Let AI handle the repetitive stuff — MS Visual Studio makes coding easier for $35
Macworld TL;DR: Through May 17, get Microsoft Visual Studio Professional 2026 for $34.97 (MSRP $499.99) and take advantage of AI-assisted coding, cross-platform development tools, and more. Macs are great dev machines, but if your work has to ship across Windows, Linux, and everything in between, you’ve almost certainly spent time in Visual Studio. The latest release rolls in stronger AI tools, faster performance, and better workflows for teams. Included in Visual Studio 2026: Visual Studio Professional 2026 is a 64-bit development environment, designed to handle massive codebases and complex projects without slowing you down. You can build everything from mobile apps to web platforms and containerized cloud services. Some highlights include: AI-assisted coding with IntelliCode: suggests code based on patterns in your project, helping you write faster and reduce repetitive boilerplate. Cross-platform development tools: build and debug .NET or C++ apps targeting Windows, Linux, and containers, making it useful for mixed-device teams. Live Share collaboration: jump into real-time coding sessions without teammates needing to clone repos or install dependencies. CodeLens insights: see commit history, tests, and authors directly in your editor so you understand your codebase faster. Don’t miss this great deal on Microsoft Visual Studio Pro 2026, on sale for $34.97 (MSRP $499.99) until May 17. Microsoft Visual Studio Professional 2026See Deal StackSocial prices subject to change.

Read more »

Exclusive: All Babbel language courses available for one lifetime price
Macworld TL;DR: Lifetime access to Babbel’s 14 languages for $159.00 (reg. $646.20) with code LEARN at checkout — expires June 30. AI can translate a menu, but it can’t teach you how actually to hold a conversation. The folks at Babbel know this and take a different approach than those gimmicky AI language learning apps. Every lesson is crafted by a team of 100+ linguists and language educators, built around real-life dialogue, cultural nuance, and the kind of practical exchanges that actually come up when you’re out in the world. Right now, a lifetime subscription to all 14 languages is $159.00 with code LEARN at checkout — but the deal ends June 30. You’ll get access to over 10,000 hours of content across Spanish, French, German, Italian, Turkish, and more. Lessons run just 10 to 15 minutes and are grounded in everyday scenarios, so you’re learning language the way humans actually use it — not just pattern-matching through an algorithm. Speech recognition helps you refine your pronunciation, and offline access keeps your learning going wherever you are. Whether you’re prepping for a trip or want a structured path to fluency, Babbel’s human-centered method is built to get you there. Get Babbel for $159.00 (reg. $646.20) with code LEARN — offer ends June 30 at 11:59 PM PT. Babbel Language Learning: Lifetime Subscription (All Languages)See Deal StackSocial prices subject to change.

Read more »

Macworld Podcast: Why you should care about Apple’s big CEO change
Macworld Apple has announced that Tim Cook will no longer serve as Apple’s CEO and John Ternus will have the job starting on September 1. In this episode of the Macworld Podcast, we talk about the announcement and what it could mean.  This is episode 981 with Michael Simon, Jason Cross, and Roman Loyola.  Watch episode 981 on YouTube Listen to episode 981 on Apple Podcasts

Read more »

AirPods Max 2 is $19 Off
The next-generation AirPods Max provides you with the ultimate over-ear listening experience, giving you improved high-fidelity audio, crisp highs, expansive mids and deep bass made possible with the Apple made H2 chip. It also places sound all around you with personalized Spatial Audio and dynamic head tracking.Break language barriers with Live Translation powered by Apple […] The post appeared first on iLounge.

Read more »

MacBook Neo Behind the Scenes Clip Shared by Apple
A YouTube Short has been released by Apple, showing the behind the scenes of the creation of their introduction video for their MacBook Neo. The clip shows what Apple described as a look at the handmade magic showing the camera techniques and physical models used during the making. Real-world props were also shown, merged with […] The post appeared first on iLounge.

Read more »

Apple Looking To Have OLED Micro Curved Panel for 20th Anniversary iPhone
For the 20th anniversary of the iPhone, Apple is looking to Samsung to create a custom OLED display that is micro-curved that will be thinner and brighter than current panels in the market. Apple is rumored to be creating a radical design for their 20th anniversary iPhone; it might have a bezel and a display […] The post appeared first on iLounge.

Read more »

iPhone 18 To Have 12GB of RAM
The upcoming base iPhone 18 is rumored to have 12GB of memory, marking the first time for base iPhone models to have this much memory. A report surfaced that the base iPhone 18 model will have 12GB Of RAM like the iPhone 17 Pro Max and iPhone 17 Pro. Apple has reportedly secured the first […] The post appeared first on iLounge.

Read more »

AirPods 4 is $30 Off
The AirPods 4 feature personalized spatial audio with dynamic head tracking placing sound all over you creating a concert, theater like experience when you put them on. They have been redesigned for comfort with a shorter stem, quick-press controls for both calls and music and a refined contour. The case is 10% smaller in volume […] The post appeared first on iLounge.

Read more »

MacBook Ultra To Have These Features
The MacBook Pro has just been refreshed and given the M5 Pro and M5 Max chips. There are already rumors that the device is expected to have bigger updates. The devices are rumored to be getting a significant redesign by early next year and Apple may use the branding MacBook Ultra for the devices. As […] The post appeared first on iLounge.

Read more »

XChat Released
XChat has been released today on X, a standalone platform for messaging for the iPad and iPhone that allows people to chat with anyone on the platform X in private, separate from X. During launch, the app will support group chat, video calls, audio, and direct messaging, along with file sharing. It will have PIN […] The post appeared first on iLounge.

Read more »

iPhone Ultra Won’t Have Some Features From iPhone 18 Pro
The iPhone Ultra is the upcoming foldable iPhone Apple will be releasing later this year. Despite the price tag of $2,000, the device is expected not to have at least 5 features that are available on the iPhone 18 Pro. Dummy model photos have been uploaded by Vadim Yuryev and Sonny Dickson showing the missing […] The post appeared first on iLounge.

Read more »

Apple Watch Series 11 42mm GPS is $100 Off
The Apple Watch 11 has safety features capable of detecting severe car crashes and hard falls. It also connects you to emergency hotlines automatically to let them know of your situation and to receive immediate medical attention. The watch features a lightweight and thin design, allowing for comfortable all-day wear even when you are sleeping […] The post appeared first on iLounge.

Read more »

Apple Watch and iPhone Pairing Highlighted in Apple Ad
A new ad was uploaded by Apple to attract customers who are in the market with an Apple Watch and iPhone pairing, emphasizing the insights that the watch and device can provide you for your health. The ad was titled Health with iPhone + Apple Watch. It is a half-minute long, and it follows a […] The post appeared first on iLounge.

Read more »

Rate for Savings Account on Apple Card Lowered
The Apple Card’s savings account interest rate has been lowered to 3.50% from 3.65%, notifications are sent regarding the reduced rate to users of the Apple Card this Thursday. The interest rate for Savings Account fluctuates often due to the changes made by the Federal Reserve.  When the rates are reduced the APY or Annual […] The post appeared first on iLounge.

Read more »

Mockup iPhone 18 Pro and Pro Max Models Hint At Thicker Plateau for Camera
The upcoming iPhone 18 Pro is expected to have enhancements to the camera made by Apple but no rumors are fixed hinting the updates will need visible and measurable changes to the rear camera plateau of the device. Max Tech’s, a YouTube Channel, provided us with mockup images for the upcoming iPhone 18 Pro and […] The post appeared first on iLounge.

Read more »

YouTube Picture-in-Picture feature goes free worldwide
YouTube subscribers worldwide can soon enjoy picture-in-picture (PiP) support for free on their devices, including the iPhone and iPad. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Apple China highlights Apple Watch health and rescue stories in campaign with podcast tie-in
Apple launched a new campaign in China called “Thankfully, I was wearing it” (“还好戴着它”), which includes a special podcast episode in which three users share their stories. Here are the details. more…

Read more »

Iodyne Pro Data 24TB review: $15K, ridiculous speed, and probably not for you
The Iodyne Pro Data 24TB delivers enormous uninterrupted transfer speed, isn't network attached, and it isn't limited to one user. It's also a $14,995 wallet-breaking money-saver for the right audience.Iodyne Pro Data 24TBIt's not every day we get a second loaner for a review product years after the fact.The market has changed, workflows have changed, since we first reviewed the Iodyne Pro Data. Video workflows are getting bigger and bigger with 8K HDR 3D, and so forth. A single iPod like the Lord of the Rings dailies were shuttled around on are a thing of the past. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Divine, a Jack Dorsey-backed revival of Vine, is now available on the App Store
Featuring hundreds of thousands of archive videos from the original Vine platform, in addition to new videos, Divine is now available on the App Store and Google Play. Here are the details. more…

Read more »

Apple researchers built an AI that tests several ideas in parallel before answering
In a new paper, a team of Apple researchers details a creative framework that improves LLM answers in math reasoning, code generation, and more. Here are the details. more…

Read more »

Apple smart glasses again rumored to support gesture recognition via built-in cameras
A repeat rumor says Apple's smart glasses will rely on gesture-based input, with the device featuring two built-in cameras, Siri, and not much else.Apple's smart glasses will support gestures, per multiple sources.Claims of Apple working on smart glasses date back to 2015, with analysts predicting a 2026 or 2027 release even before the Apple Vision Pro made its debut at WWDC 2023. Since then, we've continued to see new rumors about smart glasses development efforts, hardware, and features.A MacRumors report has effectively reiterated previously rumored hardware claims, while also suggesting the device will support hand gestures. The claim about gestures aligns with what analyst Ming-Chi Kuo said in June 2025. Rumor Score: 🤔 Possible Continue Reading on AppleInsider | Discuss on our Forums

Read more »

9to5Mac Daily: April 29, 2026 – iOS 27 rumors, App Store changes
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by Bitwarden: Make your life easier with Bitwarden, featuring a secure, open source password manager with end-to-end encryption and seamless autofill across all your devices. more…

Read more »

Apple Home recently got better in three ways, here’s what’s new
Apple is expected to launch a wave of new Home products later this year, after iOS 27 brings Siri’s long-awaited overhaul. But there are three ways Apple Home has recently gotten better during the iOS 26 cycle too. Here’s what’s new. more…

Read more »

Rumored Apple Vision Pro team break-up isn't a death knell for the product
A new rumor suggests Apple Vision Pro hardware may be dead, but the dissolution of a team doesn't necessarily mean that pipeline is dead. If anything, it's business as usual.Apple Vision Pro isn't deadWhenever Apple releases a new product category, there seems to be this industry drive to find its weak points and jab at it until it dies. Apple Vision Pro may not be a blockbuster, but it is the entry point to Spatial Computing, which Apple still believes to be its future.According to a report from MacRumors, Apple Vision Pro hardware as it stands in April 2026 may truly be dead. The story suggests that Apple has likely given up on the platform due to a lack of consumer interest after the M5 update. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Report: Apple leads satellite smartphone market as adoption hinges on broader use cases
Nearly three out of four satellite-enabled smartphones shipped in 2025 were iPhones, according to a new Counterpoint Research report. Here’s where the market is expected to go next. more…

Read more »

Apple’s brilliant new iPhone + Apple Watch ad nails it: ‘Listen to your body. Not everybody’
Apple has just released one of its smartest, most relatable health-focused advertisements in years. Titled “Health with iPhone… The post appeared first on MacDailyNews.

Read more »

Apple Gives Up On the Vision Pro After M5 Refresh Flop
MacRumors reports that Apple has effectively paused work on Vision Pro after the M5 refresh failed to revive demand. The team has reportedly been reassigned and the company is now shifting focus toward smart glasses instead. From the report: The Vision Pro has been criticized for its high price tag and its uncomfortable weight. The device is over 1.3 pounds, and even with the more comfortable Dual Knit Band that Apple added to redistribute weight, it continues to be hard to wear for long periods of time. The M5 chip added a 120Hz refresh rate, 10 percent more rendered pixels, and around 30 additional minutes of battery life, but the price tag stayed at $3,499, and it ended up not selling well. The Vision Pro has been unpopular since it first launched, and Apple only sold around 600,000 units in total. Insider sources told MacRumors that Apple has received an unusually high percentage of returns, far exceeding any other modern Apple product. [...] If Apple finds a way to create a much cheaper, more comfortable VR headset in the future, the Vision Pro line could be revived, but right now, the company has no plans to launch a new model. Apple has not discontinued the Vision Pro and is continuing to sell the M5 model. Instead of continuing to experiment with virtual reality, Apple is working on smart glasses that will eventually incorporate augmented reality capabilities, but the first version will be similar to the Ray-Ban Meta smart glasses with AI and no integrated display. Read more of this story at Slashdot.

Read more »

Apple may have pulled the plug on Vision Pro
Apple has reportedly halted work on the Vision Pro AR headset, shifting focus to smart glasses. Here's why. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

YouTube starts rolling out free picture-in-picture (PiP) globally on Android, iOS
After offering in the US, YouTube is making picture-in-picture (PiP) mode free for all users around the world. more…

Read more »

iOS 26.4 adds convenient new iCloud feature, here’s how to enable it
iOS 26.4 launched last month with new features for Apple Music, Podcasts, and a lot more. There’s also a new iOS 26.4 feature that makes iCloud on the web more useful than before thanks to the addition of search. Here’s how to enable it. more…

Read more »

Vulnerability Summary for the Week of April 20, 2026
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info Thinkphp--ThinkPHP ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoking functions through the routing parameter. Attackers can craft requests to the index.php endpoint with malicious function parameters to execute system commands with application privileges. 2026-04-22 9.8 CVE-2018-25270 ExploitDB-45978Official Product HomepageProduct ReferenceVulnCheck Advisory: ThinkPHP 5.0.23 Remote Code Execution via invokefunction  Elba--ELBA5 ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and execute arbitrary commands with SYSTEM level permissions. Attackers can connect to the database using default connector credentials, decrypt the DBA password, and execute commands via the xp_cmdshell stored procedure or add backdoor users to the BEDIENER table. 2026-04-22 9.8 CVE-2018-25272 ExploitDB-45905Official Product HomepageVulnCheck Advisory: ELBA5 5.8.0 Remote Code Execution via Database Access  Lizardsystems--Terminal Services Manager Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious input file with shellcode and jump instructions that overwrite the SEH handler pointer to execute calc.exe or other payloads when imported through the add computers wizard. 2026-04-22 8.4 CVE-2018-25259 ExploitDB-46058Official Product HomepageVulnCheck Advisory: Terminal Services Manager 3.1 Buffer Overflow SEH  Magix--MAGIX Music Editor MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload, paste it into the Server field via the CD menu's FreeDB Proxy Options, and trigger code execution when settings are accepted. 2026-04-22 8.4 CVE-2018-25260 ExploitDB-46056Official Product HomepageProduct ReferenceVulnCheck Advisory: MAGIX Music Editor 3.1 Buffer Overflow via SEH  Iperiusbackup--Iperius Backup Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism that allows local attackers to execute arbitrary code by supplying a malicious file path. Attackers can create a backup job with a crafted payload in the external file location field that triggers a buffer overflow when the backup job executes, enabling code execution with application privileges. 2026-04-22 8.4 CVE-2018-25261 ExploitDB-46059Official Product HomepageVulnCheck Advisory: Iperius Backup 5.8.1 Local Buffer Overflow SEH  faleemi--Faleemi Desktop Software Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exception handler (SEH) overwrite. Attackers can craft a malicious payload and paste it into the Device alias field within the Managing Log interface to execute arbitrary code with calculator proof-of-concept execution. 2026-04-26 8.4 CVE-2018-25263 ExploitDB-45492Product ReferenceVulnCheck Advisory: Faleemi Desktop Software 1.8.2 Local Buffer Overflow SEH  Lizardsystems--LanSpy LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode, triggering code execution through SEH chain manipulation and controlled jumps. 2026-04-22 8.4 CVE-2018-25265 ExploitDB-46018Official Product HomepageVulnCheck Advisory: LanSpy 2.0.1.159 Local Buffer Overflow  Lizardsystems--LanSpy LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payload with 688 bytes of padding followed by 4 bytes of controlled data to crash the application or potentially achieve code execution. 2026-04-22 8.4 CVE-2018-25268 ExploitDB-45968Official Product HomepageVulnCheck Advisory: LanSpy 2.0.1.159 Local Buffer Overflow via Scan Field  Securimport--iSmartViewPro iSmartViewPro 1.5 contains a structured exception handling (SEH) buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to overwrite SEH records and execute shellcode with application privileges. 2026-04-26 8.4 CVE-2018-25283 ExploitDB-45349Product ReferenceVulnCheck Advisory: iSmartViewPro 1.5 Buffer Overflow via SavePath Parameter  Cewe-Photoworld--CEWE Photoshow CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data into the email address and password fields to trigger a denial of service condition. 2026-04-26 7.5 CVE-2018-25294 ExploitDB-45211Official Product HomepageProduct ReferenceVulnCheck Advisory: CEWE Photoshow 6.3.4 Buffer Overflow Denial of Service  Fortra--GoAnywhere MFT The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being guessed via Brute Force. 2026-04-21 7.3 CVE-2025-14362 https://fortra.com/security/advisories/product-security/FI-2026-002  Back to top Medium Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info Angryip--Angry IP Scanner for Linux Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the application by supplying malformed input to the port selection field. Attackers can craft a malicious string containing buffer overflow patterns and paste it into the Preferences Ports tab to trigger an application crash. 2026-04-22 6.2 CVE-2018-25262 ExploitDB-46038Official Product HomepageVulnCheck Advisory: Angry IP Scanner for Linux 3.5.3 Denial of Service  Acutesystems--TransMac TransMac 12.2 contains a buffer overflow vulnerability in the license key input field that allows local attackers to crash the application by submitting an oversized string. Attackers can generate a payload file containing 4000 bytes of data, paste it into the License Key field, and trigger a denial of service condition. 2026-04-26 6.2 CVE-2018-25264 ExploitDB-45493VulnCheck Advisory: TransMac 12.2 Denial of Service via License Key Field  Angryip--Angry IP Scanner Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to crash the application by supplying an excessively large string. Attackers can generate a file containing a massive buffer of repeated characters and paste it into the unavailable value field in the display preferences to trigger a denial of service. 2026-04-22 6.2 CVE-2018-25266 ExploitDB-45993Official Product HomepageVulnCheck Advisory: Angry IP Scanner 3.5.3 Denial of Service via Preferences Buffer Overflow  Ultraiso--UltraISO UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH and SE handler records. Attackers can craft a malicious filename string with 304 bytes of data followed by SEH record overwrite values and paste it into the Output FileName field to trigger a denial of service crash. 2026-04-22 6.2 CVE-2018-25267 ExploitDB-45996Official Product HomepageVulnCheck Advisory: UltraISO 9.7.1.3519 Buffer Overflow via Output FileName  icewarp--ICEWARP Client ICEWARP 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encoded payloads in object and embed tags. Attackers can craft emails containing data URIs with embedded scripts that execute in the client when the email is viewed, compromising user sessions and stealing sensitive information. 2026-04-22 6.1 CVE-2018-25269 ExploitDB-45974Official Product HomepageVulnCheck Advisory: ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection  Textpad--Textpad Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through the Run command interface. Attackers can paste a 5000-byte payload into the Command field via Tools > Run to trigger a buffer overflow that crashes the application. 2026-04-22 6.2 CVE-2018-25271 ExploitDB-45956Official Product HomepageProduct ReferenceVulnCheck Advisory: Textpad 8.1.2 Denial of Service via Run Command  Acutesystems--CrossFont CrossFont 7.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by submitting an oversized payload in the License Key field. Attackers can generate a malicious file containing 4000 bytes of data, paste it into the License Key input field, and trigger an application crash when processing the input. 2026-04-26 6.2 CVE-2018-25273 ExploitDB-45494VulnCheck Advisory: CrossFont 7.5 Denial of Service via License Key Field  infrarecorder--InfraRecorder InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an application crash. 2026-04-26 6.2 CVE-2018-25274 ExploitDB-45413VulnCheck Advisory: InfraRecorder 0.53 Denial of Service via txt File Import  faleemi--Faleemi Plus Faleemi Plus 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can paste a 2000-byte payload into the Camera name and DID number fields during camera addition to trigger an application crash. 2026-04-26 6.2 CVE-2018-25275 ExploitDB-45414Product ReferenceVulnCheck Advisory: Faleemi Plus 1.0.2 Denial of Service via Buffer Overflow  Br-Software--PixGPS PixGPS 1.1.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized string to the folder path input field. Attackers can craft a payload exceeding 6000 bytes and paste it into the 'Folder with picture files' field to trigger a denial of service condition. 2026-04-26 6.2 CVE-2018-25277 ExploitDB-45381Product ReferenceVulnCheck Advisory: PixGPS 1.1.8 Buffer Overflow Denial of Service  Picajet--PicaJet FX PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields via the Help menu's Register PicaJet dialog to trigger an application crash. 2026-04-26 6.2 CVE-2018-25278 ExploitDB-45383VulnCheck Advisory: PicaJet FX 2.6.5 Denial of Service via Registration Fields  Convertimagetotext--jiNa OCR Image to Text jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert the file to PDF. 2026-04-26 6.2 CVE-2018-25279 ExploitDB-45380Product ReferenceVulnCheck Advisory: jiNa OCR Image to Text 1.0 Denial of Service via PNG  ZenMap--ZenMap Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import functionality to cause the program to consume excessive system resources and crash. 2026-04-26 6.2 CVE-2018-25282 ExploitDB-45357Product ReferenceVulnCheck Advisory: Nmap 7.70 Denial of Service via XML Entity Expansion  Hdtune--HD Tune Pro HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the folder/file name field. Attackers can trigger a denial of service by entering a 6000-byte payload through the File > Options > Save dialog's folder/file name input field. 2026-04-26 6.2 CVE-2018-25284 ExploitDB-45298Official Product HomepageProduct ReferenceVulnCheck Advisory: HD Tune Pro 5.70 Denial of Service via Options Dialog  Hdtune--Easy PhotoResQ Easy PhotoResQ 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Folder/filename field. Attackers can input a 6000-byte payload through the File Options dialog to trigger a denial of service condition. 2026-04-26 6.2 CVE-2018-25286 ExploitDB-45300Official Product HomepageVulnCheck Advisory: Easy PhotoResQ 1.0 Buffer Overflow Denial of Service  Editorsoftware--StyleWriter StyleWriter 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a 6000-byte payload into the Pattern to Find or Advice Message fields in the Add Pattern dialog to trigger a denial of service condition. 2026-04-26 6.2 CVE-2018-25288 ExploitDB-45250Official Product HomepageProduct ReferenceVulnCheck Advisory: StyleWriter 1.0 Denial of Service via Pattern Input  Ezbsystems--Softdisk Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help menu's Enter Registration Code dialog to cause a denial of service. 2026-04-26 6.2 CVE-2018-25289 ExploitDB-45245Official Product HomepageProduct ReferenceVulnCheck Advisory: Softdisk 3.0.3 Buffer Overflow Denial of Service  Ezbsystems--Easyboot Easyboot 6.6.0 contains a buffer overflow vulnerability in the Replace Text function that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by accessing File > Tools > Replace Text and pasting a 7000-byte payload into the text fields to cause a denial of service. 2026-04-26 6.2 CVE-2018-25290 ExploitDB-45241Official Product HomepageVulnCheck Advisory: Easyboot 6.6.0 Buffer Overflow Denial of Service  Pj64-Emu--Project64 Project64 2.3.2 contains a buffer overflow vulnerability in the Plugin Directory settings field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 6000-byte payload into the Plugin Directory field through the Options > Settings > Directories interface to trigger an application crash when settings are reopened. 2026-04-26 6.2 CVE-2018-25291 ExploitDB-45229Official Product HomepageVulnCheck Advisory: Project64 2.3.2 Denial of Service via Plugin Directory  Bome--Restorator Bome Restorator 1793 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can create a malicious payload exceeding 4000 bytes and paste it into the Name input field to trigger an application crash and denial of service. 2026-04-26 6.2 CVE-2018-25292 ExploitDB-45223Official Product HomepageProduct ReferenceVulnCheck Advisory: Bome Restorator 1793 Denial of Service via Buffer Overflow  Mersenne--Prime95 Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an excessively long string in the optional proxy password field. Attackers can trigger a denial of service by entering a 6000-byte payload into the proxy password parameter, causing the application to crash when processing the connection settings. 2026-04-26 6.2 CVE-2018-25293 ExploitDB-45226Official Product HomepageProduct ReferenceVulnCheck Advisory: Prime95 29.4b7 Denial of Service via Proxy Password Field  P10--ObserverIP Scan Tool ObserverIP Scan Tool 1.4.0.1 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the IP input field. Attackers can paste a 2000-byte buffer of repeated characters into the IP field and trigger a search operation to cause an application crash. 2026-04-26 6.2 CVE-2018-25295 ExploitDB-45204Official Product HomepageProduct ReferenceVulnCheck Advisory: ObserverIP Scan Tool 1.4.0.1 Denial of Service via IP Field  Wansview--Wansview Wansview 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can inject 2000-byte payloads into the Camera name and DID number fields during camera addition to trigger application crashes. 2026-04-26 6.2 CVE-2018-25297 ExploitDB-45194VulnCheck Advisory: Wansview 1.0.2 Denial of Service via Buffer Overflow  94Cb--Carbon Forum Carbon Forum 5.9.0 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript code through the Forum Name field in dashboard settings. Attackers with admin privileges can store JavaScript payloads in the Forum Name field that execute in the browsers of all users visiting the forum, enabling session hijacking and data theft. 2026-04-22 6.4 CVE-2024-58344 ExploitDB-52043Official Product HomepageProduct ReferenceVulnCheck Advisory: Carbon Forum 5.9.0 Persistent XSS via Forum Name Field  GitLab--GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service under certain conditions by exhausting server resources by making crafted requests to a discussions endpoint. 2026-04-22 6.5 CVE-2025-0186 HackerOne Bug Bounty Report #2915694https://gitlab.com/gitlab-org/gitlab/-/work_items/511312https://about.gitlab.com/releases/2026/04/22/patch-release-gitlab-18-11-1-released/  GitLab--GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service by overwhelming system resources under certain conditions due to insufficient resource allocation limits in the GraphQL API. 2026-04-22 6.5 CVE-2025-3922 HackerOne Bug Bounty Report #3098035https://gitlab.com/gitlab-org/gitlab/-/work_items/537422https://about.gitlab.com/releases/2026/04/22/patch-release-gitlab-18-11-1-released/  Picajet--RoboImport RoboImport 1.2.0.72 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields and click Register to trigger an application crash. 2026-04-26 5.5 CVE-2018-25276 ExploitDB-45382Product ReferenceVulnCheck Advisory: RoboImport 1.2.0.72 Denial of Service via Registration Fields  Infiltration-Systems--Infiltrator Network Security Scanner Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a 6000-byte payload into the Scan Target field and trigger a denial of service condition when the Scan button is clicked. 2026-04-26 5.5 CVE-2018-25280 ExploitDB-45390Product ReferenceVulnCheck Advisory: Infiltrator Network Security Scanner 4.6 Denial of Service  Maxprog--iCash iCash 7.6.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload through the Connect to Server dialog. Attackers can paste a 7000-byte string into the Host field and click Connect to trigger an application crash. 2026-04-26 5.5 CVE-2018-25281 ExploitDB-45388VulnCheck Advisory: iCash 7.6.5 Denial of Service via Connect to Server  Fathom--Fathom Fathom 2.4 contains a buffer overflow vulnerability in the Authorization Code field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 6000-byte payload into the Authorization Code field and click Activate to trigger a denial of service condition. 2026-04-26 5.5 CVE-2018-25285 ExploitDB-45294Official Product HomepageProduct ReferenceVulnCheck Advisory: Fathom 2.4 Denial of Service via Authorization Code Buffer Overflow  Hdtune--Drive Power Manager Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition. 2026-04-26 5.5 CVE-2018-25287 ExploitDB-45299Official Product HomepageVulnCheck Advisory: Drive Power Manager 1.10 Denial of Service via Name Field  P10--Central Management Software P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 2000-byte payload into the password field and click login to trigger an application crash and denial of service. 2026-04-26 5.5 CVE-2018-25296 ExploitDB-45207Official Product HomepageVulnCheck Advisory: P10 Central Management Software 1.4.13 Denial of Service  Fortra--GoAnywhere MFT Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decryption of data. 2026-04-21 5.8 CVE-2025-1241 https://fortra.com/security/advisories/product-security/FI-2026-001  OpenSC--OpenSC Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs 2026-04-23 5.7 CVE-2025-13763 https://access.redhat.com/security/cve/CVE-2025-13763RHBZ#2417581https://github.com/OpenSC/OpenSC/security/advisories/GHSA-2v44-fq35-98vvhttps://github.com/OpenSC/OpenSC/wiki/CVE-2025-13763  HCLSoftware--BigFix Service Management (SM) HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access.  An attacker with access to the network traffic can sniff packets from the connection and uncover the data. 2026-04-21 5.3 CVE-2025-31981 https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127605  IBM--Security Verify Directory (Container) IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to malicious file upload by not validating file type. A privileged user could upload malicious files into the system that can be sent to victims for performing further attacks against the system. 2026-04-22 5.5 CVE-2025-36074 https://www.ibm.com/support/pages/node/7268907  hubspotdev--HubSpot All-In-One Marketing Forms, Popups, Live Chat The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.32 via the leadin/public/admin/class-adminconstants.php file. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract a list of all installed plugins and their versions which can be leveraged for reconnaissance and further attacks. 2026-04-24 4.3 CVE-2025-11762 https://www.wordfence.com/threat-intel/vulnerabilities/id/2a8c62e6-f459-433a-b0c4-c79285ea7fe9?source=cvehttps://research.cleantalk.org/CVE-2025-11762https://plugins.trac.wordpress.org/browser/leadin/tags/11.3.33/public/admin/class-adminconstants.php  Back to top Low Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info HCLSoftware--BigFix Service Management (SM) HCL BigFix Service Management is susceptible to HTTP Request Smuggling.  HTTP request smuggling vulnerabilities arise when websites route HTTP requests through web servers with inconsistent HTTP parsing. HTTP Smuggling exploits inconsistencies in request parsing between front-end and back-end servers, allowing attackers to bypass security controls and perform attacks like cache poisoning or request hijacking. 2026-04-21 3.7 CVE-2025-31958 https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124209  Back to top Severity Not Yet Assigned PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info NWCLARK--Storable Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow. 2026-04-21 not yet calculated CVE-2017-20230 https://github.com/Perl/perl5/issues/15831https://github.com/Perl/perl5/commit/a258c17c6937f79529c8319a829310e09cdbd216.patchhttps://metacpan.org/release/RURBAN/Storable-3.05/changeshttps://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242533.htmlhttps://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242703.html  Seeyon Internet Software--A8-V5 Collaborative Management Software Seeyon OA A8 contains an unauthenticated arbitrary file write vulnerability in the /seeyon/htmlofficeservlet endpoint that allows remote attackers to write arbitrary files to the web application root by sending specially crafted POST requests with custom base64-encoded payloads. Attackers can write JSP webshells to the web root and execute them through the web server to achieve arbitrary OS command execution with web server privileges. Exploitation evidence was first observed by the Shadowserver Foundation on 2021-03-26 (UTC). 2026-04-21 not yet calculated CVE-2019-25714 https://sourceforge.net/software/product/A8/https://web.archive.org/web/20190821034711/http://wyb0.com/posts/2019/seeyon-htmlofficeservlet-getshell/https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E8%87%B4%E8%BF%9Coa/%E8%87%B4%E8%BF%9C%20OA%20A8%20htmlofficeservlet%20getshell%20%E6%BC%8F%E6%B4%9E/https://static-aliyun-doc.oss-cn-hangzhou.aliyuncs.com/download/pdf/90916/Security_Notification_reseller_en-US.pdfhttps://www.broadcom.com/support/security-center/attacksignatures/detail?asid=31713https://www.fortiguard.com/encyclopedia/ips/48874/seeyon-office-anywhere-htmlofficeservlet-arbitrary-file-uploadhttps://www.vulncheck.com/advisories/seeyon-office-anywhere-oa-a8-unauthenticated-arbitrary-file-write-via-htmlofficeservlet  Unknown--Email Encoder The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). 2026-04-20 not yet calculated CVE-2024-7083 https://wpscan.com/vulnerability/7aeb6891-e159-4ed8-b1a9-a551140c9fcc/  Semantic MediaWiki--Semantic MediaWiki Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the '/index.php/Speciaal:GefacetteerdZoeken' endpoint parameter. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. 2026-04-21 not yet calculated CVE-2025-10354 https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-semantic-mediawiki  EfficientLab, LLC--Controlio EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected service runs as NT AUTHORITYSYSTEM. 2026-04-23 not yet calculated CVE-2025-10549 https://r.sec-consult.com/controliohttps://kb.controlio.net/hc/en-us/articles/45777908471185-Client-Update-April-15-2026-ver-1-3-95  Fudo Security--Fudo Enterprise Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain administrator-only resources via improperly protected API endpoints. This includes sensitive information such as system logs and parts of system configuration settings. This vulnerability has been fixed in version 5.6.3 2026-04-20 not yet calculated CVE-2025-13480 https://www.fudosecurity.com/product/enterprisehttps://cert.pl/en/posts/2026/04/CVE-2025-13480https://download.fudosecurity.com/documentation/fudo/5_6/rn/RN_5.6.3.pdf  Zervit--portable HTTP/Web server Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is caused by inadequate validation of user-supplied input. An attacker can exploit this vulnerability by sending malicious requests. If the vulnerability is successfully exploited, the application can be made to stop responding, resulting in a DoS condition. It is possible to manually restart the application. 2026-04-21 not yet calculated CVE-2025-13826 https://www.incibe.es/en/incibe-cert/notices/aviso/incorrect-input-validation-zervit-portable-httpweb-server  ATRODO--Net:Dropbear Net:Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net:Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437. 2026-04-21 not yet calculated CVE-2025-15638 https://www.cve.org/CVERecord?id=CVE-2016-6129https://www.cve.org/CVERecord?id=CVE-2018-12437https://metacpan.org/release/ATRODO/Net-Dropbear-0.14/source/dropbear/libtomcrypt/changes  PHP Point Of Sale--PHP Point Of Sale HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specific_customer', ussing 'start_date_formatted' y 'end_date_formatted' parameters. 2026-04-21 not yet calculated CVE-2025-41011 https://www.incibe.es/en/incibe-cert/notices/aviso/html-injection-php-point-sale-0  Zeon Global Tech--Zeon Academy Pro SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'. 2026-04-21 not yet calculated CVE-2025-41029 https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-zeon-academy-pro-zeon-global-tech  Back to top

Read more »

‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty
A 24-year-old British national and senior member of the cybercrime group "Scattered Spider" has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan admitted his role in a series of text-message phishing attacks in the summer of 2022 that allowed the group to hack into at least a dozen major technology companies and steal tens of millions of dollars worth of cryptocurrency from investors.

Read more »

Most secure browser for Mac in 2026
For most Mac users, your browser is where a lot of online life happens — reading emails, logging into accounts, using web apps, shopping, and banking. It’s also where a small mistake can lead to a bigger problem, whether that means downloading something that looked harmless or signing into a phishing page that seemed real […] The post appeared first on The Mac Security Blog.

Read more »

Patch Tuesday, April 2026 Edition
Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dubbed "BlueHammer." Separately, Google Chrome fixed its fourth zero-day of 2026, and an emergency update for Adobe Reader nixes an actively exploited flaw that can lead to remote code execution.

Read more »

Why more Mac attacks now rely on social engineering
Recent security findings suggest a change in how Mac users are being targeted. Instead of searching for technical gaps in software, attackers are finding ways to ask users to run commands themselves. This pattern shows up across different reports, from fake apps that look legitimate to scam pages that guide users into pasting commands into […] The post appeared first on The Mac Security Blog.

Read more »

The new Intego Antivirus is here — everything you need to know about Intego ONE
Intego ONE is Intego’s new all-in-one Mac security app, built to make protection easier to manage in one place. Instead of juggling separate tools, you get antivirus protection, firewall protection, SmartClean, and VPN in one Mac-focused app, depending on your plan. If you’ve used Intego products before, the shift is straightforward — fewer moving parts […] The post appeared first on The Mac Security Blog.

Read more »

Russia Hacked Routers to Steal Microsoft Office Tokens
Hackers linked to Russia's military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security experts warned today. The spying campaign allowed state-backed Russian hackers to quietly siphon authentication tokens from users on more than 18,000 networks without deploying any malicious software or code.

Read more »

The ultimate guide to Mac security
Macs have a strong security foundation. That’s true — and it’s worth appreciating. But “safer than” doesn’t mean “safe from.” Modern Mac threats don’t always look like the classic virus people imagine. A lot of today’s attacks rely on social engineering, fake installers, stolen credentials, and the simple reality that people download things, click prompts, […] The post appeared first on The Mac Security Blog.

Read more »

How to Choose the Right iPhone (2026): A Simple Guide
While the latest iPhone is the best and fastest model every year, you might not need its features. Apple sells several iPhone models; here's how to choose the right iPhone for your needs. The post appeared first on The Mac Security Blog.

Read more »

Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab
An elusive hacker who went by the handle "UNKN" and ran the early Russian ransomware groups GandCrab and REvil now has a name and a face. Authorities in Germany say 31-year-old Russian Daniil Maksimovich Shchukin headed both cybercrime gangs and helped carry out at least 130 acts of computer sabotage and extortion against victims across the country between 2019 and 2021.

Read more »

Which Apple Watch Model Is Right for You (2026)?
In 2024, you have three models of Apple Watch to choose from. Whether you want a simple watch, a fancy watch, or one for outdoors, there is an Apple Watch for you. The post appeared first on The Mac Security Blog.

Read more »

Best iPad Air Deals Right Now — Up to $100 Off M4 Models at Amazon
Amazon’s iPad Air discounts are strongest on the higher-storage models right now, with the 13-inch 1TB configuration showing the biggest savings at $100 off Apple’s MSRP. The 11-inch models are also seeing useful discounts, especially if you want a lighter tablet at a lower starting price. Check Amazon’s 11-inch iPad Air deals here. If you want the larger display, Amazon’s 13-inch iPad Air deals are where the biggest dollar savings show up, with several configurations priced well below Apple’s standard pricing. Shop Amazon’s 13-inch iPad Air deals here. For the latest sales and deals, see our iPad Air Price Tracker, updated daily.

Read more »

16″ M5 Pro MacBook Pro Deals Hit Amazon — Up to $200 Off Key Configs
Amazon is starting to roll out more meaningful discounts on Apple’s 16-inch M5 Pro MacBook Pro lineup, with select configurations now seeing price cuts of up to $200. The 24GB/1TB model is currently $150 off, while the higher-end 48GB/1TB version is seeing a full $200 discount—bringing both models below their usual pricing for the first time. These are the kinds of early deals that signal broader price movement across the lineup, especially for higher-memory configurations. You can check current deals here: 24GB/1TB model and 48GB/1TB model. For the latest sales and deals, see our 16" MacBook Pro Price Tracker, updated daily.

Read more »

16″ M5 Max MacBook Pros $200 off at B&H — Fast Free Shipping Included
B&H Photo is now offering $200 off Apple’s 16-inch M5 Max MacBook Pro lineup, bringing prices down across multiple high-end configurations. With Apple’s MSRP starting around $3899 for these models, that discount is one of the first meaningful price drops we’ve seen so far. What makes this deal stand out even more is B&H’s free 1–2 day shipping to most U.S. addresses, making it one of the fastest ways to get one without paying full price. You can check current configurations here at B&H Photo. For the latest sales and deals, see our 16" MacBook Pro Price Tracker, updated daily.

Read more »

Metro by T-Mobile Drops iPhone 17e to $349 — $250 Off with Port-In
Metro by T-Mobile is currently offering one of the more straightforward iPhone deals out there, knocking $250 off the iPhone 17e and bringing the price down to $349.99 with an instant discount at checkout. There’s no complicated bill credit structure here—you just need to bring your number, sign up for a qualifying plan, and pay your first month of service. Plans start at $55 for the first month and drop to $50 with AutoPay. You can check the deal here: Metro by T-Mobile. For the latest sales and deals, see our iPhone Price Tracker, updated daily.

Read more »

MacBook Neo Now Fully In Stock at Walmart — Easy Ordering & Pickup Available
MacBook Neo availability at Walmart has shifted in a big way—every configuration is now in stock and ready to order. Instead of scattered availability, buyers can now choose from the full lineup with confidence, whether ordering online for free shipping or selecting local store pickup where available. This makes Walmart one of the easiest places right now to actually get a MacBook Neo without worrying about inventory gaps. If you’ve been waiting for wider availability, this is a much smoother buying window. For the latest sales and deals, see our MacBook Neo Price Tracker, updated daily.

Read more »

AirPods Deals Compared: Amazon vs Walmart vs Apple Pricing Right Now
AirPods deals are lining up across Amazon and Walmart, and for once it’s easy to compare real savings across the lineup. The base AirPods 4 are down to about $99 (vs $129 MSRP), while AirPods Pro 3 models are holding around $199 compared to Apple’s $249 price. Walmart often matches or slightly undercuts Amazon—and adds the option for local pickup or fast shipping. You can check current deals here: AirPods at Amazon and AirPods at Walmart. For the latest sales and deals, see our AirPods Price Tracker, updated daily.

Read more »

14″ M5 Pro MacBook Pro Deals Expand — Amazon Discounts All Configurations
The 14-inch M5 Pro MacBook Pro lineup is finally starting to see broader discounts, and this time it’s not just one or two configurations. Amazon is now offering deals across all eight configurations, from base 16GB/512GB models to higher-end memory and storage options. These early discounts, ranging up to $237 off MSRP, are typically the first sign that pricing is beginning to shift away from launch levels. If you’ve been waiting for a deal on a 14″ M5 Pro, this is the first moment where the entire lineup becomes worth a closer look. View deals here at Amazon. For the latest sales and deals, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

MacBook Neo Stock Is Moving Fast at Walmart — Here’s What’s Still Available
MacBook Neo stock at Walmart is already splitting between easy-to-order models and sold-out configurations. Several versions are still available online with free shipping, and some also show local pickup options depending on your area, while others are already out of stock. You can check a few of the live Walmart listings here. If you’re flexible on color or storage, you still have options — but some of the most popular versions are clearly moving fast. For the latest sales and deals, see our MacBook Neo Price Tracker, updated daily.

Read more »

13″ M5 MacBook Air Deals Expand — Amazon & B&H Drop Prices Across the Lineup
The 13-inch M5 MacBook Air is starting to see real discounts, and this time it’s not just one configuration. Amazon and B&H are both offering $150 off multiple models, with prices dropping across the lineup. The 512GB model is now down to about $949, while higher-end configs are also seeing meaningful cuts. These are some of the best early deals we’ve seen on Apple’s latest ultra-portable. You can check current pricing at Amazon and B&H Photo. For the latest sales and deals, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Verizon iPhone 17 Deals: Full Breakdown on iPhone 17 Pro Max, 17 Pro, 17 Air, 17, and 17e
Verizon’s current iPhone 17 promotions cover the full lineup, from the flagship iPhone 17 Pro Max down to the entry-level iPhone 17e, and the offers are broad enough that shoppers really need to look beyond the headline pricing. Depending on the model, Verizon is currently promoting a mix of bill-credit discounts, trade-in savings, switcher incentives, free-phone offers, and bonus bundle offers tied to eligible Unlimited plans. On MacPrices’ iPhone tracker, Verizon’s currently advertised effective prices include the iPhone 17 Pro Max from $199, the iPhone 17 Pro from $99, the iPhone 17 Air from $0, the iPhone 17 from $0, and the iPhone 17e free with eligible service promotions. If you want to shop Verizon’s current offers directly, you can browse Verizon’s iPhone deals here. And for side-by-side comparisons with Apple and other carriers, along with the latest promo pricing updates, visit our iPhone Price Tracker, updated daily.

Read more »

Week’s Best Apple Deals: M5 MacBook Air Discounts, $200 Off MacBook Pro, Free iPhone 17e, and More
Apple deals stayed strong this week, with first-time discounts hitting the new M5 MacBook Air lineup, a clearance 14-inch M5 MacBook Pro dropping to $1399, the first real Studio Display sale, and fresh Apple Watch discounts across major retailers. Carrier buyers also have a standout option right now, with Metro by T-Mobile offering up to $300 off iPhone 17 models and a free iPhone 17e with a new line and number transfer. For the latest Apple sales and price changes, check MacPrices.net’s price trackers updated daily.

Read more »

Apple Watch Series 11 Now $100 Off at Amazon, Target & Walmart
Apple Watch Series 11 models are now on sale for $100 off MSRP at Amazon, Target, and Walmart, with prices starting as low as $299 depending on size and configuration. This is one of the best widely available discounts we’ve seen so far on Apple’s latest everyday smartwatch, which includes updated health tracking, improved battery life, and new features like hypertension notifications. If you’ve been waiting for a meaningful price drop, this is a great time to buy. View current deals here: Amazon, Walmart, and Target. For the latest sales and deals, see our Apple Watch Price Tracker, updated daily.

Read more »