Author Topic: SECURITY WARNINGS & Notices - Please post them here (Read 2880999 times)

Asyn · « **Reply #6705 on:** May 19, 2022, 09:16:14 AM »

Critical Jupiter WordPress plugin flaws let hackers take over sites
https://www.bleepingcomputer.com/news/security/critical-jupiter-wordpress-plugin-flaws-let-hackers-take-over-sites/

bob3160 · « **Reply #6706 on:** May 20, 2022, 05:00:37 PM »

Weekly Security News Roundup w/e 5-20-2022

https://youtu.be/FdlCqi3uR9w
Security-related news thanks mostly to Avast Software.
I'm just a messenger. They do most of the challenging work and research.
https://www.avast.com/en-us/index#pc

Asyn · « **Reply #6707 on:** May 23, 2022, 01:57:28 PM »

The biggest financial scams of 2022
https://blog.avast.com/top-financial-scams

Asyn · « **Reply #6708 on:** May 24, 2022, 11:07:59 AM »

Photos of abused victims used in new ID verification scam
https://www.bleepingcomputer.com/news/security/photos-of-abused-victims-used-in-new-id-verification-scam/

polonus · « **Reply #6709 on:** May 24, 2022, 10:14:10 PM »

DuckDuckGo under fire for letting through Microsoft-scripts by its browser.
It has come to an agreement with Microsoft not to block Microoft on third-paty-websites.
Particular scripts exist that you can add to Tampermonkey extension to again block these.

polonus

polonus · « **Reply #6710 on:** May 24, 2022, 10:59:00 PM »

This issue with DuckDuckGo is with their DuckDuckGo browser on android.

How do browsers compare privacy-wise?
(because privacy and anonymity really do no longer exist) results are not absolute.

Just see here: https://privacytests.org/ The winner seems to be: https://librewolf.net

polonus

bob3160 · « **Reply #6711 on:** May 25, 2022, 01:08:31 AM »

The biggest financial scams of 2022

https://youtu.be/eZ5OiCw7xaY
Learn how to protect yourself – and your cash – from the dirtiest tricks on the web.
Thanks to GRACE MACEJ for her excellent article on this topic.
https://blog.avast.com/top-financial-scams

Asyn · « **Reply #6712 on:** May 25, 2022, 09:42:22 AM »

Quote from: polonus on May 24, 2022, 10:14:10 PM

DuckDuckGo under fire for letting through Microsoft-scripts by its browser.
It has come to an agreement with Microsoft not to block Microoft on third-paty-websites.
Particular scripts exist that you can add to Tampermonkey extension to again block these.

polonus

DuckDuckGo browser allows Microsoft trackers due to search agreement
https://www.bleepingcomputer.com/news/security/duckduckgo-browser-allows-microsoft-trackers-due-to-search-agreement/

DavidR · « **Reply #6713 on:** May 25, 2022, 11:49:24 AM »

Quote from: Asyn on May 25, 2022, 09:42:22 AM

Quote from: polonus on May 24, 2022, 10:14:10 PM
DuckDuckGo under fire for letting through Microsoft-scripts by its browser.
It has come to an agreement with Microsoft not to block Microoft on third-paty-websites.
Particular scripts exist that you can add to Tampermonkey extension to again block these.

polonus
DuckDuckGo browser allows Microsoft trackers due to search agreement
https://www.bleepingcomputer.com/news/security/duckduckgo-browser-allows-microsoft-trackers-due-to-search-agreement/

This is a strange turn of events for DuckDuckGo.

Whilst I don't use the DuckDuckGo browser, the reason I find this interesting is, it isn't all that long ago that I stopped using the DuckDuckGo browser add-on and also dropped the DuckDuckGo search option in Firefox. The main reason for that is that the DuckDuckGo add-on was too intrusive and I felt it broke some sites.

DuckDuckGo I had also somehow became my default search engine on a couple of times in Firefox and I hadn't changed that at all and I changed it back to me default search engine. The worst part was the results on DuckDuckGo searches returned a patheticly small amount of hits in the search (useless would be a good word to use).

All in all for me it has gone downhill very rapidly.

Asyn · « **Reply #6714 on:** May 26, 2022, 10:53:50 AM »

New ChromeLoader malware surge threatens browsers worldwide
https://www.bleepingcomputer.com/news/security/new-chromeloader-malware-surge-threatens-browsers-worldwide/

bob3160 · « **Reply #6715 on:** May 26, 2022, 12:45:50 PM »

How license plate scanners challenge our data privacy

https://youtu.be/orNe0T4VQpg
There's a massive amount of data in private hands
and without sufficient controls by the government.
My thanks to David Strom for his excellent article.
https://blog.avast.com/license-plate-scanners-data-privacy

Asyn · « **Reply #6716 on:** May 27, 2022, 10:12:54 AM »

Intuit warns of QuickBooks phishing threatening to suspend accounts
https://www.bleepingcomputer.com/news/security/intuit-warns-of-quickbooks-phishing-threatening-to-suspend-accounts/

polonus · « **Reply #6717 on:** May 27, 2022, 10:37:58 AM »

luntrus searched on IntelligeX for CVE-2022-1853,
this is a vulnerability just being patched with a new Google Chrome version.

Seach results -

Quote

https://attackerkb.com/topics/NhNbhpIsam/cve-2022-1853
2020-12-21 11:24:32
attackerkb.com - Topics | AttackerKB 2020-12-21 - 2021-11-23
├── about - About | AttackerKB 2020-12-30 - 2021-11-23
├── activity-feed - Activity Feed | AttackerKB 2020-12-30 - 2021-11-23
├── leaderboard - Leaderboard | AttackerKB 2020-12-30 - 2021-11-23
├── search?attackVector=LOCAL&q= - Search Results | AttackerKB 2020-12-30 - 2021-01-31
├── search?privilegesRequired=LOW&q= - Search Results | AttackerKB 2020-12-30 - 2021-01-31
├── search?q=&userInteraction=NONE - Search Results | AttackerKB 2020-12-30 - 2021-01-31
├── search?userInteraction=NONE - Search Results | AttackerKB 2020-12-30
└── topics - Topics | AttackerKB 2020-12-30 - 2021-11-23
├── 1yvp3hVNSN/cve-2020-17136?referrer=home - CVE-2020-17136 | AttackerKB 2020-12-30 - 2021-01-31
└── DCzIXKVJbk/cve-2020-0662 - CVE-2020-0662 | AttackerKB

Description
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Info credits go to luntrus.

polonus

bob3160 · « **Reply #6718 on:** May 27, 2022, 10:17:15 PM »

Weekly Security News Roundup w/e 5-27-2022

https://youtu.be/P1bmPo_Tx1o
Security-related news thanks mostly to Avast Software.
I'm just a messenger. They do most of the challenging work and research.
https://www.avast.com/en-us/index#pc

bob3160 · « **Reply #6719 on:** June 01, 2022, 12:03:44 AM »

Will Hollywood’s Lawsuits Shut Down
Your Favorite VPN?

https://youtu.be/cCEOn7cFdHA
If you want to torrent copyrighted material, a VPN will hide what you’re doing.
Well, for now, at least. Read the full article on this topic at,
https://www.howtogeek.com/807819/will-hollywoods-lawsuits-shut-down-your-favorite-vpn/