search
Password
Trends
- 1
Online fashion retailer Asos is facing reports of a hack after customers using its app received alerts suggesting their data may have been breached. The story, first reported by The Times, is spreading rapidly across search trends in the UK, US, France, Italy, Germany, Australia, Sweden and the Netherlands. Shoppers are reacting with concern over what customer information may have been exposed and whether they should change their passwords.
- 2
Online fashion retailer ASOS is facing questions after customers reported receiving notifications suggesting their accounts had been hacked, with messages warning company bosses of a possible data leak. Users took to social media and news comments to compare alerts and seek reassurance. The company has not yet fully explained the scope of any breach, and shoppers are being urged to change their passwords as a precaution.
- 3Password field maxlength of 20 blocks Vanguard logins●<input type="password" maxlength="20"> prevents me from logging into Vanguard
A developer writes that Vanguard's login form caps password input at 20 characters via an HTML maxlength attribute on its password field, preventing users with longer passwords from signing in. The post argues the practice is harmful and points to sloppy security engineering, sparking discussion among developers about why financial sites still truncate passwords in this way.
- 4
c't, the German computer magazine, is describing its migration to a new password manager in an article from issue 3003. The piece covers why the switch was made and what the move to different password-management software involves. Readers are discussing which password manager is the safer, more practical choice as concerns over online account security keep growing.
- 5Keycloak flaw lets stolen passwords bypass mandatory MFA●CVE-2026-105305 affects Red Hat build of Keycloak. The OIDC Device Authorization Grant flow does not enforce a client's
A vulnerability tracked as CVE-2026-105305 affects the Red Hat build of Keycloak. The OIDC Device Authorization Grant flow fails to enforce a client's minimum authentication level, meaning a stolen password could bypass mandatory multi-factor authentication and gain access to the Admin REST API. No exploitation has been confirmed, and Red Hat has a fix available. Security practitioners are sharing the advisory and urging admins to patch promptly.
Repos
- driceroland/Search A small, fast WebKit browser for macOS, by Office Commun.