HN does prefer original sources generally, but breaking stories like this one often produce articles with additional reporting as they develop. So it's not obvious that the original post has the most relevant information at this point. If someone wants to figure out which URL does, we can change the HN thread to use it. It's currently pointing to the npr.org story rather arbitrarily, but perhaps that's as good as any.
http://www.techmeme.com/150727/p8#a150727p8
It seems one of the original reports is here:
http://blog.zimperium.com/experts-found-a-unicorn-in-the-hea...
I'd also note that it seems this is research that will be presented next week at Black Hat and then again at DefCon.