According to News.com, security researcher Kevin Finisterre at Digital Munition has released "attack code" to the public that can locally exploit the launchd daemon.
"Attackers may exploit this issue to execute arbitrary code with elevated privileges," Symantec said in a security alert to customers that was updated on Thursday.
Also mentioned in the article is that iTunes 6.0.5 is quietly patching an AAC parsing flaw.
Parsing a maliciously-crafted AAC file could cause iTunes to terminate or potentially execute arbitrary code. iTunes 6.0.5 addresses this issue by improving the validation checks used when loading AAC files.
Thursday October 22, 2026 11:01 am PDT by Juli Clover
Apple has temporarily removed Keynote, Pages, and Numbers from the App Store, just after releasing an update that added iPhone Duo support and a new Intelligent Assistant.
It is not clear if the apps were removed intentionally, or if it is a bug. Apple has not said when the apps will be reinstated, but if it was in error, they should return soon.
Update: The Mac versions are back without...
Friday October 23, 2026 7:11 am PDT by Joe Rossignol
Apple Music has a 404 page easter egg on the web: a functional iPod that appears when you load a page that does not exist, such as music.apple.com/macrumors.
"Page Not Found," says Apple. "Give this a spin instead."
Apple is clever with this. If you navigate to music.apple.com/ipod instead, the page says "Looking for something?" instead of "Page Not Found."
The easter egg is only...
Tuesday October 20, 2026 11:12 am PDT by Juli Clover
With just three days to go until the iPhone Duo is released, Apple is getting ready for the launch. Behind the scenes, the App Store now has screenshots of Apple's built-in apps running on the Duo. We've seen some apps in marketing materials, but images of the ones we haven't seen give us an idea of what it will be like using the iPhone Duo day to day.
Many apps are shown in landscape...