Australia passes sweeping anti-encryption bill giving police power to implant malware and insert backdoors, despite opposition from experts, tech companies - TechCrunch

https://techcrunch.com/2018/12/05/australia-rushes-its-dangerous-anti-encryption-bill-into-parliament/

Quora Hacked

https://blog.quora.com/Quora-Security-Update

We recently discovered that some user data was compromised as a result of unauthorized access to one of our systems by a malicious third party.

Marriott says 500 million Starwood guest records stolen in massive data breach – TechCrunch

https://techcrunch.com/2018/11/30/starwood-hotels-says-500-million-guest-records-stolen-in-massive-data-breach/

contained a guest’s name, postal address, phone number, date of birth, gender, email address, passport number, […] arrival and departure information, reservation date […]

Major SMS security lapse is a reminder to use authenticator apps instead - The Verge

https://www.theverge.com/2018/11/16/18098286/vovox-security-breach-two-factor-authentication-2fa-codes-exposed

anyone could have monitored a near-real-time data stream to find the relevant two-factor authentication code sent after trying to log into someone else’s account.

Facebook bug let websites read ‘likes’ and interests from a user’s profile – TechCrunch

https://techcrunch.com/2018/11/13/facebook-bug-website-leak-likes-interests-profile/

The vulnerability exposed the user and their friends’ interests, even if their privacy settings were set so that interests were only visible to the user’s friends

Security flaw in DJI’s website and apps exposed accounts to hackers and drone live feeds – TechCrunch

https://techcrunch.com/2018/11/08/security-flaw-in-dji-apps-exposed-accounts-to-hackers-and-drone-live-feeds/

It took about six months for popular consumer drone maker DJI to fix a security vulnerability across its website and apps

Hackers breach StatCounter, injecting its analytics script with malicious code that currently targets users of crypto exchange Gate.io to hijack BTC withdrawals – ZDNet

https://www.zdnet.com/article/hackers-breach-statcounter-to-hijack-bitcoin-transactions-on-gate-io-exchange/

Using Wi-Fi to “see” behind closed doors is easier than anyone thought - MIT Technology Review

https://www.technologyreview.com/s/612375/using-wi-fi-to-see-behind-closed-doors-is-easier-than-anyone-thought/

With nothing but a smartphone and some clever computation, researchers can exploit ambient signals to track individuals in their own homes.

Private messages from 81,000 hacked Facebook accounts for sale - BBC News

https://www.bbc.co.uk/news/technology-46065796

Facebook said its security had not been compromised.

And the data had probably been obtained through malicious browser extensions.

Eurostar resets customer passwords after hack attack - BBC News

https://www.bbc.co.uk/news/technology-46048597

Eurostar has reset its customers’ login passwords after detecting attempts to break into an unspecified number of accounts.