Eliana Willis

The Govee Floor Lamp Pro’s base doubles as a Bluetooth speaker. Maria Diaz/ZDNETWhat’s the deal?The Govee Floor Lamp Pro More

Sandisk/ZDNETAmazon’s Black Friday and Cyber Monday sales event kicks off tomorrow, but we’re already seeing great deals on storage drives. Right now, you can snag Sandisk’s Extreme Pro Portable 2TB SSD More

Apple/ZDNETBlack Friday is still a week away, but some retailers are offering seasonal savings right now. The new Apple Watch Series 10 is one product already seeing holiday savings. The Watch Series 10 is on sale for $349 at Walmart More

LG/ZDNETAs we approach Black Friday and Cyber Week, LG has opened preorders for a brand-new display: the 27-inch UltraGear OLED Gaming Monitor GX7 More

Amazon/ZDNETAs Black Friday, the biggest shopping day of the year, draws nearer, Amazon is already unveiling outstanding deals on home security devices, including from Ring and Echo. For a limited time, Prime members can get a second-generation Indoor Cam and Ring Battery Bundle More

Maria Diaz/ZDNETApple has rushed out emergency patches for the iPhone, iPad, and Mac that squash a couple of serious security bugs. The two zero-day vulnerabilities may have already compromised Intel-based Macs in the wild, but the updates are designed for iPhones and iPads as well.Three new support documents describe the bugs: one for iOS 18.1.1 and iPadOS 18.1.1, another for MacOS Sequoia 15.1.1, and a third for Safari.Also: I replaced my M1 MacBook Pro with a base model M4 – and it blew my $3,000 laptop awayThe update for iOS and iPadOS is aimed at the Phone XS and later, the 13-inch iPad Pro, the 12.9-inch iPad Pro 3rd generation and later, the 11-inch iPad Pro 1st generation and later, the iPad Air 3rd generation and later, the iPad 7th generation and later, and the iPad mini 5th generation and later. The update for MacOS is designed for any computer compatible with MacOS Sequoia.Labeled CVE-2024-44308 and titled JavaScriptCore, the first flaw is defined as: “processing maliciously crafted web content may lead to arbitrary code execution.” This means that a malicious website designed to exploit the vulnerability could allow an attacker to take control of your device. In resolving the issue, Apple said only that it was addressed with improved checks.Known as CVE-2024-44309 and titled WebKit, the second flaw is defined as “processing maliciously crafted web content may lead to a cross site scripting attack.” This one means that an attacker who injects malicious scripts into an otherwise safe website could compromise or steal sensitive data. The fix here, according to Apple, was to resolve a cookie management issue. More

Score a Microsoft Office license now at a big discount. StackSocial Whether you’re setting up your new laptop or using a machine you’ve had for years, access to Microsoft Office is a necessity for many of us to get things done. Right now, you can buy a lifetime license to the 2019 version of Microsoft Office Professional […] More