Kategorie

Apple’s second day of launches this week saw it follow its tempting iPad mini upgrade by pumping up the processor in two of its most popular Macs, even while it injected artificial intelligence into Creator Studio.

24 hours of portable pro performance: 14-in MacBook Pro

Apple’s 14-inch MacBook Pro is popular but sits in a funny place in Apple’s notebook lineup, with the powerful and popular MacBook Air biting at its heels and the more performant and powerful (though not yet M6) MacBook Pro models sitting above.

We already know what the M6 chip is capable of, because it is already inside the Mac mini (which will be made in the US later this year). We know it delivers better single-core scores on Geekbench than the 10-core M5 MacBook Pro. We also know it beats that last MBP in multi-core. Now that same chip is available in a 14-inch MacBook Pro — a really promising dose of power and performance in a highly portable pro Mac that now packs a mighty 24-hour battery life.

The chip gives you a 12-core CPU, a 12-core GPU with Neural Accelerators in each core, a dual 16-core Neural Engine, and faster (16GB, upgradable up to 32GB) unified memory. What that means is power. And what that means is productivity — 30% faster graphics compared to last year’s model. 

For those upgrading from M1, the performance gains are even more significant, with up to 11x faster graphics and up to 13x faster AI performance. The idea is that you’ll pick up your highly portable pro portable and take it anywhere you need it to be.

Apple

What’s new in Apple’s new portable pro laptop other than the processor?

• Networking has been enhanced with Wi-Fi 7 and Bluetooth 6.
• It will support up to two external 6K displays.
• Liquid Retina XDR display with up to 1,600 nits of peak brightness.
• 12-megapixel Center Stage camera. 
• Support for fast charging.
• HDMI, MagSafe 3, three Thunderbolt 4 slots, SDXC card reader.
• Headphone jack.

Available in Space Black and Silver.

Pre-order from October 28, in stores November 6.

Apple New colors, new processors, the new M6 iMac

You don’t even need me to say it anymore, but the introduction of M6 chips inside the iMac makes the all-in-one desktop even more powerful and performant. This tops out a 12-core CPU, 12-core GPU, and Dual 16-core Neural Engine. 

Those fast processors combined with the fast, 170GB/s memory bandwidth means you’ll get twice the graphics performance of the M4 iMac. The Mac ships with 16GB of unified memory, but you can upgrade up to 32GB if you like spending money.  

Inevitably, the new iMac is faster for, well, everything. You’ll be hitting pro performance comparisons all over again as Apple silicon continues to redefine expectations across the industry, putting pro performance in reach of most people. It’s all about AI at Apple at the moment, so expect 12 times faster performance in some tasks compared to the M1, Apple said. 

Some specifications:

• The iMac retains the 4.5K 24-inch Retina display, 500 nits, and P3 wide color of before.
• It brings Wi-Fi 7, Bluetooth 6, and 2.5Gb Ethernet.
• It will support up to two external 6K displays.
• Up to four Thunderbolt 4 ports.
• 12MP Center Stage camera.
• 2x faster SSD read and write.
• Touch ID.
• Available in blue, green, pink, yellow, purple, orange, and silver.

The new iMac is on pre-sale from October 28 and in stores from November 6. It costs $1,499 with a 10-core CPU, 10-core GPU, and 16GB of RAM, or $1,699 with a 12-core CPU and 12-core GPU (16GB of RAM). 

Apple Apple leans into AI for creative customers

Of course, once you have put together the world’s leading mass-market AI ecosystem, you have to do something to show that power off. Apple has done this with a selection of interesting updates to its Creator Studio suite of creative tools. They’ll ship in November.

• Final Cut Pro for Mac now includes a large MotionVFX collection consisting of thousands of visual effects, transitions, and motion graphics tools and built-in Pixelmator Pro editing. Apple has also filled out its Content Hub with a bunch of new video assets that can be snagged from inside Final Cut Pro.

• Logic Pro gains AI, an enhanced Stem Splitter that now separates drums, a redesigned sound Browser, and a new intelligent assistant powered by a combination of Apple-built models and OpenAI.

• Pixelmator Pro introduces Generate Fill, which lets creators transform selected areas of an image using natural language.

• Keynote, Pages, and Numbers introduce new AI features in beta, including assistants that understand document context and new Model Context Protocol (MCP) support for workflow automation. They add stock video in the Content Hub, new premium themes and templates, and that intelligent assistant powered by a combination of Apple-built models and OpenAI.

Now please subscribe to my daily, human-curated Apple-related news headline feed at The Core, or follow me on BlueSky, LinkedIn, or Mastodon.

An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after the model was prompted, not seen in any real attack, and Anthropic reported every flaw to the vendor first, so all of them are already patched. One proof of Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine. The move was in response to the service being used to commit and facilitate prolific criminal activity, including "the advertisement of sexually explicit images of minors, the intentional disclosure of nonconsensual intimate visual depictions Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand. The reward program opened on October 28 and pays only if a tip helps lead to an arrest or an international wanted notice. The service hosts Windows desktops used for FX trading,Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background process carries out with root privileges. To use them, an attacker must Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF) that reaches an internal management interface because PeopleSoft trusts its own loopback address Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-111497 (CVSS score: 9.2) - An unchecked return value vulnerability in Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

A Godot vulnerability could let an attacker hide code in a language file and make a game run it on a player's computer.

An MCP security flaw in Google's open-source Toolbox for Databases could let an attacker copy files off the server running it or replace files on that machine.

The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop Cloud threatened to launch a ransomware attack today. [...]

OpenAI confirmed GPT-6.1 Terra is safer overall than some of its older models, but its safety testing also found other problems. [...]

The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. [...]

A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout. [...]

Defenders across the world face the burden of responding to yet another botched code-execution vulnerability, this time in boot-time firmware used by most of the world’s server vendors and data centers.

The vulnerability, with a severity rating of 9.5 out of 10, resides in the TianoCore EDK II, an open source codebase that hardware makers and cloud providers use to create the UEFI firmware that runs during the boot-up sequence. Last year, a representative of the UEFI Forum called EDK2 the "preeminent solution / implementation of the UEFI specifications." Virtually all UEFI suppliers (sometimes still called IBVs or independent BIOS vendors), including AMI, Insyde, and Phoenix, use the reference code extensively. Project Mu, Microsoft's hardened EDK2 fork, used the code containing the vulnerable component as well.

The vulnerability, tracked as CVE-2026-97631, is a memory-corruption flaw in an ICMP component that attackers can exploit to execute malicious code that runs before the operating system and firmware can implement defenses like Secure Boot, which establishes a chain of trust for all code, including the Trusted Platform Module (TPM), loaded during boot. While final payloads delivered by CVE-2026-97631 have no persistence—meaning they run only once—they can give attackers a wide opening to install other payloads that also run each time early in the boot process.

Read full article

Comments

Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations, described them as distinct from previously published

Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations, described them as distinct from previously publishedRavie Lakshmananhttp://www.blogger.com/profile/[email protected]

Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates. [...]

Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's infrastructure. [...]

The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more. [...]

Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses. Huntress Labs ranks the threats hitting organizations hardest, highlighting which attack techniques deserve immediate attention and which remain emerging risks. [...]