Cyber Security, Without the Jargon

ASOS says an attacker accessed customer names, contact details, and search histories after sending a rogue app notification. The useful response is a simple rule: no incoming message gets to approve its own next step.

Apple plans a more explicit grant for macOS Full Disk Access as AI agents become more capable. A clearer prompt helps, but teams still need to limit which files an agent can reach and what it can do with them.

Advantest is notifying people that personal information was taken in its February ransomware incident. Read the personalised data line first, then match each exposed fact to the place where it can be misused.

Wikimedia found unapproved agent activity across its wikis, public tools, and data services. The practical lesson is to give every agent a named identity, narrow routes, hard budgets, and a stop condition before it touches the open web.

Attackers used a genuine Nikkei employee account to send about 9,000 malicious emails. Here is a calm rule for checking an unexpected request when the sender address looks right.