Hundreds of leaked AWS keys give full control over corporate accounts
More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid. […]
Milwaukee’s M12 batteries fit 5 tools you would never expect
Did you know that Milwaukee’s M12 tool lineup has a lot more than just drills, drivers, and saws in it? I didn’t either. Here are five fun tools that you’d never have expected to be part of Milwaukee’s lineup.
3 excellent Prime Video shows to stream this weekend (August 21-23)
Original programming has been dominating Prime Video’s top 10 in August, with Reacher season 4 and Sterling Point season 1 sitting at Nos. 1 and No. 2, respectively. Beyond the list of new and returning shows this month, Prime Video has a stacked library of licensed shows that appeal to mass audiences.
Hackers poison arrayref Rust crate to push infostealer malware
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers’ systems during compilation. […]
Excel isn’t slow—you just built a workbook that takes forever to load
Search for “how to fix a bloated Excel workbook,” and you’ll find plenty of familiar advice. But the real problems are often hiding in places you never think to look. Here’s where to check before you assume the problem is Excel itself.
US charges Iranian hackers over $3.4 billion intellectual property theft
The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in years-long operations that stole data from American organizations. […]
This is the cheapest solution to your PC’s dead USB port
More than once, I’ve thought a USB port on my PC was broken. It only turned out to be true once, but when it was, I was actually able to fix it.
CISA: Medusa ransomware hit over 500 critical infrastructure orgs
The FBI said Tuesday that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the United States since June 2021. […]
Apple fixes another image-processing flaw that could allow code execution
Apple has released security updates for more than two dozen security vulnerabilities across iPhone, iPad, and macOS Tahoe,including yet another image parsing vulnerability that could compromise your device.
This update delivers security fixes that were first made available in the iOS 27 and iPadOS 27 betas.
Updates for your particular device
The table below shows which updates are available and points you to the relevant security content for each one.
| Name and information link | Available for |
| iOS 26.6.1 and iPadOS 26.6.1 | iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later |
| iOS 18.7.10 and iPadOS 18.7.10 | iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation |
| macOS Tahoe 26.6.2 | macOS Tahoe |
| visionOS 26.6.1 | Details coming soon |
How to update your Apple devices
How to update your iPhone or iPad
For iOS and iPadOS users, here’s how to check if you’re using the latest software version:
Go to Settings > General > Software Update. You will see if there are updates available and be guided through installing them.
Turn on Automatic Updates if you haven’t already—you’ll find it on the same screen.
How to update macOS on any version
To update macOS on any supported Mac, use the Software Update feature, which Apple designed to work consistently across all recent versions. Here are the steps:
- Click the Apple menu in the upper-left corner of your screen.
- Choose System Settings (or System Preferences on older versions).
- Select General in the sidebar, then click Software Update on the right. On older macOS, just look for Software Update directly.
- Your Mac will check for updates automatically. If updates are available, click Update Now (or Upgrade Now for major new versions) and follow the on-screen instructions. Before you upgrade to macOS Tahoe 26, please read these instructions.
- Enter your administrator password if prompted, then let your Mac finish the update (it might need to restart during this process).
- Make sure your Mac stays plugged in and connected to the internet until the update is done.
Technical details
Of the 27 vulnerabilities, CVE-2026-65346 is the one that stands out. It is an ImageIO integer-overflow bug in which merely processing a malicious image may result in arbitrary code execution, a substantially stronger stated impact than the many “crash-only” findings in this release.
ImageIO is Apple’s framework that handles image parsing. An integer overflow means the vulnerability lets a malicious hacker trick the program into performing an integer operation where the result exceeds the allocated memory space. This can lead to attackers running malicious programs or gaining elevated privileges. In this case, it allows the attacker to run code on the target’s device.
There is no indication in Apple’s advisory that CVE-2026-65346 or any other listed vulnerability was exploited in the wild, but cybercriminals will often try to reverse engineer the patch to come up with an exploit, or the researchers who found it will post a proof-of-concept once everyone has had a chance to apply the update. At that point, these vulnerabilities can be used against you.
Scammers know more about you than you think.
Malwarebytes Mobile Security protects you from phishing, scam texts, malicious sites, and more. With real-time AI-powered Scam Guard built right in.
Your Controls Block Known Attacks. What About the Behavior?
Security controls can block a familiar attack method while missing quieter ways to achieve the same objective. Picus Security’s Blue Report 2026 shows how prevention rates can vary dramatically by technique and why behavioral testing is needed to uncover those gaps. […]