Cisco Talos reported this morning that criminal groups are working openly on Facebook, connecting, trading, and cooperating. Their activity isn't hidden, but rather quite overt. Some of the groups have been operating for as long as eight years, in the process attracting tens of thousands of members. It's obvious, not occulted, and the obvious names (like "Spam Professional," "Spammer & Hacker Professional," "Buy Cvv On THIS SHOP PAYMENT BY BTC," and "Facebook hack (Phishing)") haven't been enough to get them ejected from the social network.

Check Point yesterday announced its discovery of a man-in-the-middle vulnerability in a security application that comes pre-installed with Xiaomi phones. Xiaomi has patched the problem, according to SiliconANGLE.

The US House Committee on Science, Space, and Technology has asked the Federal Emergency Management Agency (FEMA) to explain how FEMA lost control of disaster victims' private information.

KrebsOnSecurity reports that the alleged head of a Romanian ATM-skimming gang has been arrested in Mexico.

Reuters reports that some of the evidence the US collected against Huawei CFO Meng Wanzhou was gathered under Foreign Intelligence Surveillance Act (FISA) warrants. Charged by the US with sanctions violations, Ms Meng is in Canada fighting extradition.

WikiLeaks has been tweeting that Ecuador is getting ready to show Julian Assange the door, inviting him to depart that country's London embassy. Mr. Assange could be back on the street in "hours to days," if the Twitter feed is to be believed. CNN says Mr. Assange's lawyers maintain his eviction would contravene international law.