Tootfinder

Belkin's move to brick Wemo devices highlights how little accountability IoT companies face when abandoning connected products customers paid for (Scharon Harding/Ars Technica)
https://arstechnica.com/gadgets/2025/07/…

Belkin shows tech firms getting too comfortable with bricking customers’ stuff
There’s no easy alternative, and IoT customers are paying the price.

Hackers leak Qantas data containing 5 million customer records after ransom deadline passes
https://www.theguardian.com/business/2025/oct/11/hackers-leak-qantas-data-containing-5-million-customer-reco…

A security researcher said
flaws in a carmaker’s online dealership portal
exposed the private information
and vehicle data of its customers,
and could have allowed hackers to remotely break into any of its customers’ vehicles.
Eaton Zveare, who works as a security researcher at software delivery company Harness,
told TechCrunch the flaw he discovered
allowed the creation of an admin account
that granted “unfettered access” to the unnamed carma…

Security flaws in a carmaker's web portal let one hacker remotely unlock cars from anywhere | TechCrunch
Security researcher Eaton Zveare told TechCrunch that the flaws he discovered in the carmaker's centralized dealer portal exposed vast access to customer and vehicle data. With this access, Zveare said he could remotely take over a customer's account and unlock their cars, and more.

🥳 New Kitten Release
Housekeeping:
• Updated runtime version to Node version 22.18.0 (latest LTS).
• Removed `--experimental-global-customevent` in node launch command (as `CustomEvent` is no longer behing the CLI flag since Node v19.0.0)
• Renamed `--experimental-loader` flag to `--loader` as the experimental prefix is no longer required.
…

Fine-Grained Customized Fashion Design with Image-into-Prompt benchmark and dataset from LMM
Hui Li, Yi You, Qiqi Chen, Bingfeng Zhang, George Q. Huang
https://arxiv.org/abs/2509.09324

Fine-Grained Customized Fashion Design with Image-into-Prompt benchmark and dataset from LMM
Generative AI evolves the execution of complex workflows in industry, where the large multimodal model empowers fashion design in the garment industry. Current generation AI models magically transform brainstorming into fancy designs easily, but the fine-grained customization still suffers from text uncertainty without professional background knowledge from end-users. Thus, we propose the Better Understanding Generation (BUG) workflow with LMM to automatically create and fine-grain customize th…

Impact of tariffs and ending De Minimis has a lot of direct but also indirect impact. Like people no longer able to safely buy anything from abroad.
UPS is 'disposing of' U.S.-bound packages over customs paperwork problems

"Sorry, bathrooms are for customers only"
Well, you've just guaranteed that I won't be a customer later.

https://www.youtube.com/watch?v=72y2EC5fkcE
I've never seen a custom engine that impressed me so much. They've built a whole tech stack so all parts are tightly integrated:
* Custom language, compiler, runtime.
* Custom code editor and debugger.
* Custom game engine (o…

Qantas says 5.7M customer records stolen in a July breach of a third-party platform have been released online, and it is assessing the extent of the exposure (Jason Gale/Bloomberg)
https://www.bloomberg.com/news/articles/202…

Don't miss today's Metacurity for the critical infosec developments you might have missed over the weekend, including
--Embargo may be a rebranded version of ALPHV ransomware group,
--Russian threat group GreedyBear is stealing crypto,
--Israel beat Iran in the brief war's cyber conflicts,
--M&S resumes click and collect orders,
--GPT-5 was a disaster and easy to hack,
--Hacker breached dealership portal and could hack customers' cars,

New Embargo group may be a rebranded version of ALPHV ransomware gang
Russian threat group GreedyBear is stealing crypto, Israel beat Iran in the brief war's cyber conflicts, M&S resumes click and collect orders, GPT-5 was a disaster and easy to hack, Hacker breached dealership portal and could hack customers' cars, Korea's Yes24 ransomwared again, much more