Twitter to Android users: We've just patched this nasty bug so update your app ASAP
Flaw could have allowed attacker to control accounts, but social media giant said it has no evidence the bug was exploited.
Dropbox Zero-Day Vulnerability Gets Temporary Fix

A zero-day vulnerability exists in Dropbox for Windows that allows attackers to gain permissions reserved to SYSTEM, the most privileged account on the operating system.
The unpatched security flaw affects standard Dropbox installations. It relates to the updater that runs as a service and is responsible for keeping the application up to date.
PayPal Phishing Attack Promises to Secure Accounts, Steals Everything

An ongoing phishing campaign is targeting PayPal customers with emails camouflaged as 'unusual activity' alerts warning them of suspicious logins from unknown devices and attempting to squeeze them dry of all their credentials and financial info.
As the ESET researchers that spotted these attacks discovered, the phishers are attempting "to trick users into handing over considerably more than ‘only’ their access credentials to the payment service."
How to Place Calls From Windows 10 Using the Your Phone App

Microsoft’s Your Phone is an app designed for Windows 10 that lets you see Android phone notifications, photos and messages on your desktop. It also comes with the handy ability to mirror Android apps to your Windows 10 device.
In the latest Your Phone update, Microsoft has introduced a new feature that lets you place and receive phone calls on your Android device within Windows 10.
The Week in Ransomware - December 20th 2019 - Attacks Everywhere

This week's ransomware news continues to be dominated by targeted ransomware attacks against hospitals, cities, and businesses and the new tactic of releasing victim's data if they do not pay.
Maze continues to make a name for itself by publicly shaming victim's who do not pay by releasing their data. It was also pretty much confirmed that the City of New Orleans was hit with the Ryuk Ransomware after finding memory dumps linking the ransomware to the city's domain controllers.
