core functionality of the RPC server implementation, I found that the _decode() function in fugue/rpc/flask.py directly uses cloudpickle.loads() to deserialize data without any sanitization. This creates a remote code execution vulnerability when malicious pickle data is processed by the RPC server. The vulnerability exists in the RPC communication mechanism where the client can send arbitrary serialized Python objects that will be deserialized on the server side, allowing attackers to execute arbitrary code on the victim's machine. This issue has been patched via commit 6f25326. 2025-11-25 8.8 CVE-2025-62703 https://github.com/fugue-project/fugue/security/advisories/GHSA-xv5p-fjw5-vrj6https://github.com/fugue-project/fugue/commit/6f25326779fd1f528198098d6287c5a863176fc0  geoserver--geoserver GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap. However, this input is not sufficiently sanitized or restricted, allowing an attacker to define external entities within the XML request. This issue has been patched in GeoServer 2.25.6, GeoServer 2.26.3, and GeoServer 2.27.0. 2025-11-25 8.2 CVE-2025-58360 https://github.com/geoserver/geoserver/security/advisories/GHSA-fjf5-xgmq-5525https://osgeo-org.atlassian.net/browse/GEOS-11682  GitLab--GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an unauthenticated user to cause a Denial of Service condition by sending specifically crafted requests containing malicious JSON payloads. 2025-11-26 7.5 CVE-2025-12571 GitLab Issue #579168HackerOne Bug Bounty Report #3362239  GL-Inet--GL-AXT1800 A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. 2025-11-24 8.3 CVE-2025-44018 https://talosintelligence.com/vulnerability_reports/TALOS-2025-2230  HCL Software--iNotes HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote, unauthenticated attacker can specially craft a URL to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials. 2025-11-25 8.1 CVE-2025-0248 https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127032  Huawei--HarmonyOS Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality. 2025-11-28 9.3 CVE-2025-64314 https://consumer.huawei.com/cn/support/bulletinlaptops/2025/11/  Huawei--HarmonyOS Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 2025-11-28 8.4 CVE-2025-58302 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability. 2025-11-28 8.4 CVE-2025-58303 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 2025-11-28 8 CVE-2025-58310 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. 2025-11-28 7.3 CVE-2025-58308 https://consumer.huawei.com/en/support/bulletin/2025/11/  Huawei--HarmonyOS DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability. 2025-11-28 7.3 CVE-2025-58316 https://consumer.huawei.com/en/support/bulletin/2025/11/  Janitza--UMG 96-PA An unauthenticated remote attacker can send a specially crafted Modbus read command to the device which leads to a denial of service. 2025-11-24 7.5 CVE-2025-41729 https://certvde.com/de/advisories/VDE-2025-094  kiteworks--security-advisories Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0. 2025-11-29 7.1 CVE-2025-53896 https://github.com/kiteworks/security-advisories/security/advisories/GHSA-23h2-3jj8-58hm  kiteworks--security-advisories Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances to intercept upstream communication which could lead to an escalation of privileges. This issue has been patched in version 9.1.0. 2025-11-29 7.2 CVE-2025-53899 https://github.com/kiteworks/security-advisories/security/advisories/GHSA-5gx5-vcpp-8cr5  Logpoint--SIEM An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability. 2025-11-27 8.5 CVE-2025-66359 https://servicedesk.logpoint.com/hc/en-us/articles/29158899698333-XSS-Vulnerability-due-to-insufficient-input-validation  Mattermost--Mattermost Mattermost versions 10.12.x

Read more »

Cybersecurity Best Practices: Essential Tips for Modern Mac Security
Cybersecurity affects every person who uses a device, connects to the internet, pays bills online, or stores important files digitally. The rise of cloud services, mobile apps, and complex online accounts has created new opportunities for criminals to target individuals. Mac users benefit from strong built-in protections, but threats now focus less on operating systems […] The post appeared first on The Mac Security Blog.

Read more »

What Is a Network Security Key? How to Find Your Wi-Fi Password on Any Device
If you have ever tried connecting a new phone, laptop, tablet, or smart home device to your Wi-Fi network, you have likely been asked for something called a network security key. The name sounds technical, but it simply refers to the password that protects your wireless network. Understanding what a network security key is, how […] The post appeared first on The Mac Security Blog.

Read more »

Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’
A prolific cybercriminal group that calls itself "Scattered LAPSUS$ Hunters" made headlines regularly this year by stealing data from and publicly mass extorting dozens of major corporations. But the tables seem to have turned somewhat for "Rey," the moniker chosen by the technical operator and public face of the hacker group: Earlier this week, Rey confirmed his real life identity and agreed to an interview after KrebsOnSecurity tracked him down and contacted his father.

Read more »

Is Your Android TV Streaming Box Part of a Botnet?
On the surface, the Superbox media streaming devices for sale at retailers like BestBuy and Walmart may seem like a steal: They offer unlimited access to more than 2,200 pay-per-view and streaming services like Netflix, ESPN and Hulu, all for a one-time fee of around $400. But security experts warn these TV boxes require intrusive software that forces the user's network to relay Internet traffic for others, traffic that is often tied to cybercrime activity such as advertising fraud and account takeovers.

Read more »

Vulnerability Summary for the Week of November 17, 2025
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info Patch Info ABB–ABB Ability Edgenius Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1. 2025-11-20 9.6 CVE-2025-10571 https://search.abb.com/library/Download.aspx?DocumentID=7PAA022088&LanguageCode=en&DocumentPartId=&Action=Launch  AMD–AMD StoreMI A DLL hijacking vulnerability in AMD StoreMIâ„¢ could allow an attacker to […]

Read more »

Cloud Security Tips: How to Protect Your Data in the Cloud
Cloud storage has become woven into the way people save, share, and collaborate on files. From personal photos to business documents, the cloud makes information easy to access from nearly any device. Yet this convenience can also create security risks. If an attacker gains access to a cloud account, they may be able to view […] The post appeared first on The Mac Security Blog.

Read more »

Sunday Holiday Sale: Take $200-$250 off M4 MacBook Airs, prices start at only $749
Amazon has all 13" M4 MacBook Airs and 15" M4 MacBook Airs on Holiday sale for $200-$250 off Apple's MSRP, starting at only $749. Be sure to select Amazon as the seller, rather than a third-party: - 13" M4 MacBook Air (16GB/256GB): $749, $250 off - 13" M4 MacBook Air (16GB/512GB): $949, $250 off - 13" M4 MacBook Air (24GB/512GB): $1149, $250 off - 15" M4 MacBook Air (16GB/256GB): $999, $200 off - 15" M4 MacBook Air (16GB/512GB): $1199, $200 off - 15" M4 MacBook Air (24GB/512GB/): $1399, $200 off Their prices are the lowest available for new M4 MacBook Airs anywhere and represent one of the best Holiday deals on Apple products available right now. For the latest sales & prices, see our 13" MacBook Air Price Tracker and 15" MacBook Air Price Tracker, both updated daily.

Read more »

Holiday Sale: M4 Mac minis available starting at only $479
Amazon has M4 and M4 Pro Mac minis on Holiday sale starting at only $479 and ranging up to $120 off MSRP. Shipping is free: - Mac mini M4 (16GB/256GB): $479, $120 off MSRP - Mac mini M4 (16GB/512GB): $699, $100 off MSRP - Mac mini M4 (24GB/512GB): $923, $26 off MSRP - Mac mini M4 Pro (24GB/512GB): $1287, $112 off MSRP These are the lowest Holiday sale prices currently available on Mac minis. For the latest prices and sales, keep an eye on our Mac mini Price Tracker, updated daily.

Read more »

Walmart if offering a $100 Apple Watch Series 11 Holiday discount this weekend
Walmart is now offering a $100 online discount on new Apple Watch Series 11 models as part of their Holiday sales. Sale prices for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 42mm Apple Watch Series 11 GPS: $299, save $100 - 46mm Apple Watch Series 11 GPS: $329, save $100 - 42mm Apple Watch Series 11 GPS + 5G: $399, save $100 - 46mm Apple Watch Series 11 GPS + 5G: $429, save $100 These are the lowest Holiday sale prices available for Apple Watch Series 11 models. For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

Apple Watch SE 3 on sale this weekend for $50 off MSRP, prices start at $199
Walmart has Apple Watch SE 3 models on sale on their online store for $50 off MSRP as part of their ongoing Holiday savings. Sale prices for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 40mm Apple Watch SE GPS: $199, $50 off MSRP - 44mm Apple Watch SE GPS: $229, $50 off MSRP - 40mm Apple Watch SE GPS + 5G: $249, $50 off MSRP - 44mm Apple Watch SE GPS + 5G: $279, $50 off MSRP These are the lowest Holiday prices available for Apple Watch SE 3 models. For the latest prices & deals, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

AirPods Pro 3 on Holiday Sale for $50 off Apple’s MSRP, now only $199
Amazon has Apple AirPods Pro 3 on Holiday sale for $50 off MSRP, including free shipping: - AirPods Pro 3: $199, $50 off Their price is the lowest we've seen so far for these new AirPods Pro models. Keep an eye on our AirPods Price Tracker for the latest prices and deals, updated daily.

Read more »

Holiday Sale: 24-inch iMacs for $150-$170 off MSRP
Amazon has Apple's 24-inch M4 iMacs on Holiday sale for $150-$170 off MSRP, starting at $1149, each including free shipping: - 24-inch M4 iMac (8-Core CPU, 16GB RAM, 256GB SSD): $1149, $150 off MSRP - 24-inch M4 iMac (10-Core CPU, 16GB RAM, 256GB SSD): $1349, $150 off MSRP - 24-inch M4 iMac (10-Core CPU, 16GB RAM, 512GB SSD): $1549, $150 off MSRP - 24-inch M4 iMac (8-Core CPU, 24GB RAM, 512GB SSD): $1729-1749, $150-$170 off MSRP Amazon's prices are the lowest available for one of these new iMacs. Note that stock can vary. Price posted above is the lowest price available for each standard configuration, regardless of color. For the latest prices and deals, see our iMac Price Tracker, updated daily.

Read more »

Holiday Sale: Apple 11-inch M3 iPads for $100-$50 off MSRP
Take $100-$50 off 11-inch M3 iPad Airs at Amazon as part of their ongoing Holiday sale. Shipping is free: - 11" 128GB WiFi M3 iPad Air: $499, $100 off MSRP - 11" 256GB WiFi M3 iPad Air: $599, $100 off MSRP - 11" 512GB WiFi M3 iPad Air: $824.99, $75 off MSRP - 11" 1TB WiFi M3 iPad Air: $1049, $50 off MSRP Be sure to order from Amazon itself rather than a third-party seller. These are the lowest prices currently available for new 11" M3-powered iPad Airs. For the latest prices & sales, keep an eye on our iPad Air Price Tracker, updated daily.

Read more »

27-inch 5K Studio Displays back in stock and on Holiday sale starting at $1368, up to $231 off MSRP
Amazon has Apple Studio Displays (Standard Glass) back in stock and on Holiday sale starting at $1368, up to $231 off MSRP. Shipping is free: - Studio Display (Tilt Adjustable): $1368 $231 off MSRP - Studio Display (Tilt & Height Adjustable): $1849 $150 off MSRP Their prices are the lowest available for Studio Displays among the retailers we track, and $1368 is the lowest price we've seen for a new Studio Display for the past few months. For the latest prices and sales, see our Studio Display Price Tracker, updated daily.

Read more »

2nd generation Apple HomePods on sale for $20 off MSRP with free 1-2 day shipping
B&H Photo has Apple's 2nd generation full-size HomePods (White or Midnight) on sale for $20 off MSRP. This is the steepest discount available on 2nd-gen HomePods among the Apple retailers we track. In addition, B&H offers free 1-2 day shipping on these models to most US addresses: - HomePod (White): $279, save $20 - HomePod (Midnight): $279, save $20 See our HomePod Price Tracker for the latest prices and deals from Apple and its resellers.

Read more »

Update: Apple’s new 14-inch M5 MacBook Pros on Holiday sale again for $250 off MSRP, prices start at $1349
Amazon is now offering $250 discounts on new 14" M5 MacBook Pros as part of their Holiday sales, each including free shipping: - 14" M5 MacBook Pro (16GB/512GB/Black): $1349, MSRP $1599 - 14" M5 MacBook Pro (16GB/512GB/Silver): $1349, MSRP $1599 - 14" M5 MacBook Pro (16GB/1TB/Black): $1549, MSRP $1799 - 14" M5 MacBook Pro (16GB/1TB/Silver): $1599.00, MSRP $1799 - 14" M5 MacBook Pro (24GB/1TB/Black): $1749, MSRP $1999 - 14" M5 MacBook Pro (24GB/1TB/Silver): $1749, MSRP $1999 These are the lowest prices available for new M5 MacBook Pros right now. For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

The latest AirPods Holiday sales: Take $80 off AirPods 4 w/ANC, $30 off AirPods Pro 3
Amazon has Apple AirPods 4 with ANC and AirPods Pro 3 on Holiday sale for up to $80 off MSRP, including free shipping: - AirPods 4 with ANC: $99.99, $80 off - AirPods Pro 3: $219.99, $30 off These are currently the lowest Holiday sale prices available for these AirPods models. Keep an eye on our AirPods Price Tracker for the latest prices and deals, updated daily.

Read more »

Lowest Holiday Sale Price Alert! Apple Watch Series 11 models for $100 off MSRP
Amazon is now offering a $100 discount on new Apple Watch Series 11 models as part of their Holiday sales. Shipping is free: - 42mm Apple Watch Series 11 GPS: $299, save $100 - 46mm Apple Watch Series 11 GPS: $329, save $100 - 42mm Apple Watch Series 11 GPS + 5G: $399, save $100 - 46mm Apple Watch Series 11 GPS + 5G: $429, save $100 These are the lowest prices available for Apple Watch Series 11 models. For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »