Password

Online fashion retailer ASOS is reported to have suffered a data breach affecting millions of customer records. The exposed data reportedly includes personal customer information, though the exact scope and how the records were obtained are not yet confirmed. If accurate, the incident would add ASOS to the growing list of major retailers facing cybersecurity incidents, and customers are being advised to stay alert for phishing attempts and change their passwords.

A scam targeting iPhone users offers a fake $500 Apple voucher but may hand criminals access to personal photos and passwords. Outlets including MLive.com and Yahoo are warning recipients not to click links or enter credentials in the fraudulent offer. Users are advised to delete suspicious messages and enable security protections on their devices.

The Independent reports on warnings of a 'mathocalypse': the moment AI systems become capable of breaking the mathematical encryption that secures online communication. If advanced AI cracks public-key cryptography, passwords, banking and private messaging could all be exposed, prompting renewed debate about how urgently the internet's security infrastructure needs upgrading.

A revived FakeGit operation has flooded GitHub with 17,610 malicious repositories posing as cracked or pirated software. Victims who download and run the fake tools receive the SmartLoader payload, which deploys the StealC infostealer to harvest passwords and other sensitive data. Security researchers warn developers and regular users alike to avoid unofficial software downloads on the platform.

ASOS has confirmed a data breach after shoppers received security alerts suggesting the app had been hacked. The online fashion retailer is notifying affected customers, though details on how many accounts were compromised and what data was accessed remain limited. Cybersecurity observers are watching how the company responds and advises customers to update passwords and monitor their accounts.

A data breach affecting ASOS customer accounts is in the news, with reports detailing what information hackers were able to access. The online fashion retailer's customers are being urged to check their accounts and secure their passwords. The full scope of the incident and the number of people affected remain unclear from initial reports.

The FBI says FortiBleed attacks against exposed FortiGate firewalls and SSL VPN gateways are still ongoing. Attackers use credentials stolen by infostealers, crack the stolen password hashes with GPU clusters running tools like Hashcat, then lock administrators out of devices. The activity is linked to INC/Lynx and Payload ransomware operations, with tens of thousands of devices reportedly affected.

WeatherBug is being criticised for capping account passwords at 16 characters, a restriction catalogued on a site that collects poor password policies. Security-minded users point out that short maximum lengths discourage long passphrases and can signal outdated or unsafe password handling behind the scenes.