Threat Post

1. Spycams Secretly Live-Streamed 1,600 Motel Guests

   Four have been arrested in the case.

2. Firefox and Edge Fall to Hackers on Day Two of Pwn2Own

   Browsers Firefox and Edge take a beating on day two of the Pwn2Own competition.

3. Google Play Touts Certs in Quest For Enterprise Security

   Google has snagged three security and privacy certifications for Google Play as it tries to appeal to enterprises despite numerous malicious apps and security issues.

4. Critical DoS Bug Bubbles Up in Facebook Fizz TLS 1.3 Project

   Users of the open-source project should upgrade immediately.

5. Analysis: Drone Tech Creates New Type of Blended Threat

   Hacked drones are breaching physical and cyberdefenses to cause disruption and steal data, experts warn.

6. Medtronic Defibrillators Have Critical Flaws, Warns DHS

   The unpatched vulnerabilities exist in 20 products made by the popular Medtronics medical device manufacturer, including defibrillators and home patient monitoring systems.

7. WordPress Plugin Patched After Zero Day Discovered

   The plugin, Social Warfare, is no longer listed after a cross site scripting flaw was found being exploited in the wild.

8. Hackers Take Down Safari, VMware and Oracle at Pwn2Own

   On the first day of Pwn2Own 2019 hackers poked holes in Apple Safari, VMware Workstation and Oracle VirtualBox.

9. Facebook Stored Passwords in Plain Text For Years

   The social media giant said that it is notifying users whose passwords it stored in plain text, which made them accessible for Facebook employees to view.

10. MyPillow and Amerisleep Targeted in Magecart Group Attacks

    In both breaches of MyPillow and Amerisleep, the customers whose payment information was potentially stolen were not informed.