Photos Workbench 1.3
Adds compatibility with macOS 15 Sequoia and fixes bugs. ($29 new, free update, 5.8 MB, macOS 12+)

Read more »

Apple re-enables new ‘Tap to Provision’ feature in Apple Wallet ahead of iOS 18 release
After initially disabling the feature last week, Apple has brought back its new “Tap to Provision” feature in the Apple Wallet app in iOS 18, just two days before the wide release of the software. more…

Read more »

Microsoft Office for Mac 16.89
Adds the ability to use the keyboard to work with the ribbon in all Office apps. ($149.99 new for one-time purchase, $99.99/$69.99 annual subscription options, free update, macOS 12+)

Read more »

Airfoil 5.12.3, Audio Hijack 4.4.4, and Piezo 1.9.4
Three Rogue Amoeba audio apps add full support for macOS 15 Sequoia. ($35/64/25 new, free update, various sizes, macOS 14.4+)

Read more »

Helium Is the iPhone’s Kryptonite
Not that you were planning on seeking it out, but Apple recommends that you keep your iPhone and Apple Watch away from high concentrations of helium.Read original article

Read more »

ESR’s new Qi2 chargers with CryoBoost will recharge your new iPhone 16 quickly
ESR is a leading brand for mobile accessories, and the #1 brand for MagSafe accessories by sales on Amazon. Earlier this year, they debuted new Qi2 chargers as an affordable alternative to Apple’s MagSafe. They’re now debuting new Qi2 with their 2nd generation CryoBoost technology, for even faster iPhone charging. more…

Read more »

Indie App Spotlight: ‘CardPointers’ latest update makes tracking credit card rewards easier than ever
Welcome to Indie App Spotlight. This is a weekly 9to5Mac series where we showcase the latest apps in the indie app world. If you’re a developer and would like your app featured, get in contact. CardPointers helps users maximize their credit card rewards and offers, saving users money. If you have multiple credit cards, it can often be difficult to mentally keep track of the best way to earn the most points. Additionally, if you have cards with high annual fees, you’ll often have various perks and credits to help you offset your annual fee, but it might be hard to actually use all of those credits, especially the monthly ones. CardPointers aims to make credit card rewards easier for everyone. more…

Read more »

With prices like these, maybe it’s time to get your Mac a buddy
This HP EliteBook 840 G6 Laptop is prime material for a second material. ime material for a second material. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

A new auction has a classic Apple II cassette tape signed by Steve Jobs
Another signed Apple Computer Company check, along with a cassette tape autographed by Apple co-founder Steve Jobs, are up for auction.Rare Apple items for auction, autographed by Steve Jobs.The event is being hosted online by RR Auction's Remarkable Rarities, with the bidding having opened on September 4th, 2024. Both of the Jobs-signed items are from the very early years of Apple.The first is a handwritten company check, dated July 16th, 1976, and signed by Jobs. It was written to Elmar Electronics, for the amount of $10.52. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Spy thriller Slow Horses season 4 gallops to popularity
Season 4 of "Slow Horses" starting streaming recently and returning fans already made the Apple TV+ comedy espionage series very popular. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

iPhone 16’s A18 Pro chip outperforms the M1 chip in new benchmarks [Updated]
We got our first look at a Geekbench result from the iPhone 16 earlier this week, with somewhat disappointing results. There was a decent improvement in single core performance, but the multi-core score was abnormal. However, newer results paint a much more promising picture. more…

Read more »

Today in Apple history: Apple denies Steve Jobs’ love of ninja stars
On September 14, 2010, the "Steve Jobs ninja stars" story erupted over an alleged incident at Japan's Kansai International Airport. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Here’s everything Apple discontinued after the iPhone 16 event
Apple held their annual iPhone keynote this week, announcing the iPhone 16, iPhone 16 Pro, two models of AirPods 4, AirPods Max with USB-C, and the fully redesigned Apple Watch Series 10. This is everything that Apple phased out with their new product announcements. more…

Read more »

Apple @ Work: Let’s talk about Touch ID, Identity Provider integration, and what Apple needs to do next
Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional-grade platform all the solutions necessary to seamlessly and automatically deploy, manage & protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. Over the years, enterprises have increasingly leveraged Apple’s Identity Provider (IdP) integration for the macOS login window to create a better experience for employees while simultaneously enhancing security. If you had told me ten years ago that another company could ‘take over’ the macOS login window, I would have said that pigs must be flying. In the enterprise, identity is everything. The rise of SaaS (Software as a Service) tools has only amplified the need for a robust and unified identity system. As organizations continue to adopt various cloud-based applications, managing access and ensuring security becomes critical. This is where an IdP comes in—acting as a central point of authentication and access control, it creates a secure and seamless experience for both IT departments and end users. In many organizations, the chosen IdP essentially becomes the ‘operating system’ for the entire company, dictating how users interact with the corporate ecosystem. However, despite these advantages, a significant challenge remains: managing the password for an IdP with password manager access can sometimes conflict with the desired simplicity and efficiency of the login experience. This balance between security and convenience is something many enterprises struggle to balance. more…

Read more »

How to install macOS on an external drive
Macworld Concerned about updating your Mac to the latest version of macOS? Perhaps you aren’t sure about running macOS Sequoia quite yet, or maybe you want to test the beta but don’t want to risk messing up your system. You might be concerned about incompatible software or you might just be thinking that you might hate it and not be able to go back to the macOS you are familiar with.  Luckily you don’t have to install the OS update on your Mac at all. You can install it on an external drive instead. Installing the Mac operating system on an external drive is the safest way to get a good look at a new OS without changing anything on your Mac. It’ll leave your current configuration intact and allow you to play around with the beta of the next version of macOS. In this tutorial we explain how to run macOS from an external drive in four simple steps: Prepare the external drive for the installation using Disk Utility. Get the macOS install files. We’ll show you how. Install macOS on the external drive. Run macOS on the external drive by pressing Alt/Option at start up on an Intel-powered Mac, or pressing and holding the on switch on an M1 or M2-series Mac. What you need If you want to run macOS on an external drive you will need a few things, including a drive with a good amount of storage available. You can use an external hard drive or SSD–and SSD offers faster boot times than a hard drive. It’s also worth investing in a USB-C or Thunderbolt drive as this will offer the fastest connection. You can get hold of a USB flash stick pretty cheaply, such as this San Disk USB Type-C drive with 128GB for $24/£16.49. It’s a bit harder to find a Thunderbolt-powered SSD, and unfortunately, they are a lot more expensive. Take a look at our round-up of the best SSDs. If you want to use the external installation as if you are running it on your Mac we suggest you get the biggest USB C/Thunderbolt drive you can afford. For more buying advice, take a look at our guide to the best external drives for Mac for some cheaper, non-SSD options. Troubleshooting problems with M-series Macs Before we move on to how you can create this external installation of macOS, we will mention some issues people had when trying to create such an installation for an M-series Mac. After the first M1 Macs launched in 2020, it emerged that there was a problem with the USB interface. As a result, some users encountered problems trying to install macOS on and booting from SSDs connected via USB. This issue was quickly addressed in an OS update, but if you find it affects you we suggest that you do the following: Try a different port. For some it has worked to install on a disk connected via USB-A connector, but not USB-C, while the situation has been vice versa for others. Another solution is to use a drive that uses Thunderbolt rather than USB (the port looks the same, but the standard is different). It should be connected directly to the computer, not via a dock. That drive will need a good amount of space (back when we started running Mojave beta on a 32GB stick we found it wasn’t enough once we started using iCloud Desktop and other features that meant that our data started being downloaded). Another issue worth flagging is that if you were hoping to use this boot drive to run older versions of macOS on M1 Macs sadly it isn’t possible as the M1 Mac can only run the ARM version of Big Sur. Step 1: Prepare the drive for installation Follow these instructions to prepare your external drive – note that there may be some slight changes to the process if you wish to install macOS Ventura or the latest macOS beta. Connect the external drive to your Mac. Launch Disk Utility (press Cmd + spacebar and start to type Disk Utility). Before this next step: if you are running High Sierra or later you will need to click on the View drop-down. Choose Show All Devices from the options.  Now you will see the root drive in addition to the external volume below it. The Disk Utility app in Sonoma. The Disk Utility app in Sonoma.Foundry The Disk Utility app in Sonoma.Foundry Foundry Select the External drive in the sidebar (the next step won’t work if you only select the volume–for example, in the screenshot above you need to select the Specific Storage, not Untitled). Click on Erase (you need to erase the drive so you can reformat it properly). Give your drive a name such as “macOS Sequoia” or “USB”. Choose APFS as the Format. Foundry Foundry Foundry Click on Erase. Wait while Disk Utility creates the partition and sets up the drive (this can take a few minutes). Then click Done. Now you will see that your external storage has been renamed with the name you choose and it will be ready for you to install the macOS on it–but there is something else you need to do first. Step 2: Get the macOS install files This step will depend on whether you want to run a macOS beta, a full version of macOS, or even an older Mac OS X. Whether you want to get the macOS Sequoia or the latest beta installation files the process is similar to that detailed below. When the 2024 version of macOS becomes available to download you should be able to get the installation files via Software Update or the Mac App Store. Here’s how to get the macOS Sequoia installer: To download the macOS installer click here to go to the Ventura page on the Mac App Store. Click on Get to download the installer. Software Update will search and then, if you are already running Ventura it will ask you to confirm that you do want to download macOS Ventura. Click on Download. Remember that you just want to download the software, not install it, at this stage. If it’s a full version of an older version of macOS you are after, we explain how to get the installation files for macOS here. If you are after a beta of macOS, you will need to sign up for the beta on your Mac and download the beta files. Once you have the files you’ll want to install them on the external drive rather than your Mac, so be careful. We have a complete guide to getting the macOS beta here. The beta files are about 12GB. Step 3: Install macOS on the external drive Now to install the beta or alternative version of the Mac operating system on your external drive. Open a finder window, go to Applications and find the Sequoia installer (or whichever version of macOS you want to run). You can also find it by using Spotlight (press Command+spacebar and start typing the name of the OS) Click on the installer. A window should open (check the Dock if not). It will invite you to set up the installation of macOS Sequoia (or whatever) and click Continue. Agree to the software license agreement. Foundry Foundry Foundry Next–this is important–click on Show All Disks. Do not click on Home as you don’t want to install on your main drive. Click on the external drive. Click Install. Wait while the version of macOS installs on the drive. This process may take a while–it always takes longer than the estimated time. Note: This will not work if you didn’t set your external drive up correctly as a GUID Partition as per the steps above. Step 4: Run macOS on the external drive There are two ways to run the version of macOS from your external drive Either: Open System Preference > Startup Disk or System Settings > General > Startup Disk. Select the external drive you wish to use to start up the Mac and click Restart. Or: Hold down Option/Alt during startup on an Intel-powered Mac, or press and hold the on button on an M-series Mac until you see the start-up options. Pick the drive you wish to use to start up the Mac. Once you have installed the macOS you want on the drive it should be easy to install subsequent updates there via System Preferences. For more advice about installing macOS or Mac OS X read How to update the Mac operating system and How to install old versions of OS X on a Mac.

Read more »

Apple offers big discounts on refurbished M2 iPad Pro and M1 iPad Air
Apple's Certified Refurbished store in the US is now selling refurbished M1 iPad Air and M2 iPad Pro units with up to 20% off. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Apple’s Johny Srouji confirms all iPhone 16 models have 8GB RAM, more details
On Monday, Apple touted the new iPhone 16 and iPhone 16 Pro as the first iPhones built from the ground up for Apple Intelligence with the A18 and A18 Pro chips. In a new interview, Apple’s Johny Srouji has offered additional details on the iPhone 16 and Apple Intelligence, including confirmation that all four iPhone 16 models have 8GB of RAM. more…

Read more »

M2 iPad Pro and M1 iPad Air now available in the US Apple Refurbished Store
Apple on Friday added two more products to its Refurbished Store in the US: the M2 iPad Pro and the M1 iPad Air. This means that customers can now buy refurbished models of these products at a discount more…

Read more »

Apple sees iPhone 16 Pro Max shipping date slip just minutes start of preorders
The iPhone 16 Pro Max initially had a September 20th shipping date, but high preorder demand quickly pushed it back a week… The post appeared first on MacDailyNews.

Read more »

Price drop: Elevate your iPad with an adjustable 8-port docking stand
Why search for an iPad dongle? This adjustable tablet stand and dock station combo comes with eight useful ports to keep your iPad connected. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

iPhone 16 Pro is said to support JPEG XL format
Macworld According to both 9to5Mac and MacRumors, the iPhone 16 Pro models (and only the Pro models, it seems) will support capturing images in the new JPEG XL format. While support from JPEG XL is not listed on Apple’s specifications, both sites claim to have seen code confirming it. Users will be able to select JPEG XL Lossless or JPEG XL Lossy compression, and 9to5Mac even has Apple’s estimates for file sizes with each format: 11 MB for JPEG-XL Lossy ProRAW at 12 MP 18 MB for JPEG-XL Lossless ProRAW at 12 MP 20 MB for JPEG-XL Lossy ProRAW at 48 MP 46 MB for JPEG-XL Lossless ProRAW at 48 MP By comparison, Apple’s ProRAW format (which uses the Adobe Digital Negative format .dng) is around 75MB for a 48 MP image. So lossless JPEG-XL is around 40 percent smaller. What is JPEG XL? JPEG-XL does not stand for “extra large” as you might think. The Joint Photo Experts Group has moved to using X on all their new formats (JPEG XR, JPEG XT, JPEG XS) and the L stands for Legacy. JPEG-XL is intended to be the main JPEG image standard for the next 20 years or more, just as JPEG has been so popular for the last 30 years. JPEG-XL is a fast, low-complexity (easy and fast to encode and decode by modern standards), royalty-free and open-source format that was formally adopted by the JPEG group in 2020. It takes the JPEG format into the modern era with support for huge image resolutions, HDR, lossy or lossless encoding, up to 4099 channels (multiple color channels, alpha/transparency, thermal, whatever), animation, a mode for synthetic imagery like charts and graphs, and more. It should produce both smaller sizes and much higher quality than current JPEG, and will likely beat formats like HEIC at both compression and quality. Apple added support for viewing JPEG-XL images last year in iOS 17, macOS Sonoma, and watchOS 10. It is not yet widely supported in image editing tools like Photoshop, but many companies have expressed public support for it.

Read more »

End of an era: iPhone 16 won’t include stickers in the box
If you buy an iPhone 16 or iPhone 16 Pro, there’s one thing you won’t find in the box: Apple stickers. In messaging distributed to Apple Store teams this week and seen by 9to5Mac, Apple confirmed that the iPhone 16 will not come with Apple stickers in the box. Instead, the company says that stickers will only be available to iPhone 16 buyers upon request. more…

Read more »

When Ultra doesn’t mean ‘best’ anymore
This week’s Apple Watch announcements were both exciting and a source of frustration. The Apple Watch Series 10 is a huge update in many respects, but the lack of an Apple Watch Ultra 3 disappointed. Now, as nice as the Ultra 2’s new black finish is, Ultra no longer means ‘best.’ And that creates a problem. more…

Read more »

Unicode 16.0 release features new ‘face with bags under eyes’ emoji and more
The Unicode Consortium has finalized and released version 16.0 of the Unicode standard. The update adds 5,185 new characters to… The post appeared first on MacDailyNews.

Read more »

'Flappy Bird' resurrection is likely a ploy to push crypto
"Flappy Bird" was slated to relaunch in 2024 after more than ten years of absence from the App Store — but there are signs that it's just a crypto Ponzi scheme.Image generated with Bing Image CreatorOn Thursday, a group of alleged "Flappy Bird fans" announced that they would revive the decade-dead global hit. While many were excited, an equal amount seemed skeptical.And, as it turns out, there was a good reason for the skepticism. The relaunch appears designed to hock crypto. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

HomeKit Weekly: This lamp includes a HomeKit bulb and multiple USB charging ports
Sometimes, a package of products provides a simple way to accomplish a goal. is great for Apple fans as it includes a USB-A and USB-C port on the back and a HomeKit-compatible bulb—making it a great gift idea for an Apple fanatic in your life. more…

Read more »

iOS 18: Three new features coming to your iPhone next week
iOS 18 is coming to all iPhone users on Monday, and it’s full of new features. As the excitement builds for the release of iOS 18, here’s a recap of three of the most significant changes coming to your iPhone this fall. more…

Read more »

iPhone 16 Pro lets users capture ProRAW photos in JPEG-XL format
Even before the launch of the iPhone 16 on Monday, 9to5Mac had already reported that the new Pro models would have the ability to take photos in JPEG-XL format. Although Apple hasn’t mentioned it anywhere, the iPhone 16 Pro is indeed capable of taking ProRAW photos in JPEG-XL. more…

Read more »

How does Apple Intelligence protect users’ privacy
Many of the models that power Apple Intelligence run entirely on device, and Private Cloud Compute offers the ability to flex and scale… The post appeared first on MacDailyNews.

Read more »

Now patched macOS Calendar exploit let hackers steal data from iCloud
A security researcher has detailed an old hack in macOS that gave hackers full access to a user's iCloud, needing only a calendar invite to succeed.Even Apple's Calendar app can be vulnerableIn 2022, security researcher Mikko Kenttala discovered a zero-click vulnerability within macOS Calendar that could allow attackers to add or delete files in the Calendar sandbox environment. The vulnerability allowed attackers to execute malicious code and access sensitive data stored on the victim's device, including iCloud Photos.The exploit starts with the attacker sending a calendar invite containing a malicious file attachment. The filename isn't properly sanitized, which allows the attacker to perform a "directory traversal" attack, meaning they can manipulate the file's path and place it in unintended locations. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

The Dark Nexus Between Harm Groups and ‘The Com’
A cyberattack that shut down some of the top casinos in Las Vegas last year quickly became one of the most riveting security stories of 2023: It was the first known case of native English-speaking hackers in the United States and Britain teaming up with ransomware gangs based in Russia. But that made-for-Hollywood narrative has eclipsed a far more hideous trend: Many of these young, Western cybercriminals are also members of fast-growing online groups that exist solely to bully, stalk, harass and extort vulnerable teens into physically harming themselves and others.

Read more »

Bug Left Some Windows PCs Dangerously Unpatched
Microsoft Corp. today released updates to fix at least 79 security vulnerabilities in its Windows operating systems and related software, including multiple flaws that are already showing up in active attacks. Microsoft also corrected a critical bug that has caused some Windows 10 PCs to remain dangerously unpatched against actively exploited vulnerabilities for several months this year.

Read more »

Sextortion Scams Now Include Photos of Your Home
An old but persistent email scam known as "sextortion" has a new personalized touch: The missives, which claim that malware has captured webcam footage of recipients pleasuring themselves, now include a photo of the target's home in a bid to make threats about publishing the videos more frightening and convincing.

Read more »

Owners of 1-Time Passcode Theft Service Plead Guilty
Three men in the United Kingdom have pleaded guilty to operating otp[.]agency, a once popular online service that helped attackers intercept the one-time passcodes (OTPs) that many websites require as a second authentication factor in addition to passwords. Launched in November 2019, OTP Agency was a service for intercepting one-time passwords needed to log in to various websites. Scammers would enter the target’s phone number and name, and the service would initiate an automated phone call to the target that alerts them about unauthorized activity on their account.

Read more »

Cisco IKE Information Disclosure
A vulnerability in Internet Key Exchange version 1 (IKEv1) packet processing code in Cisco IOS, Cisco IOS XE, and Cisco IOS XR Software could allow an unauthenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. The vulnerability is due to insufficient condition checks in the part of the code that handles IKEv1 security negotiation requests. An attacker could exploit this vulnerability by sending a crafted IKEv1 packet to an affected device configured to accept IKEv1 security negotiation requests. A successful exploit could allow the attacker to retrieve memory contents, which could lead to the disclosure of confidential information.

Read more »

Cisco IOX XE Unauthenticated OS Command Execution
This Metasploit module leverages both CVE-2023-20198 and CVE-2023-20273 against vulnerable instances of Cisco IOS XE devices which have the Web UI exposed. An attacker can execute arbitrary OS commands with root privileges. This Metasploit module leverages CVE-2023-20198 to create a new admin user, then authenticating as this user, CVE-2023-20273 is leveraged for OS command injection. The output of the command is written to a file and read back via the webserver. Finally the output file is deleted and the admin user is removed. The vulnerable IOS XE versions are: 16.1.1, 16.1.2, 16.1.3, 16.2.1, 16.2.2, 16.3.1, 16.3.2, 16.3.3, 16.3.1a, 16.3.4, 16.3.5, 16.3.5b, 16.3.6, 16.3.7, 16.3.8, 16.3.9, 16.3.10, 16.3.11, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.2, 16.6.3, 16.6.4, 16.6.5, 16.6.4s, 16.6.4a, 16.6.5a, 16.6.6, 16.6.5b, 16.6.7, 16.6.7a, 16.6.8, 16.6.9, 16.6.10, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.7.4, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1s, 16.8.1c, 16.8.1d, 16.8.2, 16.8.1e, 16.8.3, 16.9.1, 16.9.2, 16.9.1a, 16.9.1b, 16.9.1s, 16.9.1c, 16.9.1d, 16.9.3, 16.9.2a, 16.9.2s, 16.9.3h, 16.9.4, 16.9.3s, 16.9.3a, 16.9.4c, 16.9.5, 16.9.5f, 16.9.6, 16.9.7, 16.9.8, 16.9.8a, 16.9.8b, 16.9.8c, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1s, 16.10.1c, 16.10.1e, 16.10.1d, 16.10.2, 16.10.1f, 16.10.1g, 16.10.3, 16.11.1, 16.11.1a, 16.11.1b, 16.11.2, 16.11.1s, 16.11.1c, 16.12.1, 16.12.1s, 16.12.1a, 16.12.1c, 16.12.1w, 16.12.2, 16.12.1y, 16.12.2a, 16.12.3, 16.12.8, 16.12.2s, 16.12.1x, 16.12.1t, 16.12.2t, 16.12.4, 16.12.3s, 16.12.1z, 16.12.3a, 16.12.4a, 16.12.5, 16.12.6, 16.12.1z1, 16.12.5a, 16.12.5b, 16.12.1z2, 16.12.6a, 16.12.7, 16.12.9, 16.12.10, 17.1.1, 17.1.1a, 17.1.1s, 17.1.2, 17.1.1t, 17.1.3, 17.2.1, 17.2.1r, 17.2.1a, 17.2.1v, 17.2.2, 17.2.3, 17.3.1, 17.3.2, 17.3.3, 17.3.1a, 17.3.1w, 17.3.2a, 17.3.1x, 17.3.1z, 17.3.3a, 17.3.4, 17.3.5, 17.3.4a, 17.3.6, 17.3.4b, 17.3.4c, 17.3.5a, 17.3.5b, 17.3.7, 17.3.8, 17.4.1, 17.4.2, 17.4.1a, 17.4.1b, 17.4.1c, 17.4.2a, 17.5.1, 17.5.1a, 17.5.1b, 17.5.1c, 17.6.1, 17.6.2, 17.6.1w, 17.6.1a, 17.6.1x, 17.6.3, 17.6.1y, 17.6.1z, 17.6.3a, 17.6.4, 17.6.1z1, 17.6.5, 17.6.6, 17.7.1, 17.7.1a, 17.7.1b, 17.7.2, 17.10.1, 17.10.1a, 17.10.1b, 17.8.1, 17.8.1a, 17.9.1, 17.9.1w, 17.9.2, 17.9.1a, 17.9.1x, 17.9.1y, 17.9.3, 17.9.2a, 17.9.1x1, 17.9.3a, 17.9.4, 17.9.1y1, 17.11.1, 17.11.1a, 17.12.1, 17.12.1a, 17.11.99SW.

Read more »

HP Web JetAdmin 6.5 Server Arbitrary Command Execution
This Metasploit module abuses a command execution vulnerability within the web based management console of the Hewlett-Packard Web JetAdmin network printer tool v6.2 - v6.5. It is possible to execute commands as SYSTEM without authentication. The vulnerability also affects POSIX systems, however at this stage the module only works against Windows. This Metasploit module does not apply to HP printers.

Read more »

Cisco IOX XE Unauthenticated Command Line Interface (CLI) Execution
This Metasploit module leverages CVE-2023-20198 against vulnerable instances of Cisco IOS XE devices which have the Web UI exposed. An attacker can execute arbitrary CLI commands with privilege level 15. You must specify the IOS command mode to execute a CLI command in. Valid modes are user, privileged, and global. To run a command in "Privileged" mode, set the CMD option to the command you want to run, e.g. show version and set the MODE to privileged. To run a command in "Global Configuration" mode, set the CMD option to the command you want to run, e.g. username hax0r privilege 15 password hax0r and set the MODE to global. The vulnerable IOS XE versions are: 16.1.1, 16.1.2, 16.1.3, 16.2.1, 16.2.2, 16.3.1, 16.3.2, 16.3.3, 16.3.1a, 16.3.4, 16.3.5, 16.3.5b, 16.3.6, 16.3.7, 16.3.8, 16.3.9, 16.3.10, 16.3.11, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.2, 16.6.3, 16.6.4, 16.6.5, 16.6.4s, 16.6.4a, 16.6.5a, 16.6.6, 16.6.5b, 16.6.7, 16.6.7a, 16.6.8, 16.6.9, 16.6.10, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.7.4, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1s, 16.8.1c, 16.8.1d, 16.8.2, 16.8.1e, 16.8.3, 16.9.1, 16.9.2, 16.9.1a, 16.9.1b, 16.9.1s, 16.9.1c, 16.9.1d, 16.9.3, 16.9.2a, 16.9.2s, 16.9.3h, 16.9.4, 16.9.3s, 16.9.3a, 16.9.4c, 16.9.5, 16.9.5f, 16.9.6, 16.9.7, 16.9.8, 16.9.8a, 16.9.8b, 16.9.8c, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1s, 16.10.1c, 16.10.1e, 16.10.1d, 16.10.2, 16.10.1f, 16.10.1g, 16.10.3, 16.11.1, 16.11.1a, 16.11.1b, 16.11.2, 16.11.1s, 16.11.1c, 16.12.1, 16.12.1s, 16.12.1a, 16.12.1c, 16.12.1w, 16.12.2, 16.12.1y, 16.12.2a, 16.12.3, 16.12.8, 16.12.2s, 16.12.1x, 16.12.1t, 16.12.2t, 16.12.4, 16.12.3s, 16.12.1z, 16.12.3a, 16.12.4a, 16.12.5, 16.12.6, 16.12.1z1, 16.12.5a, 16.12.5b, 16.12.1z2, 16.12.6a, 16.12.7, 16.12.9, 16.12.10, 17.1.1, 17.1.1a, 17.1.1s, 17.1.2, 17.1.1t, 17.1.3, 17.2.1, 17.2.1r, 17.2.1a, 17.2.1v, 17.2.2, 17.2.3, 17.3.1, 17.3.2, 17.3.3, 17.3.1a, 17.3.1w, 17.3.2a, 17.3.1x, 17.3.1z, 17.3.3a, 17.3.4, 17.3.5, 17.3.4a, 17.3.6, 17.3.4b, 17.3.4c, 17.3.5a, 17.3.5b, 17.3.7, 17.3.8, 17.4.1, 17.4.2, 17.4.1a, 17.4.1b, 17.4.1c, 17.4.2a, 17.5.1, 17.5.1a, 17.5.1b, 17.5.1c, 17.6.1, 17.6.2, 17.6.1w, 17.6.1a, 17.6.1x, 17.6.3, 17.6.1y, 17.6.1z, 17.6.3a, 17.6.4, 17.6.1z1, 17.6.5, 17.6.6, 17.7.1, 17.7.1a, 17.7.1b, 17.7.2, 17.10.1, 17.10.1a, 17.10.1b, 17.8.1, 17.8.1a, 17.9.1, 17.9.1w, 17.9.2, 17.9.1a, 17.9.1x, 17.9.1y, 17.9.3, 17.9.2a, 17.9.1x1, 17.9.3a, 17.9.4, 17.9.1y1, 17.11.1, 17.11.1a, 17.12.1, 17.12.1a, 17.11.99SW.

Read more »

Mac OS X Safari .webarchive File Format UXSS
Generates a .webarchive file for Mac OS X Safari that will attempt to inject cross-domain Javascript (UXSS), silently install a browser extension, collect user information, steal the cookie database, and steal arbitrary local files. When opened on the target machine the webarchive file must not have the quarantine attribute set, as this forces the webarchive to execute in a sandbox.

Read more »

When Get-Out-The-Vote Efforts Look Like Phishing
Multiple media reports this week warned Americans to be on guard against a new phishing scam that arrives in a text message informing recipients they are not yet registered to vote. A bit of digging reveals the missives were sent by a California political consulting firm as part of a well-meaning but potentially counterproductive get-out-the-vote effort that had all the hallmarks of a phishing campaign.

Read more »

New 0-Day Attacks Linked to China’s ‘Volt Typhoon’
Malicious hackers are exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon, a Chinese cyber espionage group focused on infiltrating critical U.S. networks and laying the groundwork for the ability to disrupt communications between the United States and Asia during any future armed conflict with China.

Read more »

iPhone 15 and 15 Plus free at Verizon for new customers, no-trade in required
Verizon has the iPhone 15 and iPhone 15 Plus now on sale for $0 per month (that's free!) when you add a new line of service. No trade-in is required. Discount is applied to your account monthly over a 36 month term and is valid for the 128GB models in any color. Verizon is applying up to $830 worth of promo credit to these phones, which allows you to step up to iPhone 15 models with more storage for only a few dollars per month. Verizon's deals are live on their site today.

Read more »

Verizon offers free iPhone 16 and 16 Pro models to customers qualifying for max trade-in values
Verizon is offering $1000 discounts on the new iPhone 16 Pro, $830 for the 16 and 16 Plus, for customers opening a new line of service. Discount is applied via monthly bill credits over a 36 month period. The level of this offer will depend on the final value of your trade-in. For those with maximum trade-in value, the base level models will be free. The fine print: "iPhone 16 Pro/iPhone 16 Pro Max: Up to $1199.99 on device payment or at retail price required. New line req'd. Unlimited Ultimate plan required. Less $1000 trade-in/promo credit applied over 36 months; promo credit ends if eligibility requirements are no longer met. 0% APR. Trade-in conditions apply. Taxes and fees may apply. Excludes phones with activation lock turned on, unidentifiable device model or on Lost/Stolen list. Offer may not be combined with other phone offers. Credits will appear on your Verizon Wireless bill. For upgrades, phone must be active on account for 60 days prior to trade in. Smartphone trade-in must be from Apple, Google or Samsung; trade-in terms apply. iPhone 16/16 Plus: Up to $829.99 on device payment or at retail price required. New line req'd. Unlimited Plus or Unlimited Ultimate plan required. Less $830 trade-in/promo credit applied over 36 months; promo credit ends if eligibility requirements are no longer met. 0% APR. Trade-in conditions apply. Taxes and fees may apply. Excludes phones with activation lock turned on, unidentifiable device model or on Lost/Stolen list. Offer may not be combined with other phone offers. Credits will appear on your Verizon Wireless bill. For upgrades, phone must be active on account for 60 days prior to trade in. Smartphone trade-in must be from Apple, Google or Samsung; trade-in terms apply." Verizon's offer is live on their site now. For the latest prices & deals, keep an eye on our iPhone Price Tracker, updated daily.

Read more »

AT&T offers free iPhone 16 and 16 Pro models to customers qualifying for max trade-in values
AT&T is offering $1000 discounts on the new iPhone 16 Pro, $830 for the 16 and 16 Plus, for new and existing customers with an eligible trade-in. Discount is applied via monthly bill credits over a 36 month period. The level of this offer will depend on the final value of your trade-in. For those with maximum trade-in value, the base level models will be free. The fine print: "iPhone 16 Pro/iPhone 16 Pro Max Guarantee limited to current trade-in offer (up to $1000 off with min. $180 trade-in value). Offer subject to change. Up to $1000 off after 36 monthly credits. Subj. to change. Req's purchase on installment plan and trade-in of eligible phone. Other elig. plans available based on account type. Other terms may apply. iPhone 16/16 Plus guarantee limited to current trade-in offer (up to $830 off with min. $130 trade-in value). Offer subject to change. Up to $830 off after 36 monthly credits. Subj. to change. Req's purchase on installment plan and trade-in of eligible phone. Other elig. plans available based on account type. Other terms may apply." AT&T's offer is live on their site now. For the latest prices & deals, keep an eye on our iPhone Price Tracker, updated daily.

Read more »

Buy a new iPhone 16 at Visible, and get $10 off their monthly Visible+ plan
Switch to Visible, and buy a new iPhone 16 (full price or financed), and Visible will take $10 off their monthly Visible+ service for 36 months. Visible+ is normally $45 per month. With this promotion, the cost of Visible+ is $35 for 36 months of service. That's a total savings of $360. Visible is Verizon's low-cost service. Promo is valid today at Visible.

Read more »

Apple iPhone 16 deals are live at Xfinity Mobile: Order one today for up to $1000 off MSRP
Switch to Xfinity Mobile with a new line of service, and take up to $1000 off the price of a new iPhone 16 through October 10, 2024. Final value is applied to your account, monthly, after qualifying trade-in. The fine print: "Offer ends 10/10/24. Up to $1,000 via trade-in credits limited to Unlimited Plus plans (up to $700 for all other plans). Requires qualifying phone trade-in, and purchase of a new eligible Apple phone (excludes iPhone SE) while supplies last, a 24-month Xfinity Mobile Device Payment Plan Agreement (“Device Agreement”), and activation of new Xfinity Mobile line within 30 days of phone purchase date. Trade-in must be completed within 21 days of phone shipment date. Must maintain line required for offer until trade-in is completed. Porting of number is not required with trade-in. Up to $1,000 via trade-in credit applied monthly to your account over Device Agreement period so long as Device Agreement is in effect. Actual trade-in amount varies depending on model of phones for trade in and purchase and will not exceed the retail value of purchased phone. If line is canceled, voluntarily or involuntarily, or phone payments are accelerated, balance of credits associated with Device Agreement are forfeited. Out of stock phones are not eligible. Offer not valid with prior purchases, returns or exchanges. May not be combined with some offers." This deal is live today at Xfinity Mobile. For the latest prices & sales, keep an eye on our iPhone Price Tracker, updated daily.

Read more »

Get a free iPhone 16 at Boost Mobile plus Unlimited service for $65 per month
Boost Mobile, an MVNO using AT&T and T-Mobile's networks, is offering a free 128GB iPhone 16 or 16 Pro including service with their Unlimited plan (30GB of premium data) for a total charge of $65 per month. The per month charge includes a new iPhone every year, plus the Unlimited network access charge. No trade-in is required. iPhones with more storage are also available, but for a few dollars more per month. This deal is live today at Boost Mobile. For the latest prices & sales, keep an eye on our iPhone Price Tracker, updated daily.

Read more »

13-inch M2 MacBook Airs on sale for only $799, $200 off Apple’s MSRP, with free store pickup today
Best Buy has Apple 13" MacBook Airs with M2 CPUs in stock and on sale this weekend on their online store for $200 off MSRP in Space Gray, Silver, Starlight, and Midnight colors. Prices start at only $799. Their prices are the lowest currently available for new 13" M2 MacBook Airs: - 13" M2 MacBook Air (8GB RAM/256GB SSD): $799 $200 off MSRP - 13" M2 MacBook Air (8GB RAM/512GB SSD): $999 $200 off MSRP Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

Apple Watch SE on sale for $60 off MSRP, starting at $189, with free store pickup
Walmart has Apple Watch SE models on sale on their online store for $60 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available). Their prices are the lowest currently available for SE Watches: - 40mm Apple Watch SE GPS: $189, save $60 - 44mm Apple Watch SE GPS: $219, save $60 - 40mm Apple Watch SE GPS+Cell: $239, save $60 - 44mm Apple Watch SE GPS+Cell: $259, save $60 For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

Apple Watch SE on sale for $60 off MSRP, starting at $189, with free store pickup
Walmart has Apple Watch SE models on sale on their online store for $60 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available). Their prices are the lowest currently available for SE Watches: - 40mm Apple Watch SE GPS: $189, save $60 - 44mm Apple Watch SE GPS: $219, save $60 - 40mm Apple Watch SE GPS+Cell: $239, save $60 - 44mm Apple Watch SE GPS+Cell: $259, save $60 For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

Red Pocket Mobile is offering $400 off any iPhone 13, 14, or 15
Red Pocket Mobile has new Apple iPhone 13, 14 or 15's on sale for $400 off MSRP when you switch and open up a new line of service. Red Pocket Mobile is a nationwide MVNO using all the major wireless carrier networks and offers plans starting at $20 per month. Your first month is only $10. They're currently offering $200 off any of these iPhones when purchased with a service plan. After three months of service, Red Pocket Mobile will give you an additional $200 rebate in the form of a Virtual Visa Gift Card. The fine print: "$200 additional rebate after 3 consecutive recurring payments on any monthly GSMA unlimited plan, starting at $20/mo. $200 rebate currently applies on any carrier locked iPhone model. Valid new and existing customers. Existing customers must have a qualifying plan. Only one rebate is valid per line, per year." Keep an eye on our iPhone Price Tracker for the latest prices & deals on iPhones and plans from Apple and its carriers, updated daily. We currently track deals from 18+ wireless carriers.

Read more »

Apple M2 Pro Mac mini on sale for $1099, save $200
B&H Photo has the M2 Pro Mac mini on sale today for $1099 including free 1-2 day shipping. That's $200 off Apple's MSRP and the lowest price currently available for this mini: - Mac mini M2 Pro CPU (16GB/512GB): $1099, save $200 For the latest prices and sales, keep an eye on our Mac mini Price Tracker, updated daily.

Read more »

Apple M2 Pro Mac mini on sale for $1099, save $200
B&H Photo has the M2 Pro Mac mini on sale today for $1099 including free 1-2 day shipping. That's $200 off Apple's MSRP and the lowest price currently available for this mini: - Mac mini M2 Pro CPU (16GB/512GB): $1099, save $200 For the latest prices and sales, keep an eye on our Mac mini Price Tracker, updated daily.

Read more »