SECURITY WARNINGS & Notices - Please post them here

[Asyn]

Massive campaign uses YouTube to push password-stealing malware
https://www.bleepingcomputer.com/news/security/massive-campaign-uses-youtube-to-push-password-stealing-malware/

[bob3160]

Weekly Security News Roundup w/e 10-22-2021

https://youtu.be/hDKMhSRlTk4

[Asyn]

Malware Discovered in Popular NPM Package, ua-parser-js
https://us-cert.cisa.gov/ncas/current-activity/2021/10/22/malware-discovered-popular-npm-package-ua-parser-js

[polonus]

Report finds many ISPs use web browsing data and group consumers using sensitive characteristics such as race and sexual orientation


https://www.ftc.gov/news-events/press-releases/2021/10/ftc-staff-report-finds-many-internet-service-providers-collect

One thing one could do is make use of a VPN (avast VPN)
another way when MAC-addresses being collected is to make use of
https://www.myshadow.org/resources/technitium-mac-address-changer?locale=en  (free)

And remember you do not have to worry about the info you do not share with Interwebz.

polonus

[Asyn]

Malware Discovered in Popular NPM Package, ua-parser-js
https://us-cert.cisa.gov/ncas/current-activity/2021/10/22/malware-discovered-popular-npm-package-ua-parser-js

More here: https://www.bleepingcomputer.com/news/security/popular-npm-library-hijacked-to-install-password-stealers-miners/

[Asyn]

Gamers beware: Malware and malicious cracked games pose risks
https://blog.avast.com/malicious-cracked-games-pose-risks-avast

[Asyn]

Mozilla blocks malicious add-ons installed by 455K Firefox users
https://www.bleepingcomputer.com/news/security/mozilla-blocks-malicious-add-ons-installed-by-455k-firefox-users/
https://blog.mozilla.org/security/2021/10/25/securing-the-proxy-api-for-firefox-add-ons/

[polonus]

Critical site deletion vulnerability in WordPress CMS plug-in:

https://www.wordfence.com/blog/2021/10/site-deletion-vulnerability-in-hashthemes-plugin/   
(e.g. HashThemes Demo Importer not updated to the latest version).

pol

[Asyn]

All Windows versions impacted by new LPE zero-day vulnerability
https://www.bleepingcomputer.com/news/security/all-windows-versions-impacted-by-new-lpe-zero-day-vulnerability/

[bob3160]

Weekly Security News Roundup w/e 10-29-2021

https://youtu.be/OVTUJSYLTlk
Security-related news thanks mostly to Avast Software. I'm just a messenger.
They do most of the challenging work and research.
https://www.avast.com/en-us/index#pc

[Asyn]

Microsoft: Windows KB5006674, KB5006670 updates break printing
https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-kb5006674-kb5006670-updates-break-printing/

[DavidR]

Microsoft: Windows KB5006674, KB5006670 updates break printing
https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-kb5006674-kb5006670-updates-break-printing/

Bl00dy brilliant, MS breaks printing with a KB (or two in this case) yet again, from the past issues and KBs breaking printing. You would have thought/hoped they had learnt from these.  Fortunately for me I don't do network printing, but direct connection.

[bob3160]

Microsoft: Windows KB5006674, KB5006670 updates break printing
https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-kb5006674-kb5006670-updates-break-printing/

Bl00dy brilliant, MS breaks printing with a KB (or two in this case) yet again, from the past issues and KBs breaking printing. You would have thought/hoped they had learnt from these.  Fortunately for me I don't do network printing, but direct connection.

The break must only be affecting certain printers or systems. No problem here with printing
via my Epson ET 2720.

[Asyn]

Popular 'coa' NPM library hijacked to steal user passwords
https://www.bleepingcomputer.com/news/security/popular-coa-npm-library-hijacked-to-steal-user-passwords/

[bob3160]

Weekly Security News Roundup w/e 11-5-2021

https://youtu.be/n_unu7rpJ-4
Security-related news thanks mostly to Avast Software. I'm just a messenger.
They do most of the challenging work and research. https://www.avast.com/en-us/index#pc