Tech

Apple Warns of Two macOS Zero-Day Vulnerabilities

Apple has issued a critical security advisory after uncovering and addressing two Mac-OS zero-day vulnerabilities actively exploited in the wild. The vulnerabilities, identified as CVE-2024-44308 and CVE-2024-44309, affect macOS Sequoia and were patched in the latest update, macOS Sequoia version 15.1.1. These exploits underscore the growing cybersecurity threats targeting macOS devices, particularly as their adoption in corporate and personal environments continues to rise.

The vulnerabilities were discovered by Clément Lecigne and Benoît Sevens, researchers from Google’s Threat Analysis Group (TAG). Apple has credited them for their role in identifying these flaws, which highlight a growing trend of threat actors focusing on macOS as a target for sophisticated attacks.

The Mac-OS zero-day Exploitation

What Are the macOS Sequoia Vulnerabilities?

Apple has described the two vulnerabilities and their potential impact:

CVE-2024-44308: This vulnerability resides in JavaScriptCore, the engine that powers web content in macOS. Exploitation of this flaw allows arbitrary code execution, enabling attackers to take control of an affected system. The exploit is triggered when a user interacts with a malicious webpage, making this a particularly dangerous vulnerability for users who browse the web without additional protections.
CVE-2024-44309: Found in WebKit, the core engine for Safari and other Apple applications, this vulnerability enables cross-site scripting (XSS) attacks. Exploiting this flaw, attackers can inject malicious scripts into trusted websites, potentially stealing sensitive information or compromising user sessions. Apple identified the root cause as a cookie-related issue and resolved it by improving state management.

Both vulnerabilities are confirmed to have been exploited in the wild, particularly targeting Intel-based Mac systems, though Apple has not disclosed specific details about the attack campaigns.

Patches and Affected Versions

Apple has rolled out patches across its ecosystem to address these vulnerabilities. The updates include:

macOS Sequoia 15.1.1
Safari 18.1.1
iOS 17.7.2 and 18.1
iPadOS 18.1
visionOS 2.1

Apple urges users and organisations to update their devices immediately to mitigate the risk of exploitation.

The Mac-OS zero-day Exploitation

macOS: A New Focus for Cyber Threats

macOS has long enjoyed a reputation as a secure platform, leading many users to believe it is immune to malware and cyberattacks. However, 2024 has shattered this myth, with a sharp rise in macOS-targeted attacks.

What’s Driving the Surge in macOS Threats?

Increased Adoption: More organisations are deploying macOS devices for their workforce, making them attractive targets for cybercriminals.
Sophisticated Threat Actors: Advanced persistent threat (APT) groups, such as Lazarus Group, have shifted their focus to macOS, particularly targeting sectors like cryptocurrency and finance.
Rising Malware Variants: Security researchers have identified a surge in macOS-specific malware, including Atomic Stealer, Poseidon Stealer, and Cthulhu Stealer.

In a recent blog post, Trellix researchers highlighted how threat actors are adapting to exploit macOS vulnerabilities, particularly as corporate usage grows. They noted that threat actors are even using valid Apple developer accounts to notarise their malware, bypassing macOS’s built-in security protections.

Insights from the Cybersecurity Community

Cybersecurity experts have weighed in on the significance of these developments:

Laura Brosnan, a senior information security specialist at Red Canary, emphasised the urgency of addressing misconceptions about macOS security:“Many people still hold the belief that macOS is immune to malware—a dangerous misconception. However, 2024 has shattered that illusion.”
Researchers at SentinelOne observed that North Korea-affiliated threat actors are actively targeting macOS, particularly organisations in the cryptocurrency sector. Their analysis revealed a troubling trend: attackers are manipulating legitimate Apple developer accounts to bypass security measures.

Protecting macOS Users from Emerging Threats

With macOS under increasing attack, both individual users and organisations need to take proactive steps to safeguard their systems:

Update All Devices Immediately: Ensure that macOS Sequoia, Safari, and all other Apple devices are updated to the latest versions. Updates include critical patches for the vulnerabilities described above.
Implement Advanced Security Solutions: Use endpoint protection tools to detect and mitigate malware threats.
Educate Teams on Security Risks: Organisations should conduct training sessions to inform employees about the rising risks of macOS-targeted malware.
Adopt Additional Security Layers: Implement firewalls, sandboxing tools, and multi-factor authentication (MFA) to reduce attack surfaces.
Monitor System Activity: Regularly review logs and system activity to identify unusual behaviour that might indicate a breach.

The Road Ahead for macOS Security

Apple’s swift response to these vulnerabilities demonstrates its commitment to addressing emerging threats, but it also highlights the need for vigilance among users and organisations. As macOS adoption continues to grow, so too will the interest of cybercriminals in exploiting the platform.

The increasing sophistication of attacks, coupled with the perception of macOS as a secure system, creates a dangerous scenario where users may underestimate risks. By staying informed, applying updates promptly, and adopting robust security practices, users can significantly reduce their exposure to these threats.

Tech

Skype Is Dead

Skype, once the poster child for global internet communication, is officially reaching the end of its journey. Microsoft has confirmed that Skype is dead and the iconic voice and video calling service will be permanently shut down on 5 May 2025, drawing the curtain on a platform that helped define the early years of digital connectivity.

In a statement published across official Microsoft channels, users were informed that Skype accounts will soon transition to Microsoft Teams, a platform that has surged in popularity over the past few years. This decision marks a definitive pivot for Microsoft as it consolidates its communication tools.

Microsoft are behind the digital assassination

From Internet Phenomenon to Forgotten Pioneer

Launched in 2003, Skype transformed the way we communicated. It was not the first VoIP service, but its free computer-to-computer calls made international communication accessible and even magical. By 2011, Skype had been downloaded over a billion times. That same year, Microsoft acquired it for $8.5 billion (AED 31.2 billion), then the tech giant’s largest purchase.

Skype became a household name and found its way into everyday vocabulary. “Let’s Skype” replaced phone calls in homes, schools, and workplaces around the world. But as competitors entered the market—WhatsApp, Zoom, FaceTime, and Facebook Messenger—Skype’s dominance slowly eroded.

Despite integration into Xbox and Windows, Skype began losing ground. A major redesign in 2017, criticised for mimicking Snapchat-style features, was poorly received. Many long-time users lamented that Microsoft was tampering with a platform that wasn’t broken to begin with. This dissatisfaction contributed to the perception that Skype is dead.

The Turning Point: Teams Takes Over

When Windows 11 launched in 2021 without Skype pre-installed, the writing was on the wall. Instead, Microsoft began pushing Teams, which quickly became essential during the COVID-19 pandemic as businesses, educators, and individuals flocked to video meetings. Microsoft’s choice to end Skype’s service only confirmed for many that Skype is dead.

Now, with a streamlined digital ecosystem as its goal, Microsoft has announced that Skype’s features—such as one-on-one and group calls, file sharing, and messaging—will live on within Teams. In a detailed blog post, Jeff Teper, President of Collaborative Apps and Platforms at Microsoft, said:

“Teams offers enhanced features such as hosting meetings, managing calendars, and building and joining communities—all for free.”

Microsoft Will Shut Down Skype in Favor of a Free Version of Teams

What Happens to Skype Users?

Existing Skype users can continue accessing their chats and contacts by signing into Microsoft Teams with their Skype credentials. Microsoft has provided tools to export Skype chat history, contacts, and call logs, ensuring users retain their data.

For those using paid services, including Skype Credit or subscriptions, Microsoft confirmed they will remain active until the end of each user’s next renewal period.

End of an Era, and the Legacy It Leaves

News of Skype’s official shutdown has triggered nostalgia across social media. One user on X (formerly Twitter) shared:

“My best friend and I shared so many memories on Skype. It’s like losing a piece of my adolescence.”

Another former user told the BBC how Skype made long-distance love possible:

“We were in a transatlantic relationship. Skype made it bearable. It was such a magical tool before the age of smartphones and WhatsApp.”

And Anna Simpson, a digital marketer based in the UK, reflected that the announcement reinforced the sentiment that Skype is dead.

“I used to call my grandparents in France on Skype nearly 20 years ago. It felt like science fiction—pixelated faces instead of overpriced international calls.”

Why Did Skype Fade?

Skype’s downfall wasn’t due to lack of innovation—it pioneered many of the features we now take for granted. But changing user expectations, clunky interface updates, and an increasingly competitive market all played a role.

By the time Microsoft shifted focus to Teams, Skype was already gasping for relevance. The Teams platform, with deep integration into the Office ecosystem, has since become a go-to solution for both professional and personal communication, further establishing why Skype is dead.

The decision to retire Skype is more symbolic than shocking. The platform has been, as many have described, on “life support” for years.

skype for business get ready 1 — Skype was also pivoted for business

What’s Next for Users?

Move to Microsoft Teams: Simply log in using your Skype credentials.
Export your data: Chats, contacts, and call logs can be saved.
Use Skype Credit: Until your next billing renewal.

Microsoft has published a comprehensive guide for migrating from Skype to Teams on its official blog.

Final Thoughts

Skype may be bowing out, but it leaves behind a massive digital legacy. From families separated by continents to businesses conducting their first video calls, Skype showed us the magic of online communication long before it became the norm.

Microsoft Teams may be the future, but Skype will always be remembered as the service that made video calls a reality for millions. Nonetheless, the sentiment that Skype is dead underlines its place in tech history.

Tech

Apple Music Now Available on Rekordbox & Serato

Apple has officially entered the DJ streaming landscape, launching “DJ with Apple Music”—a groundbreaking new feature allowing DJs to seamlessly integrate their Apple Music subscription directly into professional DJ software and hardware. Confirmed simultaneously by industry-leading DJ platforms Serato and Rekordbox, this integration positions Apple Music alongside other popular DJ streaming services such as Tidal, Beatport, Beatsource, SoundCloud, and Amazon Music.

Here’s everything you need to know about this major announcement, what it means for DJs, and how to access this game-changing functionality.

Professional DJs can now use Apple Music tracks directly

Integrating Apple Music into DJ Software and Hardware

Until recently, Apple Music was mainly a personal listening platform. However, DJs can now leverage their Apple Music libraries directly through:

Apple to The Unveil M4 Mac Mini

Laptop-Based Software:
- Serato DJ Pro & Rekordbox: Both industry-standard DJ software now fully support Apple Music integration. DJs simply need to update to the latest software versions to start mixing tracks directly from their Apple Music library.
- Rekordbox for iOS/iPadOS: Mobile DJs are also covered, as Rekordbox’s mobile apps have integrated Apple Music streaming, providing even greater flexibility.
Standalone DJ Equipment:
- Compatible standalone hardware from leading brands like Denon DJ, Numark, and AlphaTheta (formerly Pioneer DJ) have also announced firmware updates to support Apple Music. Devices now compatible include:
  - AlphaTheta XDJ-AZ, Omnis Duo
  - Denon DJ Prime 4+, SC Live 4, SC Live 2, Prime Go+
  - Numark Mixstream Pro Go, Mixstream Pro+

Why is Apple Music’s DJ Integration Significant?

Apple Music’s arrival into DJ ecosystems is a huge development, primarily because of the platform’s sheer size and subscriber base—second only to Spotify, which remains notably absent from professional DJ integrations.

This strategic move by Apple provides several key advantages:

No Additional Fees: Unlike certain other services, Apple Music doesn’t require extra fees or special DJ subscription tiers, making it instantly attractive to existing subscribers.
Expanded Accessibility: DJs who already curate playlists and libraries within Apple Music can now easily use the same platform for both personal listening and professional DJing, streamlining their music management.
Curated DJ Playlists: Apple has introduced specially curated DJ playlists designed specifically for performance, offering DJs ready-made sets for different genres and moods.

Apple Music Comes To Serato, Rekordbox, EngineDJ, AlphaTheta

Key Features and Functionalities

Here’s what DJs can expect from Apple Music integration into Serato and Rekordbox:

Library Syncing: DJs can now keep their personal music libraries synced alongside streaming playlists in Apple Music. This feature simplifies workflow significantly by eliminating the need to manage multiple platforms.
Cloud Integration: For Rekordbox users, cue points, beat grids, loops, and track analysis information can be stored in the cloud, accessible from any compatible device.
Streaming Only: Currently, Apple Music does not support offline storage for DJing purposes. DJs must have an active internet connection during performance to access streaming tracks.
No Stems Functionality (Yet): At present, the integration does not support advanced “stems” features offered by some DJ platforms, though this may change in future updates.

Apple Music is Now integrated with Serato

Supported vs. Unsupported Hardware

As of now, Apple Music integration is officially supported only by select standalone DJ equipment (listed above). Hardware such as Pioneer DJ’s XDJ-XZ, Opus Quad, SC6000, XDJ-RX3, and the Numark Prime 2 and Prime Go are currently unsupported.

DJs using Serato and Rekordbox software via laptops face no such restrictions, as integration is universal across compatible laptop setups.

What About Other DJ Software?

At this time, Apple Music integration is limited to Serato DJ Pro, Rekordbox, and Algoriddim’s Djay Pro, which added Apple Music compatibility previously. Other popular DJ software such as Traktor and VirtualDJ have not yet announced integration.

Is Apple Music Better Than Other DJ Streaming Services?

While Apple Music presents major advantages—particularly if you’re already an Apple Music subscriber—each streaming platform has distinct strengths and weaknesses:

Tidal offers lossless audio quality.
Beatport & Beatsource provide curated DJ-centric tracks and genre-specific sets.
SoundCloud features a vast independent music library.

Ultimately, DJs should evaluate their personal preferences and workflow needs when choosing a streaming platform.

apple music in rekordbox — Apple music in rekordbox

Future of DJing and Streaming

Apple Music’s significant entry into the professional DJ sphere represents a turning point. It marks a broader industry shift, acknowledging streaming as a mainstream rather than niche option for DJs. As Apple further refines and expands this functionality, expect other platforms and DJ software to accelerate their streaming integrations.

Final Thoughts: A New Era for DJs

With the addition of Apple Music to Serato and Rekordbox, DJs worldwide now have unprecedented access to one of the world’s largest music streaming libraries. Seamless integration, curated playlists, and no additional subscription costs position Apple Music as an attractive new choice for DJs everywhere.

Apple Music integration is now available on more DJ platforms

For DJs already embedded in Apple’s ecosystem, this update makes perfect sense, offering convenience, ease, and powerful capabilities at their fingertips.

Discover more cutting-edge tech news and innovations at: https://whatshotinuae.com

The Most Unexpected Celebrity Cameos in Call of Duty History

Tech

Mozilla Faces Backlash Over Firefox Privacy Changes

Firefox by Mozilla is used by millions around the world

Mozilla, long celebrated for its privacy-first approach, is now facing intense criticism after making changes to Firefox’s Terms of Use and Privacy Notice. The open-source browser, which has historically positioned itself as an alternative to data-hungry tech giants, is now under fire for rewording its privacy commitments—prompting concern from longtime users.

European group accuses Mozilla Firefox browser of tracking users' activities without consent. Firefox Privacy Changes — European groups accused Mozilla for tracking users’ activities without consent.

The Controversy: What Changed?

Mozilla introduced its first-ever Terms of Use for Firefox, alongside updates to its Privacy Notice and FAQ page. While Mozilla claims these changes were meant to improve transparency, many users believe they signal a shift away from the company’s core privacy values.

🚨 The Original Terms of Use Stated:

“When you upload or input information through Firefox, you hereby grant us a nonexclusive, royalty-free, worldwide license to use that information to help you navigate, experience, and interact with online content as you indicate with your use of Firefox.”

This language implied that Mozilla had broad rights over user-submitted data, leading to fears that the company was claiming ownership over personal information.

After backlash from the open-source community, Mozilla removed this clause, stating it was misinterpreted legal boilerplate.

Mozilla has recently come under fire for the Firefox Privacy Changes.

Mozilla’s Response: A Quick but Unconvincing Fix?

Following user outrage, Ajit Varma, Mozilla’s VP of Firefox Product, issued a statement clarifying that:

🛑 Mozilla does NOT own user data
🔍 The clause was only meant to explain Firefox’s basic functionality
📝 The wording has now been updated to avoid confusion

While this explanation may have calmed some users, another major change added fuel to the fire:

📝 Mozilla quietly removed its promise that Firefox does not sell user data.

Mozilla recently discontinued advocacy division amid layoffs — Mozilla recently discontinued its advocacy division amid layoffs.

Firefox’s Privacy Policy: What’s Missing?

Previously, Mozilla proudly stated:

“Firefox is the only major browser backed by a not-for-profit that doesn’t sell your personal data to advertisers.”

Now, this statement has been reworded to:

“Firefox, the only major browser backed by a not-for-profit, helps you protect your personal information.”

Similarly, Mozilla’s response to the FAQ question “Is Firefox free?” previously read:

“Yep! The Firefox Browser is free. Super free, actually. No hidden costs or anything. You don’t pay anything to use it, and we don’t sell your personal data.”

The new version completely omits the data-selling disclaimer, now reading:

“Yep! The Firefox Browser is free. Super free, actually. No hidden costs or anything. You don’t pay anything to use it.”

While Mozilla claims this change was made due to legal variations in how different jurisdictions define ‘selling data’, users see it as a red flag.

Mozilla’s Changing Leadership & Business Direction

Some are speculating that Mozilla’s shift in language may be connected to recent leadership changes. In December 2024, Mozilla brought in several new executives, including:

Ajit Varma – Formerly with Meta & Google, now VP of Firefox Product
Anthony Enzor-DeMeo – Ex-Wayfair & Better.com, now Senior VP of Firefox
Girish Rao – Previously at Warner Bros, EA & Cisco, now SVP of Infrastructure

Mozilla’s CEO Laura Chambers, who took over in early 2024, has been making aggressive changes, including deep staffing cuts at the Mozilla Foundation.

Mozilla's new Terms of Use causes confusion among Firefox users — Mozilla’s new Firefox Privacy Changes cause confusion among Firefox users.

Is Mozilla Heading Toward an Ad-Driven Future?

While Mozilla insists it is not selling user data, critics argue that these policy changes align with a shift toward monetization.

🔹 Mozilla already profits from search partnerships—Google reportedly pays Mozilla $450 million per year to make Google the default search engine in Firefox.
🔹 The company has invested heavily in ad-supported services like Mozilla VPN and Pocket (its content recommendation platform).

Users fear that Mozilla’s move away from clear anti-tracking promises could signal an increased focus on data monetization—bringing it closer to the business models of Google Chrome and Microsoft Edge.

How Does Mozilla Make Money Mozilla Business Model Analysis. Firefox Privacy Changes — How Does Mozilla Make Money Mozilla Business Model Analysis.

The Fallout: What’s Next for Firefox?

The backlash has sparked heated discussions on Mozilla’s official forums, Reddit, and tech communities.

Some users are now exploring privacy-focused Firefox alternatives, such as:
🔹 Waterfox – A Firefox-based browser that removes telemetry and tracking
🔹 LibreWolf – A security-focused, open-source browser with enhanced privacy features
🔹 Floorp – A highly customizable, privacy-first alternative

While Firefox remains a strong competitor in the privacy browser market, the latest controversy raises serious concerns about its future direction.

Will Mozilla maintain its reputation as a privacy-first company, or is this the beginning of a more commercial approach?

Only time will tell.