5 features I want in the new MacBook Pro (other than a touchscreen)
A new macOS To be completely honest, I’m not really excited about a touchscreen on a MacBook Pro. I’m unable to imagine how the way I use my Mac can be enhanced by my fingers…
Light as Air, Bright as You: The AceTouch Keyboard Case for iPad
Colorful magnetic iPad keyboard for full laptop experience Light, flexible, precise inateck AceTouch iPad keyboard View Deal (function () { document.querySelector(“#sticky-promo-block a”).addEventListener(“click”, function(e) { const debug = document.location.host.search(/lndo.site|go-vip.net/) !== -1; const text = this.closest(“#sticky-promo-block”).querySelector(“p.promo-title”).textContent; const…
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
LiteLLM on Wednesday disclosed that threat actors compromised “multiple independent security controls” to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM’s release pipeline…
Block ads on 9 devices with lifetime access to AdGuard Family for just $14.97
TL;DR: New users can get an AdGuard Family Plan lifetime subscription for just $14.97 (MSRP $169.99), with ad blocking, privacy protection, and parental controls for up to 9 devices. Your browser doesn’t need another pop-up…
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Swati KhandelwalOct 22, 2026Vulnerability / Web Security Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression…
Macworld Podcast: Apple Watch Series 12 review
In this episode of the Macworld Podcast, we take a deep look at the Apple Watch Series 12. We discuss its new features, its price, and whether it’s worth buying. Tune in and find out! …
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
Swati KhandelwalOct 22, 2026Vulnerability / Web Security A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a…
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
Amazon’s Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, against its MadPot honeypot service, as the flaws come under broad exploitation in…
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration…
AI helped uncover a security nightmare in the web’s backbone. Should you be worried?
If you’re of a certain age, “PHP” may invoke memories of early web development in the 1990s. In the decades since, the scripting language has hummed along in the background, used by popular platforms like…