joshuark shares a report from Ars Technica: Dutch officials have warned that a high-severity macOS vulnerability that allows attackers to execute malicious code is under active exploitation. "The NCSC has received a notification indicating that active abuse of this vulnerability has been observed on multiple systems on which port 5900 was accessible from the Internet," the Netherlands National Cyber Security Centrum warned earlier this week. "In all these cases, root had been accessed on the affected system and a Monero crypto miner had been placed."

The vulnerability, tracked as CVE-2026-65400, received a patch from Apple last week for macOS Tahoe, Sequoia, and Sonoma. The vulnerability, with a severity rating of 7.1 out of 10, stems from a bug in the macOS screen sharing capability, which allows a remote party to view the screen and control the keyboard and mouse while a machine is turned on. A flaw in the "state management," which keeps track of preceding events, user interactions, variables, and other system states, is the underlying cause. A video of the exploit in action can be found here. Details of CVE-2026-65400 became public at last week's Black Hat security conference. Apple said last week that CVE-2026-65400 "may" allow an attacker without credentials to gain access to a Mac. It's unclear why Apple hedged, but softening language is common among most tech developers when disclosing vulnerabilities.

As noted by the NCSC, the vulnerability is being exploited when port 5900 is exposed to the Internet. When screen sharing is turned on, the macOS firewall opens the port. Routers and dedicated firewalls generally block the port unless configured to override that setting. Security practitioners generally advise Mac users to keep the port closed even when using screen sharing and to instead connect over a VPN or through SSH tunneling. The alternatives require actions that aren't within the capabilities of most users. The safest practice is to block screen sharing, enable it only when screen sharing is needed, and to turn the feature off once a session has ended. Screen sharing can be turned on or off by accessing System Settings > General > Sharing and toggling the switch for Screen Sharing. Of course, installing last week's security update is also a must. Sharing is not caring.

Apple is proposing to charge U.S. developers up to 15% when users leave an app through an external purchase link, with lower rates of 10% or 5% for certain programs and smaller developers. The proposal follows years of litigation with Epic Games and a contempt ruling that temporarily barred Apple from collecting any link-out fees. A federal judge will now decide what commission, if any, is reasonable. MacRumors reports: These proposed fees are what developers would pay when someone uses their app, taps a link in the app, and then makes a purchase on the website in the link. So if someone using the Spotify app clicked a link in the app to go to the Spotify website and then purchased a subscription, Spotify would owe Apple a 15 percent fee. Apple says the fees were calculated based on expert analysis, and they are lower than the link-out rates Google is charging in the Epic v. Google case.

Apple submitted the proposal to the U.S. District Court for the Northern District of California, where Judge Yvonne Gonzalez Rogers has been tasked with determining a reasonable fee for Apple to charge for its intellectual property. The appeals court suggested the commission could be limited to the direct costs of facilitating link-outs, and under that approach, the fee would be zero. Apple says a zero commission would not reflect the value that it provides developers, and its suggested commission gives it fair compensation for the App Store platform.

Apple is reportedly negotiating multi-year deals with news publishers to give its redesigned Siri access to current news and other information, with payments potentially tied to how often publishers' content is used. The talks come as Apple prepares to launch its long-delayed Siri AI later this year, after partnering with Google to use distilled Gemini models. Engadget reports: [The Wall Street Journal] did not reveal the specific publishers Apple reached out to, but did note the company has proposed structuring payments around a variable compensation plan, which would see it pay those organizations when their content is used. By contrast, most large AI labs like OpenAI have typically offered guaranteed fees in exchange for broad access. According to the The Journal, Apple has paid publishers for access to their content in the past as part of earlier agreements that saw the company secure AI training rights.

Long-time Slashdot reader BrianFagioli is announcing that he's released a new iPhone app that creates a cryptographic witness for photos without uploading the original image. The app hashes the file, signs the hash using a dedicated identity stored in Apple Keychain, and publishes the witness to Nostr relays while keeping the photo inside the app unless the user chooses to export it.

Rather than trying to determine whether a scene was genuine, the app — named Veridenz — answers a narrower question, by verifying whether a photo file matches the one that was originally witnessed. Users do not need a Nostr account because the app creates its own signing identity, keeping private documentation separate from a public Nostr profile.
"The developer does not collect any data from this app," says its page in Apple's iPhone store. The app's tagline is "Capture. Prove. Verify."

Apple has capped the number of open bug-bounty reports researchers can submit after being flooded with low-quality and sometimes entirely fabricated vulnerabilities generated by AI. MacRumors reports: The Financial Times learned of the limit after cybersecurity startup Bynario used ChatGPT to locate more than 50 macOS bugs in three weeks. Bynario found a privilege escalation exploit that could let an attacker get unrestricted access to a Mac, but was unable to report it because Apple limited the number of bug reports Bynario could submit. Bynario sent eight reports to Apple in 2025, and another five in 2026 before hitting a restriction.

Bynario's founder said it is a "very difficult time in the industry" because companies are being "flooded by the sheer amount of bugs." Apple has since been in contact with Bynario and is reviewing the company's submissions. While Apple now has a cap on the number of open submissions a researcher can have, researchers can request an increase to make sure Apple's security team doesn't miss a critical vulnerability.

Apple is now seeking a preliminary injunction to prevent OpenAI and Jony Ive's io startup from developing AI hardware allegedly based on stolen Apple trade secrets. "The iPhone maker also claims that more of its former employees may be involved with the trade secrets theft," reports TechCrunch. From the report: In a new filing, Apple is requesting expedited discovery from the accused OpenAI employees, senior systems engineer Chang Liu and Chief Hardware Officer Tang Yew Tan; OpenAI, and its foundation; and io, the device startup co-founded by Apple's former lead designer Jony Ive. Apple also notes that its continued investigation has so far revealed 11 other former Apple employees beyond Liu and Tan may have been witnesses or otherwise involved in the case, and others who were previously named in the original complaint, like OpenAI employee Yu-Ting Peng.

The filing marks an escalation in Apple's legal battle with OpenAI, as it suggests Apple has uncovered new evidence that the misconduct goes beyond the former employees named in the original complaint. "For example, another former Apple employee seems to have met with Mr. Liu and Ms. Peng in advance of Ms. Peng's interview at OpenAI and discussed with them during that meeting Apple proprietary information relating to unannounced products," the filing states. "Yet another former Apple employee took screenshots of confidential Apple documents relating to an unannounced Apple product before an interview at OpenAI."

"And, after Apple filed its complaint, multiple former Apple employees now working at OpenAI reached out to discuss returning Apple-issued work devices they kept when they left Apple," Apple claims, suggesting there were more who were possibly involved with the scheme. Apple is pushing the court to allow for expedited discovery because it believes it has good cause to suspect that there are others involved in the theft of its intellectual property. The company noted that its motion for a preliminary injunction is also pending. Apple's request for a preliminary injunction is "both based on false information and completely unnecessary because we do not have, nor want, any of their trade secrets," said OpenAI in a blog post.

"We're much more interested in building innovative products and technologies that push the frontier," OpenAI's statement reads.

An anonymous reader quotes a report from The Guardian: Apple has launched a new legal challenge against a UK government demand to access its customers' highly encrypted data, a year after the Home Office agreed to abandon its previous request. The US tech company launched the legal complaint last month at the Investigatory Powers Tribunal (IPT), an independent court that has the power to investigate claims that the UK intelligence services have acted unlawfully. The UK government had made a second request to Apple to grant it a "back door" to encrypted iCloud data belonging to British users, according to an order issued by the court.

Britain backed down on its original demand for access to data from UK and US customers last year, after a heated transatlantic tussle over encryption between London and Washington. UK authorities subsequently issued a new "technical capability notice" (TCN) to Apple that did not apply to American users. Apple is seeking to challenge the British government's powers to issue TCNs under the UK Investigatory Powers Act, according to the details of the new legal case first reported by the Financial Times. [...] The original TCN issued last year asked Apple for the right to see users' encrypted data protected by its advanced data protection (ADP) program in the event of a national security risk.

Apple said the removal of the tool -- which not even it can access -- would make users more vulnerable to data breaches from bad actors and other threats to customer privacy. Creating a "back door" would also mean all data was accessible by Apple, which it could be forced to share with law enforcement possessing a warrant. As a result, Apple withdrew UK customers' access to its ADP program in January 2025. The Home Office has maintained that the Investigatory Powers Act, under which such orders are issued, contains robust safeguards and is used only when absolutely necessary.

Apple says its lower-cost MacBook Neo is beginning to displace Windows laptops and Chromebooks in K-12 schools, with several districts purchasing thousands of units. According to the company's latest earnings call, nearly half of the large MacBook Neo purchases made by U.S. educational institutions last quarter reportedly replaced competing platforms. 9to5Mac reports: Apple's commentary highlighted some large district deployments moving to Neo Pinellas County Schools, one of the largest districts in Florida, which is moving its 25k students off Windows and onto MacBook Neo across its 18 high schools. In Washington, Peninsula School District 401 moved over its 8,000 students from Chromebooks to MacBook Neo. Midwest City-Del City School District in Oklahoma purchased more than 6,000 MacBook Neos to become an all-Apple district for students.

Apple's practice of mixing employees' work files with personal iCloud accounts reportedly left some former staff with continued access to confidential documents, messages, and even new updates after leaving the company. "The former employees said many Apple files they had been shared on over their careers at the company -- including planning documents for product launch events -- continued to sync to their personal devices through the iCloud storage service after they left Apple," reports The Information. "In some cases, they even received notifications about fresh updates to the documents. Some former employees said they were petrified to delete the files for fear that doing so would attract Apple's attention." MacRumors reports: Apple files get mixed in with employees' accounts because the company encourages them to use their personal Apple Accounts with their work iCloud account. Employees are given a 2TB iCloud plan and are able to merge the storage with their existing Apple Account or create a new account. Since only one primary account can be signed in at a time, most opt to use their existing account to avoid having to carry two iPhones. Apple has a managed folder for workplace files that it revokes access to when an employee leaves, but some internal documents aren't saved there automatically and shared files end up mixed in with personal content. Employees can also retain access to iMessage chats and files shared via the Messages app.

Lingering access to Apple systems is central to Apple's lawsuit against OpenAI. In its filing, Apple alleged that former employee Chang Liu breached Apple's systems using a "rare, previously unknown authentication bug" to download files while he was working at OpenAI. Apple told The Information that the OpenAI lawsuit is unrelated to any files left available on iCloud and that it does not pursue legal claims against former employees who accidentally have Apple documents in their personal iCloud accounts. "This case is about OpenAI employees wrongfully taking Apple's secret and confidential information regarding our unreleased technologies, processes, and products. Nothing in the filing relates to documents shared by, or stored in, iCloud."

Apple's stock "fell just shy of 10% on Friday," reports Yahoo Finance, "after CEO Tim Cook warned about the impact of the global memory shortage on the company's business." During Apple's third quarter earnings call, Cook said the company paid significantly more for memory in the quarter and expects that to further increase in the current period. And while Apple is able to offset some of that price jump, it won't be able to tackle it all... The CEO said that iPhone and Mac sales outpaced Apple's own expectations and that a lack of flexibility in the supply chain is making it more difficult to keep up with demand.
Yahoo Finance cited an investment analyst who predicts overall gross margins for Apple's iPhone could drop from 38% to 34.5%. But another analyst sees a scenario where Apple "raises iPhone prices, unit growth will slow, and as unit growth slows, so will user growth, which we think ultimately will slow Services growth." (Still, Yahoo Finance predicts Apple's new leasing program "could help address those concerns.")

Apple has another controversial option, according to the blog 9to5Mac: Bloomberg reports that US senators from both sides of the aisle are urging Apple CEO Tim Cook to commit by August 21 to not using memory chips from Chinese suppliers CXMT and YMTC....

Apple is not required to obtain U.S. government approval to purchase chips from the companies, but doing so without the administration's support could expose it to significant political ramifications. Which is why, in an interview with The Wall Street Journal ahead of Apple's recent price hikes, Tim Cook said that "everything needs to be on the table," adding that "we should look at all supply...." More recently, the Journal reported that Apple's use of Chinese memory chips could extend beyond China, with the company seeking the administration's blessing to use components from CXMT and YMTC in products sold elsewhere outside the US. The report also detailed Micron's efforts to persuade the administration to reject Apple's request, arguing that allowing Chinese suppliers into Apple's supply chain could undermine domestic memory production...

[Bloomberg's reported that U.S. lawmakers warned] other companies could follow Apple's lead, potentially undermining domestic memory production and planned investments in states such as Indiana, Idaho, New York, and Virginia... [T]he senators sought details about any information Apple has shared with CXMT during the component qualification process, noting that the transfer of controlled technical information to advanced chipmaking facilities in China may require a Commerce Department license.
The blog MacRumors notes that Apple has already increased prices for Macs and iPads in June because of surging memory prices. Apple CEO Tim Cook said Thursday "we did it because we're in what I would characterize as a 100-year flood on memory pricing with exponential increases in memory prices." Cook did not comment on whether Apple plans to raise iPhone prices when the iPhone 18 Pro models and first foldable launch this September, but multiple analysts believe prices will go up. Cook said Apple is expecting to pay higher memory costs in the September quarter, though Apple will be able to partially offset it with lower costs on some non-memory components and a stockpile of inventory.
Sky News points out that "It was Tim Cook's final earnings appearance before his retirement after 15 years at the helm of the company." Apple, which recently topped Nvidia as the most valuable listed company, has been largely spared the volatility in share price seen by chipmakers and big spenders on artificial intelligence. Apple continues to generate cash without the huge investment spending that its Wall St peers are dealing with "and that showed across most parts of the operation," said Thomas Monteiro, an analyst at Investing.com.

Apple has replaced its iPhone Upgrade Program with Apple Upgrade, a Klarna-backed U.S. leasing service covering most iPhones, iPads, Macs, and Apple Watches. MacRumors reports: Apple Upgrade has lower base prices than the iPhone Upgrade Program, with iPhones available starting at $17.99 per month and the Apple Watch available starting at $11.99 per month. Macs can be leased starting at $24.99 per month, and iPads start at $11.99 per month. AppleCare+ is optional and not included in the lease price, with customers also able to opt for AppleCare One. There are 12-month and 24-month leasing options for the iPhone and Apple Watch, along with 24-month and 36-month leasing options for the Mac and iPad. Lease cost varies based on device, and is lower with a device trade-in that's applied on a monthly basis. [...]

When leasing an iPhone, customers are required to choose a plan from AT&T, Verizon, or T-Mobile, and prepaid plans are not eligible. iPhones need to be leased with a carrier plan, but the iPhones are unlocked so customers can switch carriers if desired. MVNOs like Mint Mobile or Visible are not supported. At the end of the leasing period, customers can choose to return the device and exit the program, pay off the remaining amount owed on the device with a one-time payment and keep it, or return it and upgrade to a new device with a new lease.

The payoff amount is the difference between what was paid during the leasing period and the retail price of the device, minus any remaining trade-in credits. Klarna is not charging a fee for the leasing program, so an iPhone that's $1,099 can be leased and then purchased for $1,099 with no extra cost beyond taxes. As with trade-ins, Apple will send a pre-labeled and prepaid shipping box for device returns or upgrades. If you don't opt to pay the purchase fee at the end of the leasing program, you will not own the device and must return it. Last week, after Bloomberg reported on Apple's upcoming leasing program, 9to5Mac uncovered code in the iOS 27 beta suggesting the company was developing a system that could restrict leased iPhones when customers fall behind on payments. Apple has now told The Verge that the new "Restricted Mode" will not be activated in response to a missed lease payment. What the new system is actually meant for remains unclear.

MacRumors interviewed AI critic Ed Zitron, author of the Where's Your Ed At newsletter and host of the Better Offline podcast, about what could happen to Apple if the costly AI infrastructure boom collapses. Zitron argued that Apple is relatively well insulated because it has spent far less on data centers than rivals such as Microsoft, Google, and Amazon. He said the company could use the downturn to make selective acquisitions, though it might simply continue operating largely as before. "I think they will sit on the sidelines and watch everything burn," Zitron said. Here's an excerpt from the report: If the bubble deflates the way you expect (write-downs, too much compute supply, possibly OpenAI cratering), can you walk us through what that would actually look like for Apple? Does anything break for iPhone users, or does Apple mostly watch it happen from the sidelines? Could it even benefit Apple?

I think things would look much the same for Apple. I think they will sit on the sidelines and watch everything burn. I could see them doing some choice acquisitions as things begin to collapse, but I could also see them do nothing.

I think Apple is in a very weird place at the moment. The Vision Pro was a dud, but it was also the most interesting and future-forward thing I've seen anyone put out in a while. If they were smart, they'd tread water and sink as much money into making that as small as humanely possible -- no matter how long it takes -- because the entire AI bubble is a result of everybody running out of hypergrowth ideas, mostly because we're flat out of new interfaces.

I want to be clear that what they want to do with the Vision Pro requires it to basically be weightless and invisible and never need adjustments. When it works, it's genuinely awesome. But that's a load-bearing when. One slight movement means the whole thing goes out of focus. I can't even use mine anymore because it needs an update that requires you to wear the thing the whole time. So much promise, released too early, shoved out the door by a CEO on his way out.

Digital Trends reports: Apple could unveil its first smart glasses at WWDC in June 2027, followed by a consumer release toward the end of the year, according to Bloomberg... Part of the delay reportedly stems from Apple's engineering and marketing teams spending more time refining the product and deciding how to address the privacy concerns...

Apple has reportedly considered glasses without cameras, as well as a version where the cameras can analyse the surroundings but cannot record photos or video. Such an approach could still support object recognition, navigation, Siri, calls, and music playback. The company is also expected to favor on-device processing, avoid facial recognition, keep recordings away from AI training, and use a more visible light around the camera.

Wine 11.14 is out with initial WoW64 mode support on FreeBSD, allowing 32-bit Windows applications to run on a 64-bit system without relying on 32-bit multilib support. The release also adds Start Menu icon support in Wine Explorer, 7.1 format conversions in DirectSound, AES-GMAC support in BCrypt, and 21 bug fixes affecting apps and games including Adobe Reader, Heroes of the Storm, and Age of Empires I and II. Additional details can be found at WineHQ.org.

Ford will become the first automaker to embed Apple Maps directly into its vehicles, starting with an all-electric midsize pickup built on its new Universal Electric Vehicle platform. "The pickup -- with Ford testing preproduction models on roads now -- is expected to start at $30,000 when it comes to market in 2027," reports the Detroit Free Press. "Ford has said several other EVs off that platform will follow, including a small all-electric SUV." From the report: Ford CEO Jim Farley said the new EVs will redefine advanced technology as simple, useful, and at a price point that is attainable for most people. "We're proud to embed Apple Maps' navigation and mapping technology directly into our Universal Electric Vehicle Platform, giving customers the ultimate navigation experience alongside our Ford app, a full suite of software, and next-generation BlueCruise, all enabled by a new zonal architecture," Farley said in a statement. "Apple Maps has delivered a world-class product, and we're honored to be among the first to embed it directly into a vehicle, helping define intuitive, capable driving."

In a joint statement, Apple and Ford said the integration will deliver a "beautiful and easy-to-use navigation experience powered by Apple Maps directly to the vehicle's displays. Road-level Maps information will also enable Ford's Latitude AI team to build a seamless hands-free driving experience." Ford said it will use that road information to develop its next-generation BlueCruise hands-free highway driving capability. Also, by leveraging Apple's new MapKit for Automotive SDK, Ford's UEV Platform will offer drivers turn-by-turn directions using natural language, real-time traffic information, intuitive search and routing options for the best route. The system will give drivers EV routing functionality to help drivers with the warming and cooling process of the vehicle's battery before driving or fast-charging.