SECURITY WARNINGS & Notices - Please post them here

[bob3160]

Researchers Put Windows Defender in a Sandbox to Show Microsoft How It's Done
https://www.bleepingcomputer.com/news/security/researchers-put-windows-defender-in-a-sandbox-to-show-microsoft-how-its-done/

Doing so increases security but totally degrades performance.

[ehmen]

Careful, Chrome Extension Developers Under a Barrage of Phishing Attacks

https://www.bleepingcomputer.com/news/security/chrome-extension-developers-under-a-barrage-of-phishing-attacks/

[Be Secure]

Australian Red Cross data breach caused by third-party error
https://www.scmagazine.com/australian-red-cross-data-breach-caused-by-third-party-error/article/680149/

[polonus]

L.S.

Whenever you do not want to be associated to be visiting so-called conspiracy or fake-news websites, intstall this into your adblocker of choice: https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-social/hosts

Websites like prison planet, sorcha faal etc, then become blocked, as some official media may frown upon the points of view these websites share.

You can block strictly or just unblock to visit some site once.

polonus

[polonus]

Patch this a.s.a.p. as it is an ideal vulnerability to be exploited by malcreants to take over the host: https://www.zerodayinitiative.com/blog/2017/8/8/the-august-2017-security-update-review
-> https://portal.msrc.microsoft.com/en-US/eula

polonus

[bob3160]

Patch this a.s.a.p. as it is an ideal vulnerability to be exploited by malcreants to take over the host: https://www.zerodayinitiative.com/blog/2017/8/8/the-august-2017-security-update-review
-> https://portal.msrc.microsoft.com/en-US/eula

polonus

The auto update from MS happened yesterday without incident.

[polonus]

Hi bob3160,

Also landed here while I was fanless quitely computing  in N.W. Poland 

pol

[Be Secure]

Locky Ransomware Returns with Spam Campaign Pushing Diablo6 Variant
https://www.bleepingcomputer.com/news/security/locky-ransomware-returns-with-spam-campaign-pushing-diablo6-variant/

[polonus]

Windows computers open to RDP? Means a gigantic threat: https://community.rapid7.com/community/infosec/blog/2017/08/09/remote-desktop-protocol-exposure

By far most computers open to attack are based in the USA and China. In the Netherlands we find 114.000 computers with  tcp-port 3389 open.

polonus

[Pondus]

2016 Was Bad — 2017 Looks Worse
https://safeandsavvy.f-secure.com/2017/08/09/2016-was-bad-2017-looks-worse/

[bob3160]

2016 Was Bad — 2017 Looks Worse
https://safeandsavvy.f-secure.com/2017/08/09/2016-was-bad-2017-looks-worse/

Really not new. It's gotten worse every year since they've started to keep records.

[ehmen]

Browser Extensions Are a Privacy Nightmare: Stop Using So Many of Them

https://www.howtogeek.com/188346/why-browser-extensions-can-be-dangerous-and-how-to-protect-yourself/

[bob3160]

Browser Extensions Are a Privacy Nightmare: Stop Using So Many of Them

https://www.howtogeek.com/188346/why-browser-extensions-can-be-dangerous-and-how-to-protect-yourself/

[polonus]

Hi bob3160,

Some browsers without any extensions are just as much of a privacy risk.
Google for instance knows more about you than your next of kin.

So I just like a good script blocker and a decent ad-blocker as that is how Google
and others that sell all of your data come by that information, and some of it can/should be blocked.

So you cannot blame extensions (and Google extension api) and let the browser off of the hook.

polonus

[bob3160]

Hi bob3160,

Some browsers without any extensions are just as much of a privacy risk.
Google for instance knows more about you than your next of kin.

So I just like a good script blocker and a decent ad-blocker as that is how Google
and others that sell all of your data come by that information, and some of it can/should be blocked.

So you cannot blame extensions (and Google extension api) and let the browser off of the hook.

polonus

Your response directed at me and I assume the post I made, has nothing to do with my post or the
advice passed along by that post.
We all know that Google knows a lot about us. So does Bing and Yahoo and many others.