NYT Strands hints and answers for Sunday, July 6 (game #490)
Looking for a different day? A new NYT Strands puzzle appears at midnight each day…
Metasploit Weekly Wrap-Up: 07/19/2025
ARM64 Windows Payload This latest metasploit-framework release marks a significant milestone, introducing the inaugural payload specifically designed for Windows ARM64 architecture: windows/aarch64/exec. This addition greatly expands the framework’s capabilities, enabling penetration testers and security researchers to develop and deploy exploits against the growing number of Windows devices powered by ARM processors. We extend our sincere gratitude…
Exploiting an Internal Network, Loud and Proud
Rapid7 was recently tasked with testing a client’s internal network, an environment that included multiple subnets. Due to the size of the network, this was a paired internal – an engagement in which two consultants are assigned to the same network penetration test. Starting softly We kicked off this one how we typically do: by…
Australia sunscreen scandal grows as more products pulled off shelves
A sunscreen scandal in Australia is continuing to grow, with 18 products now pulled from shelves in the skin cancer hotspot over safety concerns. Analysis by a consumer advocacy group in June found several popular and expensive sunscreens did not provide the protection claimed by their makers. One product, Ultra Violette’s Lean Screen Skinscreen, is…
Coty explores sale of CoverGirl, Rimmel as it pivots to fragrances
By Reuters Published September 30, 2025 Coty said on Tuesday it had launched a strategic review of its consumer beauty business that could lead to the sale of brands such as CoverGirl and Rimmel, as the cosmetics maker plans to focus on its more profitable fragrances unit. Reuters The New York-based company had last month projected a…
ISC Stormcast For Wednesday, October 1st, 2025 https://isc.sans.edu/podcastdetail/9636
ISC Stormcast For Wednesday, October 1st, 2025 https://isc.sans.edu/podcastdetail/9636, (Wed, Oct 1st) Source link
Pandora CEO to retire in 2026, replaced by marketing chief
By Reuters Published September 30, 2025 Jewellery maker Pandora‘s CEO Alexander Lacik will retire next March after nearly seven years in charge and be succeeded by marketing chief Berta de Pablos-Barbier, the company said on Tuesday in an earlier than expected move. Berta de Pablos-Barbier – Pandora Pandora’s share price fell 2% by 0931 GMT…
Givaudan to acquire US fragrance house Belle Aire Creations
Published September 30, 2025 Givaudan, a global leader in fragrance and beauty, announced on Tuesday its plans to acquire Belle Aire Creations, a prominent U.S.-based fragrance house. Terms of the deal were not disclosed. Givaudan to acquire US fragrance house Belle Aire Creations. – Givaudan With this acquisition, Givaudan aims to leverage Belle Aire Creations’…
Daniel Hay: Major failings after former gynaecologist harmed women
Facebook Daniel Hay was a consultant gynaecologist at the University Hospitals of Derby and Burton NHS Trust A former NHS gynaecologist’s risky practices and shortcuts contributed to women suffering severe physical harm, a long-awaited report into his care has found. Daniel Hay joined the University Hospitals of Derby and Burton (UHDB) NHS Foundation Trust in…
Weak passwords, Weaker MFA Protocols, and One Absent-Minded Professor
Multi-factor authentication (MFA) is often touted as a silver-bullet for preventing breaches, but it is only as good as the people using it. Without other compensating controls in place, a malicious actor could be one push notification away from your internal network. This is the story of how I went external-to-internal on an external network…
Crush FTP Vulnerability Exploited in the Wild
On Friday, July 18, 2025, managed file transfer vendor CrushFTP released information to a private mailing list on a new critical vulnerability, tracked as CVE-2025-54309, affecting versions below 10.8.5 and 11.3.4_23 across all platforms. According to the public-facing vendor advisory, this vulnerability in the CrushFTP managed file transfer software web interface is being exploited in…
