Online Safety & Awareness
ASOS breach update: Hackers stole customer details and shopping searches
The customer data stolen from global fashion retailer ASOS includes more than just names and contact details, raising questions about its early reassurances.…
Attackers hijack country-code domains to impersonate Google and other services
According to Google, attackers compromised infrastructure behind three country-code domain namespaces—.gh (Ghana), .sl (Sierra Leone), and .as (American Samoa)—and used it to…
Amazon has an uncomfortably personal profile on you
Amazon’s “About You” page reveals what it thinks it knows about you—and you can’t simply switch it off. Dexerto reports that one…
Satel Netco Design
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user’s browser, consume excessive…
Grid Protection Alliance openPDC and openHistorian
View CSAF Summary The following versions of Grid Protection Alliance openPDC and openHistorian are affected: openPDC
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication …
Red Lion Controls N-Tron 700 Series (Update A)
View CSAF Summary Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This…
Meta’s Muse AI files away your friendships, arguments, and secrets
If you thought that having companies trawling your social media, browsing history, and TV habits for behavioral clues was bad, sit tight.…
Smashing Security podcast #487: Clippy’s crypto comeback
DANNY PALMER It’s October, which means it’s Cybersecurity Awareness Month. GRAHAM CLULEY Oh no, the one month of the year we have…
Savannah lwIP SMTP client
View CSAF Summary Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code…