When the IRS first reported a hack that exposed taxpayer accounts’ vulnerable information, it pegged the number of affected people at a little over 100,000. Today, in its second upward revision, the number of affected people now stands at over 700,000.

The Hack

As WIRED originally reported last spring, the hack gave attackers access to entire tax returns, which means people’s social security numbers, address, and incomes were all compromised. The hackers used personal information already in hand to get unauthorized access through an IRS application called “Get Transcript.”

In other words, much of the information had already been acquired, including SSNs and dates of birth. “Get Transcript” has been offline since the first indications of a breach last May.

Who’s Affected

The initial IRS report indicated that 114,000 accounts had been compromised. It revised that number last August, raising it to 334,000. On Friday, the IRS added another 390,000 accounts to the pile, for a total of well over 700,000 people. There have also been a total of 500,000 targeted, but failed, attempts at access.

The IRS will begin mailing affected taxpayers from this most recent batch starting February 29th. If you’re one of them, you also qualify for free Equifax identity theft protection for one year, and “extra scrutiny” on tax returns associated with your SSN.

How Serious Is This?

In terms of the type of information that’s been compromised, it’s no worse than it was last May. That’s still plenty bad, though; if there’s information about yourself you might consider sensitive, it’s probably on your tax return somewhere.

What’s more serious at this point is the extent to which the IRS underestimated the severity of the breach. It’s been nearly a year. That’s a long time for 390,000 people to have been vulnerable but not know it.

The revelations come at the end of a nine-month investigation by the Treasury Inspector General for Tax Administration, which hopefully means that it’s the last of upward revisions. The IRS also notes that not all of these cases necessarily involve malevolent actors.

“TIGTA investigators identified suspicious email addresses that made multiple attempts to access accounts,” the agency said in a statement today. “It is possible that some of those identified may be family members, tax return preparers, or financial institutions using a single email address to attempt to access more than one account.”

For now, just keep an eye on your mailbox next week. And if you have a notice from the IRS, brace yourself for the very real possibility of identity theft.

Last year, a hack of the US Office of Personnel Management exposed the personal information of millions of government employees. Now, Motherboard reports, a hacker has threatened another federal employee dump of a much smaller scale but potentially more sensitive target: the names, titles, and contact information of nearly 30,000 FBI and Department of Homeland Security workers.

The Hack

Motherboard first reported the hack on Sunday, after obtaining the data. Since then, the information of roughly several thousand DHS employees appears to have been released by anonymous sources. The 20,000 FBI employees appear not to have been exposed yet.

Update: The FBI information has now been leaked as well. Both dumps are accompanied by pro-Palestine slogans.

The hacker told Motherboard that he was able to access the files through the compromised email account of a Department of Justice employee. He claimed to have downloaded 200GB of files, out of 1TB total available to him. That would imply that the information that’s been leaked so far is just a small percentage of the total.

Who’s Affected

As of right now, the names, titles, email addresses, and phone numbers of 9,000 DHS employees have been made public, with 20,000 FBI employees at risk of exposure as well. The hacker told Motherboard that he also had some military emails and credit card numbers, but provided neither proof nor indication that he intended to release them.

The FBI employees nearly 35,000 people, meaning that more than half of the agency’s people would be at risk. It’s not clear if any of the 20,000 who are involved in the hack are in sensitive positions.

How Serious Is This?

The hack doesn’t impact you directly unless you work for one of the agencies involved, and even then it seems most likely to result mostly in annoyance.

What’s more serious is that these details were accessible in the first place, through seemingly not terribly sophisticated means. These are agencies that deal in highly sensitive information; if they can’t secure their digital doors, there’s no reason to think any branch of government can.

Then again, if even the director of the CIA can’t lock down his (AOL) email account, perhaps it’s wishful thinking that any other agency’s employees might fair better.

Apple has now removed over 300 pieces of software from the App Store, after malware that targeted developers managed to create infected iOS apps. On top of that, it looks like the apps are more dangerous to Apple customers than previously thought.

Several security companies have now banded together in the search for malicious iOS apps: Claud Xiao from PaloAlto Networks has reportedly discovered 39, Fox-IT also found a number of others, a representative told WIRED in an email. Many of those apps are popular in China, such as Railway 12306, used for purchasing train tickets, and a version of WeChat, a messaging app. Only the older version 6.2.5 is infected, whereas the app’s up-to-date version is clean.

However, it appears that some affected apps are also used by Apple customers in the United States. ‘CamCard’, an app for scanning and storing business cards, and which was a ‘Top Paid App’ in 2014, is also infected, according to Palo Alto Networks.

Originally, the malware was seen to be fairly innocuous: it could siphon off only small snippets of information such as a device’s ID, and the current time.

But according to findings from one researcher, and then built upon by Xiao, the infected apps are also capable of receiving commands from the attacker. These commands can apparently allow a hacker to read and write data to the victim’s clipboard, open specific URLs, or prompt a fake alert on the victim’s screen. Some of these could be used to steal passwords, Xiao claims.

Apple did not respond to multiple requests for comment, but company spokesperson Christine Monaghan told The Guardian in an email that “We’ve removed the apps from the app store that we know have been created with this counterfeit software,” and that “We are working with the developers to make sure they’re using the proper version of Xcode to rebuild their apps.”

The Apple ecosystem is well known for very rarely letting any dodgy apps enter it because of the company’s stringent security checks.

But recently, nearly two dozen malicious pieces of software managed to get hosted on the App Store, and subsequently downloaded by Chinese users. This is because attackers found an unorthodox route to exploit: they targeted some versions of the software used by developers to makes apps for iOS and OS X in the first place.

The Hack

The malware was first highlighted by Chinese developers on Weibo, and was then analyzed by researchers from Alibaba. Security company Palo Alto Networks then verified the results.

The hack all hinges around Xcode, a tool used to create iOS and OS X apps. Typically, Xcode is downloaded directly from Apple for free. However, it is possible to get Xcode from other sources too, such as developer forums. Some versions of Xcode found on Baidu Yunpan, a Chinese file-sharing service, come packaged with extra lines of code. The Alibaba researchers have dubbed these malicious variants “XcodeGhost.”

Apps constructed with XcodeGhost code will collect a bunch of information about a customer’s device once the app has been downloaded. The data siphoned includes the current time, the name of the device, and the network type—none of which is anything a hacker could really use against you.

One of the apps that passed Apple’s security checks was NetEase Cloud Music, which, according to a screenshot provided by Palo Alto Networks, has nearly 500 ratings, averaging out at four and a half stars. Claud Xiao, a senior malware researcher from Palo Alto Networks, tells WIRED in an email the company had verified over 20 apps that were infected.

“Some of them are very popular and have tens of millions of installations,” Xiao writes.

Who’s Affected?

The iOS users who downloaded these apps, first of all. However, the apps analyzed were reportedly only from the Chinese App Store, so it doesn’t look like customers from other areas of the world need to worry.

Also, any developers who obtained their copy of Xcode from an unofficial source could be affected, as there is a chance their products are not totally above board. XcodeGhost could also affect developers creating enterprise apps. These are apps made by companies specifically for their own employees’ devices, so they don’t have to go through any sort of Apple security check. However, “that’s a pretty obscure attack,” Charlie Miller, a security researcher at Uber who got his own malicious software onto the App Store in 2011, tells WIRED in a phone interview.

How Severe Is This?

The malware in the App Store itself is not concerning, but there’s a broader issue here: the way in which it got past Apple’s screening process in the first place.

“You might completely trust the app developer, and that developer might be completely trustworthy, but this is a case where the app wasn’t,” Miller said. That, and the fact that software made from a tampered version of Xcode found its way onto the App Store, should give developers pause.

Apple did not immediately return a request for comment.

But what about consumers, and the people who downloaded the malicious apps? They should be only slightly concerned. “I wouldn’t worry too much,” Miller says. The apps that did get through didn’t seem to do any really nasty stuff. “If you made it really, obviously bad, probably [Apple] would catch it,” Miller says.

The bottom line for customers is, if you’ve downloaded one of these dodgy apps, delete it, and keep up with reports of other ones slipping through. What should developers do to protect their own apps and their customers?

“The moral of the story is: don’t download random crap from Chinese sites,” Miller says.

35 women speak about being assaulted by Bill Cosby, and the culture that wouldn't listen: http://t.co/H5dss5F2F4 pic.twitter.com/RCF0BWBrxA

— New York Magazine (@NYMag) July 27, 2015

Last night, New York Magazine debuted this month’s cover story, detailing the experiences of 35 women who have publicly accused Bill Cosby of rape. The piece is powerful and moving, a brave act on behalf of the women willing to tell their stories directly and an important piece of interactive journalism highlighting a culture of silence around rape. Unfortunately, unless you read it last night, you can’t currently access the report on NYMag.com because the site is down, presumably as a result of a DDoS attack, according to a report by The Daily Dot. A Twitter user by the name of Vikingdom2016 has taken credit for the assault.

Though Vikingdom2016 reportedly told The Daily Dot that the attack had nothing to do with the Cosby story and was done because he “hates New York,” it reeks of victim silencing. For 35 women to come out and accuse one of the entertainment industry’s most powerful men of repeated sexual abuse is an act of defiance against a history of systemic silencing. Whether the alleged DDoS attacker knew it, by taking the story offline he is following in a grand tradition of keeping women’s stories from being heard—a tradition the story itself is trying to break.

On a brighter note, you can still read a cached version of the story while the site is down.

Thanks to the Wayback Machine you can still read the @NYMag cover story while the site's down. http://t.co/iZLaLCRfeQ (ht @elongreen)

— Sarah Weinman (@sarahw) July 27, 2015

A serious flaw in Android operating systems uncovered by a researchers at Zimperium zLabs could be the worst ever reported for Android devices. Though Google was alerted of the problem in April and has created a patch to fix it, lead researcher Joshua Drake told Forbes that he believes phone manufacturers and carriers have not all rolled the fix out yet, so you may be at risk.

The What:

It’s dubbed “Stagefright.” All a hacker would have to do to gain access to your device is send you a text message containing a malware-infected media attachment. The worst part? You don’t even have to open the text or view the media in some cases. Drake noted that the remote MMS attack makes use of six critical vulnerabilities in Android operating systems 2.2 or later. Depending on the chat client you use, you may not even see the text message before it infects you—for instance, if you use Hangouts, the app will decipher the code before you ever get a notification of the text.

The Who:

Drake estimates that 950 million people use Android devices that could be at risk.

How Serious:

The researchers who found the flaws told NPR that they do not believe it is yet in use in the wild. Still, it is potentially the largest flaw ever uncovered in Android. The good news is that Google has a fix. The bad news is that Google can’t send it to most directly—it needs manufacturers and carriers to push the patch out to you. As of writing, it is unclear which devices are still at risk.

“All devices should be assumed to be vulnerable,” Drake told Forbes.

The Hack

CVS pharmacies in the US and Walmart Canada have halted their online photo-processing following information that the third-party company that operates this service may have been breached, possibly compromising the credit card numbers of millions of customers.

Who Is Affected?

PNI Digital Media of Vancouver hosts the photo-processing web sites for CVS, Walmart, and Costco. It is owned by Staples, which was the target of its own major hack last year.

According to the New York Times, Walmart’s photo-processing site for US customers is not believed to have been affected. As for CVS, other services beyond its photo-processing service, such as its e-commerce business and contact lens ordering service, are also not affected since they are managed separately from the photo-processing system.

How Serious Is This?

It’s impossible to know with so little information at this point. If you’ve used the online photo services of either of these Canadian sites, check your bank statements.