The top stories from this week is how The Intercept outed the NSA contractor Reality Winner and a new PowerPoint Mouseover based downloader.

You can also read about the journey to hijacking a country’s TLD and about Dvmap, the first Android malware with code injection.

Top 5 Security links:
How The Intercept Outed Reality Winner
New PowerPoint Mouseover Based Downloader – Analysis Results
The Journey to Hijacking a Country’s TLD – The Hidden Risks of Domain Extensions
Dvmap: the first Android malware with code injection
Car Thieves Everywhere Rejoice as Unsecured Database Exposes 10 Million Car VINs