Equifax breach digest. Serious Bluetooth vulnerabilities found in all operating systems. New wave of MongoDB ransomware attacks.

Researchers found eight zero-days affecting all of the above operating systems. They can be exploited for a man-in-the-middle attack or complete device take-over. It's all wireless and doesn't require user interaction, pairing or discovering mode to be enabled.
The latest OS versions of the above vendors include fixes, although a huge amount of older versions will be left vulnerable.

Also related, this week about 4,000 unsecured ElasticSearch instances were compromised to host malware.

In case you don't remember: a few years ago Lenovo's laptops shipped with built-in spyware called Superfish. It looked at everything you did in order to show matching ads, and even hijacked your SSL connections with a man-in-the-middle attack.
After a few years in court they finally settled for (only) 3.5 million.

The company promises to respond to reports in 48 hours, and will try to fix any vulnerabilities within 90 days.

Researchers were able to issue commands to Siri, Cortana and others using ultrasound voice commands with frequencies over 20kHz, which we can't hear. Among other things they were able to let the phone navigate to a malicious website.
The attack has serious limitations, like needing very close proximity, but a cool bit of research nonetheless.

I can't say I've read it, it's quite expansive :-) But seems like a very useful resource.

A deeper dive in some of the upcoming changes in High Sierra, including AFPS and "User Approved Kernel Extension Loading".

I generally try to stay away from the whole AI-for-security stuff until we have more concrete examples to work with. But this article gave a pretty cool example of using machine learning already: training an AI to learn about hundreds of individuals on Twitter, and then send a customised spear phishing tweet designed specifically for that person. It had a much better conversion rate than the human competitor.