Ring employees may have been spying on your security cameras and doorbells

https://www.androidcentral.com/ring-employees-spying-on-customers

Machine Learning to Detect Software Vulnerabilities

https://www.schneier.com/blog/archives/2019/01/machine_learnin.html

Dirt-Cheap, Legit, Windows Software: Pick Two

Buying heavily discounted, popular software from second-hand sources online has always been something of an iffy security proposition. But purchasing steeply discounted licenses for cloud-based subscription products like recent versions of Microsoft Office can be an extremely risky transaction, mainly because you may not have full control over who has access to your data. Source:

User location data sold by AT&T, T-Mobile, and Sprint is making its way to bounty hunters, says report

A new report from Motherboard today takes a look into the practices of US wireless carriers selling user location data to third-parties. While it’s often credit card and other financial companies buying the location data for fraud detection and more, Motherboard says some rogue third-parties have access to user location data and it’s landing the

The new landscape of pre-installed mobile malware

The new landscape of pre-installed mobile malware: malicious code within https://blog.malwarebytes.com/cybercrime/2019/01/the-new-landscape-of-preinstalled-mobile-malware-malicious-code-within/

Package tracking app turns users’ devices into a bot farm, violates user privacy

We’ve been seeing a lot of scam apps in the App Store lately, which try to trick users into purchasing expensive subscriptions or products, we’ve also seen apps that track and transmit the user’s location without their consent. Today, I want to talk about an app that’s using iOS devices to perform work for other

Better patch windows server ASAP

Better patch Windows Server ASAP as remotely exploitable vulnerability found https://mspoweruser.com/better-patch-windows-server-asap-are-remotely-exploitable-vulnerability-found/

Apple Phone Phishing Scams Getting Better

A new phone-based phishing scam that spoofs Apple Inc. is likely to fool quite a few people. It starts with an automated call that display’s Apple’s logo, address and real phone number, warning about a data breach at the company. Source: Apple Phone Phishing Scams Getting Better

Once again a spyware disguised as Android applications has made its way into the Google Play store

https://www.scmagazineuk.com/mobstspy-spyware-weaseled-its-google-play/article/1522044

Click2Gov Breaches Show The Power Of Zero Days

https://www.forbes.com/sites/taylorarmerding/2018/12/21/click2gov-breaches-show-the-power-of-zero-days/#751334877e2e