Technical

[Asyn]

Avast discovers widespread security flaws in GPS child trackers
https://blog.avast.com/unsecure-child-trackers
https://decoded.avast.io/martinhron/the-secret-life-of-gps-trackers/

[Asyn]

Critical flaw found in many Android smartphones
https://blog.avast.com/fake-provisioning-alerts-on-androids
https://www.zdnet.com/article/samsung-huawei-lg-and-sony-phones-vulnerable-to-rogue-provisioning-messages/
https://research.checkpoint.com/advanced-sms-phishing-attacks-against-modern-android-based-smartphones/

[Asyn]

Exploit Sellers Say There are More iPhone Hacks on the Market Than They’ve Ever Seen
https://www.vice.com/en_us/article/7x584y/exploit-sellers-say-there-are-more-iphone-hacks-on-the-market-than-theyve-ever-seen

[Asyn]

A huge database of Facebook users’ phone numbers found online
https://techcrunch.com/2019/09/04/facebook-phone-numbers-exposed/

Facebook user phone numbers still online
https://www.cnet.com/news/facebook-user-phone-numbers-still-online/

[Asyn]

Initial Metasploit Exploit Module for BlueKeep (CVE-2019-0708)
https://blog.rapid7.com/2019/09/06/initial-metasploit-exploit-module-for-bluekeep-cve-2019-0708/

[Asyn]

Flashlight apps on Google Play request up to 77 permissions each, Avast finds
https://blog.avast.com/flashlight-apps-on-google-play-request-up-to-77-permissions-avast-finds
https://decoded.avast.io/luiscorrons/flashlight-apps-on-google-play-request-up-to-77-permissions/

[Asyn]

The September 2019 Security Update Review
https://www.zerodayinitiative.com/blog/2019/9/10/the-september-2019-security-update-review

[DavidR]

The September 2019 Security Update Review
https://www.zerodayinitiative.com/blog/2019/9/10/the-september-2019-security-update-review

Thanks for the reminder.
I had three updates awaiting action when I checked.

Quite a big one for Win10 1903 Cumulative Update (KB4515384) this time around, even on a relatively fast connection it took a while to download and then install.

[Asyn]

Intel server-grade CPUs impacted by new NetCAT attack
https://www.zdnet.com/article/intel-server-grade-cpus-impacted-by-new-netcat-attack/
https://www.vusec.net/projects/netcat/
https://www.cs.vu.nl/~herbertb/download/papers/netcat_sp20.pdf
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00290.html

[Asyn]

Simjacker – Next Generation Spying Over Mobile
https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile

[Asyn]

The tangle of WiryJMPer’s obfuscation
https://decoded.avast.io/adolfstreda/the-tangle-of-wiryjmpers-obfuscation/

[Asyn]

Database leaks data on most of Ecuador's citizens, including 6.7 million children
https://www.zdnet.com/article/database-leaks-data-on-most-of-ecuadors-citizens-including-6-7-million-children/

[Asyn]

Millions of Americans’ Medical Images and Data Are Available on the Internet. Anyone Can Take a Peek.
https://www.propublica.org/article/millions-of-americans-medical-images-and-data-are-available-on-the-internet

[bob3160]

Millions of Americans’ Medical Images and Data Are Available on the Internet. Anyone Can Take a Peek.
https://www.propublica.org/article/millions-of-americans-medical-images-and-data-are-available-on-the-internet

Another headline that's a bit misleading. Any one can take a peek only how to do that peeking isn't really made available.

[Asyn]

Ok Google! Please reveal everyone’s public calendar.
https://medium.com/@logicbomb_1/ok-google-please-reveal-everyones-public-calendar-27523206f9ac