PC Security and Other Useful Information

KB4493448 (Security-only update) – Known issues in this update

This “Security Only” update is known to cause with Sophos and Avira. If you installed it and experience the problems listed, you should uninstall the update. Microsoft has temporarily blocked devices from receiving this update if either is installed

Microsoft reveals hackers accessed some Outlook.com accounts for months

“Microsoft has started notifying some Outlook.com users that a hacker was able to access accounts for months earlier this year. The software giant discovered that a support agent’s credentials were compromised for its web mail service, allowing unauthorized access to some accounts between January 1st and March 28th, 2019. Microsoft says the hackers could have viewed account email addresses, folder names, and subject lines of emails, but not the content of emails or attachments.”

Security Mailer Volume 2019 Number 15

• Adobe updates everything
• Cisco Security Advisories
• Linux Updates
• Microsoft
  • Patch Tuesday Security Releases
  • Warning for Sophos AV users
  • Vulnerabilities under active attack
• General Security review of last week, new phishing attacks can make 2FA useless

Patch Tuesday Lowdown, April 2019 Edition

Interesting….. I noted that “Check for Updates” first generated about a dozen hardware updates that were dated 2018. After completed, it then loaded the expected 1809 and other “patch Tuesday” type updates.

I also noted that the 1809 update only required one reboot. In the past, it would start updates, get to a percentage less than 100%, reboot and then finish to 100%. Maybe they are actually improving the update process??

Security Mailer Volume 2019 Number 13

• Apple Security Updates
• Browser Pale Moon update
• Cisco Security Advisories
• Linux updates
• General Security reviews last weeks vulnerabilities
• Added a quick reference cheat sheet of shortcuts to the Windows 10 resources folder

Sorry for the delay, folks. Unfortunately (for you), an 11-day Caribbean cruise beats out posting, especially with limited internet… 🙂

Security Mailer Volume 2019 Number 12

• Mozilla updates
  • Firefox and Firefox ESR twice this week
  • Thunderbird
• Cisco Security Advisories
• Linux Updates
• Microsoft Security Updates revised
• General Security review of last week
  • Securely erase dataPuTTY update
  • MageCart hackers
• Facebook stores hundreds of millions of user passwords in plain text

Once more a malware installed on Point of Sale terminals…

A Month After 2 Million Customer Cards Sold Online, Buca di Beppo Parent Admits Breach

Windows 10 Update 1809 – Syncing of Timeline no longer working and Cloud Clipboard doesn’t sync either

If you encounter this, try the following instructions. If the 3 keys don’t exist, create them.

Step 1: Press the ‘Windows‘ key and the ‘R‘ key from your keyboard and type ‘Regedit‘ and hit Enter.

Step 2: On the left pane of the Registry Editor window, navigate toHKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System

Step 3: One the right pane of System, see if you have the following registry DWORDs:

• EnableActivityFeed
• PublishUserActivities
• UploadUserActivities

Step 4: Double click on each of these DWORDs and check if the Value Data is 1. (Change the Value Data to 1 if there is some other data).

Step 5: If you don’t see the above 3 DWORDS on the right pane of System, then just right click on the right pane and click on New > DWORD (32-bit) value and change the name to EnableActivityFeed and double click on EnableActivityFeed and change the Value data to 1.

Step 6: Follow the Step 4 and create two more DWORDs for PublishUserActivities and UploadUserActivities. (Make sure to change the Value data to 1 for all the 3 DWORDs).

Step 7: Restart the PC once and check for the issue.

Security Mailer Volume 19 Number 11

• Adobe security updates:
  • Digital Editions
  • Photoshop
• Mozilla launches Firefox Send
• Cisco Security Advisories
• Linux updates
• Microsoft:
  • Tuesday patches over 60 vulnerabilities including two 0-days that are already being exploited
  • Security Update Revisions
  • Security Advisories
  • Office updates
  • SHA-2 code signing
• General Security reviews last two weeks vulnerabilities
• VM Ware Security Advisories

Multi-Factor Auth Bypassed in Office 365 and G Suite IMAP Attacks

“Massive IMAP-based password-spraying attacks successfully breached Microsoft Office 365 and G Suite accounts, circumventing multi-factor authentication (MFA) according to an analysis by Proofpoint.

This technique takes advantage of the fact that the legacy authentication IMAP protocol bypasses MFA, allowing malicious actors to perform credential stuffing attacks against assets that would have been otherwise protected.”