[…] Important Security News: ———————— * Microsoft warn of zero-day attacks using a Power Point vulnerability in Windows – http://technet.microsoft.com/en-us/library/security/3010060.aspx (provides ‘fix it’ workaround – https://support.microsoft.com/kb/3010060) * Whisper is not actually anonymous – http://www.theguardian.com/world/2014/oct/16/-sp-revealed-whisper-app-tracking-users (CTO tries to defend the company’s actions – the response is not positive – http://arstechnica.com/security/2014/10/whisper-cto-says-tracking-anonymous-users-not-a-big-deal-really/) * A hack of a 3rd party website leaks 13GB of SnapChat images – yet again showing how SnapChat is NOT ephemeral – http://arstechnica.com/security/2014/10/snapchat-images-stolen-from-third-party-web-app-using-hacked-api/ * Apple respond to reports that someone (perhaps the Chinese Government) is attempting MITM attacks against iCloud with a very clear instruction page to help people protect themselves: http://support.apple.com/kb/HT6550 (bottom line, if you get a certificate warning, don’t just ignore it!) * Apple publish iOS Security Guide (including Apple Pay details) – http://www.macobserver.com/tmo/article/apple-publishes-ios-security-guide-with-apple-pay-details * A kerfuffle erupts over OS X Yosemite’s Spotlight. Gruber’s short summary covers the bases IMO – http://daringfireball.net/linked/2014/10/20/yosemite-spotlight-privacy (or you can read my mini-rant – https://www.bartbusschots.ie/s/2014/10/24/behind-peoples-backs/) …