According to News.com, security researcher Kevin Finisterre at Digital Munition has released "attack code" to the public that can locally exploit the launchd daemon.
"Attackers may exploit this issue to execute arbitrary code with elevated privileges," Symantec said in a security alert to customers that was updated on Thursday.
Also mentioned in the article is that iTunes 6.0.5 is quietly patching an AAC parsing flaw.
Parsing a maliciously-crafted AAC file could cause iTunes to terminate or potentially execute arbitrary code. iTunes 6.0.5 addresses this issue by improving the validation checks used when loading AAC files.
Thursday November 5, 2026 12:59 am PST by Tim Hardwick
Apple is launching five new products on Friday, November 6, following pre-orders that opened last week, including its first touchscreen MacBook Pro models.
The following new products will be available from today:
iPad mini with OLED display and A20 Pro chip
iMac with M6 chip
14-inch MacBook Pro with M6 chip
14-inch MacBook Pro with OLED touchscreen
16-inch MacBook Pro with OLED...
Thursday November 5, 2026 4:22 pm PST by Juli Clover
Apple is sending email surveys to some iPhone Duo buyers to get feedback on display size, crease, under-display camera, and other features.
The first question asks why the buyer chose the iPhone Duo now, with answers like "I wanted to try Apple's first foldable," "It was an impulse purchase," and "I expect smartphone prices to increase."
Other questions ask about the size of the iPhone...
Apple plans to merge the iPhone's Action button with the Camera Control starting next year, according to the leaker known as "Instant Digital."
In a new post on Weibo, the leaker claimed that a single press of the combined button would open the camera, while a long press would trigger the function assigned to the Action button. They explicitly clarified that the dedicated Action button would ...
