- popunder background bitcoin miners did become a thing
- keybase android beta uploaded your privatekey to google servers "accidentally"
- you can spoof email headers via encoded chars, because most apps literally just render them apparently
- imgur leaked 1.7 million user accounts, protected by sha-256 "The company made sure to note that the compromised account information included only email addresses and passwords" - yeah "only", ofcourse imgur, ofcourse.

I guess the rant I did on Krahk etc. just roughly a month ago, can always be topped by something else.

sources:
https://www.mailsploit.com/index

https://bleepingcomputer.com/news/...

https://blog.malwarebytes.com/cyber...

https://helpnetsecurity.com/2017/...