This week, we discuss the arrest of a Lithuanian man over a $100 million phishing scam, an indictment against the alleged perpetrators of the Yahoo breach that compromised half a billion accounts, a number of vulnerabilities affecting LastPass's browser extensions, and the ICO's warning to local councils to prepare for the GDPR