2-Spyware
What are you dealing with?
Pop-ups & adwareunwanted ads, push notificationsBrowser hijackerschanged homepage, redirectsRansomwarelocked or encrypted filesTrojans & backdoorshidden remote accessSpyware & keyloggersstolen passwords and dataScam emailsfake invoices, extortion, phishingFake alerts"your PC is infected" pagesRogue anti-spywarefake security tools that pretend to be realSuspicious filesis this .exe or process safe?Unsafe websitescheck a link before you open it
New membersthis monthAll
Community
Data breachesThe Record reports that CISA and Ivanti warned about a new vulnerability in Ivanti Connect Secure that is being exploited. The attackers focused on credential theft, data exfiltration, log tampering and network reconnaissance. Ivanti said it is working with a limited number of customers who were affected. Windows users should update affected systems promptly, especially where VPN access is used to protect accounts and data.
Exploited flawsThe Hacker News reports that Google has fixed three Chrome bugs that could let an attacker run code on a Windows computer when a user only loads a web page. Two of the bugs were fixed in Chrome 152.0.7977.65 and 152.0.7977.82; Chrome updates automatically, but the fix only applies after the browser restarts, so Windows users should relaunch Chrome and confirm it is 152.0.7977.82 or later.
Paul StevensOne thing that keeps coming up lately is fake Windows update prompts. They often look convincing, but the usual pattern is still the same: a web page or popup tries to rush you into clicking something or calling a number. If Windows Update is the real issue, it shows up in Settings, not in a random browser message.
Ethan ColeThat’s a serious wake-up call. Platforms like this make account takeovers much easier, so I’d strongly recommend keeping two-step verification turned on and watching for any unusual sign-in alerts.
Martin BlakeNot surprised to hear that. In the Windows machines I see, the basics still matter most: keeping Defender on, Windows Update current, and watching for odd scripts or login prompts.
Daniel ReevesThat’s a neat little reminder that browser address bars are still a minefield if you’re not paying attention. Typosquatting with lookalike characters is the sort of trick that works because people are busy, which is, unfortunately, most of us.
Hannah PriceThis morning on my Windows 11 laptop I got a browser message saying my Microsoft account needed urgent verification or some services would be limited. It looked a bit too pushy, so I closed it and checked Settings and my account manually instead. Has anyone else seen these fake-looking account alerts lately?
Oliver GrantHad a grim wee one on my Windows 11 PC tonight: a browser tab started warning that my “sign-in session” had expired and tried to bounce me through a random verification page. Looked almost legit at first, but the URL was pure nonsense once I checked it. Anyone else seeing these fake login prompts lately?Data breachesSecurityWeek reports that Meta is notifying about 1,500 people after hackers got into some of its GitHub repositories using an employee’s stolen credentials. Meta says most of the taken data was business code, but a small amount of personal data was also involved. Affected people are being offered credit and dark web monitoring, and Meta says it rotated secrets and added controls to keep user data off GitHub.
Browser securityThe Record reports that Microsoft has set November 10 as the last security update for Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions. Devices that stay on those versions after that will no longer get monthly security fixes, so administrators should move eligible PCs to a supported Windows 11 release and check Windows Update for version 26H2.
Martin BlakeOne Windows check people often skip: in File Explorer, turn on “show file name extensions.” It’s a simple one, but it catches a lot of fake invoices and “photo.jpg.exe” type tricks before you open them. I still see that catch people out every week.
Malware newsThe Hacker News reports that the XWorm RAT has gained new plugins that turn it into a surveillance tool on Windows. Netskope says the malware can now track location, stream audio, capture webcam video, and hijack authenticated browser sessions. Windows users should avoid cracked software and other untrusted downloads, since the activity increased after a cracked builder and source code were leaked.
