This week, we discuss the youngest beneficiary of Facebook’s bug bounty programme, a Pwnedlist security flaw that exposed 866 million stolen credentials, and 272.3 million Gmail, Yahoo Mail and Hotmail credentials apparently for sale on the dark web.