If you ever want to spy on your family members , make sure you do not accidentally expose their information to public (which could be worse than what you intended). I mean , the company you deal with may be good at spying but bad at securing the collected info.

MSPY   has leaked millions of sensitive records online, including passwords, call logs, text messages (Whatsapp, Facebook), contacts, notes and location data secretly collected from phones running the stealthy spyware. The database included the Apple iCloud username and authentication token of mobile devices running mSpy. 

https://krebsonsecurity.com/2018/09/for-2nd-time-in-3-years-mobile-spyware-maker-mspy-leaks-millions-of-sensitive-records/

Keylogger - Comes pre-installed?

Talk about being irresponsible

An audio driver that comes installed on some HP-manufactured computers records users’ keystrokes and stores them in a world-readable plaintext file, researchers said Thursday.


For more details:
https://threatpost.com/keylogger-found-in-audio-drivers-on-some-hp-machines/125600/

Strange and very bad - Adobe Shockwave provides its own version of the Flash runtime that is more than 15 months behind on security updates (according to Krebs}

According to the article:-

Dormann said, the current version of Shockwave for both Windows and Mac systems lacks any of the Flash security fixes released since January 2013. By my count, Adobe has issued nearly 20 separate security updates for Flash since then, including fixes for several dangerous zero-day vulnerabilities.

Dormann said it may actually be easier for attackers to exploit Flash vulnerabilities via Shockwave than it is to exploit them directly against the standalone Flash plugin itself. That’s because Shockwave has several modules that don’t opt in to trivial exploit mitigation techniques built into Microsoft Windows, such as SafeSEH.

The link below has more information:-

http://krebsonsecurity.com/2014/05/why-you-should-ditch-adobe-shockwave/