SECURITY WARNINGS & Notices - Please post them here

[Asyn]

@Asyn post:6499

Malware Discovered in Popular NPM Package, ua-parser-js
https://us-cert.cisa.gov/ncas/current-activity/2021/10/22/malware-discovered-popular-npm-package-ua-parser-js

More here: https://www.bleepingcomputer.com/news/security/popular-npm-library-hijacked-to-install-password-stealers-miners/

[Asyn]

Gamers beware: Malware and malicious cracked games pose risks
https://blog.avast.com/malicious-cracked-games-pose-risks-avast

[Asyn]

Mozilla blocks malicious add-ons installed by 455K Firefox users
https://www.bleepingcomputer.com/news/security/mozilla-blocks-malicious-add-ons-installed-by-455k-firefox-users/
https://blog.mozilla.org/security/2021/10/25/securing-the-proxy-api-for-firefox-add-ons/

[polonus]

Critical site deletion vulnerability in WordPress CMS plug-in:

https://www.wordfence.com/blog/2021/10/site-deletion-vulnerability-in-hashthemes-plugin/
(e.g. HashThemes Demo Importer not updated to the latest version).

pol

[Asyn]

All Windows versions impacted by new LPE zero-day vulnerability
https://www.bleepingcomputer.com/news/security/all-windows-versions-impacted-by-new-lpe-zero-day-vulnerability/

[bob3160]

Weekly Security News Roundup w/e 10-29-2021

https://d1ka0itfguscri.cloudfront.net/Lh/2021/10/29/15/03/cr6UoeVl045/preview.jpg

[b]https://youtu.be/OVTUJSYLTlk[/b]
Security-related news thanks mostly to Avast Software. I’m just a messenger.
They do most of the challenging work and research.
https://www.avast.com/en-us/index#pc

[Asyn]

Microsoft: Windows KB5006674, KB5006670 updates break printing
https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-kb5006674-kb5006670-updates-break-printing/

[DavidR]

@Asyn post:6507

Microsoft: Windows KB5006674, KB5006670 updates break printing
https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-kb5006674-kb5006670-updates-break-printing/

Bl00dy brilliant, MS breaks printing with a KB (or two in this case) yet again, from the past issues and KBs breaking printing. You would have thought/hoped they had learnt from these. Fortunately for me I don’t do network printing, but direct connection.

[bob3160]

@DavidR post:6508

@Asyn post:6507

Microsoft: Windows KB5006674, KB5006670 updates break printing
https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-kb5006674-kb5006670-updates-break-printing/

Bl00dy brilliant, MS breaks printing with a KB (or two in this case) yet again, from the past issues and KBs breaking printing. You would have thought/hoped they had learnt from these. Fortunately for me I don’t do network printing, but direct connection.

The break must only be affecting certain printers or systems. No problem here with printing
via my Epson ET 2720.

[Asyn]

Popular ‘coa’ NPM library hijacked to steal user passwords
https://www.bleepingcomputer.com/news/security/popular-coa-npm-library-hijacked-to-steal-user-passwords/

[bob3160]

Weekly Security News Roundup w/e 11-5-2021

https://d1ka0itfguscri.cloudfront.net/Lh/2021/11/05/19/47/crXhqHVlGtA/preview.jpg

[b]https://youtu.be/n_unu7rpJ-4[/b]
Security-related news thanks mostly to Avast Software. I’m just a messenger.
They do most of the challenging work and research. https://www.avast.com/en-us/index#pc

[bob3160]

What does Facebook’s facial recognition shutdown mean for its users?

https://d1ka0itfguscri.cloudfront.net/Lh/2021/11/08/14/26/crXj2OVl70a/preview.jpg

[b]https://youtu.be/RpoqWIQqlk4[/b]
Is there really any benefit to the average user in Facebook’s move to shut down this service?
How do you protect yourself from this technology?
Thanks to Joe Bosso’s excellent article on this topic. https://blog.avast.com/author/joe-bosso

[Asyn]

FBI warns of Iranian hackers looking to buy US orgs’ stolen data
https://www.bleepingcomputer.com/news/security/fbi-warns-of-iranian-hackers-looking-to-buy-us-orgs-stolen-data/

[Asyn]

AMD fixes dozens of Windows 10 graphics driver security bugs
https://www.bleepingcomputer.com/news/security/amd-fixes-dozens-of-windows-10-graphics-driver-security-bugs/

[bob3160]

Weekly Security News Roundup w/e 11-12-2021

https://d1ka0itfguscri.cloudfront.net/Lh/2021/11/12/21/35/crXlraVIhxD/preview.jpg

[b]https://youtu.be/tBvndGkeJDc[/b]
Security-related news thanks mostly to Avast Software. I’m just a messenger.
They do most of the challenging work and research. https://www.avast.com/en-us/index#pc

[bob3160]

News Flash Update - FBI System Hacked

https://d1ka0itfguscri.cloudfront.net/Lh/2021/11/14/14/54/crX22LVIjjj/preview.jpg

[b]https://youtu.be/tzrAA81XLok[/b]
On 11/13/2021 the Federal Bureau of Investigation (FBI) email servers were hacked
to distribute spam email.

[Asyn]

@bob3160 post:6516

News Flash Update - FBI System Hacked
[b]https://youtu.be/tzrAA81XLok[/b]
On 11/13/2021 the Federal Bureau of Investigation (FBI) email servers were hacked
to distribute spam email.

Hoax Email Blast Abused Poor Coding in FBI Website
https://krebsonsecurity.com/2021/11/hoax-email-blast-abused-poor-coding-in-fbi-website/
https://www.fbi.gov/news/pressrel/press-releases/fbi-statement-on-incident-involving-fake-emails

[bob3160]

@Asyn post:6517

@bob3160 post:6516

News Flash Update - FBI System Hacked
[b]https://youtu.be/tzrAA81XLok[/b]
On 11/13/2021 the Federal Bureau of Investigation (FBI) email servers were hacked
to distribute spam email.

Hoax Email Blast Abused Poor Coding in FBI Website
https://krebsonsecurity.com/2021/11/hoax-email-blast-abused-poor-coding-in-fbi-website/
https://www.fbi.gov/news/pressrel/press-releases/fbi-statement-on-incident-involving-fake-emails

Hindsight is a wonderful thing.

[digmorcrusher]

https://www.businessinsider.com/pentagon-official-quit-saying-us-cybersecurity-no-match-china-2021-10

[bob3160]

@digmor crusher post:6519

https://www.businessinsider.com/pentagon-official-quit-saying-us-cybersecurity-no-match-china-2021-10

All the breaches and blunders pretty much prove his point.