https://www.nytimes.com/2018/08/31/world/middleeast/hacking-united-arab-emirates-nso-group.html
leaked documents and emails that directly challenge the company’s repeated assertions that it is not responsible for any illegal surveillance conducted by the governments that buy its spyware.
https://techcrunch.com/2018/08/24/fortnites-android-installer-shipped-with-an-epic-security-flaw/
[made] Fortnite available for Android via its own website instead of Google’s Play Store.
had a … security flaw in it that would allow a malicious actor to essentially install any software
https://www.wired.com/story/police-body-camera-vulnerabilities/
the vulnerabilities would allow an attacker to download footage off a camera, edit things out or potentially make more intricate modifications, and then re-upload it, leaving no indication of the change.
https://www.buzzfeednews.com/article/kevincollier/2016-sweden-ddos-expressen-hack-russia-cables
the attack was part of a Russian campaign to sow disinformation about NATO
https://www.wired.com/story/mac-remote-hack-wifi-enterprise/
targets enterprise Macs that use Apple’s Device Enrollment Program and its Mobile Device Management platform.
tricking a provider like AT&T into transferring the target’s phone number to a SIM card controlled by the criminal.
reset the victims’ passwords and break into their online accounts
https://money.cnn.com/2018/08/04/news/companies/wells-fargo-mortgage-modification/index.html
Hundreds of people had their homes foreclosed on after software used by Wells Fargo incorrectly denied them mortgage modifications.
https://krebsonsecurity.com/2018/08/reddit-breach-highlights-limits-of-sms-based-authentication/
Of particular note is that although the Reddit employee accounts tied to the breach were protected by SMS-based two-factor authentication, the intruder(s) managed to intercept that second factor.
https://www.nytimes.com/2018/08/01/technology/data-breaches.html
Don’t reuse passwords, rely on two-factor verification, install software only from trusted sources, question any alert that pops up on your screen and get a password manager.