Ars Technica | A recent phishing campaign targeting U.S. government officials, activists, and journalists is notable for using a technique that allowed the attackers to bypass two-factor authentication protections offered by services such as Gmail and Yahoo Mail, researchers said yesterday. The event underscores the risks of 2FA that relies on one-tap logins or one-time passwords, particularly if the latter are sent in SMS messages to phones.

On MSFT | Since the launch of Windows 10, Microsoft received criticism for its data collection practices, with telemetry you can’t complelety turn off on the desktop OS. Earlier this week, users complained that Windows 10 apparently continues logging your Edge browsing history in the cloud even after disabling activity history on both the computer as well as online. Microsoft admitted that the different privacy settings in Windows 10 can be confusing, especially the “Activity History” section which also exists on Microsoft’s online privacy dashboard.

Computerworld | Apple explained a little about its approach to enterprise IT. What they had to say was focused on the needs of IT administrators more than anything else. Their focus was very much on the three pillars of integration, system management and security, with particular regard to the Secure Boot process.

Gizmodo | Internal Google documents obtained by the Guardian warn full-time Google staff to treat temps, vendors, and contractors (TVCs) — which comprise just short of half of the company’s 170,000 workers around the globe — much differently than they treat fellow full-timers.

How-To Geek | Someone send you a Word document, but you don’t have Word? Giving up on Word and making the change to Google Docs? No problem; Google Docs lets you easily import Word documents.

How-To Geek | Here's a look at the various ways to make an object appear.

InformationWeek | The hiring of a data protection officer is a key element of compliance with GDPR, but it's also an opportunity to differentiate your company.

Medium | An insider’s account of the dark side of search engine marketing.

G Suite Updates | To simplify how you can control app access for your users, Google is removing the “Uninstall” feature from the G Suite Admin console. Uninstall was a legacy way to remove a G Suite app or additional Google service for everyone in your organization, but it’s been replaced by settings to turn apps on or off for users. The uninstall feature will be removed on January 15, 2019.

G Suite Updates | Google is adding new features to the G Suite security center. You can now save custom charts to the security dashboard. Google is also adding new email log events that show information around what happens to emails after they are sent or received.