Huawei has officially shown off a wide-format foldable phone, and it is hard not to look at it and think about the iPhone Fold rumors all over again.

The unreleased foldable iPhone just got an unofficial rival with the Huawei Pura X Max. Huawei has already started teasing it through official materials ahead of its China launch on April 20. Image posters shared by the company show an unusually wide foldable layout that looks closer to a compact tablet when opened than the taller, narrower foldables we have gotten used to.

Why the Pura X Max has everyone talking

The official images shared by Huawei show the Pura X Max in blue, white, black, and orange colors with a boxy, passport-like build and a triple rear camera setup. It looks like a super wide foldable, which is a format that has only been seen in rumors of future Apple and Samsung devices so far.

This is also where the iPhone Fold comparison really comes in. Recent CAD renders and rumors of the first-ever foldable iPhone shared a similar wide design language, rather than the conventional style seen in the Galaxy Z Flip or Z Fold models. But it looks like Huawei is taking the first step with a broader canvas, which should make reading, multitasking, video, and gaming feel more natural.

So no more awkward aspect ratios on the main screen. In practice, the wider main screen gives way to a compact tablet-like design when unfolded.

Advertisement

Why it is stealing hype from the iPhone Fold

The answer is pretty simple: the Pura X Max is real.

The iPhone Fold is still making the rounds in online speculations and rumors. Many of these are likely made up, render speculation, and supply chain chatter. Meanwhile, Huawei has an actual product with official visuals, a launch date, and a design that appears to answer the same “what should the next big foldable shape be?” question before Apple ever got there.

A wider ranging security incident reported by Google Threat Intelligence Group last week prompted OpenAI to take action around its certification process.

OpenAI said on Friday (10 April) that it would be working on safeguarding and updating the certification process for its apps running on MacOS following reports of a security issue around a third-party development tool.

The company said that it would update the security certification process for its MacOS apps through “an abundance of caution”, having found no evidence that OpenAI user data was accessed, that its systems or intellectual property were compromised, or that its software was altered.

A wider ranging security incident reported by Google Threat Intelligence Group last week centred around exploits of a third-party tool named Axios, which prompted OpenAI to consider and take steps against the possibility “of someone attempting to distribute a fake app that appears to be from OpenAI”, the company said.

According to the company, this “unlikely” scenario necessitated it to revoke and replace existing security certifications for MacOS versions of its chatbot ChatGPT, coding tool Codex and web browser Atlas.

OpenAI said that Mac users of any of these apps are required to update to their newest versions to ensure compliance with the new security protocols, adding that “older versions of our MacOS desktop apps will no longer receive updates or support, and may not be functional”.

User passwords and OpenAI API keys were unaffected by the potential breach, and no evidence of “malware signed as OpenAI” had been detected, the company said.

It added that after 8 May, new downloads and launches of apps signed with old security certificates will be blocked by MacOS security protections.

The potential security threat does not affect iOS, Android, Linux, Windows or web versions of OpenAI apps, the company said, and only users of its MacOS versions need to take action.

The “root cause” of the security incident was a “misconfiguration in the GitHub Actions workflow” that has since been addressed, according to OpenAI.

Last month, reports emerged of the AI giant’s plans for consolidating its chatbot, coding and web browsing tools into a single ‘superapp’ for desktop in the face of fierce competition from Anthropic.

The following week, it decided to shut down its controversial AI video generator Sora and sideline plans for an ‘erotic’ version of ChatGPT to focus instead on its core enterprise business.

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Adobe has released an emergency security update for Acrobat Reader to fix a vulnerability, tracked as CVE-2026-34621, that has been exploited in zero-day attacks since at least December.

The flaw allows malicious PDF files to bypass sandbox restrictions and invoke privileged JavaScript APIs, potentially leading to arbitrary code execution. The exploit observed in attacks enables reading and stealing arbitrary files. No user interaction is required beyond opening the malicious PDF.

Specifically, the exploit abuses APIs like util.readFileIntoStream() to read arbitrary local files and RSS.addFeed() to exfiltrate data and fetch additional attacker-controlled code.

The security issue was discovered by Haifei Li, founder of the EXPMON exploit detection system, after someone submitted for analysis a PDF sample named “yummy_adobe_exploit_uwu.pdf.”

Haifei Li says that someone submitted the sample to EXPMON on March 26, but it had been sent to VirusTotal three days before, where only five out of 64 security vendors flagged it as malicious at the time.

The researcher decided to manually investigate the issue after the exploit detection system activated its “detection in depth” feature, an advanced detection capability Haifei Li specifically developed for Adobe Reader, he says in a blog post last week.

Security researcher Gi7w0rm spotted attacks in the wild that leveraged Russian-language documents with oil and gas industry lures.

Following the receipt of Li’s report, Adobe published a security bulletin over the weekend, assigning the vulnerability the CVE-2026-34621 tracker.

Although the flaw was initially rated critical (9.6) with a network attack vector, Adobe subsequently lowered the severity to 8.6 after changing the vector to local.

The vendor listed the following Windows and macOS products as impacted:

• Acrobat DC versions 26.001.21367 and earlier (fixed in version 26.001.21411)
• Acrobat Reader DC versions 26.001.21367 and earlier (fixed in version 26.001.21411)
• Acrobat 2024 versions 24.001.30356 and earlier (fixed in version 24.001.30362 on Windows, and version 24.001.30360 on Mac)

Adobe recommends that users of the above software update their applications through ‘Help > Check for Updates,’ which triggers an automated update.

Alternatively, users may download an Acrobat Reader installer from Adobe’s official software portal.

No workarounds or mitigations were listed in the bulletin, so applying the security updates is the only recommended action.

However, users should always be wary of PDF files sent from unsolicited sources and open them in sandboxed environments when suspicious.

Automated pentesting proves the path exists. BAS proves whether your controls stop it. Most teams run one without the other.

This whitepaper maps six validation surfaces, shows where coverage ends, and provides practitioners with three diagnostic questions for any tool evaluation.

Get Your Copy Now

How many headphone brands can genuinely claim that their noise cancellation is the benchmark against which everything else gets measured?

The Bose QuietComfort Headphones are one of the clearest answers to that question, and right now the limited edition Moonlight Grey colourway is down from $359 to $199, its lowest price in a month on Amazon.