A new PDF editor doesn’t charge by the month, just a one-time payment of $79.99
Macworld TL;DR: PDF Expert is a full PDF editor for Macs, and a lifetime license just went on sale for $79.99 (reg. $139.99). Working with PDFs on a Mac usually means settling for ad-riddled free apps or paying a heavy subscription for something like Acrobat. If you want a better option, PDF Expert is a PDF editor rapidly growing in popularity on the App Store because you only have to pay for it once. Right now, a lifetime license is on sale for $79.99 (reg. $139.99). Editing PDFs with PDF Expert is about as easy as editing a Word doc. You can change text to fix typos or update numbers, drop in images to refresh a logo or add a chart, and insert links straight into the document. Annotation tools let you highlight passages, add pop-up notes, and stamp documents for review. When files pile up, you can merge several PDFs into one, rearrange or delete pages, or split off the pages you need. You can convert files in both directions, either turning Word, Excel, PowerPoint, and image files into PDFs or switching them back. Onboard OCR recognizes text in scanned documents so you can search, copy, and highlight it, and the redaction tool blacks out confidential information before you send a file on. Mac users rate it highly, with a 4.6 out of 5 on the App Store. Get a lifetime subscription for PDF Expert on sale for $79.99. PDF Expert Premium Plan: Lifetime Subscription (Mac)See Deal StackSocial prices subject to change.

Read more »

Apple again extends free iPhone satellite access by one year
Apple is extending free satellite access again, giving eligible owners of older iPhones another year before any potential charges kick in. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

9to5Mac Daily: September 9, 2026 – iPhone 18 Pro and iPhone Duo are here
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by Stuff: Stuff helps you get everything out of your head and into a simple, elegant system—closing open loops and reducing mental stress. A simple to-do list for iPhone, iPad, and Mac, with powerful tools that make organizing, tracking, and checking off your tasks a whole lot more satisfying. Get Stuff done. Sponsored by iMazing: iMazing’s platform for data transfer and device management keeps getting better. Get 20% off iMazing with code 9TO5-SEP26-20OFF.  more…

Read more »

Apple Unfolds iPhone Duo at $1,999
Apple has joined the foldable phone race with the iPhone Duo, combining a compact design with a larger screen and software built to take advantage of it. The post appeared first on TechNewsWorld.

Read more »

UNIQ’s New iPhone 18 Pro Cases: Hands-Free Kickstands, Secure Grip, Sensitive Camera Control, and Reliable Drop Protection
Macworld Choosing the best case for iPhone 18 Pro without compromise UNIQ’s three cases are each suited to a different rhythm View Cases (function () { document.querySelector("#sticky-promo-block a").addEventListener("click", function(e) { const debug = document.location.host.search(/lndo.site|go-vip.net/) !== -1; const text = this.closest("#sticky-promo-block").querySelector("p.promo-title").textContent; const data = { event: "stickyConversionUnitClick", eventCategory: "Sticky Conversion", eventAction: "Click", eventLabel: text }; if(debug)console.log("Sticky Conversion CLick - pushing to dataLayer: ", data); dataLayer.push(data); return true; }); })(); A new iPhone deserves more than an afterthought accessory. With the iPhone 18 Pro series, Apple has once again raised the bar on design and capability—which means the case you choose shouldn’t hold it back. The right case should protect your investment without compromising how the phone looks, feels, or functions day to day. That’s the philosophy behind UNIQ’s new iPhone 18 collection. Rather than treating protection and design as competing priorities, UNIQ builds cases around how people actually use their phones—from the pocket to gripping, filming, video calling, and charging—so that functionality and style work together, not against each other. The result is three distinct cases, each suited to a different everyday rhythm: Swivix, Elix, and Keva Mōv. UNIQ Swivix: Precision Control, Built to Grip Swivix is for anyone who wants their phone to double as a mini workstation. Its standout feature is a 360° rotating kickstand paired with a durable metal grip, letting you angle your phone for video calls, content creation, or hands-free viewing with genuine stability—not the wobble you get from flimsier stands. The case also carries HapticCore™ technology over the Camera Control button, preserving the precise, high-sensitivity response Apple engineered into the button while keeping it fully protected. A raised camera lens plateau shields your lenses from scratches and desk contact, while reinforced AirLite™ corners absorb impact from everyday drops. MagSafe compatibility rounds it out, so wireless charging and magnetic accessories remain effortless. From video calls and content creation to catching up on a show, Swivix is built for people who use their iPhone for more than just staying connected. UNIQ Elix: Flexible Viewing, Refined Texture Elix takes flexibility further with a 180° flip and 360° kickstand combination, adapting fluidly to streaming, filming, navigation, or video calls at virtually any angle. It’s built for movement—for the person switching between tasks throughout the day without switching accessories. What sets Elix apart visually is its leather-textured silicone exterior, which resists dirt and scratches while giving the case a refined, tactile finish that doesn’t scream “case.” Like Swivix, it includes HapticCore™ protection for Camera Control and full MagSafe compatibility. Durability is proven, not assumed—Elix is drop-tested to withstand falls of up to 8 feet. For design-aware professionals and young creatives who want adaptability without sacrificing a polished look, Elix hits a confident middle ground between versatility, function, and form. UNIQ Keva Mōv: Lightweight, Secure, Built for the Long Fall Keva Mōv is the choice for those who want maximum confidence with minimum bulk. Constructed from lightweight synthetic fiber, its slim-fit design wraps precisely around the iPhone 18 for sleek protection that doesn’t add unnecessary weight to your pocket or bag. Its 360° swivel precision kickstand offers the same hands-free versatility as the rest of the collection, while a matte, textured back improves grip comfort and slides smoothly in and out of pockets—ideal for anyone constantly on the move. The HapticCore™ button once again preserves responsive camera control, and MagSafe compatibility keeps charging simple. What truly distinguishes Keva Mōv is its drop protection: tested to withstand falls of up to 13 feet, it’s built for the accidental drops that come with an active, on-the-go lifestyle. UNIQ Which iPhone 18 Pro Case Is Right for You? There’s no single best case—just the one that fits the way you use your phone. All three cases share UNIQ’s core commitment—protection, functionality, comfort, and design working in tandem, never at odds. Swivix suits those who prioritize grip and precision camera control. Elix offers refined flexibility for those who move between tasks and contexts throughout the day. Keva Mōv delivers lightweight, high-drop protection for the truly mobile. Across the collection, UNIQ keeps the essentials in balance: protection, functionality, comfort and design—working together, not against each other. Because protecting your iPhone shouldn’t mean compromising on how it looks—or how you use it. Find out more about UNIQ's cases for Apple new iPhone 18 Pro series

Read more »

Apple Watch Series 12 and Ultra 4 Add Health Sensing and Audio Intelligence
Apple’s new Apple Watch Series 12 and Ultra 4 pair redesigned health sensors with the S11 chip for denser heart-rate data, Readiness scores, and Audio Intelligence, while Ultra 4 gains substantially longer battery life and Series 12 brings back ceramic cases.

Read more »

iPhone Duo supports Apple Pencil with USB-C on both displays
Apple couldn't quite get Apple Pencil Pro to work with iPhone Duo, but Apple Pencil with USB-C pairs fine over a cable and brings its basic functions to iOS for the first time.Apple Pencil with USB-C works with iPhone DuoA rumor in late August suggested Apple tried and failed to include support for Apple Pencil on its upcoming foldable. The issue was apparently with where the Apple Pencil would need to mount for charging interrupting the ease of opening and closing the device.It would have been disappointing to get such a large display without Apple Pencil support, but Apple did find a way with iPhone Duo. The Apple Pencil with USB-C is compatible with iPhone Duo thanks to its ability to pair and charge over a cable. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Hands-on with the foldable iPhone Duo [Gallery]
Apple unveiled the highly anticipated iPhone Duo today, its first-ever foldable iPhone. I spent a quick few minutes with the device after it was announced, here’s what it looks like in the real world. more…

Read more »

Looks like iPhone Duo avoided the curse of the crease
The iPhone Duo apparently avoids the dreaded screen crease that plagues Android foldables. Plus other interesting folding iPhone details. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

iPhone Duo vs Samsung Galaxy Z Fold8 Ultra: Foldabes compared
Apple has finally entered the foldable market with the iPhone Duo, its first folding iPhone. Here's how it compares against Samsung's latest foldable, the Galaxy Z Fold8 Ultra.iPhone Duo [left] vs Samsung Galaxy Z Fold8 Ultra [right]After more than a decade of rumors, Apple's first foldable arrived at its fall event as the iPhone Duo. A hyper-premium smartphone that has dual displays and folds in half.It lands in a market Samsung has led for years, thanks to its Z Fold line. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple launches iPhone Duo developer resources ahead of October release
Following today’s announcement of the iPhone Duo, Apple has launched a new set of resources to help developers prepare their apps for the company’s first foldable iPhone. Here are the details. more…

Read more »

How iPhone Duo compares in size to the iPhone 18 Pro in the wild
Our very own videographer is inside Apple Park right now, and just had some time with the iPhone Duo and iPhone 18 Pro Max.AppleInsider using an actual iPhone Duo at Apple ParkIt can be hard to visualize the size of the iPhone Duo closed. Apple's keynote was great about feature demonstration, but less so about real-world size and hand-feel. Saying that it is the general size of a passport isn't quite enough on its own.I thought about that, and since the iPhone 18 Pro family is exactly the same size as the iPhone 17 Pro, this is an easy compare. So, I told Andrew O'Hara to take this shot for you. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

iPhone Duo users can be authenticated with Apple Watch if Touch ID isn't ideal
Face ID wasn't going to work on iPhone Duo, so Apple chose Touch ID instead. For those that don't like Touch ID, Apple Watch will authenticate them automatically.Apple chose a Touch ID sensor for iPhone Duo since Face ID would have proven difficultThe iPhone Duo is Apple's first foldable device, which means it can be used opened or closed. Apple couldn't find a way to make Face ID work in both use cases, so it offered Touch ID instead.The benefit of Touch ID on a foldable is that it can be authenticated no matter if the device is open or closed, or facing forward or backward. However, some users vastly prefer Face ID for the effortless authentication it can perform by simply looking at the device. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Price hikes hit iPhone 17 and more
The iPhone 17 price hike many had expected just arrived. Understand why it was unavoidable — not a cash grab by Apple. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Apple's New iPhone Camera Mode Promises to Prove Your Photo Isn't AI
Apple is introducing a new "Reference Image" mode on the iPhone 18 Pro and Pro Max that uses the camera sensor to digitally sign captured data and create an "unalterable" version of a photo, giving users a way to verify what the camera actually saw before any edits were made. The Verge reports: As AI-generated images and videos become more realistic, several new standards have emerged to label images not created by a human, such as SynthID, C2PA, and Meta's Content Seal. Apple is putting a twist on these methods by building authentication directly into its hardware. Apple is letting developers access a Reference Image API across iOS, iPadOS, and macOS, which could eventually allow users to inspect these digitally-signed photos in third-party apps. The company says the iPhone 18 Pro lineup won't come with its Reference Image feature at launch in the European Union, but says users in the region will still be able to "develop and view" them in iOS 27, iPadOS 27, and macOS 27. Read more of this story at Slashdot.

Read more »

Apple's New iPhone Camera Mode Promises to Prove Your Photo Isn't AI
Apple is introducing a new "Reference Image" mode on the iPhone 18 Pro and Pro Max that uses the camera sensor to digitally sign captured data and create an "unalterable" version of a photo, giving users a way to verify what the camera actually saw before any edits were made. The Verge reports: As AI-generated images and videos become more realistic, several new standards have emerged to label images not created by a human, such as SynthID, C2PA, and Meta's Content Seal. Apple is putting a twist on these methods by building authentication directly into its hardware. Apple is letting developers access a Reference Image API across iOS, iPadOS, and macOS, which could eventually allow users to inspect these digitally-signed photos in third-party apps. The company says the iPhone 18 Pro lineup won't come with its Reference Image feature at launch in the European Union, but says users in the region will still be able to "develop and view" them in iOS 27, iPadOS 27, and macOS 27. Read more of this story at Slashdot.

Read more »

Apple's New iPhone Camera Mode Promises to Prove Your Photo Isn't AI
Apple is introducing a new "Reference Image" mode on the iPhone 18 Pro and Pro Max that uses the camera sensor to digitally sign captured data and create an "unalterable" version of a photo, giving users a way to verify what the camera actually saw before any edits were made. The Verge reports: As AI-generated images and videos become more realistic, several new standards have emerged to label images not created by a human, such as SynthID, C2PA, and Meta's Content Seal. Apple is putting a twist on these methods by building authentication directly into its hardware. Apple is letting developers access a Reference Image API across iOS, iPadOS, and macOS, which could eventually allow users to inspect these digitally-signed photos in third-party apps. The company says the iPhone 18 Pro lineup won't come with its Reference Image feature at launch in the European Union, but says users in the region will still be able to "develop and view" them in iOS 27, iPadOS 27, and macOS 27. Read more of this story at Slashdot.

Read more »

Apple's New iPhone Camera Mode Promises to Prove Your Photo Isn't AI
Apple is introducing a new "Reference Image" mode on the iPhone 18 Pro and Pro Max that uses the camera sensor to digitally sign captured data and create an "unalterable" version of a photo, giving users a way to verify what the camera actually saw before any edits were made. The Verge reports: As AI-generated images and videos become more realistic, several new standards have emerged to label images not created by a human, such as SynthID, C2PA, and Meta's Content Seal. Apple is putting a twist on these methods by building authentication directly into its hardware. Apple is letting developers access a Reference Image API across iOS, iPadOS, and macOS, which could eventually allow users to inspect these digitally-signed photos in third-party apps. The company says the iPhone 18 Pro lineup won't come with its Reference Image feature at launch in the European Union, but says users in the region will still be able to "develop and view" them in iOS 27, iPadOS 27, and macOS 27. Read more of this story at Slashdot.

Read more »

Apple's New iPhone Camera Mode Promises to Prove Your Photo Isn't AI
Apple is introducing a new "Reference Image" mode on the iPhone 18 Pro and Pro Max that uses the camera sensor to digitally sign captured data and create an "unalterable" version of a photo, giving users a way to verify what the camera actually saw before any edits were made. The Verge reports: As AI-generated images and videos become more realistic, several new standards have emerged to label images not created by a human, such as SynthID, C2PA, and Meta's Content Seal. Apple is putting a twist on these methods by building authentication directly into its hardware. Apple is letting developers access a Reference Image API across iOS, iPadOS, and macOS, which could eventually allow users to inspect these digitally-signed photos in third-party apps. The company says the iPhone 18 Pro lineup won't come with its Reference Image feature at launch in the European Union, but says users in the region will still be able to "develop and view" them in iOS 27, iPadOS 27, and macOS 27. Read more of this story at Slashdot.

Read more »

Apple’s new iPhone 18 Pro colors are here
Macworld Update September 9: Apple has unveiled the iPhone 18 Pro in four colors: Silver, Black, Glacier, and Burgundy. It’s iPhone leaks season again. On September 9, Apple is expected to unveil three new phones: the iPhone 18 Pro and 18 Pro Max, and a new foldable iPhone rumored to be called the iPhone Ultra. But as always, one of the most important questions for buyers will be: What colors will Apple release this time? Like last year, Macworld has received information from a source familiar with Apple’s supply chain regarding the color options for the iPhone 18 lineup. We can now reveal an inside look at the colors Apple is planning to release in September, along with our own renders to show what to expect. Dark Cherry is the hot new hue Every year, Apple introduces a new signature color for the iPhone Pro models. With the iPhone 17 Pro, the color that stood out the most was the vibrant Cosmic Orange. What about this year’s models? While other sources have previously reported on a “Dark Red” color, the information we’ve heard suggests that Apple has been working on a Dark Cherry option (which we now know is called Burgundy) to serve as the headline new color for the iPhone 18 Pro and iPhone 18 Pro Max. Previously, Bloomberg’s Mark Gurman and other leakers had suggested that Apple has been experimenting with a shade of red for this year’s phones, but we can reveal the hue will be much closer to wine than fruit punch. While Dark Cherry color won’t be as bright and striking as Cosmic Orange in person, it will still be unique enough to distinguish it as the new iPhone 18 Pro. As always, Apple is expected to discontinue the current lineup of colors, including Cosmic Orange. The iPhone 18 Pro could come in three all-new colors.Foundry Apple has also been reportedly experimenting with two other new color options for this year’s Pro lineup. One of them is Light Blue (which Apple calls Glacier), which would resemble the current Mist Blue color of the base iPhone 17. The other color in development is a dark shade of gray. Finally, our source also reports on the existence of a silver variant of the iPhone 18 Pro, similar to the current generation. Once again, our source notes that the colors are all in development, but since the iPhone 18 Pro hasn’t gone into mass production yet, Apple still has time to change them. Also, bear in mind that Apple doesn’t always offer four color options for the Pro models, so one of these hues could be dropped. Last year, both Macworld and the reliable leaker Sonny Dickson reported that Apple had also considered launching the iPhone 17 Pro in black or steel gray. However, those color options never saw the light of day.  Here are the Pantone color codes our says are being used internally by Apple: Light Blue (Pantone 2121) Dark Cherry (Pantone 6076) Dark Gray (Pantone 426C) Silver (Pantone 427C) We used these codes to generate the image above. Of course, colors may look a bit different in real life due to the material and lighting conditions. Since this report was published, we’ve seen real-world evidence of these colors, specifically the Dark Cherry hue, so we’re confident it will be among the options when the phone arrives in September. A very familiar design with minor changes Macworld’s sources also had access to the CAD drawings of the new iPhones. These documents support the rumors that the iPhone 18 Pro and iPhone 18 Pro Max will look very similar to their predecessors, with only minor changes. Most notably, the renders show a smaller Dynamic Island on the screen, which has been rumored to be one of the changes for this year’s models. This means the display will have more screen space for content when the Dynamic Island isn’t showing Live Activities. The Dynamic Island could be smaller on the iPhone 18 Pro.Foundry Another interesting change noted by our source is that, in one of the renders, the gap between the glass cutout on the back and the camera bump is a bit smaller. Our source was unable to verify whether this is an old render, or if Apple is moving forward with a design change. Last year, a Weibo leaker known as Instant Digital reported that Apple would adopt a new process to minimize the color difference between the glass and the aluminum frame, so perhaps that change also involves reducing the gap between the glass and the camera bump at some point. More neutral colors for the foldable iPhone We’ve also received details about the color options for the rumored foldable iPhone. The device, which will reportedly look like an iPad mini when unfolded, won’t come in fun colors like the base iPhone and may have even fewer options than the iPhone Pro. For the foldable iPhone, Apple has been working on a classic silver and white model, as well as an Indigo option similar to the iPhone 17 Pro’s Deep Blue. The iPhone Fold will reportedly come in a dark Indigo option.Foundry The source also corroborates leaked CADs and renders showing the potential design of the foldable iPhone, which is expected to feature two rear cameras, a selfie camera on the outer display, and another selfie camera in the upper-left corner of the inner display. The schematics seen by our source reveal that the foldable iPhone will be just 4.7 millimeters thick when unfolded, making it significantly thinner than the 5.6mm iPhone Air. The iPhone 18 Pro, 18 Pro Max, and the foldable iPhone are all expected to launch in September, while our sources also report that the foldable model will hit stores at a later date. The base model of the iPhone 18, the iPhone 18e, and a new Air have been rumored to arrive in the first half of 2027, which has also been confirmed by our source.

Read more »

Apple updates Design Resources with iPhone Duo and iPhone 18 Pro product bezels
Following today’s “Surprise and Shine” event, Apple has now updated its official Design Resources portal with new product bezels for the iPhone Duo and iPhone 18 Pro. Here are the details. more…

Read more »

Hands-on with Siri Modular, watchOS 27’s new Apple Watch face
watchOS 27 includes one new watch face: Siri Modular. The new face is available on both Apple Watch Series and Ultra models. However, the version on Ultra has a few more customization options. Check it out. more…

Read more »

Apple Upgrade won't make maxed out iPhone 18 Pro or iPhone Duo easier to swallow
The iPhone lineup is more expensive than ever, especially when choosing the 2TB option in either iPhone 18 Pro Max or iPhone Duo. Payment plans help, but an iPhone for Mac Studio money hurts.Apple's iPhone lineup keeps getting more expensiveThe 2026 iPhone lineup is not only more expensive, but Apple's financing options have changed too. Apple managed to keep the base models with 256GB of storage reasonable, the higher storage tiers are sky-high to supplement that.The iPhone 18 Pro starts out at $1,199 and the iPhone 18 Pro Max starts out at $1,299. Apple's foldable iPhone Duo starts at $1,999 for the same 256GB of storage. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple shares more details about Apple Intelligence usage limits and terms
Apple today published a new support article that provides more detail on Apple Intelligence usage terms, limits, and restrictions. Here’s what the company says. more…

Read more »

New Apple Watch bands lean into a more subdued color palette
Apple's latest Apple Watch band refresh favors burgundy, olive, and other muted shades, with options available across nearly its entire lineup.Apple has refreshed its Apple Watch band lineupOn Wednesday, Apple announced the all-new Apple Watch Series 12 and Apple Watch Ultra 4. As we'd anticipated, Apple also released a smorgasbord of new Apple Watch bands.Most of these bands are also compatible with previous Apple Watch generations, so you can pick up a new band even if you're not upgrading your Apple Watch yet. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

iPhone 18 Pro Max vs iPhone 18 Pro: Two exclusive features
Today Apple introduced iPhone 18 Pro and Pro Max, its latest flagship models. While each Pro model is largely identical, there are two exclusive new advantages—one for each model. more…

Read more »

Download the new iPhone 18 Pro wallpapers here
If you like the new wallpapers Apple created for the iPhone 18 Pro and iPhone 18 Pro Max, you don’t need to buy a new iPhone to get them. You can download them right here. more…

Read more »

Apple Watch Series 12 and Ultra 4 delivered 7 actual surprises
Macworld At the Surprise and Shine press event today, Apple announced a raft of new products including the iPhone 18 Pro, AirPods 5, and iPhone Duo… and thanks to pre-launch rumors, surprises were in short supply. Nearly everything was leaked accurately ahead of time. But one product that did manage to spring a few small surprises was the Apple Watch Series 12. Ahead of launch, we were led to expect a tedious iterative update with a new processor, identical design, and maybe a few new health features. Some of that was true, but there were unexpected pleasures as well. Here are the 7 things we like best about the new Apple Watch Series 12 and its Apple Watch Ultra 4 sibling, which launched at the same time. 1. Stunning new materials Granted, the design hasn’t changed in any fundamental way this year. (As I said on the live blog, the average member of the public would probably struggle to spot the difference between the Series 12 and the Series 4.) The leakers were right about that. But cosmetics matter too, and in that department Apple has done outstanding work with its watches this year. Firstly, Apple has refreshed the color finishes. On the aluminum models, Silver and Rose Gold are gone, replaced by Light Gold (nice) and Dark Bronze (my favorite Apple Watch color so far). On the titanium side, Gold has been replaced by Radiant Gold, a definite improvement. But the real aesthetic killer is the return of ceramic as a chassis material. The ceramic version of Series 12 comes in Night Blue and Pearl White, and they’re both gorgeous. You may think us shallow, but we’re pumped for the look of this year’s new watches. And watches, after all, are at least partly fashion items, so it’s okay to care about things like that. The stunning ceramic color options for the Apple Watch Series 12.Apple 2. Tougher screens The Series 11 had a tough screen… if you went for the more expensive titanium version. But as of the launch of the Series 12, Ceramic Shield 2 is on the aluminum models too, bringing (Apple claims) a 60 percent jump in durability compared to the mere Ion-X protective tech on the baseline Series 11. This brings an important feature within reach of less wealthy customers. 3. More accurate, all-day heart-rate sensing This is one improvement we did know about ahead of the launch. What was surprising was the extent of Apple’s claims for the new devices. The Apple Watch Series 12, according to Apple’s internal testing, has “the most accurate heart rate sensing in a wearable.” And that’s all down to a new sensor setup, combined with the powerful S11 processor. The redesigned (sorry, “re-architected”) sensors ensure better skin contact during ECG readings, Apple says. There are redesigned photodiodes and larger, power-efficient green LEDs. All of this enables the Series 12 and Ultra 4 to measure your heart rate every five seconds, all day long, to a high degree of accuracy, helping the device to produce better insights about fitness, stress, and overall health. We’re excited about the updated heart-rate sensor. And also that bronze finish.Apple 4. Health software that’s sophisticated but simple Apple spent a lot of the presentation talking about software features, which is odd for a hardware event. One would imagine that most of these are part of watchOS 27, which was demoed and released in beta as long ago as June. Are the new features available on existing watches, provided they can run watchOS 27? Apple didn’t rush to make that clear in the keynote or its website, and it’s not hard to see why. Much better for customers to associate the features with the new hardware and pay for an upgrade. But I digress. What was exciting about the keynote was seeing how much work Apple has done to improve and expand the health software on the Apple Watch. For example, there’s an entirely new app called Readiness, which “analyzes a user’s recent activity, training load, vitals, and sleep score to offer insight into their capacity for the day ahead.” What’s really nice is that it translates this complex analysis into a simple score out of 10 and a clear recommendation. What may capture more users’ imagination is the new Longevity tab in Health, which includes Health Age: again, a simple way of communicating a complex set of factors. The Heart Rate app, meanwhile, gets a new section for tracking HRV, “a key indicator of stress and recovery,” which was already tracked but is measured much more often on the new watches. This is typical of the expanded array of health data analysis you can enjoy on the Series 12 and Ultra 4. And, possibly, your existing watch. 5. Cool AI audio features Again, Apple didn’t go so far as to specify that the new AI/audio features grouped under the umbrella term Audio Intelligence are only for the Series 12 and Ultra 4. But it strongly implied and later confirmed that they’re made possible by the power of the S11 processor (described as Apple’s “most powerful wearable chip yet”). What is clear is that these features have the potential to be very exciting. Sound Recognition alerts deaf and hard-of-hearing users about important sounds such as alarms and babies crying. Live Rewind, accessed via a double-press of the Digital Crown, displays the last 15 seconds of a conversation as text on your watch screen–perfect when you miss something important. And Siri Recap creates summaries of conversations. That last one is maybe a bit creepy (though it’s all private and stored on the device), but it’s still an impressive concept. The new Siri Modular face could become a favorite thanks to the Apple Watch Series 12’s new AI features.Apple 6. Longer battery life Here’s an area where we weren’t expecting anything after last year’s unprecedented battery breakthrough. And sure enough, the baseline estimated battery life of the standard model remains at 24 hours. But the fact that battery life for outdoor workouts has gone up by 25 percent, now estimated at 10 hours, is a nice and unexpected bonus. And now look at the Ultra 4. Last year, estimated general battery life went up from 36 hours to 42 hours. But this year it gets an even bigger increase, from 42 to 50 hours. There’s a new Extended Workout mode promising up to 25 hours of usage, even when tracking workouts with full GPS and heart rate readings. And for extreme situations, there’s Max Extended Workout mode, which can track outdoor runs and walks for up to 45 hours. All that, and charging for both models is faster too. What a nice surprise. 7. No starting price hike Arguably the biggest and nicest surprise of all: the starting price for the Series 12 and Ultra 4 are exactly the same as for the Series 11 and Ultra 3: $399 and $799. With RAM prices being the way they are, this was not something we saw coming. And the ceramic models, which previously started at over $1,249, now cost a much more palatable $899. It’s not all good news in this area: certain upgraded models, such as the 46mm version of the Series 12, have gone up, albeit by small margins. But having the same baseline entry point is a major surprise.

Read more »

AirPods 5 mean it’s time to replace your old ones
The many features of AirPods 5 are an opportunity to take a look at your old wireless earbuds. They could probably use an upgrade. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

iPhone Duo: Here are all the little details you might have missed
iPhone Duo is the name of Apple’s new foldable model, and it’s perhaps the most fascinating new model since the original iPhone. Here are all the little iPhone Duo details you might have missed. more…

Read more »

Syncing with iCloud paused? What it means and how to fix it
Seeing “Syncing with iCloud paused” can be worrying, especially when your messages, photos, or files stop updating across your Apple devices. Fortunately, this message usually means iCloud has temporarily stopped syncing. It doesn’t normally mean your existing data has disappeared or someone has accessed your Apple Account. The right fix depends on which service has […] The post first appeared on The Mac Security Blog.

Read more »

How to allow pop-ups on a Mac in Safari, Chrome, and Firefox
A blocked pop-up can make a website seem broken. A sign-in page might not appear, a payment window could fail to open, or a form, document viewer, or live chat may stop working. Your browser could be blocking the new window in the background, even when the website itself is legitimate. This guide shows you […] The post first appeared on The Mac Security Blog.

Read more »

Microsoft Plugs Nearly 1,000 Security Holes
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that many organizations already are struggling to prioritize the more human-intensive endeavor of testing and deploying so many fixes each month.

Read more »

Vulnerability Summary for the Week of August 31, 2026
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1Hive--gardens-v2 Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In 3e595f3 and prior, when a streaming proposal is funded, the cluster of streaming contracts moves real pool funds into the proposal's StreamingEscrow to back the Superfluid constant flow agreement (the CFA deposit, plus a 0.5 percent margin). cancelProposal then zeroes the escrow's GDA member units but never reclaims that parked balance, and the permissionless claim() forwards the escrow's entire balance, including the pool funded buffer, to the beneficiary. The beneficiary is chosen by the proposal submitter and defaults to the submitter. The only path that returns escrow funds to the pool is drainToStrategy, which is onlyStrategy and is reached solely from the dispute reject ruling, never from cancel or natural completion. At time of publication, there are no publicly known patches. 2026-09-03 7.7 CVE-2026-55658 : Shane Bishop--EWWW Image Optimizer Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer = 9.1.0 and before 9.3.4 decide whether to run path-scoped middleware by matching against the raw request target, while the Fastify router resolves an absolute-form request target to its path before dispatching. Because the two layers evaluate different strings, a request using an absolute-form target reaches the route handler while the path-scoped middleware, such as authentication or authorization, is skipped. An unauthenticated network attacker can use this to bypass path-based access controls in a Fastify application that relies on middie for those controls. Users should upgrade to @fastify/middie 9.3.4 or later. 2026-09-04 9.1 CVE-2026-85184 aaif-goose--goose goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry configurations. 2026-09-04 8.8 CVE-2026-85623 Acato--Email Essentials Unauthenticated Cross Site Scripting (XSS) in Email Essentials = 5.0.0-RC1 and < 5.10.11 contain a missing authorization vulnerability in AssetsController::actionReplaceFile. When a request supplies sourceAssetId and targetFilename but omits assetId, the target asset is resolved by folder and filename after the permission checks execute, so the replacePeerFiles permission is never enforced. An authenticated low-privilege author with only the replaceFiles permission on a shared folder can overwrite the content of a peer's asset file (located in the same folder) with attacker-controlled bytes. Fixed in 5.10.11. 2026-09-02 7.1 CVE-2026-84800 crcn--sift.js sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation compiles a string value into a function using new Function unless CSP_ENABLED is set (not set by default). As a result, if a prototype-pollution primitive elsewhere in the process sets Object.prototype.$where to a malicious string, even benign filter calls such as sift({}) execute arbitrary JavaScript. Additionally, passing an untrusted query object containing a string $where directly to sift results in code execution under the default configuration. 2026-09-04 8.1 CVE-2026-85625 crmeb--CRMEB CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that returns true from both conditional branches. Sub-administrators and accounts with no roles can access restricted admin endpoints by exploiting the inert role check that always permits requests. 2026-09-03 8.3 CVE-2026-85212 crystaldba--postgres-mcp Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pg_read_file through FROM-clause syntax to read arbitrary files despite restricted-mode protections. 2026-09-04 8.6 CVE-2026-85620 cu--silicon A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function create_app of the file views.py of the component edit Endpoint. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. 2026-08-31 7.3 CVE-2026-82919 Cua computer-server--Cua computer-server   Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated attackers to execute arbitrary commands. Attackers can reach TCP port 8000 to run shell commands via the run_command endpoint, read and write arbitrary files through file operation endpoints, and access interactive PTY shells without authentication. 2026-09-05 9.8 CVE-2026-86121 cyanheads--git-mcp-server git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools that lack leading-dash validation. Attackers can inject git command-line options like --output= to write files outside the repository to arbitrary paths accessible by the process. 2026-09-04 7.5 CVE-2026-85626 cypht-org--cypht Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the back_query GET parameter of the logout handler. Attackers can pass a base64-encoded serialized payload through this parameter, which is decoded and passed directly to unserialize() without an allow-list, signature check, or type restriction, enabling gadget-chain exploitation to achieve remote code execution as the web server process. 2026-09-01 8.8 CVE-2026-71981 D-Link--DIR-825M A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. 2026-08-31 9.9 CVE-2026-82593 D-Link--DIR-825M A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub_456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. 2026-08-31 7.4 CVE-2026-82595 D-Link--DNS-320 ShareCenter A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file_sharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. 2026-09-03 9.1 CVE-2026-85224 D-Link--DNS-320L A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can be executed remotely. The exploit is now public and may be used. 2026-08-31 9.9 CVE-2026-82689 D-Link--DNS-320L A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usb_device.cgi of the component CGI Handler. Such manipulation of the argument f_ups_ip leads to os command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. 2026-08-31 9.1 CVE-2026-82691 D-Link--DNS-327L A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve_mgr.cgi. This manipulation of the argument f_dev causes os command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. 2026-08-31 9.1 CVE-2026-82690 D-Link--DNS-340L A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtual_vol.cgi of the component Virtual Volume Handler. The manipulation of the argument f_sharename/f_target/f_name leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. 2026-08-31 9.1 CVE-2026-82688 D-Link--DNS-340L A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsi_mgr.cgi. Performing a manipulation of the argument alias/username/password/volume_location results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. 2026-08-31 9.9 CVE-2026-82692 D-Link--DNS-340L A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addon_center.cgi of the component Add-On Center. Such manipulation of the argument f_name/f_url/f_flag/f_login_user leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2026-09-03 9.1 CVE-2026-85222 D-Link--DNS-340L A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Performing a manipulation of the argument callback_url/sync_interval results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used. 2026-09-03 9.9 CVE-2026-85223 D-Link--DSM-G600 A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /load_file.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. 2026-08-31 8.8 CVE-2026-82680 datalab-to--marker marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can supply filenames containing directory traversal sequences to write arbitrary files to any location or delete existing files on the system. 2026-09-04 9.1 CVE-2026-85684 datalab-to--surya surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /process routes that accept raw file_path parameters. Attackers can read any image or PDF file on the host by supplying arbitrary file paths to Image.open or pypdfium2.PdfDocument, obtaining rendered contents as base64 and using /info as an existence oracle. 2026-09-04 7.5 CVE-2026-85687 dbgate--dbgate DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbitrary files via file:// scheme resolution. Attackers can exploit getJslFileName() to bypass directory containment and access sensitive files including encrypted database credentials stored in connections configuration. 2026-09-03 8.8 CVE-2026-85176 Delinea--Secret Server (On-Prem) Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only. 2026-09-02 9.8 CVE-2026-19117 Dell--PowerProtect Data Manager Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure. 2026-09-03 7.8 CVE-2026-73600 Dell--PowerStore 500T Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array. 2026-08-31 9.8 CVE-2026-58574 Dell--PowerStore 500T Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access. 2026-09-01 9 CVE-2026-79687 Dell--PowerStore 500T Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. 2026-09-01 8.8 CVE-2026-58566 Dell--PowerStore 500T Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges. 2026-09-01 8.8 CVE-2026-58567 Dell--PowerStore 500T Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.. 2026-09-01 8.8 CVE-2026-58569 Dell--PowerStore 500T Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges. 2026-09-01 8.8 CVE-2026-58571 Dell--PowerStore 500T Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges. 2026-09-01 8.8 CVE-2026-58572 Dell--PowerStore 500T Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator. 2026-09-01 8.8 CVE-2026-58575 Dell--PowerStore 500T Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation. 2026-09-01 8.8 CVE-2026-76111 Dell--PowerStore 500T Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges. 2026-09-01 8.8 CVE-2026-79682 Dell--PowerStore 500T Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker-controlled content to arbitrary filesystem paths. 2026-09-01 8.8 CVE-2026-79683 Dell--PowerStore 500T Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges. 2026-09-01 8.8 CVE-2026-79684 Dell--PowerStore 500T Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges. 2026-09-01 8.8 CVE-2026-79686 Developer Tools--Developer Tools The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component 2026-09-02 9.8 CVE-2025-9314 devitemsllc--Support Genix Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System The Support Genix - Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the `guest_ticket_login()` function and its `p` parameter. This is due to the site-wide AES-256-CBC encryption key being derived from only three two-digit `wp_rand(10, 99)` values and a Unix timestamp via `md5()` - yielding approximately 19.5 bits of entropy - combined with a deterministic IV derived from the password, no authentication tag on the ciphertext, and no capability check, nonce, or session validation on the publicly reachable `/sgnix/?p=` endpoint. This makes it possible for authenticated attackers, with subscriber-level access and above, who can obtain a single legitimate guest ticket token as a known-plaintext oracle and bound the plugin activation timestamp, to exhaust the ~729,000-candidate keyspace entirely offline, recover the site-wide encryption key, and forge a self-consistent `{ticket_id, ticket_user}` token targeting any administrator-owned ticket. Submitting the forged token to the unprotected endpoint causes `wp_set_auth_cookie()` to be called for that administrator, granting the attacker full administrative access to the WordPress site. 2026-09-01 8.8 CVE-2026-19806 devtron-labs--devtron Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowing authenticated users to retrieve admin API tokens. Attackers with any authenticated account can query the endpoint with arbitrary project, environment, and application parameters to retrieve plaintext super-admin JWT tokens for full platform control. 2026-08-31 8.8 CVE-2026-82882 dianping--cat CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access. 2026-09-03 9.8 CVE-2026-85181 digitalbazaar--forge node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an incomplete fix for CVE-2026-33894. 2026-09-03 7.5 CVE-2026-85393 Divi Engine--Divi Ajax Filter The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_loop_template' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. This vulnerability is only exploitable when the loop_templates parameter is set to 'custom-template'. 2026-09-04 9.8 CVE-2026-11613 DocsGPT--DocsGPT In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define prompt content used during chatbot interactions. This functionality renders user-supplied prompt data using Jinja templates without input sanitization or sandboxing. An unauthenticated attacker can inject malicious template expressions, leading to a server-side template injection (SSTI) vulnerability that can be exploited to achieve full remote code execution (RCE). 2026-09-04 9.8 CVE-2026-31020 Dokploy--Dokploy A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the file packages/server/src/utils/traefik/application.ts of the component Settings. The manipulation of the argument path results in path traversal. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2026-08-31 9.9 CVE-2026-82954 domainaware--parsedmarc parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incoming DMARC report emails without user interaction, an unauthenticated remote attacker can send a crafted email with a highly compressed attachment to the monitored mailbox, causing the parsedmarc process to allocate memory proportional to the uncompressed size and exhaust available RAM. 2026-09-03 7.5 CVE-2026-82520 Dotstore--WooCommerce Product Attachment Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for that handler. The internal not-found router for encapsulated handlers dispatches malformed paths through a single shared handler pointer before URL decoding, ignoring the prefix and skipping the selected handler's normal lifecycle. An unauthenticated attacker can therefore reach an authentication-protected private fallback through an unrelated public prefix and read its full response, bypassing the authentication hook and breaking prefix encapsulation. Users should upgrade to fastify 5.12.2 or later. 2026-09-04 7.5 CVE-2026-76169 fastify--fastify fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema before compiling it, but the transformation is incomplete: it lowercases the properties keys and the root-level required array, and does not lowercase the trigger and dependent names inside the JSON Schema Draft 7 dependencies keyword. Because Node stores request header names in lowercase, a canonical-case dependency such as requiring an authentication header whenever a privileged-mode header is present never matches, and the presence assertion is silently skipped. An unauthenticated remote client can therefore send the header that activates a privileged branch while omitting the header the dependency was meant to require, bypassing the conditional check. Users should upgrade to fastify 5.12.2 or later. 2026-09-04 7.5 CVE-2026-84428 fastify--fastify fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines the boolean false as a valid schema that rejects every instance. When an application assigns false to a route's body, querystring, params, or headers schema to deny all input, fastify treats it as a missing schema, compiles no validator, and runs the route handler on any request. An unauthenticated remote client can therefore reach a handler that a valid deny-all schema was intended to make unreachable, a complete validation bypass that can lead to unauthorized state changes or execution of disabled operations. Users should upgrade to fastify 5.12.2 or later. 2026-09-04 7.5 CVE-2026-84469 firecrawl--firecrawl-mcp-server firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequences to read sensitive files like credentials and environment variables, which are then uploaded and returned to the model context. 2026-09-04 7.5 CVE-2026-85606 FreeIPMI--FreeIPMI FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses. 2026-09-04 9.8 CVE-2026-85504 FreeIPMI--FreeIPMI ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info). 2026-09-04 9.8 CVE-2026-85506 FreeIPMI--FreeIPMI ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info). 2026-09-04 9.8 CVE-2026-85507 FreeIPMI--FreeIPMI ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info). 2026-09-04 9.8 CVE-2026-85508 FreeIPMI--FreeIPMI FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested. 2026-09-04 9.8 CVE-2026-85509 FreeIPMI--FreeIPMI ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions). 2026-09-04 7.5 CVE-2026-85505 fs-code--FS Poster - WordPress Social media Auto Poster & Scheduler [Facebook, Instagram, Twitter, Pinterest] The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient input sanitization of the FFmpeg path parameter before passing it to the exec() function, combined with missing authorization checks on the REST API endpoints. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary commands on the underlying server. 2026-09-01 8.8 CVE-2026-10195 GastroMenum--GastroMenum Web Panel Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026. 2026-09-04 7.5 CVE-2026-19205 geonetwork--core-geonetwork GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the Saxon XSLT processor used to render formatters is configured without secure processing (`FEATURE_SECURE_PROCESSING`) and without disabling Java extension functions (`ALLOW_EXTERNAL_FUNCTIONS`). Any stylesheet loaded by GeoNetwork can therefore invoke `java.lang.Runtime.exec()` or `java.lang.ProcessBuilder` directly, achieving arbitrary command execution as the GeoNetwork process user. A user with sufficient privileges to upload a formatter can deliver a `.xsl` file containing Java extension call that execute arbitrary OS commands with the privileges of the GeoNetwork process. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17. 2026-09-03 9.1 CVE-2026-58400 geonetwork--core-geonetwork GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is unprotected and allows the upload of external uncontrolled files. An unauthenticated attacker can upload arbitrary `.xsl` or `.zip` formatter files to the server. An unauthenticated attacker can write arbitrary files into the GeoNetwork formatter directory. On its own this constitutes unauthorized write access to server storage. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17. 2026-09-03 8.6 CVE-2026-63219 getgrav--grav Grav before 2.0.18 (affected versions sk_protocol without validating whether 'sk' represents a full socket. Fix this issue by checking sk- >sk_state != TCP_LISTEN before inspecting sk- >sk_protocol in both bpf_tcp_gen_syncookie and bpf_tcp_check_syncookie. Since mini-sockets are never in the TCP_LISTEN state, the condition short-circuits and prevents dereferencing fullsock-specific fields. 2026-09-03 7.3 CVE-2026-80738 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drm_log_draw_kmsg_record() accesses s[len - 1] to strip the trailing newline, but len is unsigned int. If len is 0, the subtraction wraps to UINT_MAX, causing an out-of-bounds read. Add an early return when len is 0. 2026-09-03 7.1 CVE-2026-80741 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder functions In ls2k0500_mmc_reorder_cmd_data() and ls2k2000_mmc_reorder_cmd_data(), the for_each_sg() macro already iterates over the scatterlist entries, with 'sg' pointing to the current entry. However, the code incorrectly uses '&sg[i]' and 'sg_dma_len(&sg[i])' inside the loop, which treats 'sg' as an array base and indexes it again, leading to access of wrong sg entries (or out-of-bounds if the list is not an array). 2026-09-03 7.8 CVE-2026-80748 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of bounds memory read A helper function was copying a given audio infoframe into the connector's copy but using the size of the destination (a generic target, sized to accept many different data blocks) not the source (a very specific type of data block). Thus, it was copying 60 bytes of data from a 28 byte allocation. Fix that by using the source size instead, together with a build bug on the source size actually being smaller than the destination. I hit this running KUnit tests under KASAN (while debugging something else entirely). In the real world, it seems unlikely to cause an actual problem. It is a read not a write so it can't corrupt any memory. However, it could potentially fall off the end of a page and cause an accvio bug. 2026-09-03 7.1 CVE-2026-80749 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev() mtk_mfg_attach_dev() reads prev_o on the first iteration of its loop, in "if (prev_o && prev_o- >freq == o- >freq)", before prev_o is assigned at the end of the loop body. On that first iteration, evaluating prev_o reads an indeterminate value. If it is non-NULL, the condition dereferences a stale or invalid pointer, potentially faulting or incorrectly skipping the first OPP. Initialize prev_o to NULL. This matches the intent as well: there is no previous OPP to compare against on the first iteration. Found with Clang's -Wconditional-uninitialized. 2026-09-03 7.8 CVE-2026-80751 Linux--Linux In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter (TX) electrode count was incorrectly assigned the value of the receiver (RX) electrode count due to copy-paste typos. This incorrect value was then propagated to the driver data and used by F54 to determine the diagnostics report size. On devices with more RX than TX electrodes, this inflated the perceived TX count, leading to incorrect report size calculations and potential out-of-bounds buffer accesses. Fix the typos by correctly assigning the TX electrode counts. 2026-09-03 7.8 CVE-2026-80754 LiquidThemes--Booking Hub Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1. 2026-09-02 8.8 CVE-2026-81769 LiteSpeed Technologies--LiteSpeed Cache Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache

Read more »

How to recognize and avoid phishing attacks on your Mac
Phishing attacks don’t usually try to hack your Mac. They try to trick you into giving away passwords, verification codes, payment details, or other sensitive information. A message might look like it’s from Apple, your bank, a delivery company, or even someone you know, making it difficult to tell what’s real and what’s a scam. […] The post first appeared on The Mac Security Blog.

Read more »

FBI Probes Service Selling 153M+ Drivers Licenses
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana. KrebsOnSecurity also has learned that the New Orleans field office of the Federal Bureau of Investigation (FBI) today launched an official inquiry into the source of the images.

Read more »

How to update an older Mac to a newer macOS
Using the latest version of macOS is always best from a security standpoint. But if your Mac is several years old, there’s a good chance that macOS Sonoma or macOS Sequoia won’t run on it. Thankfully, there’s an app for that. The post first appeared on The Mac Security Blog.

Read more »

How to update an older Mac to a newer macOS
Using the latest version of macOS is always best from a security standpoint. But if your Mac is several years old, there’s a good chance that macOS Sonoma or macOS Sequoia won’t run on it. Thankfully, there’s an app for that. The post first appeared on The Mac Security Blog.

Read more »

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police (AFP) said two unnamed suspects from Western Australia, aged 21 and 23, were arrested in connection with a "sophisticated cybercrime syndicate that allegedly created malicious open-source software to rob thousands of global businesses." The AFP did not name the defendants, but KrebsOnSecurity learned the 21-year-old suspect's real identity in June, and has been communicating with him ever since. This story includes interviews with TeamPCP's self-described spokesperson, and examines clues left behind by the TeamPCP leader that likely led to his undoing.

Read more »

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police (AFP) said two unnamed suspects from Western Australia, aged 21 and 23, were arrested in connection with a "sophisticated cybercrime syndicate that allegedly created malicious open-source software to rob thousands of global businesses." The AFP did not name the defendants, but KrebsOnSecurity learned the 21-year-old suspect's real identity in June, and has been communicating with him ever since. This story includes interviews with TeamPCP's self-described spokesperson, and examines clues left behind by the TeamPCP leader that likely led to his undoing.

Read more »

What is iCloud Private Relay and how do you use it?
iCloud Private Relay is a new privacy feature coming to macOS Monterey and iOS/iPadOS 15 this fall. The post first appeared on The Mac Security Blog.

Read more »

Record $600 Discount Drops 14″ M5 Max MacBook Pro to $3499 at Amazon
Amazon has dropped the Space Black 14-inch M5 Max MacBook Pro to a new record-low price, with the 36GB/2TB configuration now selling for just $3499. That's a substantial $600 savings from Apple's $4099 MSRP. This is the standard 14-inch M5 Max configuration with an 18-core CPU, 32-core GPU, 36GB of unified memory, and a 2TB SSD. At $3499 at Amazon, it's the lowest price we've seen on the Space Black model and one of the best M5 Max MacBook Pro deals available right now. A $600 discount is especially notable on a current M5 Max MacBook Pro, bringing this high-end configuration well below the $4000 mark. Amazon is also offering fast shipping on available inventory. For the latest prices and deals across Apple's 14-inch MacBook Pro lineup, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

B&H Takes $500 Off 16″ M5 Max MacBook Pro, Drops Price to $3899
B&H has another strong deal on Apple's high-end MacBook Pro lineup, dropping the 16-inch M5 Max MacBook Pro with 36GB RAM and a 2TB SSD to just $3899. That's a substantial $500 savings from its regular $4399 price. This Space Black configuration features an 18-Core M5 Max CPU, 32-Core GPU, 36GB of unified memory, and a 2TB SSD. At $3899, it's one of the better current opportunities to pick up an M5 Max MacBook Pro without paying well over $4000. Check the current $3899 price at B&H. According to B&H's latest sale sheet, the $500 discount is scheduled to run through September 15. As with B&H's other recent Apple sales, availability at the discounted price may be limited. For the latest prices and deals across the lineup, see our 16" MacBook Pro Price Tracker, updated daily.

Read more »

B&H Slashes Up to $2500 Off Clearance Mac minis and Mac Studios
B&H has launched some unusually large discounts on previous-generation Mac desktops, including M4 and M4 Pro Mac minis and a high-end M3 Ultra Mac Studio. Among the Mac mini deals, B&H has an M4 model with 16GB RAM and a 2TB SSD for $1599, a $300 savings, while the M4 Pro with 24GB RAM and a 1TB SSD is also $300 off at $1799. Another M4 configuration with 24GB RAM and a 1TB SSD is down to $1399, saving $100. Shop B&H's current Mac mini deals. The biggest savings, however, are on a loaded M3 Ultra Mac Studio. B&H has the 32-Core M3 Ultra with an 80-Core GPU, a massive 256GB of unified memory, and a 2TB SSD for just $10499, down from $12999. That's a substantial $2500 savings. Shop B&H's current Mac Studio deals. These are previous-generation models being sold alongside Apple's new Mac desktop lineup, making the clearance prices especially interesting for buyers who would rather get more RAM or storage for their money. B&H also offers free shipping on the models we checked. For the latest prices and deals, see our Mac mini Price Tracker and Mac Studio Price Tracker, updated daily.

Read more »

Amazon Takes $500 Off 16-Inch M5 Max MacBook Pro, Now $3899
Amazon has dropped the 16-inch M5 Max MacBook Pro with 36GB RAM and a 2TB SSD to $3899, taking a full $500 off Apple’s $4399 MSRP. The Labor Day discount is available on both Space Black and Silver, making this one of the strongest current discounts on Apple’s high-end M5 Max MacBook Pro lineup. Amazon is also including free shipping. Get the 16-inch M5 Max MacBook Pro for $3899 at Amazon, or compare the latest prices in our 16-inch MacBook Pro Price Tracker.

Read more »

B&H Labor Day Sale Takes Up to $500 Off M5 Pro and M5 Max MacBook Pros
B&H is marking Labor Day with another round of discounts on Apple's MacBook Pro lineup, with savings reaching $400 on M5 Pro models and an even larger $500 on one 16-inch M5 Max configuration. Shop B&H's Labor Day MacBook Pro sale. One of the standout deals is a 14-inch M5 Pro MacBook Pro with 24GB RAM and a 2TB SSD for just $2699, a substantial $400 savings from its regular $3099 price. B&H also has the standard 14-inch M5 Pro 24GB/1TB model starting at $2349, while 16-inch M5 Pro models start at $2759. At the high end, B&H has dropped a 16-inch M5 Max MacBook Pro to $4499, a full $500 savings from its regular $4999 price. Several 16-inch M5 Pro configurations are also $240-$300 off. B&H lists limited supply at the current prices on several of these configurations, with free shipping included. The Labor Day deals run through September 5. For the latest MacBook Pro prices and deals, see our 14" MacBook Pro Price Tracker and 16" MacBook Pro Price Tracker, updated daily.

Read more »

B&H Labor Day Sale Takes Up to $300 Off M5 MacBook Airs Through September 5
B&H has launched its Labor Day sale on Apple's M5 MacBook Air lineup, with some of the best discounts available on upgraded 13-inch and 15-inch configurations. Shop B&H's Labor Day MacBook Air sale. Among the better deals, select 13-inch M5 MacBook Airs with 32GB RAM and a 512GB SSD are down to $1549, a $150 savings. On the 15-inch side, B&H has a 24GB/1TB model with a 70W USB-C adapter for $1799, a $220 savings from B&H's regular $2019 price, while a 32GB/1TB model is down to $1999, saving $200. These deals are especially interesting for buyers looking for more memory or storage than Apple's standard MacBook Air configurations. B&H lists limited supply at the current prices on many models and is offering free 2-day shipping. The Labor Day deals run through September 5, although individual configurations could sell out earlier. For the latest prices across the lineup, see our 13" MacBook Air Price Tracker and 15" MacBook Air Price Tracker, updated daily.

Read more »

B&H Labor Day Sale Takes Up to $400 Off Clearance M4 and M4 Pro Mac minis
B&H is clearing out remaining M4 and M4 Pro Mac mini inventory for Labor Day, with some particularly good discounts available on upgraded configurations. The sale runs through September 5, with savings advertised at up to $350, although we've spotted one high-end M4 Pro configuration currently marked down by an even larger $400. Among the standouts, B&H has an M4 Mac mini with 16GB RAM and a 2TB SSD for $1599, a $300 savings. An M4 Pro model with 24GB RAM and a 1TB SSD is also $300 off at $1799, while a 48GB/1TB M4 Pro is down to $2249, saving $250. The biggest discounts are on higher-end M4 Pro configurations. A 14-Core M4 Pro Mac mini with 64GB RAM and a 512GB SSD is $2599, a $350 savings, while the 64GB/1TB version has dropped to $2799 — currently $400 below B&H's regular $3199 price. These are clearance models following the introduction of Apple's new Mac mini lineup, and B&H lists limited supply at the sale price on some configurations. Free 2-day shipping is also available. For the latest prices and deals across the lineup, see our Mac mini Price Tracker, updated daily.

Read more »

B&H Drops 2026 Apple Studio Display to $1499, Save $100
B&H Photo has dropped the 2026 27-inch Apple Studio Display with standard glass and tilt-adjustable stand to $1499, taking a full $100 off Apple’s $1599 MSRP. B&H currently lists the display as in stock with free 2-day shipping, although supply is limited at the $1499 sale price. This is the current-generation Studio Display with a 27-inch 5K Retina panel, Thunderbolt 5 connectivity, up to 96W charging, and Apple’s built-in Center Stage camera and six-speaker audio system. Get the 2026 Apple Studio Display for $1499 at B&H, or compare the latest prices in our Studio Display Price Tracker.

Read more »

AirPods Pro 3 Drop to $199 at Amazon and Verizon, $50 Off Apple’s MSRP
AirPods Pro 3 are back down to $199 at both Amazon and Verizon, giving buyers two good options for saving $50 off Apple's $249 MSRP. Amazon has AirPods Pro 3 for $199 with fast shipping available, while Verizon is matching that price at $199 for online orders. Verizon service isn't required to purchase AirPods, and Verizon also gives buyers the option to order online and choose free local store pickup where available. Either way, you're saving $50, or about 20%, compared to buying AirPods Pro 3 directly from Apple at their regular $249 price. For the latest AirPods prices and deals, see our AirPods Price Tracker, updated daily.

Read more »

B&H Drops Loaded 13-inch M5 MacBook Air with 32GB RAM/2TB SSD to $2299, $200 off
B&H Photo has dropped the 13-inch M5 MacBook Air with 32GB RAM and a 2TB SSD in Midnight to $2299, taking a full $200 off Apple’s $2499 price. This is one of the strongest discounts currently available on a high-end M5 MacBook Air configuration, and B&H lists the model as in stock with free 2-day shipping. Supply is limited at the sale price, and the promotion is scheduled to run through September 5. Shop B&H’s current MacBook Air sale, or compare today’s prices in our 13-inch MacBook Air Price Tracker.

Read more »

B&H Drops AirPods Max to $449, $100 Off with Free Shipping
Amazon isn't the only retailer offering good deals on Apple's AirPods Max. B&H has dropped the Midnight USB-C model to just $449, a $100 savings from Apple's $549 MSRP. B&H is calling this the "Best Price on Web" and says supply is limited at the $449 price. Pick up the Midnight AirPods Max for $449 at B&H. Free shipping is included. For the latest prices on AirPods Max and the rest of Apple's AirPods lineup, visit our AirPods Price Tracker, updated daily.

Read more »

Amazon Drops AirTag 2 4-Pack to $79.99, New All-Time Low
Amazon has dropped Apple’s 2nd-generation AirTag 4-pack to just $79.99, taking about $19 off Apple’s $99 MSRP and matching the lowest price we’ve seen yet on the new AirTags. That works out to only about $20 per AirTag, making this an especially good opportunity if you need trackers for several sets of keys, bags, luggage, or other frequently misplaced items. Get the AirTag 2 4-pack for $79.99 at Amazon.

Read more »