SECURITY WARNINGS & Notices - Please post them here

[Asyn]

Windows zero-day flaw giving admin rights gets unofficial patch, again
https://www.bleepingcomputer.com/news/microsoft/windows-zero-day-flaw-giving-admin-rights-gets-unofficial-patch-again/

[Asyn]

Hundreds of HP printer models vulnerable to remote code execution
https://www.bleepingcomputer.com/news/security/hundreds-of-hp-printer-models-vulnerable-to-remote-code-execution/

[bob3160]

Weekly Security News Roundup w/e 3-25-2022

https://youtu.be/pXkE4fPWinc
Security-related news thanks mostly to Avast Software. I'm just a messenger.
They do most of the challenging work and research.
https://www.avast.com/en-us/index#pc

[Asyn]

Emergency Google Chrome update fixes zero-day used in attacks
https://www.bleepingcomputer.com/news/security/emergency-google-chrome-update-fixes-zero-day-used-in-attacks/

[Asyn]

Wyze Cam flaw lets hackers remotely access your saved videos
https://www.bleepingcomputer.com/news/security/wyze-cam-flaw-lets-hackers-remotely-access-your-saved-videos/

[bob3160]

Wyze Cam flaw lets hackers remotely access your saved videos
https://www.bleepingcomputer.com/news/security/wyze-cam-flaw-lets-hackers-remotely-access-your-saved-videos/

Is old news like this really helpful or just designed to grab headlines?
Those using the camera have long since applied the update that's been available
since Nov. 2020.
The first version of the camera that was not patched reached it's end of life in 2020.

[Asyn]

QNAP warns severe OpenSSL bug affects most of its NAS devices
https://www.bleepingcomputer.com/news/security/qnap-warns-severe-openssl-bug-affects-most-of-its-nas-devices/

[Asyn]

Apple emergency update fixes zero-days used to hack iPhones, Macs
https://www.bleepingcomputer.com/news/security/apple-emergency-update-fixes-zero-days-used-to-hack-iphones-macs/

[bob3160]

Weekly Security News Roundup w/e 4-1-2022

https://youtu.be/7vTHHncwdh4
Security-related news thanks mostly to Avast Software.
I'm just a messenger. They do most of the challenging work and research.
https://www.avast.com/en-us/index#pc

[Pondus]

Justice Department Announces Court-Authorized Disruption of Botnet Controlled by the Russian Federation’s Main Intelligence Directorate (GRU)

https://www.justice.gov/opa/pr/justice-department-announces-court-authorized-disruption-botnet-controlled-russian-federation

https://www.trendmicro.com/en_us/research/22/c/cyclops-blink-sets-sights-on-asus-routers--.html

https://detection.watchguard.com/

[bob3160]

Weekly Security News Roundup w/e  4-8-2022

https://youtu.be/1TNfN_iYqII
Security-related news thanks mostly to Avast Software.
I'm just a messenger. They do most of the challenging work and research.
https://www.avast.com/en-us/index#pc

[bob3160]

Yandex is causing data privacy concerns for mobile users

https://youtu.be/PsKogYyuFQ0
In this matter, the user's trust is ultimately put into the app developers' hands.
The real question is who to trust.
See the full article at: https://blog.avast.com/yandex-and-data-privacy

[Asyn]

Critical HP Teradici PCoIP flaws impact 15 million endpoints
https://www.bleepingcomputer.com/news/security/critical-hp-teradici-pcoip-flaws-impact-15-million-endpoints/

[bob3160]

Critical HP Teradici PCoIP flaws impact 15 million endpoints
https://www.bleepingcomputer.com/news/security/critical-hp-teradici-pcoip-flaws-impact-15-million-endpoints/

To address all of the issues, users are urged to update to version 22.01.3 or later,
which uses OpenSSL 1.1.1n and libexpat 2.4.7.
HP released the security updates on April 4 and 5, 2022, so you are secure if you have
already updated Teradici since then.

[Asyn]

Warning: Did You Install the Play Store on Windows 11? Read This Now
https://www.howtogeek.com/797298/warning-did-you-install-the-play-store-on-windows-11-read-this-now/