Netgear has released a security advisory addressing two critical vulnerabilities affecting Nighthawk Pro Gaming routers and certain Wi-Fi 6 access points. The company strongly recommends that users update their devices’ firmware promptly to mitigate potential risks.
The first vulnerability, identified as PSV-2023-0039, is a Remote Code Execution (RCE) flaw. This security issue allows attackers to execute arbitrary code on affected devices remotely, potentially leading to unauthorized control over the router. The second vulnerability, PSV-2021-0017, is an authentication bypass flaw, which enables attackers to circumvent authentication mechanisms and gain unauthorized access to the device’s management interface.
The affected models include Nighthawk Pro Gaming Routers such as the XR1000, XR1000v2, and XR500, as well as Wi-Fi 6 Access Points like the WAX206, WAX220, and WAX214v2.
The company has released firmware updates to address these vulnerabilities. If you do own any of the above mentioned products, it is strongly advised to download and install the latest firmware versions for your respective devices. Detailed instructions on updating firmware can be found on Netgear’s official support page.
Routers are prime targets for cyberattacks because they serve as the main gateway between the internet and home or business networks. They are always online, making them a persistent attack surface for hackers. Many routers ship with weak default security settings, including easily guessable credentials and outdated firmware, which users often neglect to update. Attackers exploit these vulnerabilities to gain control over the router, using it to monitor internet traffic, launch further attacks, or redirect users to malicious websites. Additionally, unsecured remote access features can allow hackers to take over routers from anywhere in the world.
Once compromised, routers can be used for various malicious activities, including botnet recruitment, DNS hijacking, and man-in-the-middle attacks. Hackers can exploit them to intercept sensitive data, gain access to IoT devices, and even use them as launch points for large-scale cyberattacks like DDoS attacks.
Since many users are unaware of router security risks, these devices often remain unpatched and vulnerable for extended periods. To reduce the risk, users should regularly update firmware, change default credentials, disable unnecessary remote management features, and enable strong encryption to secure their networks.
Apple is less than a day away from launching its highly anticipated OLED MacBook Pro with a touch-sensitive screen. But it appears that the upgrade is going to cost a pretty penny. According to a report by Bloomberg, Apple is reportedly eyeing a starting price of $2,899 for the 14-inch MacBook Pro, while the 16-inch version could start at $3,399 in the US.
"At $2,899, the 14-inch model would mark the highest starting price for a new MacBook Pro model, surpassing the $2,799 Apple charged for a 17-inch version introduced in 2006," says the report. The report claims that Apple is targeting a minimum price hike of $400 for its upcoming redesigned 14-inch and 16-inch MacBook Pro models.
I've spent a good amount of time digging into the spec sheet of the new M6 MacBook Pro (14-inch), and for all intents and purposes, this is a classic Apple "chip and connectivity" refresh. It's not a full redesign. The chassis, Liquid Retina XDR panel, speakers, ports, and battery, all of them carry over unchanged.
However, the M6 brings more cores, stronger on-device AI, higher memory bandwidth on the larger configs, and modern wireless. Here’s the practical rundown of what actually improved, and whether those gains are worth your money.
Two new highly requested iCloud plugins just got added to ChatGPT, giving people who rely on Apple’s Mail and Calendar services a way to search emails, check appointments, and manage their schedules directly through the chatbot.
The integration is rolling out to all ChatGPT plans, including the free tier. You can access it on the web, desktop, and iOS.