Lost your wallet again? This $24 fix connects to your phone so you can keep tabs on it
Macworld TL;DR: The MagTag Ultra Slim Tracker Card, which works with the Apple Find My app, is on sale for $23.99 (MSRP $59.99), making it an easy way to track your wallet or bag in real time without adding any bulk. Losing your wallet isn’t just inconvenient — it’s a full-day derailment. Cards to cancel, IDs to replace, and that nagging feeling you left it somewhere obvious. Most trackers help, but they’re bulky enough that you don’t always want them crammed into something slim like a wallet. The MagTag Ultra Slim Tracker Card connects to the Apple Find My app to make sure you never lose it again, and right now it’s down 60% from $59.99 to $23.99. It’s built to be practically invisible (about as thin as a credit card), so it slides into your wallet, passport holder, or bag without changing how you carry things. Once it’s in place, it taps into Apple’s Find My network for real-time tracking. If you leave something behind, you’ll get a heads-up, and if it’s nearby, you can trigger a sound to track it down quickly. Why the MagTag Ultra Slim Tracker Card stands out: Ultra-slim 1.5mm design that fits in wallets and tight spaces Works with Apple Find My for global tracking Left-behind alerts, which help you catch mistakes early Loud beeping that makes nearby items easy to locate Rechargeable battery that lasts up to 5 months with wireless charging Waterproof and dustproof for everyday use and travel It’s one of those small upgrades that quietly removes a recurring headache. If you’re tired of second-guessing where you left things, grabbing the MagTag Ultra Slim Tracker Card is an easy way to stay a step ahead — on sale for just $23.99 (MSRP $59.99). MagTag Ultra Slim Tracker Card – Works with Apple Find My AppSee Deal StackSocial prices subject to change.

Read more »

iPhone 17 lineup is Apple’s biggest hit yet
The iPhone 17 lineup is now the most popular iPhone lineup in Apple’s history, with its strong demand helping the company report record revenues every quarter. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Apple stock sees slight bump following Q2 2026 earnings report
Following the release of Apple’s earnings report for the second fiscal quarter of 2026, shares rose slightly in after-hours trading as the market digested the results and outlook for Q3 2026. Here are the details. more…

Read more »

On the Future of Apple’s Vision Platform
It’s certainly possible that this Vision thing isn’t going to work out and Apple *will* throw in the towel on it. But that hasn’t happened, and if it does, it’s not going to come out of nowhere as a story on MacRumors for the people in VPG working on it.

Read more »

People snap up Macs faster than Apple can make them — here’s why
Happy customers snap up Macs so fast that even Apple's manufacturing expertise can't keep up. Here's what's behind Mac supply complaints. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Tim Cook’s advice to incoming Apple CEO John Ternus
Learn what Tim Cook advised John Ternus as he prepares to take over as Apple CEO this fall. It's all about following Apple's "North Star." (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Apple’s R&D spending hits new record as AI investment ramps up
Apple’s spending on research and development hit an all-time high in the company’s latest quarterly results, reflecting an industry-wide continued push into AI development. Here are the details. more…

Read more »

Apple to seek tariff refunds, plans to reinvest money in U.S. manufacturing
Apple CEO Tim Cook said today that the company is seeking refunds for duties it paid under tariffs Donald Trump announced last year, which the Supreme Court recently ruled unconstitutional. Here are the details. more…

Read more »

9to5Mac Daily: April 30, 2026 – OpenAI smartphone, more 
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by Bitwarden: Make your life easier with Bitwarden, featuring a secure, open source password manager with end-to-end encryption and seamless autofill across all your devices. more…

Read more »

Any tariff refund Apple gets will be reinvested into US manufacturing
Apple CEO Tim Cook made it clear, that the company will reinvest any tariff refund it gets into new U.S. manufacturing initiatives, further funding domestic production.Construction is ongoing - Image Credit: AppleIn almost an afterthought at the end of the earnings conference call, Cook made a big announcement. Beyond just going through the recently-announced motions and filing for that tariff refund, Apple has a plan.While there were no specifics, and nobody left to follow up the statement, Apple will invest what it gets back into US manufacturing. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Future Apple CEO John Ternus promises fiscal discipline, ‘incredible’ product pipeline
Incoming Apple CEO John Ternus promises he will be just as much of a profit-focused bean counter as his predecessor, current CEO Tim Cook. “As you know, one of the hallmarks of Tim’s tenure has been a deep thoughtfulness, deliberateness and discipline when it comes to the financial decision-making of the company,” Ternus said Thursday […] (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Apple is predicting up to a $110 billion fiscal third quarter 2026
There are no signs of Apple slowing down in Q3 2026, as it is likely to see even more year-over-year growth in spite of a tough comparison for iPad.iPhone 17 demand will help carry Apple through Q3Apple just had a record-breaking March quarter that brought in $111.2 billion in revenue. It seems that momentum won't be slowing going into Q3.Apple Chief Financial Officer Kevan Parekh shared forward-looking statements for Q3 2026 that estimate up to 14% to 17% growth year-over-year. That would mean growth from 2025's $94 billion up to $110 billion for 2026. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple's memory stockpile is holding for now, but price rises still loom
Apple's ability to prevent memory prices from increasing the cost of iPhones and other products won't last forever. Tim Cook has warned that it's only going to get harder to do so.A Samsung LPDDR5X memory chip - Image Credit: SamsungThe consumer tech industry is struggling to deal with the cost of memory, with supplies choked by the extreme demand of AI infrastructure build-outs. While Apple has managed to stop the cost impacting the price of its products so far, even it has its limits.Asked on the analyst conference call following its Q2 financial results release, incumbent CEO Tim Cook has revealed that pricing has affected the company's bottom line. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple shares June quarter guidance with 14% to 17% revenue growth outlook
Apple today provided its guidance for the June quarter of fiscal 2026, outlining expectations for revenue growth, margins, and key business trends amid the ongoing memory shortage. Here are the details. more…

Read more »

Apple says supply constraints for Mac mini and Mac Studio to persist for several months
On its quarterly earnings call today, Apple CEO Tim Cook addressed the ongoing supply shortages for Apple’s pro desktop Macs. Many configurations of Mac mini and Mac Studio are completely out of stock at Apple Stores online. Cook said customer interest in agentic AI use cases (like OpenClaw) is driving Mac mini and Mac Studio demand beyond what Apple predicted. Due to the ongoing industry constraints for advanced nodes and memory components, the company expects the supply shortages for these Macs to continue for the next several months. more…

Read more »

OpenAI may be teasing its next iPhone app launch with these clues
ChatGPT remains the top downloaded app on the App Store, and it sounds like OpenAI will launch a new iPhone app soon. more…

Read more »

John Ternus joins Apple’s Q2 2026 earnings call, touts ‘incredible roadmap ahead’
Apple’s Q2 2026 earnings call included a notable addition this time around, as incoming CEO John Ternus joined the discussion alongside current CEO Tim Cook and CFO Kevan Parekh. Here are the details. more…

Read more »

China demand hinges on good products that resonate with customers, Cook says
Apple had a record-breaking March quarter partially thanks to excellent performance in China, but there's more to the story than just basic demand.iPhone 17e helped drive demand in Q2The US government went through a period of upheaval in 2025 thanks to the new administration's aggressive, random, and now illegal tariffs. While not much has improved in that regard, the relationship between the US and China has improved somewhat in the intervening year.According to Apple CEO Tim Cook on CNBC, that improved relationship with China was a positive development, but not the drive. He claims it is that "the product has really resonated with the customer." Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Strong iPhone, Mac sales lead to Apple’s best-ever March quarter
Macworld If you thought Apple would show any signs of slowing down following its record-breaking Q1 results, you’d be mistaken. Apple on Thursday announced its Q2 earnings results, and they’re just as glittery as last quarter, with record revenue of $111.2 billion and strong showings for the iPhone and Mac. Every category of Apple product saw growth over the year-ago quarter, with the iPhone hitting nearly $57 billion in sales, a whopping 22 percent increase over last year. This quarter saw the launch of the iPhone 17e, but it’s likely the bulk of the revenue is from higher-priced iPhone 17 Pro models. Additionally, Apple hit another all-time Services high, with revenue of nearly $31 billion. Mac sales also grew from just under $8 billion last year to about $8.4 billion this year. Apple released the MacBook Neo in March and has faced supply constraints ever since its launch, so it likely does not play a significant role in this quarter. Outgoing CEO Tim Cook noted that Apple’s new laptop is “captivating customers all around the world.” Additionally, Apple’s iPad sales grew to $6.9 billion from $6.4 billion and its Wearables line pulled in $7.9 billion compared to $7.5 billion a year ago.  During its conference call with investors, Cook addressed the coming CEO turnover to John Ternus, saying there is “no one I trust more on this planet to lead Apple.” John Ternus spoke on the call as well, repeating the oft-heard phrase that Apple has an “incredible roadmap ahead” and that this is “the most exciting time in my 25 year career at Apple.”

Read more »

Record quarter leads to new $100B share buyback, increased dividend
Apple reported $111.2 billion in revenue for its fiscal second quarter on April 30, delivering growth, record March-quarter results, and a new $100 billion share buyback.Apple posts its latest earnings results"Today Apple is proud to report our best March quarter ever, with revenue of $111.2 billion and double-digit growth across every geographic segment," CEO Tim Cook said. "iPhone achieved a March quarter revenue record, fueled by such extraordinary demand for the iPhone 17 lineup."Results for the quarter ended March 28, 2026, beat expectations, with earnings per share of $2.01, up 22% year over year. The company posted growth across every geographic segment, with iPhone revenue setting a March-quarter record on demand for the iPhone 17 lineup, while Services reached a new all-time high. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple says iPhone 17 lineup is officially the ‘most popular’ in its history
Apple reported another record-breaking quarter of earnings today, and it came with a big announcement about the iPhone 17 lineup: it’s now the company’s most popular model family ever. more…

Read more »

Mac lineup is doing so well that Apple can't keep up with demand
Apple CEO Tim Cook is thrilled at how well the new Mac lineup is doing, but that isn't good news for anyone looking to score a Mac mini.Tim Cook suspects Mac mini supply constraints into fall 2026Apple's had a great quarter as far as Mac is concerned. And not just with returning Apple fans, but new to Mac users, too.On Thursday, ahead of the April quarterly earnings call, Cook told CNBC: Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple published a new Press Release
Apple just published a new Press Release:Apple reports second quarter results

Read more »

Booming iPhone sales fuel Apple’s latest record-breaking quarter
Apple revenue reaches a record high for the most-recent March quarter. The iPhone 17 contributed, plus there's growth all around the company. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Tim Cook says iPhone 17 demand is ‘off the charts’, but supply constraints impacted sales
Apple just announced its quarterly results, including $56.99 billion in iPhone revenue. This number is slightly below the average of analyst expectations heading into the earnings, but Tim Cook tells Reuters that Apple would have sold more if it had the supply. Cook said iPhone 17 demand “was off the charts”. He said supply of advanced processor nodes is constrained and “there’s just a little less flexibility in the supply chain at the moment” in terms of getting more parts available. more…

Read more »

Apple earnings crush Wall Street consensus again, Q2 record smashed
Apple has reported its financials for the second quarter of 2026, posting a second quarter record of $111.2 with gains almost across the board that exceed the expectations of Wall Street analysts.Current Apple CEO Tim Cook [left], CFO Kevan Parekh [right]The second quarter of Apple's financial calendar has ended, and is usually a fairly quiet affair following the blockbuster first-quarter figures. For 2026, Q2 has a fair bit of expected spice, due to the John Ternus announcement.In the quarter, Apple's revenue hit $111.2 billion, up from the $95.4 billion reported in the year-ago quarter. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

MacDailyNews presents live notes from Apple’s Q226 conference call
MacDailyNews presents live notes from Apple’s Q226 Conference Call with analysts starting at 2pm PDT / 5pm EDT today, April 30, 2026… The post appeared first on MacDailyNews.

Read more »

Apple reports Q2 2026 earnings: $111.2 billion in revenue, up 17% [Charts]
Apple just released its earnings report for the second fiscal quarter of 2026. The company reported $111.2 billion in revenue, $29.58 billion in net profit, and $2.01 in earnings per share. Here’s the full breakdown. more…

Read more »

Apple beats second quarter results with record quarterly revenue of $111.2 billion
Apple today announced financial results for its fiscal 2026 second quarter. The company posted revenue and earnings per share numbers… The post appeared first on MacDailyNews.

Read more »

iOS 27 to bring AI inside the Camera app, Tim Cook’s biggest mistake, iPhone shutdown problem 
Benjamin and Chance discuss whether bringing visual intelligence inside the Camera app is a good idea, as rumored for iOS 27 by Bloomberg. Also, Tim Cook shares his personal highs and lows across his career, Mayo’s iPhone refuses to turn on after running out of battery, and the App Store launches a new monthly payments subscription option. And in Happy Hour Plus, Chance kits out his whole house with HomeKit lights … so now here’s what we want next from Apple Home. Subscribe at 9to5mac.com/join. Sponsored by Square: Get up to $200 off Square hardware when you sign up at square.com/go/happyhour. Sponsored by Shopify: See less carts go abandoned and more sales. Sign up for a $1 per month trial at shopify.com/happyhour. Sponsored by Cash App: Download Cash App Today: https://click.cash.app/ui6m/i4d1b1x2 #CashAppPod more…

Read more »

Anti-DDoS Firm Heaped Attacks on Brazilian ISPs
A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks against other network operators in Brazil, KrebsOnSecurity has learned. The firm's chief executive says the malicious activity resulted from a security breach and was likely the work of a competitor trying to tarnish his company's public image.

Read more »

Vulnerability Summary for the Week of April 20, 2026
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info Thinkphp--ThinkPHP ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoking functions through the routing parameter. Attackers can craft requests to the index.php endpoint with malicious function parameters to execute system commands with application privileges. 2026-04-22 9.8 CVE-2018-25270 ExploitDB-45978Official Product HomepageProduct ReferenceVulnCheck Advisory: ThinkPHP 5.0.23 Remote Code Execution via invokefunction  Elba--ELBA5 ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and execute arbitrary commands with SYSTEM level permissions. Attackers can connect to the database using default connector credentials, decrypt the DBA password, and execute commands via the xp_cmdshell stored procedure or add backdoor users to the BEDIENER table. 2026-04-22 9.8 CVE-2018-25272 ExploitDB-45905Official Product HomepageVulnCheck Advisory: ELBA5 5.8.0 Remote Code Execution via Database Access  Lizardsystems--Terminal Services Manager Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious input file with shellcode and jump instructions that overwrite the SEH handler pointer to execute calc.exe or other payloads when imported through the add computers wizard. 2026-04-22 8.4 CVE-2018-25259 ExploitDB-46058Official Product HomepageVulnCheck Advisory: Terminal Services Manager 3.1 Buffer Overflow SEH  Magix--MAGIX Music Editor MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload, paste it into the Server field via the CD menu's FreeDB Proxy Options, and trigger code execution when settings are accepted. 2026-04-22 8.4 CVE-2018-25260 ExploitDB-46056Official Product HomepageProduct ReferenceVulnCheck Advisory: MAGIX Music Editor 3.1 Buffer Overflow via SEH  Iperiusbackup--Iperius Backup Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism that allows local attackers to execute arbitrary code by supplying a malicious file path. Attackers can create a backup job with a crafted payload in the external file location field that triggers a buffer overflow when the backup job executes, enabling code execution with application privileges. 2026-04-22 8.4 CVE-2018-25261 ExploitDB-46059Official Product HomepageVulnCheck Advisory: Iperius Backup 5.8.1 Local Buffer Overflow SEH  faleemi--Faleemi Desktop Software Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exception handler (SEH) overwrite. Attackers can craft a malicious payload and paste it into the Device alias field within the Managing Log interface to execute arbitrary code with calculator proof-of-concept execution. 2026-04-26 8.4 CVE-2018-25263 ExploitDB-45492Product ReferenceVulnCheck Advisory: Faleemi Desktop Software 1.8.2 Local Buffer Overflow SEH  Lizardsystems--LanSpy LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode, triggering code execution through SEH chain manipulation and controlled jumps. 2026-04-22 8.4 CVE-2018-25265 ExploitDB-46018Official Product HomepageVulnCheck Advisory: LanSpy 2.0.1.159 Local Buffer Overflow  Lizardsystems--LanSpy LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payload with 688 bytes of padding followed by 4 bytes of controlled data to crash the application or potentially achieve code execution. 2026-04-22 8.4 CVE-2018-25268 ExploitDB-45968Official Product HomepageVulnCheck Advisory: LanSpy 2.0.1.159 Local Buffer Overflow via Scan Field  Securimport--iSmartViewPro iSmartViewPro 1.5 contains a structured exception handling (SEH) buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to overwrite SEH records and execute shellcode with application privileges. 2026-04-26 8.4 CVE-2018-25283 ExploitDB-45349Product ReferenceVulnCheck Advisory: iSmartViewPro 1.5 Buffer Overflow via SavePath Parameter  Cewe-Photoworld--CEWE Photoshow CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data into the email address and password fields to trigger a denial of service condition. 2026-04-26 7.5 CVE-2018-25294 ExploitDB-45211Official Product HomepageProduct ReferenceVulnCheck Advisory: CEWE Photoshow 6.3.4 Buffer Overflow Denial of Service  Fortra--GoAnywhere MFT The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being guessed via Brute Force. 2026-04-21 7.3 CVE-2025-14362 https://fortra.com/security/advisories/product-security/FI-2026-002  Back to top Medium Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info Angryip--Angry IP Scanner for Linux Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the application by supplying malformed input to the port selection field. Attackers can craft a malicious string containing buffer overflow patterns and paste it into the Preferences Ports tab to trigger an application crash. 2026-04-22 6.2 CVE-2018-25262 ExploitDB-46038Official Product HomepageVulnCheck Advisory: Angry IP Scanner for Linux 3.5.3 Denial of Service  Acutesystems--TransMac TransMac 12.2 contains a buffer overflow vulnerability in the license key input field that allows local attackers to crash the application by submitting an oversized string. Attackers can generate a payload file containing 4000 bytes of data, paste it into the License Key field, and trigger a denial of service condition. 2026-04-26 6.2 CVE-2018-25264 ExploitDB-45493VulnCheck Advisory: TransMac 12.2 Denial of Service via License Key Field  Angryip--Angry IP Scanner Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to crash the application by supplying an excessively large string. Attackers can generate a file containing a massive buffer of repeated characters and paste it into the unavailable value field in the display preferences to trigger a denial of service. 2026-04-22 6.2 CVE-2018-25266 ExploitDB-45993Official Product HomepageVulnCheck Advisory: Angry IP Scanner 3.5.3 Denial of Service via Preferences Buffer Overflow  Ultraiso--UltraISO UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH and SE handler records. Attackers can craft a malicious filename string with 304 bytes of data followed by SEH record overwrite values and paste it into the Output FileName field to trigger a denial of service crash. 2026-04-22 6.2 CVE-2018-25267 ExploitDB-45996Official Product HomepageVulnCheck Advisory: UltraISO 9.7.1.3519 Buffer Overflow via Output FileName  icewarp--ICEWARP Client ICEWARP 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encoded payloads in object and embed tags. Attackers can craft emails containing data URIs with embedded scripts that execute in the client when the email is viewed, compromising user sessions and stealing sensitive information. 2026-04-22 6.1 CVE-2018-25269 ExploitDB-45974Official Product HomepageVulnCheck Advisory: ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection  Textpad--Textpad Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through the Run command interface. Attackers can paste a 5000-byte payload into the Command field via Tools > Run to trigger a buffer overflow that crashes the application. 2026-04-22 6.2 CVE-2018-25271 ExploitDB-45956Official Product HomepageProduct ReferenceVulnCheck Advisory: Textpad 8.1.2 Denial of Service via Run Command  Acutesystems--CrossFont CrossFont 7.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by submitting an oversized payload in the License Key field. Attackers can generate a malicious file containing 4000 bytes of data, paste it into the License Key input field, and trigger an application crash when processing the input. 2026-04-26 6.2 CVE-2018-25273 ExploitDB-45494VulnCheck Advisory: CrossFont 7.5 Denial of Service via License Key Field  infrarecorder--InfraRecorder InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an application crash. 2026-04-26 6.2 CVE-2018-25274 ExploitDB-45413VulnCheck Advisory: InfraRecorder 0.53 Denial of Service via txt File Import  faleemi--Faleemi Plus Faleemi Plus 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can paste a 2000-byte payload into the Camera name and DID number fields during camera addition to trigger an application crash. 2026-04-26 6.2 CVE-2018-25275 ExploitDB-45414Product ReferenceVulnCheck Advisory: Faleemi Plus 1.0.2 Denial of Service via Buffer Overflow  Br-Software--PixGPS PixGPS 1.1.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized string to the folder path input field. Attackers can craft a payload exceeding 6000 bytes and paste it into the 'Folder with picture files' field to trigger a denial of service condition. 2026-04-26 6.2 CVE-2018-25277 ExploitDB-45381Product ReferenceVulnCheck Advisory: PixGPS 1.1.8 Buffer Overflow Denial of Service  Picajet--PicaJet FX PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields via the Help menu's Register PicaJet dialog to trigger an application crash. 2026-04-26 6.2 CVE-2018-25278 ExploitDB-45383VulnCheck Advisory: PicaJet FX 2.6.5 Denial of Service via Registration Fields  Convertimagetotext--jiNa OCR Image to Text jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert the file to PDF. 2026-04-26 6.2 CVE-2018-25279 ExploitDB-45380Product ReferenceVulnCheck Advisory: jiNa OCR Image to Text 1.0 Denial of Service via PNG  ZenMap--ZenMap Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import functionality to cause the program to consume excessive system resources and crash. 2026-04-26 6.2 CVE-2018-25282 ExploitDB-45357Product ReferenceVulnCheck Advisory: Nmap 7.70 Denial of Service via XML Entity Expansion  Hdtune--HD Tune Pro HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the folder/file name field. Attackers can trigger a denial of service by entering a 6000-byte payload through the File > Options > Save dialog's folder/file name input field. 2026-04-26 6.2 CVE-2018-25284 ExploitDB-45298Official Product HomepageProduct ReferenceVulnCheck Advisory: HD Tune Pro 5.70 Denial of Service via Options Dialog  Hdtune--Easy PhotoResQ Easy PhotoResQ 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Folder/filename field. Attackers can input a 6000-byte payload through the File Options dialog to trigger a denial of service condition. 2026-04-26 6.2 CVE-2018-25286 ExploitDB-45300Official Product HomepageVulnCheck Advisory: Easy PhotoResQ 1.0 Buffer Overflow Denial of Service  Editorsoftware--StyleWriter StyleWriter 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a 6000-byte payload into the Pattern to Find or Advice Message fields in the Add Pattern dialog to trigger a denial of service condition. 2026-04-26 6.2 CVE-2018-25288 ExploitDB-45250Official Product HomepageProduct ReferenceVulnCheck Advisory: StyleWriter 1.0 Denial of Service via Pattern Input  Ezbsystems--Softdisk Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help menu's Enter Registration Code dialog to cause a denial of service. 2026-04-26 6.2 CVE-2018-25289 ExploitDB-45245Official Product HomepageProduct ReferenceVulnCheck Advisory: Softdisk 3.0.3 Buffer Overflow Denial of Service  Ezbsystems--Easyboot Easyboot 6.6.0 contains a buffer overflow vulnerability in the Replace Text function that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by accessing File > Tools > Replace Text and pasting a 7000-byte payload into the text fields to cause a denial of service. 2026-04-26 6.2 CVE-2018-25290 ExploitDB-45241Official Product HomepageVulnCheck Advisory: Easyboot 6.6.0 Buffer Overflow Denial of Service  Pj64-Emu--Project64 Project64 2.3.2 contains a buffer overflow vulnerability in the Plugin Directory settings field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 6000-byte payload into the Plugin Directory field through the Options > Settings > Directories interface to trigger an application crash when settings are reopened. 2026-04-26 6.2 CVE-2018-25291 ExploitDB-45229Official Product HomepageVulnCheck Advisory: Project64 2.3.2 Denial of Service via Plugin Directory  Bome--Restorator Bome Restorator 1793 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can create a malicious payload exceeding 4000 bytes and paste it into the Name input field to trigger an application crash and denial of service. 2026-04-26 6.2 CVE-2018-25292 ExploitDB-45223Official Product HomepageProduct ReferenceVulnCheck Advisory: Bome Restorator 1793 Denial of Service via Buffer Overflow  Mersenne--Prime95 Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an excessively long string in the optional proxy password field. Attackers can trigger a denial of service by entering a 6000-byte payload into the proxy password parameter, causing the application to crash when processing the connection settings. 2026-04-26 6.2 CVE-2018-25293 ExploitDB-45226Official Product HomepageProduct ReferenceVulnCheck Advisory: Prime95 29.4b7 Denial of Service via Proxy Password Field  P10--ObserverIP Scan Tool ObserverIP Scan Tool 1.4.0.1 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the IP input field. Attackers can paste a 2000-byte buffer of repeated characters into the IP field and trigger a search operation to cause an application crash. 2026-04-26 6.2 CVE-2018-25295 ExploitDB-45204Official Product HomepageProduct ReferenceVulnCheck Advisory: ObserverIP Scan Tool 1.4.0.1 Denial of Service via IP Field  Wansview--Wansview Wansview 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can inject 2000-byte payloads into the Camera name and DID number fields during camera addition to trigger application crashes. 2026-04-26 6.2 CVE-2018-25297 ExploitDB-45194VulnCheck Advisory: Wansview 1.0.2 Denial of Service via Buffer Overflow  94Cb--Carbon Forum Carbon Forum 5.9.0 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript code through the Forum Name field in dashboard settings. Attackers with admin privileges can store JavaScript payloads in the Forum Name field that execute in the browsers of all users visiting the forum, enabling session hijacking and data theft. 2026-04-22 6.4 CVE-2024-58344 ExploitDB-52043Official Product HomepageProduct ReferenceVulnCheck Advisory: Carbon Forum 5.9.0 Persistent XSS via Forum Name Field  GitLab--GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service under certain conditions by exhausting server resources by making crafted requests to a discussions endpoint. 2026-04-22 6.5 CVE-2025-0186 HackerOne Bug Bounty Report #2915694https://gitlab.com/gitlab-org/gitlab/-/work_items/511312https://about.gitlab.com/releases/2026/04/22/patch-release-gitlab-18-11-1-released/  GitLab--GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service by overwhelming system resources under certain conditions due to insufficient resource allocation limits in the GraphQL API. 2026-04-22 6.5 CVE-2025-3922 HackerOne Bug Bounty Report #3098035https://gitlab.com/gitlab-org/gitlab/-/work_items/537422https://about.gitlab.com/releases/2026/04/22/patch-release-gitlab-18-11-1-released/  Picajet--RoboImport RoboImport 1.2.0.72 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields and click Register to trigger an application crash. 2026-04-26 5.5 CVE-2018-25276 ExploitDB-45382Product ReferenceVulnCheck Advisory: RoboImport 1.2.0.72 Denial of Service via Registration Fields  Infiltration-Systems--Infiltrator Network Security Scanner Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a 6000-byte payload into the Scan Target field and trigger a denial of service condition when the Scan button is clicked. 2026-04-26 5.5 CVE-2018-25280 ExploitDB-45390Product ReferenceVulnCheck Advisory: Infiltrator Network Security Scanner 4.6 Denial of Service  Maxprog--iCash iCash 7.6.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload through the Connect to Server dialog. Attackers can paste a 7000-byte string into the Host field and click Connect to trigger an application crash. 2026-04-26 5.5 CVE-2018-25281 ExploitDB-45388VulnCheck Advisory: iCash 7.6.5 Denial of Service via Connect to Server  Fathom--Fathom Fathom 2.4 contains a buffer overflow vulnerability in the Authorization Code field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 6000-byte payload into the Authorization Code field and click Activate to trigger a denial of service condition. 2026-04-26 5.5 CVE-2018-25285 ExploitDB-45294Official Product HomepageProduct ReferenceVulnCheck Advisory: Fathom 2.4 Denial of Service via Authorization Code Buffer Overflow  Hdtune--Drive Power Manager Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition. 2026-04-26 5.5 CVE-2018-25287 ExploitDB-45299Official Product HomepageVulnCheck Advisory: Drive Power Manager 1.10 Denial of Service via Name Field  P10--Central Management Software P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 2000-byte payload into the password field and click login to trigger an application crash and denial of service. 2026-04-26 5.5 CVE-2018-25296 ExploitDB-45207Official Product HomepageVulnCheck Advisory: P10 Central Management Software 1.4.13 Denial of Service  Fortra--GoAnywhere MFT Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decryption of data. 2026-04-21 5.8 CVE-2025-1241 https://fortra.com/security/advisories/product-security/FI-2026-001  OpenSC--OpenSC Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs 2026-04-23 5.7 CVE-2025-13763 https://access.redhat.com/security/cve/CVE-2025-13763RHBZ#2417581https://github.com/OpenSC/OpenSC/security/advisories/GHSA-2v44-fq35-98vvhttps://github.com/OpenSC/OpenSC/wiki/CVE-2025-13763  HCLSoftware--BigFix Service Management (SM) HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access.  An attacker with access to the network traffic can sniff packets from the connection and uncover the data. 2026-04-21 5.3 CVE-2025-31981 https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127605  IBM--Security Verify Directory (Container) IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to malicious file upload by not validating file type. A privileged user could upload malicious files into the system that can be sent to victims for performing further attacks against the system. 2026-04-22 5.5 CVE-2025-36074 https://www.ibm.com/support/pages/node/7268907  hubspotdev--HubSpot All-In-One Marketing Forms, Popups, Live Chat The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.32 via the leadin/public/admin/class-adminconstants.php file. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract a list of all installed plugins and their versions which can be leveraged for reconnaissance and further attacks. 2026-04-24 4.3 CVE-2025-11762 https://www.wordfence.com/threat-intel/vulnerabilities/id/2a8c62e6-f459-433a-b0c4-c79285ea7fe9?source=cvehttps://research.cleantalk.org/CVE-2025-11762https://plugins.trac.wordpress.org/browser/leadin/tags/11.3.33/public/admin/class-adminconstants.php  Back to top Low Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info HCLSoftware--BigFix Service Management (SM) HCL BigFix Service Management is susceptible to HTTP Request Smuggling.  HTTP request smuggling vulnerabilities arise when websites route HTTP requests through web servers with inconsistent HTTP parsing. HTTP Smuggling exploits inconsistencies in request parsing between front-end and back-end servers, allowing attackers to bypass security controls and perform attacks like cache poisoning or request hijacking. 2026-04-21 3.7 CVE-2025-31958 https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124209  Back to top Severity Not Yet Assigned PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info NWCLARK--Storable Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow. 2026-04-21 not yet calculated CVE-2017-20230 https://github.com/Perl/perl5/issues/15831https://github.com/Perl/perl5/commit/a258c17c6937f79529c8319a829310e09cdbd216.patchhttps://metacpan.org/release/RURBAN/Storable-3.05/changeshttps://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242533.htmlhttps://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242703.html  Seeyon Internet Software--A8-V5 Collaborative Management Software Seeyon OA A8 contains an unauthenticated arbitrary file write vulnerability in the /seeyon/htmlofficeservlet endpoint that allows remote attackers to write arbitrary files to the web application root by sending specially crafted POST requests with custom base64-encoded payloads. Attackers can write JSP webshells to the web root and execute them through the web server to achieve arbitrary OS command execution with web server privileges. Exploitation evidence was first observed by the Shadowserver Foundation on 2021-03-26 (UTC). 2026-04-21 not yet calculated CVE-2019-25714 https://sourceforge.net/software/product/A8/https://web.archive.org/web/20190821034711/http://wyb0.com/posts/2019/seeyon-htmlofficeservlet-getshell/https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E8%87%B4%E8%BF%9Coa/%E8%87%B4%E8%BF%9C%20OA%20A8%20htmlofficeservlet%20getshell%20%E6%BC%8F%E6%B4%9E/https://static-aliyun-doc.oss-cn-hangzhou.aliyuncs.com/download/pdf/90916/Security_Notification_reseller_en-US.pdfhttps://www.broadcom.com/support/security-center/attacksignatures/detail?asid=31713https://www.fortiguard.com/encyclopedia/ips/48874/seeyon-office-anywhere-htmlofficeservlet-arbitrary-file-uploadhttps://www.vulncheck.com/advisories/seeyon-office-anywhere-oa-a8-unauthenticated-arbitrary-file-write-via-htmlofficeservlet  Unknown--Email Encoder The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). 2026-04-20 not yet calculated CVE-2024-7083 https://wpscan.com/vulnerability/7aeb6891-e159-4ed8-b1a9-a551140c9fcc/  Semantic MediaWiki--Semantic MediaWiki Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the '/index.php/Speciaal:GefacetteerdZoeken' endpoint parameter. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. 2026-04-21 not yet calculated CVE-2025-10354 https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-semantic-mediawiki  EfficientLab, LLC--Controlio EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected service runs as NT AUTHORITYSYSTEM. 2026-04-23 not yet calculated CVE-2025-10549 https://r.sec-consult.com/controliohttps://kb.controlio.net/hc/en-us/articles/45777908471185-Client-Update-April-15-2026-ver-1-3-95  Fudo Security--Fudo Enterprise Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain administrator-only resources via improperly protected API endpoints. This includes sensitive information such as system logs and parts of system configuration settings. This vulnerability has been fixed in version 5.6.3 2026-04-20 not yet calculated CVE-2025-13480 https://www.fudosecurity.com/product/enterprisehttps://cert.pl/en/posts/2026/04/CVE-2025-13480https://download.fudosecurity.com/documentation/fudo/5_6/rn/RN_5.6.3.pdf  Zervit--portable HTTP/Web server Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is caused by inadequate validation of user-supplied input. An attacker can exploit this vulnerability by sending malicious requests. If the vulnerability is successfully exploited, the application can be made to stop responding, resulting in a DoS condition. It is possible to manually restart the application. 2026-04-21 not yet calculated CVE-2025-13826 https://www.incibe.es/en/incibe-cert/notices/aviso/incorrect-input-validation-zervit-portable-httpweb-server  ATRODO--Net:Dropbear Net:Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net:Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437. 2026-04-21 not yet calculated CVE-2025-15638 https://www.cve.org/CVERecord?id=CVE-2016-6129https://www.cve.org/CVERecord?id=CVE-2018-12437https://metacpan.org/release/ATRODO/Net-Dropbear-0.14/source/dropbear/libtomcrypt/changes  PHP Point Of Sale--PHP Point Of Sale HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specific_customer', ussing 'start_date_formatted' y 'end_date_formatted' parameters. 2026-04-21 not yet calculated CVE-2025-41011 https://www.incibe.es/en/incibe-cert/notices/aviso/html-injection-php-point-sale-0  Zeon Global Tech--Zeon Academy Pro SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'. 2026-04-21 not yet calculated CVE-2025-41029 https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-zeon-academy-pro-zeon-global-tech  Back to top

Read more »

‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty
A 24-year-old British national and senior member of the cybercrime group "Scattered Spider" has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan admitted his role in a series of text-message phishing attacks in the summer of 2022 that allowed the group to hack into at least a dozen major technology companies and steal tens of millions of dollars worth of cryptocurrency from investors.

Read more »

Most secure browser for Mac in 2026
For most Mac users, your browser is where a lot of online life happens — reading emails, logging into accounts, using web apps, shopping, and banking. It’s also where a small mistake can lead to a bigger problem, whether that means downloading something that looked harmless or signing into a phishing page that seemed real […] The post appeared first on The Mac Security Blog.

Read more »

Patch Tuesday, April 2026 Edition
Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dubbed "BlueHammer." Separately, Google Chrome fixed its fourth zero-day of 2026, and an emergency update for Adobe Reader nixes an actively exploited flaw that can lead to remote code execution.

Read more »

Why more Mac attacks now rely on social engineering
Recent security findings suggest a change in how Mac users are being targeted. Instead of searching for technical gaps in software, attackers are finding ways to ask users to run commands themselves. This pattern shows up across different reports, from fake apps that look legitimate to scam pages that guide users into pasting commands into […] The post appeared first on The Mac Security Blog.

Read more »

The new Intego Antivirus is here — everything you need to know about Intego ONE
Intego ONE is Intego’s new all-in-one Mac security app, built to make protection easier to manage in one place. Instead of juggling separate tools, you get antivirus protection, firewall protection, SmartClean, and VPN in one Mac-focused app, depending on your plan. If you’ve used Intego products before, the shift is straightforward — fewer moving parts […] The post appeared first on The Mac Security Blog.

Read more »

Russia Hacked Routers to Steal Microsoft Office Tokens
Hackers linked to Russia's military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security experts warned today. The spying campaign allowed state-backed Russian hackers to quietly siphon authentication tokens from users on more than 18,000 networks without deploying any malicious software or code.

Read more »

The ultimate guide to Mac security
Macs have a strong security foundation. That’s true — and it’s worth appreciating. But “safer than” doesn’t mean “safe from.” Modern Mac threats don’t always look like the classic virus people imagine. A lot of today’s attacks rely on social engineering, fake installers, stolen credentials, and the simple reality that people download things, click prompts, […] The post appeared first on The Mac Security Blog.

Read more »

How to Choose the Right iPhone (2026): A Simple Guide
While the latest iPhone is the best and fastest model every year, you might not need its features. Apple sells several iPhone models; here's how to choose the right iPhone for your needs. The post appeared first on The Mac Security Blog.

Read more »

Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab
An elusive hacker who went by the handle "UNKN" and ran the early Russian ransomware groups GandCrab and REvil now has a name and a face. Authorities in Germany say 31-year-old Russian Daniil Maksimovich Shchukin headed both cybercrime gangs and helped carry out at least 130 acts of computer sabotage and extortion against victims across the country between 2019 and 2021.

Read more »

Compare MacBook Neo prices instantly across retailers with our easy price tracker—see deals, stock status, and savings at a glance.
Our exclusive MacBook Neo Price Tracker makes it incredibly easy to see exactly where to find the best deal—without wasting time jumping between retailer sites. Instead of digging through multiple tabs, everything is right there in one simple, clean table. You can instantly compare prices across Apple’s major retailers and see which store is offering the lowest price at any given moment. Even better, the tracker shows current sale prices side-by-side with Apple’s MSRP, so you know exactly how much you’re saving. One of the most useful features is the at-a-glance stock status. A quick glance tells you which retailers actually have the MacBook Neo available for delivery within a reasonable timeframe, helping you avoid the frustration of clicking through to an out-of-stock product page. And because deals change fast, the page is designed for speed and simplicity—prices are visible immediately above the fold, making it easy to check for updates anytime you visit.

Read more »

Best iPad Air Deals Right Now — Up to $100 Off M4 Models at Amazon
Amazon’s iPad Air discounts are strongest on the higher-storage models right now, with the 13-inch 1TB configuration showing the biggest savings at $100 off Apple’s MSRP. The 11-inch models are also seeing useful discounts, especially if you want a lighter tablet at a lower starting price. Check Amazon’s 11-inch iPad Air deals here. If you want the larger display, Amazon’s 13-inch iPad Air deals are where the biggest dollar savings show up, with several configurations priced well below Apple’s standard pricing. Shop Amazon’s 13-inch iPad Air deals here. For the latest sales and deals, see our iPad Air Price Tracker, updated daily.

Read more »

16″ M5 Pro MacBook Pro Deals Hit Amazon — Up to $200 Off Key Configs
Amazon is starting to roll out more meaningful discounts on Apple’s 16-inch M5 Pro MacBook Pro lineup, with select configurations now seeing price cuts of up to $200. The 24GB/1TB model is currently $150 off, while the higher-end 48GB/1TB version is seeing a full $200 discount—bringing both models below their usual pricing for the first time. These are the kinds of early deals that signal broader price movement across the lineup, especially for higher-memory configurations. You can check current deals here: 24GB/1TB model and 48GB/1TB model. For the latest sales and deals, see our 16" MacBook Pro Price Tracker, updated daily.

Read more »

16″ M5 Max MacBook Pros $200 off at B&H — Fast Free Shipping Included
B&H Photo is now offering $200 off Apple’s 16-inch M5 Max MacBook Pro lineup, bringing prices down across multiple high-end configurations. With Apple’s MSRP starting around $3899 for these models, that discount is one of the first meaningful price drops we’ve seen so far. What makes this deal stand out even more is B&H’s free 1–2 day shipping to most U.S. addresses, making it one of the fastest ways to get one without paying full price. You can check current configurations here at B&H Photo. For the latest sales and deals, see our 16" MacBook Pro Price Tracker, updated daily.

Read more »

Metro by T-Mobile Drops iPhone 17e to $349 — $250 Off with Port-In
Metro by T-Mobile is currently offering one of the more straightforward iPhone deals out there, knocking $250 off the iPhone 17e and bringing the price down to $349.99 with an instant discount at checkout. There’s no complicated bill credit structure here—you just need to bring your number, sign up for a qualifying plan, and pay your first month of service. Plans start at $55 for the first month and drop to $50 with AutoPay. You can check the deal here: Metro by T-Mobile. For the latest sales and deals, see our iPhone Price Tracker, updated daily.

Read more »

MacBook Neo Now Fully In Stock at Walmart — Easy Ordering & Pickup Available
MacBook Neo availability at Walmart has shifted in a big way—every configuration is now in stock and ready to order. Instead of scattered availability, buyers can now choose from the full lineup with confidence, whether ordering online for free shipping or selecting local store pickup where available. This makes Walmart one of the easiest places right now to actually get a MacBook Neo without worrying about inventory gaps. If you’ve been waiting for wider availability, this is a much smoother buying window. For the latest sales and deals, see our MacBook Neo Price Tracker, updated daily.

Read more »

AirPods Deals Compared: Amazon vs Walmart vs Apple Pricing Right Now
AirPods deals are lining up across Amazon and Walmart, and for once it’s easy to compare real savings across the lineup. The base AirPods 4 are down to about $99 (vs $129 MSRP), while AirPods Pro 3 models are holding around $199 compared to Apple’s $249 price. Walmart often matches or slightly undercuts Amazon—and adds the option for local pickup or fast shipping. You can check current deals here: AirPods at Amazon and AirPods at Walmart. For the latest sales and deals, see our AirPods Price Tracker, updated daily.

Read more »

14″ M5 Pro MacBook Pro Deals Expand — Amazon Discounts All Configurations
The 14-inch M5 Pro MacBook Pro lineup is finally starting to see broader discounts, and this time it’s not just one or two configurations. Amazon is now offering deals across all eight configurations, from base 16GB/512GB models to higher-end memory and storage options. These early discounts, ranging up to $237 off MSRP, are typically the first sign that pricing is beginning to shift away from launch levels. If you’ve been waiting for a deal on a 14″ M5 Pro, this is the first moment where the entire lineup becomes worth a closer look. View deals here at Amazon. For the latest sales and deals, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

MacBook Neo Stock Is Moving Fast at Walmart — Here’s What’s Still Available
MacBook Neo stock at Walmart is already splitting between easy-to-order models and sold-out configurations. Several versions are still available online with free shipping, and some also show local pickup options depending on your area, while others are already out of stock. You can check a few of the live Walmart listings here. If you’re flexible on color or storage, you still have options — but some of the most popular versions are clearly moving fast. For the latest sales and deals, see our MacBook Neo Price Tracker, updated daily.

Read more »

13″ M5 MacBook Air Deals Expand — Amazon & B&H Drop Prices Across the Lineup
The 13-inch M5 MacBook Air is starting to see real discounts, and this time it’s not just one configuration. Amazon and B&H are both offering $150 off multiple models, with prices dropping across the lineup. The 512GB model is now down to about $949, while higher-end configs are also seeing meaningful cuts. These are some of the best early deals we’ve seen on Apple’s latest ultra-portable. You can check current pricing at Amazon and B&H Photo. For the latest sales and deals, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Verizon iPhone 17 Deals: Full Breakdown on iPhone 17 Pro Max, 17 Pro, 17 Air, 17, and 17e
Verizon’s current iPhone 17 promotions cover the full lineup, from the flagship iPhone 17 Pro Max down to the entry-level iPhone 17e, and the offers are broad enough that shoppers really need to look beyond the headline pricing. Depending on the model, Verizon is currently promoting a mix of bill-credit discounts, trade-in savings, switcher incentives, free-phone offers, and bonus bundle offers tied to eligible Unlimited plans. On MacPrices’ iPhone tracker, Verizon’s currently advertised effective prices include the iPhone 17 Pro Max from $199, the iPhone 17 Pro from $99, the iPhone 17 Air from $0, the iPhone 17 from $0, and the iPhone 17e free with eligible service promotions. If you want to shop Verizon’s current offers directly, you can browse Verizon’s iPhone deals here. And for side-by-side comparisons with Apple and other carriers, along with the latest promo pricing updates, visit our iPhone Price Tracker, updated daily.

Read more »

Week’s Best Apple Deals: M5 MacBook Air Discounts, $200 Off MacBook Pro, Free iPhone 17e, and More
Apple deals stayed strong this week, with first-time discounts hitting the new M5 MacBook Air lineup, a clearance 14-inch M5 MacBook Pro dropping to $1399, the first real Studio Display sale, and fresh Apple Watch discounts across major retailers. Carrier buyers also have a standout option right now, with Metro by T-Mobile offering up to $300 off iPhone 17 models and a free iPhone 17e with a new line and number transfer. For the latest Apple sales and price changes, check MacPrices.net’s price trackers updated daily.

Read more »