Microsoft closes installer hole abused by Emotet malware, Google splats Chrome bug exploited in the wild

It's not just Log4j you need to worry about this week. It's the final Patch Tuesday of the year. If you haven't already installed these fixes, or started testing them ahead of deployment, now would be a good time before exploits are developed and deployed over the Christmas break. At least two of them – one in Windows AppX …

[John Brown (no body)]

message attachments that activate when opened.

Welcome back to 19....ah fuck it, these ones are never going to go away while MS exists.

[Anonymous Coward]

Re: message attachments that activate when opened.

Go back about 2,000 years and we created security by digging a ditch around the village, then in the medieval times the portcullis was invented ... keeping everyone safe until the cannon ball was invented. So the Internet is just a small improvement, nothing new.

[Anonymous Coward]

Re: message attachments that activate when opened.

.. and even then MS was screwing up by assembling the portcullis bars with bit of string, and updating it by painting over it with the same paint as the metal so you wouldn't notice.

Not much has changed, really.

:)

[Anonymous Coward]

patch_tesuday?

https://www.theregister.com/2021/12/15/patch_tesuday/

[eswan]

Re: patch_tesuday?

They'll have an update out next month to fix it.

[Anonymous Coward]

Wow! My first BSOD for years last night.

Some mystery combination of Win10 and Firefox updates crashed my laptop, getting the famous QR-coded BSOD around 15mins after boot up.

[grumpyoldeyore]

WiFi "Fix"

Seems that there is a fix for WiFi vulnerabilities which involves turning on WiFi power saving - so the WiFi drops out after about 2 seconds. Have to dig into the adapter power settings and turn it back on again.

[waldo kitty]

it is the season for giving gifts, right?

i mean, what better gifts to give than fixes for defects that allowed unwanted gifts to be given?

seems legit :)