Amazon this weekend is taking $50 off Wi-Fi models of Apple's 11th generation iPad. Prices start at $399.00 for the 128GB Wi-Fi iPad, down from $449.00. This is a match of the best price we've seen on the iPad since Apple's price hikes in June.

Note: MacRumors is an affiliate partner with Amazon. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running.

Additionally, Amazon has the 256GB Wi-Fi iPad for $499.00 ($50 off) and the 512GB Wi-Fi iPad for $699.00 ($50 off). Free delivery estimates are placed around August 13 for most of these iPad models, but Prime members should be able to get same-day delivery in many locations.





If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week.

---

This article, "Score the A16 iPad for Its Best Price Since June's Hike" first appeared on MacRumors.com

Discuss this article in our forums

Apple's annual September iPhone event is just about a month away, and things are going to be a little bit different this year with Apple moving to a split launch for the iPhone 18 lineup, so make sure you're up to date on everything we may see at the event.


This week also saw word that Apple is experiencing shortages of the MacBook Air due to the ongoing memory crunch, while the software side saw a significant issue with iCloud Private Relay disclosed and progress from Apple on a cross-platform clipboard, so read on below for all of the details!

Top Stories

Everything Apple Is Expected to Announce in September

Apple is going to announce at least five new devices next month at its annual iPhone-centric event, though it's possible we'll also get devices that were waiting on Siri AI, so check out our overview of what we might see. There's even a late-breaking wild card in the form of camera-equipped AirPods, which were previously thought to be a 2027 launch.


Apple is gearing up for the big iPhone event, which should take place in the first half of September with Apple currently holding a lottery for its U.S. retail employees to come to Apple Park and help staff the event.

iPhone 18 Pro Models Could Be Up to $300 More Expensive, Says Analyst

Following recent price increases across the Mac and iPad lineups, most observers are expecting the iPhone lineup to follow suit as part of next month's launch of new models. It remains unknown just how much iPhone prices will increase compared to current models, but analyst Jeff Pu believes the iPhone 18 Pro and Pro Max could see increases of $250–$300 due to component shortages.


Apple is reportedly still scrambling to secure sufficient memory supplies for the upcoming iPhone models, and the company reportedly has around $1 billion worth of unpackaged processors sitting idle as they wait for their accompanying memory chips. The issues could lead to shortages of the new iPhone models at launch.

MacBook Air Experiencing 'Major' Shortage Despite $200 Price Increase

Despite receiving a price increase in June, the MacBook Air is currently experiencing a "major" shortage, according to Bloomberg's Mark Gurman.


"Retail store sources say Apple is struggling to keep the laptop in stock and that shipments of new units are more constrained than they can ever recall," he said.

In the U.S., the MacBook Air is facing a 2–6 week delivery estimate on Apple's online store, with configurations with higher amounts of RAM delayed the longest.

Bigger Displays Rumored for Next Year's iPhone Models

Apple is prototyping a second new iPhone display, this one measuring around 6.4 inches, that could be destined for the 20th anniversary iPhone, according to a Chinese leaker.


In a recent post on Weibo, the leaker known as "Digital Chat Station" said Apple is currently sampling two new display panels. One measures roughly 6.4 inches and has a chance of being used in the "‌iPhone 20 Pro‌," while the other is the approximately 7-inch panel previously reported for the larger ‌"iPhone 20 Pro Max‌." (Even though next year's models should be in the iPhone 19 family, many expect Apple to jump to iPhone 20 or iPhone XX in recognition of the device's anniversary.)

Apple is planning a significant revamp of its pro iPhone models in 2027, with more of an all-glass design that wraps the display around all four edges of the device, a smaller display cutout, and more.

Apple's iCloud Private Relay is Leaking Users' Real IP Addresses

Apple's paid Safari protection feature that promises to keep your IP address masked doesn't always work, according to security researchers Tommy Mysk and Talal Haj Bakry. It turns out iCloud Private Relay can expose your real IP to websites that use or pretend to use passkeys.


‌iCloud‌ Private Relay is a service included with paid ‌iCloud‌+ plans. It is supposed to hide your IP and DNS information when you browse the web using Safari, but it is not a VPN that masks all traffic from a device. Passkeys use the WebAuthn standard, which stores a private key on your device, not the Safari browser. The request the system sends to the website isn't protected by Private Relay and can leak your IP address.

Apple Plans iPhone-to-Windows Copy and Paste in EU After Microsoft Request

Apple is working on a new feature that will support cross-device copy and paste between iOS devices and Windows PCs. Microsoft asked for the feature using Apple's EU interoperability request system for developers, which Apple implemented to comply with the Digital Markets Act. Apple began evaluating the request in March, and on June 26, proposed a project plan.


Apple says introducing cross-device copy and paste is a significant engineering effort, with work expected to be complete by fall 2027. It will be shipped first in a developer beta for testing ahead of a public release. If the feature is added toward the end of fall 2027, it could be early 2028 before the public gets access.

It is likely that cross-device copy and paste will be limited to iPhone and Windows users in the European Union, though it is possible Apple could implement it worldwide.

MacRumors Newsletter

Each week, we publish an email newsletter like this highlighting the top Apple stories, making it a great way to get a bite-sized recap of the week hitting all of the major topics we've covered and tying together related stories for a big-picture view.

So if you want to have top stories like the above recap delivered to your email inbox each week, subscribe to our newsletter!
This article, "Top Stories: Apple's September Announcements, MacBook Air Shortages, and More" first appeared on MacRumors.com

Discuss this article in our forums

Anthropic has updated Claude Code so that separate coding sessions can message each other directly, removing the need to manually copy context between Terminal windows.


The company shipped the feature in Claude Code version 2.1.224, released on Friday for macOS and Linux. Two new tools power it: ListAgents, which finds other active sessions running on the Mac, and SendMessage, which delivers the message. A session that receives one shows it as a labeled card with a link back to the sender.

According to Anthropic's documentation, only text passes between sessions, not conversation history, files, or permissions. One session can warn another when a change breaks something it depends on, or pass along an answer another session is waiting on, and Anthropic says an incoming message can't approve a permission request or change a session's settings on its own.



The feature sits alongside Claude Code's existing subagents and Agent Teams tools, but connects sessions a user is already running separately on their Mac rather than ones Claude spawns and manages itself. Messages between sessions on the same Mac stay local and never reach Anthropic's servers. Between different machines, messaging works only as a reply through Remote Control, the feature that connects a Mac terminal to the Claude apps for iOS and Android.

Cross session messaging requires macOS or Linux with Claude Code 2.1.224 or later and isn't available on Windows. It was released alongside 31 other changes in the same release, including a new claude self-hosted-runner command for Team and Enterprise plans.
This article, "Claude Code Adds Cross-Session Messaging on macOS" first appeared on MacRumors.com

Discuss this article in our forums

Apple could raise iPhone 17 prices as soon as Monday, August 10, according to a new rumor, well before the wider round of increases expected with next month's iPhone 18 Pro launch.


Weibo leaker "Fixed Focus Digital" said in a post yesterday that rumors are circulating about an ‌iPhone 17‌ price change taking effect on August 10. The leaker was noncommittal about whether prices will actually move, though the post claimed with more certainty that Apple has called off plans to raise production capacity on some lines from 15% to 30%. It's not clear from the post which components or products that capacity change refers to.

Apple raised prices on Macs, iPads, and most other devices in June, citing soaring memory and storage costs, but left the iPhone, Apple Watch, AirPods, Studio Display, and accessories untouched. Apple's next round of pricing changes is widely rumored to center on the ‌iPhone 18 Pro‌.

Apple is expected to launch the ‌iPhone 18 Pro‌, ‌iPhone 18 Pro‌ Max, and its first foldable iPhone next month, with the standard iPhone 18 and iPhone 18e not arriving until spring 2027. The ‌iPhone 17‌ is set to remain Apple's mainstream option well into next year, which could give Apple sufficient reason to adjust its pricing independently of the new lineup.

If Apple does raise ‌iPhone 17‌ prices this Monday, it remains to be seen whether the increase would apply across the whole lineup, including the iPhone 17e ($599), ‌iPhone 17‌ ($799), iPhone Air ($999), iPhone 17 Pro ($1,099), and ‌iPhone 17 Pro‌ Max ($1,199), or whether only select models will be affected.
This article, "iPhone 17 Prices Could Rise as Soon as Monday, Rumor Claims" first appeared on MacRumors.com

Discuss this article in our forums

This post is an unpublished review for Subscription Bombing • Email under Attack

One of the most important inputs one can have when designing a response strategy against a security attack is a good characterization. This article describes a relatively newly described attack mode (subscription bombing), hypothetizes on the motivations that can lie behind it, and presents some countermeasures that can be taken by different actors to reduce its impact.

At its core, suscription bombing is a classical reflection attack: it uses a third party service so that the answer to a relatively simple request is amplified and results in a distributed denial of service (DDoS) for the victim. And, as with most DDoS attacks, its effectivity lies in that there is not much a person can do against traffic coming from seemingly random different providers all around the world.

The core differentiatof for subscription bombing is that the attack’s victim is not a network port, but an individual’s e-mail address. The attacker builds a database of service providers that allow interested users to sign up for newsletter on their activities, or a mailing list, or even just to create a new account on a given Web system. This action will generate a (seemingly legitimate) confirmation mail sent to the victim. But the attacker scripts together hundreds of thousands of such request, creating a deluge of confirmation mails sent to the unsuspecting victim.

The authors explain the goals an attacker might pursue by performing this kind of attack. They suppose this can be due to harassment (a disgruntled employee being denied a salary raise, a political adversary, or even a romantic ex-partner wanting to inconvenience the victim’s use of their e-mail). More worryingly, the attack can be used as a distraction: by sending a high volume of mails in a controlled timeframe, the attacker can reduce the probability of the victim noticing a specific attack warning them of, i.e., financial fraud, unwanted purchases, or break-in attempts into their accounts. Attacks targetting mailboxes at private mail servers can also lead to overloading an account’s limit, causing it to reject mails after the attack is delivered and before the folder is cleaned. And it can also pave the way for follow-up, targetted deception attacks, where the attackers call the victim pretending to be the company’s IT department, and get them to install a remote desktop monitoring and management tool, with which they can effectively seize control of the victim’s data.

To do this, they present a study they made over 24 cases of victims, from which 47,970 total e-mails were received between October and December 2024, with individual attacks receiving between 81 and 3,387 e-mails per hour, from where they presented several descriptive analysis.

The authors explored cyber criminal’s offers on underground websites, comparing flooding services and pricing schemes.

Finally, mitigation strategies are discussed. Mitigation is quite problematic, as none of the mail servers is acting in either a hostile way or lacking permissions — they are performing just the task they should. The authors suggest four mitigation strategies for mail server operators to reduce the burden on their users, although none of them is easily automatizab (rate-limit the number of emails a given inbox can receive from previously unseen senders; educate users about this kind of attacks; group similar newsletter or account reset mails during active attacks; and automatically unsubscribe or bounce newsletter messages when a surge is detected). They also recommend newsletter providers and services accepting the unrestricted creation of user accounts to provide some hardening to increase the effort wrongdoers need to spend to abuse their services, such as requiring CAPTCHAs or requiring users to take several steps before requesting a subscription, although they recognize this adds friction to the process providers are most interested in providing; filtering and triaging known-good and known-bad domains, although this is hard to implement on a preemptive fashion, and adhering to easy unsubscription standards, such as easily identifiable headers with which mass unsubscription could be performed more easily victims, instead of hunting for the right places to click, potentially even in mails written in an unknown language.

The described problem is interesting, and properly tackling it can be a game changer for many users who will suffer this kind of abuse, and the article is easy to read and soundly supports its claims.

OpenAI today said it is "pausing" activities involving its upcoming AI model Astra, because its cyber capabilities are potentially too dangerous. OpenAI says its newest internal evaluations show "significant advancements in agentic coding and cybersecurity," and it cannot rule out "critical cyber capabilities." Prior OpenAI models, including GPT–5.6 Sol, were labeled as "High."


Astra triggers stricter guidelines in OpenAI's "Preparedness Framework." The guidelines call for caution when developing frontier AI capabilities that create risks of severe harm, and the cybersecurity portion of the framework says OpenAI will implement extra safeguards for models that "create new risks of scaled cyberattacks and vulnerability exploitation."

The "Critical" threshold Astra may have hit is defined by an ability to identify and develop functional zero-day exploits of all severity levels in many hardened real-world critical systems without human intervention, or devise and execute end-to-end novel strategies for cyberattacks.

OpenAI says it is increasing its safeguards and security controls before deploying Astra, including limiting work on the model until new safeguards are in place. The company plans to use isolated testing environments with restricted network and tool access, along with adding sandboxed execution and more monitoring capabilities. OpenAI says it will work with relevant government agencies and AI safety organizations to test Astra.

"We're committed to working alongside governments, safety institutes, and civil society to ensure that the frontier capabilities of models like Astra, and those that follow, are deployed responsibly and broadly for the benefit of all humanity," writes OpenAI.

Astra wasn't formally announced, but OpenAI shared details on its next major model in a recent post outlining its mathematical advancements. Astra solved 10 open problems in math and theoretical computer science for around $2,000 (in Sol API rates).

Advancements in AI are changing cybersecurity for major tech companies like Apple by unearthing an unprecedented number of bugs. Apple recently limited its bug bounty program submissions because it is having trouble handling the volume.

Models like Claude Mythos are able to suss out critical vulnerabilities, and Apple is one of Anthropic's Mythos partners. Mythos is limited to select companies because in addition to finding vulnerabilities, it has the potential to exploit them.

OpenAI made headlines in July because GPT–5.6 Sol and a "more capable pre-release model" (not Astra) autonomously hacked Hugging Face during internal benchmark testing. Anthropic found Claude had done something similar. Meta this week said it too had an AI model hack another company during a cybersecurity evaluation.
This article, "OpenAI Delays Next Major AI Model 'Astra' Over Critical Hacking Concerns" first appeared on MacRumors.com

Discuss this article in our forums

After 326 days, iOS 26 has received its first jailbreak, thanks to the developers behind the popular Dopamine jailbreak.

Lars Fröder, better known as opa334, today released Dopamine 3.0, which adds support for a number of newer firmware versions, including iOS 26.0 and iOS 26.0.1 on devices with A12 or A13 chips.

Another major addition in today's release is support for all devices running iOS 16.5.1 through iOS 17.3.1, significantly expanding the range of devices and software versions compatible with Dopamine.

A full breakdown of supported devices and iOS versions can be found on AppleDB, a database that tracks jailbreak compatibility.
This article, "iOS 26 Gets First Jailbreak Thanks to Dopamine" first appeared on MacRumors.com

Discuss this article in our forums

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Titalcruise E.A. has announced the release of TitalcruiseOS 5.4, a major update of the project's Debian-based Linux distribution designed primarily for system administrators, developers and power users. Developed in Argentina, it is localised into the Spanish language. The English translation of the original announcement provides the release information:....