A week in security (December 5 - 11)

Last week on Malwarebytes Labs:

• Security advisories are falling short. Here’s why, with Dustin Childs: Lock and Code S03E25
• Eufy “no cloud” security cameras streaming data to the cloud
• Snapchat gives Californians more power over their personal data
• Update now! Emergency fix for Google Chrome’s V8 JavaScript engine zero-day flaw released
• Hive Social pulls the plug on itself after security flaws found
• “Baby dumped at the gate” post is a Facebook hoax
• Watch out for this triple threat PayPal phish
• Lazarus group uses fake cryptocurrency apps to plant AppleJeus malware
• Vehicle Identification Numbers reveal driver data via telematics
• SIM swapper jailed for 18 months over crypto heist
• Ho, ho, no! Scams to avoid this festive season
• Update now! Google patches Android vulnerability that allows remote code execution over Bluetooth
• Update now! NetGear routers' default configuration allows remote attacks
• Rackspace confirms it suffered a ransomware attack
• Apple’s AirTag stalker safeguards are “woefully inadequate,” alleges lawsuit
• 5 SaaS security best practices
• Apple announces 3 new security features
• Threat Intelligence Reports
• Epic Games introduces safer accounts for kids

Stay safe!