SECURITY WARNINGS & Notices - Please post them here

[Pondus]

These apps won’t let you quit them unless you pay up or figure out their tricks

https://www.theverge.com/2022/4/15/23027363/apple-scammy-apps-mac-app-store-moderation

[bob3160]

New 7-Zip Archiver Hack Reveals a long-Ignored
Windows Vulnerability

https://youtu.be/sIaZUuqy2n0
The latest versions of 7-Zip contain a vulnerability (CVE-2022-29072) that lets hackers
gain administrative privileges on a system.
But this vulnerability, which exploits the 7-Zip help file, should alarm all Windows users,
as it highlights an age-old problem on Windows systems.
You’ll find Andrew Heinzman’s excellent article on this topic at the following link:
https://www.reviewgeek.com/115336/new-7-zip-archiver-hack-reveals-a-long-ignored-windows-vulnerability/

[Asyn]

But this vulnerability, which exploits the 7-Zip help file, should alarm all Windows users, as it highlights an age-old problem on Windows systems.

So, it's up to MS to fix this issue. Let's see...

[bob3160]

Tech support scams targeting seniors on the rise

https://youtu.be/v4DXc5geQpQ
Tech support scammers target older people because they believe them
to be more trusting and they tend to be more financially secure than younger people.
Read Emma McGowan’s excellent article by following the link below:
https://blog.avast.com/tech-support-scams-targeting-seniors
Watch what happened to Phyllis by watching her video.
https://youtu.be/ar2MOvn2aDc

[bob3160]

Weekly Security News Roundup w/e  4-22-2022

https://youtu.be/sHWuENKxr18
Security-related news thanks mostly to Avast Software. I'm just a messenger.
They do most of the challenging work and research.
https://www.avast.com/en-us/index#pc

[Asyn]

QNAP warns users to disable AFP until it fixes critical bugs
https://www.bleepingcomputer.com/news/security/qnap-warns-users-to-disable-afp-until-it-fixes-critical-bugs/

[Asyn]

Synology warns of critical Netatalk bugs in multiple products
https://www.bleepingcomputer.com/news/security/synology-warns-of-critical-netatalk-bugs-in-multiple-products/

[bob3160]

Weekly Security News Roundup w/e 4-29-2022

https://youtu.be/IRt2pufRkYY
Security-related news thanks mostly to Avast Software. I'm just a messenger.
They do most of the challenging work and research. https://www.avast.com/en-us/index#pc

[Asyn]

Fake Windows 10 updates infect you with Magniber ransomware
https://www.bleepingcomputer.com/news/security/fake-windows-10-updates-infect-you-with-magniber-ransomware/

[bob3160]

Fake Windows 10 updates infect you with Magniber ransomware
https://www.bleepingcomputer.com/news/security/fake-windows-10-updates-infect-you-with-magniber-ransomware/

If you get your updates from any place other than this,

you probably deserve the infection.

[Asyn]

Google SMTP relay service abused for sending phishing emails
https://www.bleepingcomputer.com/news/security/google-smtp-relay-service-abused-for-sending-phishing-emails/

[Asyn]

New phishing warns: Your verified Twitter account may be at risk
https://www.bleepingcomputer.com/news/security/new-phishing-warns-your-verified-twitter-account-may-be-at-risk/

[bob3160]

New phishing warns: Your verified Twitter account may be at risk
https://www.bleepingcomputer.com/news/security/new-phishing-warns-your-verified-twitter-account-may-be-at-risk/

Since Twitter is in the news, expect the hackers to jump on the opportunity.
Never give a sucker an even break has been their motto forever.

[Asyn]

Allowing too many exceptions leaves you wide open to infection
https://blog.avast.com/exceptions-risks

[bob3160]

Allowing too many exceptions leaves you wide open to infection
https://blog.avast.com/exceptions-risks

https://youtu.be/Dt_ZEBguelE