Holiday Tech Gifts for Apple Users, Sorted by Price
Please visit https://trustedcontentnetwork.com/holiday-tech-gifts-2026-by-price/ to access this member content.
Please visit https://trustedcontentnetwork.com/holiday-tech-gifts-2026-by-price/ to access this member content.
Please visit https://trustedcontentnetwork.com/first-touchscreen-macs/ to access this member content.
On October 21, 2026, the PHP project released emergency updates for two critical security flaws. You may never have heard of PHP, but your website probably runs on it. PHP is the programming language behind WordPress, Drupal, Joomla, Magento, and a big chunk of the rest of the Web. It runs on the server, building each page before a visitor sees it.
These flaws let an attacker run their own code on a vulnerable server without logging in first. The PHP project rates both of them 9.2 out of 10 on the industry’s standard severity scale. In plain terms, someone on the other side of the world could take over your website and anything else running on that server. The National Security Agency warned that flaws like these often give attackers a direct route to a server’s files and database, which is where customer information lives.
Most website security problems live in a plug-in or a theme, which is why keeping WordPress updated matters so much. Researchers have nicknamed these flaws “PHP2Shell,” and they’re in PHP itself. A WordPress site with every update installed is still vulnerable if the underlying server runs an unpatched version of PHP. Fixing that is the job of whoever runs the server: usually your hosting provider, sometimes your Web developer.
The rollout was also messier than usual. Details leaked before the fix was ready, researchers have demonstrated a working attack, and Cloudflare’s chief technology officer said the company was seeing early attacks. Nobody had publicly confirmed a successful break-in by release day, but some organizations weren’t waiting to find out. BambooHR took its service offline as a precaution, and the Netherlands pulled DigiD, its government login system, along with other government sites.
Apple stopped including PHP with macOS 12 Monterey, and iOS never had it; there’s nothing to worry about on updated devices. However, older Apple devices could be at risk; please reach out if you have concerns. If you or a developer installed PHP on a Mac for testing (through Homebrew, for instance), be sure to update that copy too.
The fixed releases are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. You’d think checking your site would just mean comparing numbers. Unfortunately, it doesn’t.
Many hosting companies run PHP packages from Linux distributions such as Ubuntu and Red Hat. Those vendors received the fixes ahead of time and often ship them under the old version number. A site that reports PHP 8.1 might be patched, and one that reports 8.3 might not be. Old versions are everywhere, too. Looking at Internet scan data from the day before the release, the security firm Mallory found that 59% of servers reported a PHP version of 8.1 or older, all versions the PHP project no longer supports.
So check the number, then keep going:
A website is running software and someone needs to own its upkeep. If you can’t name that person right now, start there.
Think beyond the website, too. PHP also turns up in hosting control panels and in the Web-based admin pages of some office equipment, so ask your IT provider whether anything else you rely on runs it. The NSA and the FBI’s Cyber Division both told organizations that if they can’t update right away, they should take the system offline until it’s fixed, and the UK’s National Cyber Security Centre said the same. That sounds drastic, but a website down for a day costs far less than one that’s been taken over.
Check your site today, and get a straight answer from your host about whether the fix is installed. If your site is stuck on an old version of PHP, let this be the push to finally upgrade it. If you’d like us to check your website or handle the upgrade, get in touch.
(Featured image credit: ChatGPT)
Social Media: Think keeping WordPress updated keeps your website safe? Not this time. A critical flaw in PHP, the software underneath most business websites, got an emergency fix on October 21—here’s how to make sure your site has it.
Please visit https://tcn.tidbits.com/apples-new-home-lineup-what-to-buy-what-to-skip-and-what-to-wait-for/ to access this member content.
Please visit https://tcn.tidbits.com/apple-announces-iphone-18-pro-iphone-duo-apple-watch-series-12-and-ultra-4-and-airpods-5/ to access this member content.
Please visit https://tcn.tidbits.com/apple-updates-mac-mini-and-mac-studio-with-new-m6-and-m5-ultra-chips/ to access this member content.
Please visit https://tcn.tidbits.com/10-reasons-to-upgrade-to-apples-version-27-operating-systems-this-fall/ to access this member content.
We recently helped a client set up an external boot drive on a Mac mini for testing, but the installation kept failing near the end with vague errors. We tried different cables, swapped drives, and more, to no avail. On a hunch, we moved the SSD to a different USB-C port, and the installation completed on the next attempt. But the port wasn’t bad—it was just the wrong port. Here’s what we mean.
All the USB-C ports on a Mac look identical, but they don’t all behave the same way. On Macs with Apple silicon and Intel-based Macs with the T2 chip, Apple designates one port as the DFU (device firmware update) port. Most of the time, this distinction doesn’t matter—you can plug a device into any port, and it’ll work normally. But for certain tasks, using the wrong port can cause mysterious failures that waste hours of troubleshooting time.
Note that we say “USB-C” here, even though in most cases, these are Thunderbolt ports. However, Thunderbolt uses the USB-C connector, and Apple refers to the ports as USB-C ports, so we’re following Apple’s lead.
The DFU port exists for one specific purpose: reviving or restoring your Mac’s firmware using another Mac and the Apple Configurator app. This recovery procedure requires connecting a USB-C cable (not a Thunderbolt cable!) to the DFU port. It’s extremely uncommon to need to revive a Mac in this way, but it might be necessary if the Mac starts up to an exclamation point in a circle, starts up to a blank screen, shows the status indicator light pattern for firmware recovery mode, or has problems installing macOS.
For most everyday tasks, the DFU port should work like any other USB-C port. However, Apple has documented one notable exception on Macs with Apple silicon: when installing or updating macOS on an external drive, avoid using the DFU port. If your external drive is connected to it during installation, the process may fail partway through, often without a useful error message and certainly without a clear “Connect your drive to a different port” message. You might see vague notifications like “Some updates could not be installed” or cryptic errors like “com.apple.OSInstallerSetup.error 702.” After installation or updating completes, you can connect your external drive to any port, including the DFU port.
We’ve also heard of situations where seemingly inexplicable problems, such as errors from an Apple SuperDrive attached to a Thunderbolt dock, were resolved by switching to a different port. It wasn’t always clear which port was responsible, but it’s always worth trying a different one if you have trouble.
How do you figure out which USB-C port is the DFU port? Apple maintains a support document describing the DFU port locations for each Mac model. The location varies by model and, within the same model, sometimes by generation. Apple does not explain why a particular port is designated as the DFU port or provide another way to identify it. All you can do is refer to Apple’s documentation.
![]()
Unfortunately, users have found errors on that page in the past, so if you’re experiencing unexplained installation failures or other errors, try a different port even if you believe you’re using the correct one.
For everyday use—connecting displays, drives, docks, and other peripherals—you shouldn’t need to think about which port you’re using. The only time you must use the DFU port is when reviving or restoring a very unhappy Mac.
However, if you’re setting up an external boot drive or updating macOS on an external drive, take a moment to identify your Mac’s DFU port and plug your drive into a different one. And if a peripheral, even if it’s connected through a dock, behaves inexplicably, treat the port itself as a variable. Before troubleshooting cables, drives, or software, move the connection to another USB-C port. This simple step can save you from frustrating troubleshooting sessions where everything appears to work but ultimately fails.
(Featured image by iStock.com/Milosz Deptula)
Social Media: Your Mac’s USB-C ports look identical, but one is special—and using it can cause macOS installations or updates on external drives to fail, or trigger other errors with Thunderbolt docks. Learn which USB-C port isn’t like the others.
Sometimes you just don’t want your phone to ring, chirp, or even vibrate. Maybe you’re asleep, in an important meeting, having dinner with family, meditating, playing a game, or simply enjoying some quiet time.
Apple’s Focus feature on the iPhone, iPad, and Mac can silence those interruptions, but Focus is considerably more complex than the straightforward Do Not Disturb feature it replaced in 2021. Misconfiguring Focus such that it activates unexpectedly can cause you to miss important calls, messages, and other notifications.
Focus lets you create customized notification environments that block unwanted interruptions while allowing important ones through. You can have a Focus for different situations—when you’re at work, eating dinner, at the gym, and more—each with its own rules about when it activates and which people and apps can reach you.
When a Focus is active, it can:
Focus can share your settings across all your Apple devices, which saves you from having to configure it on each device but can also create confusing interactions.
Apple provides three essential Focus modes that cover most people’s needs:
For further customization, you can create additional Focus modes—Apple suggests modes for Gaming, Mindfulness, Personal, Reading, and Work. For instance, if you take a spin class every Tuesday at noon and yoga on Thursdays at 7 AM, you could create a Focus for Working Out that would automatically activate during those times.
To set up a Focus, go to Settings > Focus on your iPhone or iPad, or System Settings > Focus on your Mac. Select the Focus you want to configure or create a new one, then:




While Focus is powerful, its complexity can create unpredictable behavior. Here are common pitfalls to avoid:

To get the benefits of Focus without the confusion:
Focus is a powerful tool for managing the constant stream of notifications from our devices, but it requires careful configuration. When in doubt, keep it simple: Sleep to protect your sleeping hours, Driving to block distractions in the car, and Do Not Disturb for ad hoc appointments and performances may be all you need.
(Featured image by iStock.com/DragonImages)
Social Media: Apple’s Focus can silence distractions when you need quiet time, but its complexity can cause you to miss important notifications. Learn how to configure it safely—and avoid the pitfalls that lead to missed calls and messages.
Starting with the iPhone 15 Pro and Pro Max, Apple replaced the Ring/Silent switch on the top-left edge of the iPhone with the Action button, making the new button standard across the iPhone 16 and iPhone 17 lineups in subsequent years. The Action button is a dedicated hardware button you can configure to perform one of many different tasks. Although Apple prompts everyone setting up a new iPhone to configure the Action button, our experience is that many people haven’t integrated it into their everyday usage.

Taking advantage of the Action button isn’t hard, but there are obstacles. The Ring/Silent switch had only one function, whereas the Action button offers so many options that it’s easy to fall prey to decision paralysis. Also, because the Action button is configurable, it behaves differently even if you leave it set to Silent Mode. The Ring/Silent switch was a physical switch that also showed its state with an orange indicator. With the Action button, you can’t tell at a glance if Silent Mode is on, and activating it requires a relatively long press-and-hold. Finally, the Action button’s ultimate power lies in its Controls and Shortcuts options, but many users are unaware of the wide-ranging possibilities these unlock.
So let’s look at how to make the most of the Action button. To configure the Action button, go to Settings > Action Button and swipe through the choices. The choice on screen when you exit Settings will be active. Although there are no bad choices here, many of the options Apple provides can be activated just as easily through Control Center or Siri, so you might not want to dedicate the Action button to them.


So there you have it! If you’re not currently using the Action button, take a spin through the available options to see which can make a difference in your everyday iPhone experience.
(Featured image by Adam Engst)
Social Media: Your iPhone’s Action button can do much more than toggle Silent Mode. Try it for quick translations or voice memos—or explore the many options in Controls and Shortcuts to trigger nearly any action with a long press.
F11 PHOTO – BOZEMAN
5 W. Mendenhall Street, Suite #202
Bozeman, MT 59715
Send us a message →
Call us at 406.586.3281
Hours: By Appointment
Get one Here: https://calendly.com/f11photo
