A week in security (January 1 – January 7)

January 7, 2024 – UK Police are investigating a sexual assault on the avatar of a girl aged under 16 that caused psychological trauma.

January 7, 2024 – People using LLMs for bug bounty hunts are wasting developers’ time argues the lead developer of cURL. And he’s probably right.

January 7, 2024 – Researchers have found flaws in the way SMTP servers handle messages, allowing them to send spoofed emails to and from targets.

January 4, 2024 – Facebook has announced it will roll out a new option called Link History to mobile users around the world. What does that mean?

January 4, 2024 – 23andMe has responded in a letter to legal representatives of data breach victims that they were to blame themselves for re-using passwords