VLC, Kodi and others affected by subtitle exploit. WannaCry follow-up. Android O's new security features.

VLC, Kodi and Popcorn Time, among others, can be exploited by using malicious subtitles. The video in the article shows it in action. Make sure your player is on the latest version.

A crafty attack has you clicking to download a SCF file, which by default gets auto-downloaded by Chrome. It will then establish a connection to a remote SMB server under control of the attacker, sending with it its hashed password.

Google announced a set of security improvements for Android O. Most important of which are Project Treble, which strives for faster patching, and Google Play Protect, which this article explains better.

Panic develops Mac apps like Transmit and Coda. Its co-founder happen to install an infected Handbrake instance, after which the attacker stole parts of Panic's source code and tried to blackmail them.

Reuters writes an article discussing Unit 180, how it's organised and what kind of missions it takes on.

Stack Overflow is switching to full-HTTPS. This very, very long post describes how they did it. There is a -lot- of knowledge packed into this one.

By this time next year, all companies that do business in the EU need to be 'GDPR compliant'. Sophos gives a very helpful overview on what that entails.

A fascinating look by the New York Times at how the tech team behind Macron prepared for Russian hacking attempts.