Apple loses major antitrust appeal in Europe, remains a ‘gatekeeper’

Apple has today lost a major antitrust appeal in Europe, with all three of its claims being rejected. The company has long been fighting its requirement to comply with the EU’s Digital Markets Act (DMA), but a court has…

https://9to5mac.com/2026/07/08/apple-loses-major-antitrust-appeal-in-europe-remains-a-gatekeeper/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

No delay to iPhone Ultra, says supply-chain report

More supply chain sources have rejected claims of delays to iPhone Ultra production, reporting that it appears to be on track for a September release. However, the latest report doesn’t rule out limited initial supplies…

https://9to5mac.com/2026/07/08/no-delay-to-iphone-ultra-says-supply-chain-report/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Possible Phishing 🎣
on: ⚠️hxxps[:]//surl[.]li/xenipe
🧬 Analysis at: https://urldna.io/scan/6a52c4a43b77500009eb9984
#cybersecurity #phishing #infosec #urldna #scam #infosec

Apple Watch has a useful hidden feature for tracking a great healthy habit

My new favorite Apple Watch and Apple Health metric is one that has been quietly working in the background for years. Specifically, it’s a bit of a hidden Apple Watch feature for tracking a great healthy habit: Time in …

https://9to5mac.com/2026/07/08/apple-watch-has-a-useful-hidden-feature-for-tracking-a-great-healthy-habit/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

I’m disappointed Apple will charge for AI security camera features in the Home app

One of the things tucked away in the small print of macOS 27 beta 3 is the news that you’ll need a 2TB iCloud+ subscription in order to use the new AI features for home security cameras in the Apple Home app. While some…

https://9to5mac.com/2026/07/08/im-disappointed-apple-will-charge-for-ai-security-camera-features-in-the-home-app/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

🟠 CVE-2026-15480 - High (8.8)

A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such manipulation of the argument device_name leads to stack-based buffer overflow. The a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15480/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-15480

Possible Phishing 🎣
on: ⚠️hxxps[:]//mailbocxhelpservice[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a53191c3b77500009eba14b
#cybersecurity #phishing #infosec #urldna #scam #infosec

🚨 EUVD-2026-43203

📊 Score: 8.7/10 (CVSS v3.1)
📦 Product: TEW-635BRM
🏢 Vendor: TRENDnet
📅 Updated: 2026-07-12

📝 A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_test of the file /sbin/rc of the component IPoA WAN Connection Setup. Performing a manipulation of the argument ipoa_ipaddr results in ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43203

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-43202

📊 Score: 8.7/10 (CVSS v3.1)
📦 Product: TEW-635BRM
🏢 Vendor: TRENDnet
📅 Updated: 2026-07-12

📝 A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such manipulation of the argument device_name leads to stack-based buffer overflow. The attack c...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43202

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-43201

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: NX15
🏢 Vendor: H3C
📅 Updated: 2026-07-12

📝 A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function change_passwd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak passwo...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43201

#cybersecurity #infosec #euvd #cve #vulnerability

🟠 CVE-2026-15481 - High (8.8)

A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_test of the file /sbin/rc of the component IPoA WAN Connection Setup. Performing a manipulation of the argument ipoa_ipaddr resu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15481/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-15481

🔴 CVE-2026-56765 - Critical (9.8)

Vikunja before 2.2.1 contains an authorization flaw where the LinkSharing.ReadAll endpoint exposes share hashes to users with read access, enabling permission escalation to admin-level shares. The GetTaskAttachment endpoint performs permission che...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56765/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-56765

🟠 CVE-2026-56261 - High (8.6)

Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56261/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-56261

🟠 CVE-2026-56279 - High (7.5)

Capgo before 12.128.2 contains an information disclosure vulnerability in the get_orgs_v7(userid) RPC function that remains publicly invokable despite intended private access controls. Unauthenticated attackers can supply arbitrary user UUIDs to r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56279/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-56279

ABB: 97 CVEs, avg CVSS 7.59, max 10. 95% unpatched, Trust Score: D. Critical infrastructure at risk. #ABB #cybersecurity #infosec

https://www.valtersit.com/vendors/abb/

Compromised Jscrambler npm Packages deploys Rust-Based Infostealer after Installation

Pulse ID: 6a5337c1a29930d925c66407
Pulse Link: https://otx.alienvault.com/pulse/6a5337c1a29930d925c66407
Pulse Author: cryptocti
Created: 2026-07-12 06:44:17

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #InfoStealer #NPM #OTX #OpenThreatExchange #Rust #bot #cryptocti

PSA: macOS 28 will drop support for encrypted Mac OS Extended volumes

Apple has announced that starting with macOS 28, users will need to decrypt or reformat certain storage volumes to keep using them. Here are the details.

https://9to5mac.com/2026/07/08/psa-macos-28-will-drop-support-for-encrypted-mac-os-extended-volumes/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Spotify vs Navidrome — the bill decides

Side by side: $156/yr with ads and their algorithm, or $0 with your own library and rules. Navidrome is the music server Spotify hopes you never find.

Directory: https://selfhost.directory

#Datahoarder #Linux #Selfhosting #Degoogle #Opensource #Cybersecurity #Navidrome

🟠 CVE-2025-70796 - High (7.5)

An unauthenticated path traversal vulnerability exists in the web management interface of WTI (Wireless Technology, Inc.) version 3.5.0.r 2024/05/24 00:00:00. An unauthenticated attacker can craft malicious HTTP requests containing traversal seque...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70796/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2025-70796

🔴 CVE-2026-15143 - Critical (9.3)

A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to ser...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15143/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-15143

🟠 CVE-2026-61434 - High (8.8)

PraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execution that allows attackers to execute restricted commands via find's built-in -exec, -execdir, and -delete actions. Attackers can craft find commands ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61434/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-61434

Deals: M5 Pro MacBook Pro $449 off, MacBook Air $250 off, Ultra 3, iPhone 17 Pro Max $449 off, more

Joining the ongoing AirPods 4 deal at nearly 25% off and a series of Apple Watch Ultra 3 models at nearly $100 off, this morning we spotted this 2TB M5 Pro MacBook Pro at $449 off the new list price and the base model 1…

https://9to5mac.com/2026/07/07/deals-macbook-pro-ultra-3-iphone-17-pro-max/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

AirPods Max condensation lawsuit significantly narrowed by judge

Brooklyn federal judge Orelia E. Merchant has dismissed most claims in a proposed class-action lawsuit alleging that Apple’s AirPods Max suffer from a condensation defect. Here are the details.

https://9to5mac.com/2026/07/07/airpods-max-condensation-lawsuit-significantly-narrowed-by-judge/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Possible Phishing 🎣
on: ⚠️hxxps[:]//us-ledgger-live[.]framer[.]media/live-enus
🧬 Analysis at: https://urldna.io/scan/6a527e5c3b77500009eb92ae
#cybersecurity #phishing #infosec #urldna #scam #infosec

AnyDesk 0Day ZDI-26-401: No Patch After 15 Months, DoS Remains Active https://deafnews.it/en/article/anydesk-0day-zdi-26-401-no-patch-after-15-months-dos-remains-active #Cybersecurity

Pocket Casts update brings three new features, including CarPlay chapter artwork

There’s a new version of Pocket Casts out for podcast listeners today, and it includes three new features. One in particular will be of interest to drivers with CarPlay.

https://9to5mac.com/2026/07/07/pocket-casts-update-brings-three-new-features-including-carplay-chapter-artwork/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Broadband consumer labels could become less transparent under new FCC rules

A vote by the Federal Communications Commission scheduled for later this month could allow internet providers to disclose fewer details about the fees added to customers’ bills. Here are the details.

https://9to5mac.com/2026/07/07/broadband-consumer-labels-could-become-less-transparent-under-new-fcc-rules/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Possible Phishing 🎣
on: ⚠️hxxps[:]//mailer05-tra[.]mdbgo[.]io
🧬 Analysis at: https://urldna.io/scan/6a52e71a3b77500009eb9cb6
#cybersecurity #phishing #infosec #urldna #scam #infosec

Anthropic expanding Claude Cowork to mobile and web, details here

Anthropic announced today that it is expanding Claude Cowork capabilities from the desktop app to the web and mobile. Claude Cowork on mobile and the web will start as a beta feature with a gradual rollout on select pai…

https://9to5mac.com/2026/07/07/anthropic-expanding-claude-cowork-to-mobile-and-web-details-here/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Vaultwarden: passwords, but private

Vaultwarden — passwords, but private. Works with every Bitwarden app. Audited, end-to-end encrypted. Passkeys included. It replaces 1Password ($48/yr) for exactly $0. Install guides, alternatives and screenshots in the directory.

Directory: https://selfhost.directory

#Docker #Datahoarder #Cybersecurity #Homeserver #Tech #Selfhosted #Vaultwarden

Xbox Family Settings for iPhone and iPad expands console parental control tools

Heads up, parents. Microsoft just released an update to their Xbox Family Settings app for iPhone and iPad that adds new console parental controls.

https://9to5mac.com/2026/07/07/xbox-family-settings-for-iphone-and-ipad-expands-console-parental-control-tools/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

🟠 CVE-2026-61437 - High (7.8)

PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow._resolve_pydantic_class (src/praisonai-agents/praisonaiagents/workflows/workflows.py). When a workflow step uses a string ou...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61437/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-61437

🔴 CVE-2026-61444 - Critical (9.1)

PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py where the agents_file parameter is directly interpolated into an f-string without sanitization. Attackers can inject arbitrary Python code that executes when ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61444/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-61444

🚨 EUVD-2026-43194

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Call Recording Software
🏢 Vendor: Eleveo
📅 Updated: 2026-07-12

📝 A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/composeEmailAction.do. Executing a manipulation can lead to improper authorization. The attack can be executed...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43194

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-43193

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Call Recording Software
🏢 Vendor: Eleveo
📅 Updated: 2026-07-12

📝 A vulnerability was found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/pci_dss_status.jsp. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43193

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//njitfinancialaid[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a52eedf3b77500009eb9d57
#cybersecurity #phishing #infosec #urldna #scam #infosec

🔴 CVE-2026-59792 - Critical (9.6)

In JetBrains IntelliJ IDEA before 2026.1.4,
2026.2 code execution via path traversal in project workspace ID handling was possible

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59792/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-59792

Your music. No rent.

A slow scroll through Navidrome doing what Spotify does, minus the bill and the algorithm. No pitch today.

Directory: https://selfhost.directory

#Homelab #Cybersecurity #Bigtech #Selfhosted #Devops #Opensource

Weibo leaker says iPhone 18 Pro thickness will be ‘surprising’

Days after materials from Apple supplier Tata surfaced online, prominent Weibo leaker “Fixed Focus Digital” doubled down on his earlier claim that the iPhone 18 Pro will be thicker than the iPhone 17 Pro. Here are the d…

https://9to5mac.com/2026/07/07/weibo-leaker-says-iphone-18-pro-thickness-will-be-surprising/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

🟠 CVE-2026-55687 - High (7.5)

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Versions 6.0.1, 5.5.4, 5.4.4, 5.3.5, and possibly prior contain an out-of-bounds write in jpeg_parse_dqt_marker() in components/esp_driver_jpeg/jpeg_parse_marker.c because th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55687/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-55687

🟠 CVE-2026-54063 - High (7.5)

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the checkSheet() function in github.com/xuri/excelize/v2 uses an attacker-controlled XML attribute value directly as the length argument to m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54063/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-54063

🟠 CVE-2026-39244 - High (7.5)

adm-zip before 0.5.18 is vulnerable to denial of service via a crafted ZIP file with a manipulated uncompressed size header field. In zipEntry.js line 103, Buffer.alloc(_centralHeader.size) allocates memory based on the declared uncompressed size ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39244/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-39244

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ AI Coding: Do Security Risks Outweigh Productivity Gains?
🔗 https://www.darkreading.com/application-security/ai-coding-security-risks-productivity-gains

AI coding tools cost $19-$200/month/user, but security scanning, remediation, and false positives add hidden costs. Are the productivity gains worth it?

🔴 CVE-2026-51119 - Critical (9.1)

An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /SystemUsers/CreateAppUser components

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-51119/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-51119

🟠 CVE-2026-53657 - High (8.2)

Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to 2.1.3, on an instance of Lima running with the qemu driver, an arbitrary user in the VM could access /run/lima-guestagent.sock when the guest agent is enabl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53657/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-53657

🟠 CVE-2026-2398 - High (8.8)

Authorization bypass through User-Controlled key vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows Privilege Escalation.

This issue affects MobilMen 20T: from v3 through 10072026. NOTE: The vendor was contacted early about this di...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2398/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-2398