This is Optimizer, a weekly newsletter sent every Friday from Verge senior reviewer Victoria Song that dissects and discusses the latest gizmos and potions that swear they’re going to change your life. Opt in for Optimizer here.
Technology
Apple fixes Passwords app vulnerability enabling Wi-Fi attacks
Do you remember Apple’s “Privacy. That’s iPhone” marketing campaigns? If you’re not aware, the company likes to portray its products as being synonymous with privacy. However, the recent wave of security vulnerabilities affecting iPhones and Macs suggest Apple’s products may not be as secure as advertised.
A recent security blunder only reinforces this point. Security researchers discovered that Apple’s built-in password manager app, Passwords, was vulnerable to phishing attacks for nearly three months after launch. This meant an attacker on the same Wi-Fi network as you, like at an airport or coffee shop, could redirect your browser to a lookalike phishing site to steal your login credentials.
Stay protected & informed! Get security alerts & expert tech tips – sign up for Kurt’s The CyberGuy Report now.
A person holding an iPhone (Kurt “CyberGuy” Knutsson)
What you need to know
Security researchers at Mysk, noticed that Apple’s Passwords app, introduced with iOS 18 in September 2024, had a significant security flaw that left users vulnerable to phishing attacks for nearly three months.
The app used unencrypted HTTP connections instead of the more secure HTTPS to fetch logos and icons displayed alongside stored passwords. This allowed attackers on the same network, such as public Wi-Fi at a coffee shop or airport, to intercept these requests and potentially redirect users to phishing sites designed to steal login credentials.
The issue remained unresolved from iOS 18’s launch in September 2024 until Apple fixed it in December 2024, leaving users exposed for nearly three months. If someone opened the Passwords app and tapped a link, like “Change Password,” while connected to an insecure network, an attacker could intercept the request and redirect them to a fraudulent site mimicking a legitimate one, such as a fake Yelp login page. Since the app did not enforce HTTPS, users might not notice the switch, putting their sensitive information at risk.
A woman on her iPhone (Kurt “CyberGuy” Knutsson)
HOW TO PROTECT AN IPHONE & IPAD FROM MALWARE IN 2025
Apple has fixed the issue now
Apple addressed the problem after security researchers from Mysk reported it in September 2024. The iOS 18.2 update, released in December, patched the vulnerability by enforcing HTTPS for all network communications within the Passwords app, making it much harder for attackers to intercept or redirect traffic.
If you’re using an iPhone or iPad with the Passwords app, ensure your device is updated to iOS 18.2 or later. This ensures you’re protected from this vulnerability. If you haven’t updated yet and used the app on public Wi-Fi between September and December 2024, consider changing passwords for any accounts you accessed during that period, just to be safe.
How to update the software on your iPhone
Follow the steps to update your iPhone or iPad:
- Tap on Settings
- Tap on General
- Tap on Software Update
- If an update is available, it will give you the option to download and install
Software update (Kurt “CyberGuy” Knutsson)
YOUR IPHONE HAS A HIDDEN FOLDER EATING UP STORAGE SPACE WITHOUT YOU EVEN KNOWING
6 ways you can stay safe from hackers targeting your passwords
Apple’s recent security blunder with the Passwords app highlights the importance of taking steps to protect your digital identity. Here are some ways you can stay safe from hackers targeting your passwords.
1) Use a reliable password manager: Apple apps are generally more secure than third-party options, but the Passwords app clearly wasn’t. The fact that the security vulnerability existed for three months before Apple fixed it proves that Apple needs to put more emphasis on keeping customer data secure. I’d suggest opting for a reliable password manager instead of relying on Apple’s offering. Get more details about my best expert-reviewed password managers of 2025 here.
2) Enable two-factor authentication (2FA): It’s good to have a password manager, but you know what’s even better? 2FA. Adding an extra layer of security with 2FA can prevent hackers from accessing your accounts, even if they steal your password. Use authentication apps like Google Authenticator, Microsoft Authenticator or hardware security keys instead of SMS-based codes, which are vulnerable to SIM-swapping attacks.
3) Avoid public Wi-Fi for sensitive activities and use a VPN: Hackers can exploit unsecured public networks to intercept your login credentials. If you must access sensitive accounts on public Wi-Fi, use a VPN to encrypt your internet traffic and prevent attackers from snooping on your data. VPNs will protect you from those who want to track and identify your potential location and the websites that you visit. A reliable VPN is essential for protecting your online privacy and ensuring a secure, high-speed connection. For the best VPN software, see my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android and iOS devices.
4) Beware of phishing attacks and install strong antivirus software: You can have all the protection in the world but a phishing email or SMS can still cause havoc. Hackers often use fake login pages to trick you into entering your credentials. Always verify URLs before entering login details, avoid clicking on suspicious links in emails or messages. The best way to safeguard yourself from malicious links is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.
5) Keep your devices updated: Regularly update your devices and software to ensure you have the latest security patches.
6) Regularly monitor all your accounts: Monitor your accounts for suspicious activity and report any unusual transactions or login attempts to Apple.
APPLE RELEASES EMERGENCY SECURITY UPDATE FOR SERIOUS VULNERABILITY
Kurt’s key takeaway
Three months is a long time for a security flaw in a password manager to go unpatched, especially from a company that presents itself as a leader in privacy and security. This incident highlights a troubling reality. Apple’s security measures are not infallible, and even built-in system apps can expose users to serious risks. While the fix eventually arrived, it should not have taken this long for such a fundamental issue to be addressed. If Apple wants to maintain its privacy-first image, it needs to do better by ensuring more rigorous security testing before launch.
Do you think Apple is doing enough to stay ahead of evolving cyber threats or are there additional steps the company should take to protect its users? Let us know by writing us at Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Alert: Malware steals bank cards and passwords from millions of devices.
Ask Kurt a question or let us know what stories you’d like us to cover.
Follow Kurt on his social channels:
Answers to the most-asked CyberGuy questions:
New from Kurt:
Copyright 2025 CyberGuy.com. All rights reserved.
Technology
Microsoft will let you pause Windows Updates indefinitely, 35 days at a time
Windows users will no longer be forced to run automatic updates in the middle of a game or a busy day. Microsoft is rolling out some long-awaited changes to Windows Update to users on its Dev and Experimental Windows Insider channels, including the ability to indefinitely delay updates up to 35 days at a time.
Last month, Microsoft announced a slew of upcoming changes to improve Windows 11 and address some of users’ most common complaints about the platform. Chief among the company’s planned fixes was making updates less disruptive. In its blog post on Friday, Microsoft says you’ll be able to “extend the pause end date as many times as you need” and that there are “no limits” on how many times you can reset to another 35-day window. If you don’t re-pause updates at the end of the 35-day period, updates will run as usual.
The changes to Windows Update also include more detailed titles for driver updates, which will now include the device class they apply to, such as display, audio, or battery.
Additionally, Windows 11 will now always have options in the power menu to restart or shut down without running updates, as well as the option to skip updates when setting up a new Windows device. Microsoft is also “unifying the update experience” to bunch together updates so users don’t have to reboot as frequently. Instead, “updates will download in the background, then will wait for a coordinated installation and restart.”
Technology
Fox News AI Newsletter: Your next Dairy Queen order could be taken by AI
Some social media users are frustrated with Dairy Queen’s AI drive-thru system and prefer human interaction. (Brandon Bell/Getty Images)
NEWYou can now listen to Fox News articles!
Welcome to Fox News’ Artificial Intelligence newsletter with the latest AI technology advancements.
IN TODAY’S NEWSLETTER:
– Dairy Queen’s new drive-thrus without humans spark backlash by frustrated customers
– Meta informs staff of layoffs affecting 8,000 employees amid AI push
– Fox News Poll: Voters see AI as a risk to privacy and paychecks
COLD OPEN: Dairy Queen’s new drive-thrus without humans spark backlash from frustrated customers – Fast-food chain Dairy Queen is moving toward new, fully automated AI drive-thrus operating without human workers.
TRUST DEFICIT: Fox News Poll: Voters see AI risk to privacy, paychecks – A Fox News Poll this week reveals growing anxiety among voters regarding artificial intelligence, with a significant portion expressing concerns that the rapidly advancing technology poses a direct threat to their personal privacy and future paychecks.
DIGITAL HEIST: White House accuses China of ‘industrial-scale’ AI technology theft ahead of Trump-Xi summit – Ahead of the highly anticipated summit between former President Donald Trump and Chinese President Xi Jinping, the White House has raised alarms over China’s industrial-scale theft of artificial intelligence technology.
CCP THEFT: Google engineer stole AI secrets for China, Senate hears explosive testimony – In explosive testimony before the Senate, lawmakers heard alarming details about a Google engineer accused of stealing closely guarded artificial intelligence secrets on behalf of China, highlighting national security risks.
CODE OR CRIME: Florida launches criminal probe into whether chatbot aided suspect in deadly campus shooting – Florida officials have launched a criminal probe to determine whether an artificial intelligence chatbot provided assistance to a suspect involved in a deadly campus shooting, demonstrating a novel challenge for law enforcement.
Fox News Digital spoke to Jack Schlossberg about his concerns that artificial intelligence is being used to overcharge consumers. (Fox News Digital)
FINE PRINT FURY: Schlossberg unveils plan to crack down on new frontier of AI putting squeeze on consumers – In a move to protect the public from emerging tech threats, Schlossberg has unveiled a comprehensive plan aimed at cracking down on the new frontier of artificial intelligence that is currently putting a financial squeeze on everyday consumers..
CODED MORALITY: Anthropic’s ‘moral compass’ architect suggested AI overcorrection could address historical injustices – The architect behind the “moral compass” at the AI firm Anthropic has controversially suggested that implementing an artificial intelligence overcorrection could serve as a mechanism to address historical injustices.
DIGITAL PREDATOR: Worker at swanky country club accused of using AI to create explicit photos of teen, police say – Police say a worker at an exclusive, swanky country club has been accused of utilizing artificial intelligence tools to generate explicit and inappropriate photographs of a teenager.
BOT BEHAVIOR: Expert rips ‘irresponsible’ AI study over blackmail scenarios – A leading technology expert is pushing back against a recent academic study outlining hypothetical artificial intelligence blackmail scenarios, ripping the research as highly “irresponsible” for stoking unnecessary public panic.
DOUBLE DOWN: Reese Witherspoon doubles down on AI comments, adds no one is paying her to say it – Hollywood actress Reese Witherspoon has doubled down on her controversial comments regarding the integration of artificial intelligence in the entertainment industry, emphatically adding that no one is paying her to endorse the technology.
EFFICIENCY DRIVE: Meta informs staff layoffs affecting 8,000 employees amid AI push – Amid a massive strategic pivot toward artificial intelligence, Meta has informed its staff of impending layoffs expected to affect approximately 8,000 employees as the tech giant restructures its workforce.
Meta CEO Mark Zuckerberg delivers a keynote speech at the Meta Connect annual event at the company’s headquarters in Menlo Park, Calif., on Sept. 25, 2024. (Manuel Orbegozo/Reuters)
ROBOTIC SHOTS: 49ers turning to artificial intelligence at NFL Draft, GM says laggards are already behind – The San Francisco 49ers are heavily integrating artificial intelligence into their scouting process ahead of the NFL Draft, with the team’s general manager warning that franchises failing to adopt the technology are already falling behind, according to Fox News Digital.
HANDS-FREE FEAST: Alexa lets you order food like a real conversation – Amazon’s Alexa is rolling out an updated artificial intelligence feature that enables users to order food by engaging in a seamless, real-time conversation with the virtual assistant.
FREE THROW BOT: Toyota’s CUE7 robot shoots hoops using AI – Toyota is showing off the impressive capabilities of its cutting-edge CUE7 robot, which utilizes advanced artificial intelligence algorithms to accurately shoot basketball hoops.
CUE7 sinks a free throw, a simple moment that reflects a bigger shift toward AI that learns through experience. (Toyota Motor Corporation)
Subscribe now to get the Fox News Artificial Intelligence Newsletter in your inbox.
FOLLOW FOX NEWS ON SOCIAL MEDIA
YouTube
X
SIGN UP FOR OUR OTHER NEWSLETTERS
Fox News First
Fox News Opinion
Fox News Lifestyle
Fox News Health
DOWNLOAD OUR APPS
Fox News
Fox Business
Fox Weather
Fox Sports
Tubi
WATCH FOX NEWS ONLINE
Fox News Go
STREAM FOX NATION
Fox Nation
Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future with Fox News here.
Technology
I don’t think Gwyneth Paltrow knows what a peptide is
These days, it seems I cannot escape peptides. Online, I’ve been assaulted by videos of shirtless Chads injecting dubiously sourced bottles of the so-called “Wolverine stack.” On the New York City subway, I’m haunted by Serena Williams’ Ro ads for easy GLP-1 access. Silicon Valley seems to be a parade of peptide parties. In Washington, RFK Jr. has said he’s pro-peptide and wants to expand access. In July, the FDA will meet to possibly reclassify 14 peptides so they can be eligible for compounding.
And in Hollywood, Gwyneth Paltrow — mother Goop, one of the original wellness influencers — is selling a series of peptide skincare products. Except, after some research, I’m not sure Paltrow actually understands what peptides are.
You might be wondering why I’m fixating on a Goop product in Optimizer. The short answer: While researching peptides for a forthcoming feature, I’ve descended into madness.
The longer answer is that peptide mania is central to Silicon Valley’s current fixation with longevity and metabolic optimization. As I’ve recently written, wellness trends increasingly inform new health tech features and gadgets that make up the wearable surveillance state. Peptides are also being framed on social media as an innovation that democratizes healthcare. (A similar rhetoric used to describe wearables!) It’s part of the wellness Wild West feedback loop that’s fueling Silicon Valley’s obsession with self-optimization. With that in mind, it’s worth examining how “peptide washing” has crept into various corners of the internet — and the resulting ripple effects.
While peptide shots are a relatively new trend, we’ve known about peptides and how they work for decades. They’re short chains of amino acids, which, in turn, make up proteins. In other words, building blocks for the building blocks. Because a peptide can be a chain ranging from two to roughly 100 amino acids, there are potentially trillions of peptides. Their main function is to act as messengers for various bodily functions. Some are naturally occurring and often come from the foods you eat. Others are made synthetically in a lab. The most famous ones include insulin and GLP-1 medications like semaglutide (Ozempic and Wegovy) and tirzepatide (Zepbound and Mounjaro).
What’s taking social media by storm are peptides that exist in legal gray areas. They’re not widely tested or FDA-approved drugs, and are sometimes sourced from dubious suppliers. I’ve previously written about retatrutide — another popular weight loss peptide — in Optimizer, but there’s a whole slew of others with names that sound vaguely like Star Wars droids. The most popular ones include BPC-157, TB-500, GHK-Cu, and CJC1295. These peptides are touted as biohacks for ailments ranging from fat loss and muscle growth, to faster wound healing, anti-aging, and increased energy. Essentially, everything associated with living a longer, healthier life. Lumped alongside these is NAD+, which is not a peptide but is often marketed as one. That’s partly because it’s frequently consumed as an IV drip and is thus an injectable substance.
But just because you can inject something, that doesn’t make it a peptide.
Do you have experience using peptides?
Or extremely strong feelings about this trend? I’m researching this phenomenon and I’d love to chat with you. Hit me up at victoria.song@theverge.com or on Signal at @ vicmsong.14.
NAD stands for nicotinamide adenine dinucleotide. It’s a coenzyme — basically an enzyme booster — that’s found in every cell. Its primary job is to help convert food into energy. It does this by shuttling electrons from one chemical reaction to another. As you age, your NAD levels naturally decline. This can lead to an array of conditions associated with aging, like Type 2 diabetes, lower energy levels, and saggy skin. Not to get too weedsy, but the + in NAD+ simply denotes one of two versions of the NAD molecule. (The other is NADH.)
Which, finally, brings me to the Goop Youth Boost NAD+ Peptide Rich Cream and whether Gwyneth Paltrow actually knows what a peptide is.
In my research, I was looking into influential people who have spoken out about peptide injections. There’s a long list, but in Hollywood, Paltrow’s name kept popping up. Cue this recent Elle interview, in which Paltrow plays a “fuck, marry, kill” game with wellness trends.
From the get-go, the Elle article incorrectly identifies NAD+ as a peptide. Paltrow is then quoted as saying she uses NAD+ IV drips and an injectable NAD+ pen for impromptu energy boosts. She goes on to say that injectable peptides dealing with inflammation and brain health that are “being formulated for longevity” will be the next NAD+. In the fuck, marry, kill game, Paltrow is asked to choose between NAD+, B12, and peptide shots. She refuses, saying she’d marry them all.
What’s worrisome is the conflation of these treatments, even though they’re three separate things. It’s easy for the average person to read this article and think, “NAD+ is a type of peptide shot and a rich, glamorous celebrity like Gwyneth Paltrow does it, so this must be their secret to looking good.”
(For the curious: B12 is a vitamin. Supplementation can boost energy if you have a B12 deficiency, which is relatively common in the elderly, vegetarian, and vegan populations. As for NAD+, there’s considerable research interest, but limited clinical evidence for drips or supplements at the moment. I wrote a whole Optimizer newsletter about dubious peptide shots.)
From this interview, I get the sense that Paltrow knows that peptides are trendy, but she doesn’t actually admit to using any specific one. After some more digging, I found she has stated that she loves glutathione IV drips. Now, that is a peptide. However, she characterized her usage as “I love IV drips!” so, again, I’m not sure if Paltrow is aware that IV drips and peptides are not the same thing. Upon looking into her “peptide-rich” moisturizer, I’m even less certain.
Calling it a “Youth Boost NAD+ Peptide Rich Cream” would suggest this $105 moisturizer has both NAD+ and a bunch of peptides. Peruse the ingredient list, and you’ll find it doesn’t even have NAD+. It has NMN, or nicotinamide mononucleotide, a precursor (another kind of building block) for NAD+. As for its peptide content, the marketing claims the cream features “biomimetic plant-derived peptides.” Again, the list only refers to one true peptide molecule: arginine/lysine polypeptide. (A polypeptide is a longer peptide; this one supposedly helps with wrinkles.) It also appears last. In skincare, the ingredient list is generally ordered in terms of concentration. The top three to five ingredients make up the bulk of the formula. One hack is to find the so-called “one percent line”, which you can estimate from when the first preservative or fragrance appears. Given how this list is written, this is a standard moisturizer with a teeny sprinkle of a single peptide thrown in for marketing flavor. Even if there was a more potent amount, peptides are delicate molecules. Effectiveness for any topical skincare active — be it peptides or salmon sperm DNA — depends on stable formulation, concentration, whether the molecule can penetrate the skin barrier, and packaging that prevents degradation.
In any case, I reached out to Goop to clarify the peptide content in this cream. I have not heard back.
The only thing I can conclude is Paltrow isn’t afraid to try fringe wellness trends. (That and she loves an IV drip.) If someone handed her a peptide shot with the promise of energy and youth, I’d bet she’d do it. But do I think a peptide-curious person could ask her to explain the pros and cons of this trend based on her public statements? Now that’s a bet I would not take.
I could be wrong. In which case, I find her statements and her moisturizer to be disappointing given her status and influence. Case in point, the average person likely isn’t going to go through the trouble of accessing gray market peptide vials. They probably won’t be able to afford the same quality treatments as Paltrow, either. But a so-called peptide cream from a celebrity? That’s easily accessible. And in this particular case, that consumer wouldn’t be getting much of the thing they purportedly want to try.
More concerning is the flattening of any injectable as a peptide. Paltrow showing up to a podcast with an IV drip, speaking of peptides, phospholipids, and regular vitamins in a single breath? That’s confusing. It conflates relatively harmless therapies — like vitamin supplementation — with those that aren’t as well-studied. And the more influential people do this, the more regular people will too.
Peptides aren’t inherently dangerous. Injections aren’t evil. But the way peptide mania has made a more extreme, experimental trend as casual as taking a multivitamin? That feels like the slipperiest of slopes.
-
Sports4 minutes agoPrep talk: Aidan Martinez is back from Tommy John surgery and throwing heat
-
News10 minutes agoAmerica’s bid for energy supremacy is being forged in war
-
World16 minutes agoEU and US sign plan for strategic partnership for critical minerals
-
News46 minutes agoRoommate faces murder charges in deaths of 2 University of South Florida doctoral students
-
New York2 hours agoDemocrats Weigh Whether a Lawmaker’s Ethnicity Counts More Than Ideology
-
Detroit, MI3 hours agoPotential Day 3 Detroit Lions targets: 10 players to consider
-
San Francisco, CA3 hours agoKaelon Black selected by 49ers in NFL draft: Grade, analysis
-
Dallas, TX3 hours agoDallas Cowboys remaining draft selections after second and third rounds