Chrome Zero-Day Under Active Attack: Patch ASAP

 Chrome Zero-Day Under Active Attack: Patch ASAP

Google's Chrome, the popular web browser has a critical flaw that is currently under active attack by bad actors.  The flaw is classified as a zero day (active attack) bug and the patch needs to be applied immediately.

In a brief update, Google described the weakness, tracked as CVE-2022-0609, as a use-after-free vulnerability in Chrome’s Animation component. This kind of flaw can lead to all sorts of misery, ranging from the corruption of valid data to the execution of arbitrary code on vulnerable systems.

https://threatpost.com/google-chrome-zero-day-under-attack/178428/

The fix is to update Chrome browser to the latest version 98.0.4758.102.  This will resolve this issue along with 10 other security issues.

The affected OSs include MAC, Linux as well as Windows users.

To check your Chrome version and update do the following,

Click on Chrome Menu buttons at top right of browser and select Settings,

Next select About Chrome at the bottom

Check your version and make sure it is 93.0.4758.102.  If not update.

That is all. Happy Hump Day!

buy a computer!  DForce Intel 11th Generation Workstations

https://drive.google.com/file/d/15EUghuRhwZbYitLvbLrhqncIbyYhNP_y/view?usp=sharing

Microsoft Patch Tuesday-February 2022 and Windows 11

Yesterday was Patch Tuesday so many of you may be seeing the Windows 11 upgrade offer or a message saying your computer doesn't meet minimal requirements. Windows 11 requires TPM 2.0 (Trusted Platform Management), UEFI and Secure Boot enabled. If you have an older machine then you will probably not be eligible for the upgrade. It is estimated that 55% of existing Windows computers will not be Windows 11 compatible.  There may still be hope if you want Windows 11 however... discussed later in post.

If you are running Windows 10, Microsoft has issued updates to patch several security flaws, none deemed critical but Microsoft considers them to be ripe for exploitation.  One CVE-2022-22005 affects SharePoint which is critical to many users and organizations who utilize cloud access.

For a full list of Windows 10 patches please click the following link;

Microsoft Patch Tuesday, February 2022 Edition – Krebs on Security

Last Gasp for Windows 11 wannabes!

Despite a message that your machine is not compatible, you may still be eligible by tweaking your BIOS settings.  It may require a BIOS (firmware) upgrade but many machines have a TPM software feature that needs to be turned on and UEFI/Secure Boot enabled.

For a list of all the minimum requirements for Windows 11 click the following link; 

https://support.microsoft.com/en-us/windows/windows-11-system-requirements-86c11283-ea52-4782-9efd-7674389a7ba3

If you are already running Windows 11, the current Patch contains all the fixes from previous updates including a speed boost that corrects a bug that made drive write/read speeds slower.

Known issues (famous last words)

Microsoft is currently not aware of any critical issues in this release, but you should watch for a weird bug where recent emails might not appear in the search results of Outlook desktop app. This bug affects POP, IMAP, Microsoft Exchange and Microsoft 365 accounts.

There’s always a possibility that the Windows Update could break your device. In the past, some updates have caused major issues including Blue Screen of Death errors and problems running certain apps.

For a full list of bug fixes and improvements for Windows 11 in this Patch Tuesday release, please click on the following link.  It also contains links to the full install of Windows 11 which you can use to upgrade if you wish.

Windows 11 KB5010386 released with a speed boost and more (windowslatest.com)

DForce Windows 11 workstations

https://drive.google.com/file/d/1WouUA5OZ-LLQM2AQgawpG01_fHrn-D7X/view?usp=sharing