The US government Cybersecurity and Infrastructure Security Agency (CISA) has added advisories for Oracle and Google to the Known Exploited Vulnerabilities Catalog it maintains: CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA
Another fix for another zero-day Google Chrome flaw
Google Chrome is a very popular browser so it is worthwhile for the threat actors to keep poking away at it to find the vulnerabilities. The team a Google also keep looking and patching: Google pushes emergency Chrome update to fix 8th zero-day in 2022 (bleepingcomputer.com) Get Chrome patched now.
It is a busy shopping weekend around the world so the scammers are out
Scammers will always take advantage of any situation if they think they will get away with exploiting you: Scammers, bots dominate threat landscape ahead of Black Friday and Cyber Monday – The Record by Recorded Future Just take a little care.
Shopping with Google
Just in time for the US Thanksgiving, Black Friday and Christmas shopping sprees, here are five useful online shopping tips from Google that have an equal place as part of any organisation’s online cyber security plan: 5 ways to safely shop online this holiday season (blog.google) It is obviously Google …
Browser extensions – a great idea for functionality and a cyber security risk…
…make sure that you check carefully before installing any on your systems: Malicious extension lets attackers control Google Chrome remotely (bleepingcomputer.com) Malicious extensions also exist for all the other browsers out there not just Google Chrome.