Using Wi-Fi to “see” behind closed doors is easier than anyone thought - MIT Technology Review

https://www.technologyreview.com/s/612375/using-wi-fi-to-see-behind-closed-doors-is-easier-than-anyone-thought/

With nothing but a smartphone and some clever computation, researchers can exploit ambient signals to track individuals in their own homes.

Private messages from 81,000 hacked Facebook accounts for sale - BBC News

https://www.bbc.co.uk/news/technology-46065796

Facebook said its security had not been compromised.

And the data had probably been obtained through malicious browser extensions.

Eurostar resets customer passwords after hack attack - BBC News

https://www.bbc.co.uk/news/technology-46048597

Eurostar has reset its customers’ login passwords after detecting attempts to break into an unspecified number of accounts.

U.S. Begins First Cyberoperation Against Russia Aimed at Protecting Elections - NYTimes

https://www.nytimes.com/2018/10/23/us/politics/russian-hacking-usa-cyber-command.html

targeting individual Russian operatives […], telling them that American operatives have identified them and are tracking their work

Genome Hackers Show No One’s DNA Is Anonymous Anymore | WIRED

https://www.wired.com/story/genome-hackers-show-no-ones-dna-is-anonymous-anymore/

60% of Americans of European descent can be identified via public DNA databases, regardless of whether they’ve submitted their own DNA data or not

The Cybersecurity World Is Debating WTF Is Going on With Bloomberg’s Chinese Microchip Stories - Motherboard

https://motherboard.vice.com/en_us/article/qv9npv/bloomberg-china-supermicro-apple-hack

No one is really sure who to believe after Businessweek’s bombshell story on an alleged Chinese supply chain attack against Apple, Amazon, and others.

Russia Targeted Investigators Trying to Expose Its Misdeeds, Western Allies Say - The New York Times

https://www.nytimes.com/2018/10/04/us/politics/russia-hacks-doping-poisoning.html

the British foreign ministry, antidoping agencies in Colorado Springs and Canada, and investigators examining the shooting down of a Malaysian passenger jet over Ukraine in 2014

Facebook Hack Puts Thousands of Other Sites at Risk - The New York Times

https://www.nytimes.com/2018/10/02/technology/facebook-hack-other-sites.html

Companies that allow customers to log in with Facebook Connect are scrambling to figure out whether their own user accounts have been compromised.

The Facebook Security Meltdown Exposes Way More Sites Than Facebook – WIRED

https://www.wired.com/story/facebook-security-breach-third-party-sites/

If your account was impacted it means that a hacker could have accessed any account that you log into using Facebook.

How to hack an election—and what states should do to prevent fake votes - MIT Technology Review

https://www.technologyreview.com/s/612070/how-to-hack-an-election-and-defensive-measures-states-should-take-to-prevent-fake-votes/

We need paper verifiable ballots, no internet voting, and we need to ensure we can audit ballots properly.

Hacking a Prince, an Emir and a Journalist to Impress a Client - NYTimes

https://www.nytimes.com/2018/08/31/world/middleeast/hacking-united-arab-emirates-nso-group.html

leaked documents and emails that directly challenge the company’s repeated assertions that it is not responsible for any illegal surveillance conducted by the governments that buy its spyware.

Fortnite’s Android installer shipped with an Epic security flaw – TechCrunch

https://techcrunch.com/2018/08/24/fortnites-android-installer-shipped-with-an-epic-security-flaw/

[made] Fortnite available for Android via its own website instead of Google’s Play Store.

had a … security flaw in it that would allow a malicious actor to essentially install any software

Hundreds of Instagram users report that their accounts have been hacked, with emails and phone numbers tied to accounts changed, preventing account recovery – Mashable

https://mashable.com/2018/08/13/instagram-hack-locked-out-of-account/#C5l2Wp7_pqqs

Police Bodycams Can Be Hacked to Doctor Footage – WIRED

https://www.wired.com/story/police-body-camera-vulnerabilities/

the vulnerabilities would allow an attacker to download footage off a camera, edit things out or potentially make more intricate modifications, and then re-upload it, leaving no indication of the change.

Russian Hackers Targeted Swedish News Sites In 2016, State Department Cable Says

https://www.buzzfeednews.com/article/kevincollier/2016-sweden-ddos-expressen-hack-russia-cables

the attack was part of a Russian campaign to sow disinformation about NATO

Hacking a Brand New Mac Remotely, Right Out of the Box – WIRED

https://www.wired.com/story/mac-remote-hack-wifi-enterprise/

targets enterprise Macs that use Apple’s Device Enrollment Program and its Mobile Device Management platform.

How a Hacker Allegedly Stole Millions by Hijacking Phone Numbers - Motherboard

https://motherboard.vice.com/en_us/article/a3q7mz/hacker-allegedly-stole-millions-bitcoin-sim-swapping

tricking a provider like AT&T into transferring the target’s phone number to a SIM card controlled by the criminal.

reset the victims’ passwords and break into their online accounts

Wells Fargo says hundreds of customers lost homes after computer glitch – CNN

https://money.cnn.com/2018/08/04/news/companies/wells-fargo-mortgage-modification/index.html

Hundreds of people had their homes foreclosed on after software used by Wells Fargo incorrectly denied them mortgage modifications.

Reddit Breach Highlights Limits of SMS-Based Authentication — Krebs on Security

https://krebsonsecurity.com/2018/08/reddit-breach-highlights-limits-of-sms-based-authentication/

Of particular note is that although the Reddit employee accounts tied to the breach were protected by SMS-based two-factor authentication, the intruder(s) managed to intercept that second factor.

Data Breaches Keep Happening. So Why Don’t You Do Something? - The New York Times

https://www.nytimes.com/2018/08/01/technology/data-breaches.html

Don’t reuse passwords, rely on two-factor verification, install software only from trusted sources, question any alert that pops up on your screen and get a password manager.