{"id":23858,"date":"2022-07-13T10:02:01","date_gmt":"2022-07-13T14:02:01","guid":{"rendered":"https:\/\/www.thundercloud.net\/infoave\/new\/?p=23858"},"modified":"2022-07-13T10:02:01","modified_gmt":"2022-07-13T14:02:01","slug":"wednesday-newsbytes-hackers-can-get-you-on-youtube-cisa-orders-agencies-to-patch-windows-gmail-seeks-ruling-on-political-emails-microsofts-hardwear-android-phone-charging-tips-more","status":"publish","type":"post","link":"https:\/\/www.thundercloud.net\/infoave\/new\/wednesday-newsbytes-hackers-can-get-you-on-youtube-cisa-orders-agencies-to-patch-windows-gmail-seeks-ruling-on-political-emails-microsofts-hardwear-android-phone-charging-tips-more\/","title":{"rendered":"Wednesday Newsbytes: Hackers Can Get You on YouTube, CISA Orders Agencies to Patch Windows, Gmail Seeks Ruling on Political Emails, Microsoft&#8217;s &#8216;Hardwear&#8217;, Android Phone Charging Tips &#038; More"},"content":{"rendered":"<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">Wednesday Newsbytes: Hackers Can Get You on YouTube, CISA Orders Agencies to Patch Windows, Gmail Seeks Ruling on Political Emails, Microsoft&#8217;s &#8216;Hardwear&#8217;, Android Phone Charging Tips &amp; More<\/span><\/strong><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Every day we scan the tech world for interesting news in the world of technology. Every Wednesday, we feature some news articles that grabbed our attention over the past week. We hope you find this week&#8217;s\u00a0 &#8220;Wednesday Newsbytes&#8221; informative and interesting!<\/span><\/p>\n<hr \/>\n<blockquote><p><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\"><a href=\"https:\/\/www.techradar.com\/uk\/news\/hackers-are-using-youtube-to-spread-malware-far-and-wide\" target=\"_blank\" rel=\"noopener\">Hackers are using YouTube videos to trick people into installing malware<\/a><\/span><\/strong><\/p>\n<p><span style=\"color: #999999;\"><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">YouTube videos used to promote fake bitcoin mining software<\/span><\/strong><\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Cybercriminals have begun to lean on YouTube as a means of distributing potent malware(opens in new tab), security experts have discovered.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Researchers from Cyble Research Labs recently stumbled upon more than 80 videos, all with relatively few viewers, and all belonging to the same user. The videos seem to demonstrate how a piece of bitcoin mining software operates, in an attempt to persuade viewers to download it.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The download link is found in the video\u2019s description, and comes in a password-protected archive, to convince victims of its legitimacy. To further add to the effect, the downloaded archive also comes with a link to VirusTotal, showing the file as \u201cclean\u201d, and a warning that some antivirus programs(opens in new tab) might trigger a false positive alert.<\/span><\/p>\n<p><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">No false positives<\/span><\/strong><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The malware itself, called PennyWise, steals all kinds of data, from system information, to login credentials, cookies, encryption keys and master passwords. It also steals Discord tokens and Telegram sessions, and takes screenshots along the way.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Furthermore, it scans the device for potential cryptocurrency wallets, cold storage wallet data and crypto-related browser add-ons&#8230;<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.techradar.com\/uk\/news\/hackers-are-using-youtube-to-spread-malware-far-and-wide\" target=\"_blank\" rel=\"noopener\"><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\"><span style=\"text-decoration: underline;\">Read more at TechRadar<\/span><\/span><\/strong><\/a><\/p>\n<blockquote>\n<hr \/>\n<p><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\"><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/cisa-orders-agencies-to-patch-new-windows-zero-day-used-in-attacks\/\" target=\"_blank\" rel=\"noopener\">CISA orders agencies to patch new Windows zero-day used in attacks<\/a><\/span><\/strong><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">CISA has added an actively exploited local privilege escalation vulnerability in the Windows Client\/Server Runtime Subsystem (CSRSS) to its list of bugs abused in the wild.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">This high severity security flaw (tracked as CVE-2022-22047) impacts both server and client Windows platforms, including the latest Windows 11 and Windows Server 2022 releases.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Microsoft has patched it as part of the July 2022 Patch Tuesday, and it classified it as a zero-day as it was abused in attacks before a fix was available.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">&#8216;An attacker who successfully exploited this vulnerability could gain SYSTEM privileges,&#8217; Microsoft explained in a security advisory published today.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Redmond says the vulnerability was discovered internally by the Microsoft Threat Intelligence Center (MSTIC) and Microsoft Security Response Center (MSRC).<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">BleepingComputer has also reached out to Microsoft earlier today with questions about how this vulnerability was used in attacks.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Federal agencies given three weeks to patch<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">CISA has given the agencies three weeks, until August 2nd, to patch the actively exploited CVE-2022-22047 vulnerability and block ongoing attacks that could target their systems&#8230;<\/span><\/p><\/blockquote>\n<p><strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/cisa-orders-agencies-to-patch-new-windows-zero-day-used-in-attacks\/\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline; font-family: helvetica, arial, sans-serif;\"><span style=\"font-size: 18pt;\">Read more at Bleeping Computer<\/span><\/span><\/a><\/strong><\/p>\n<hr \/>\n<blockquote><p><strong><span style=\"font-size: 24pt;\"><a href=\"https:\/\/arstechnica.com\/tech-policy\/2022\/07\/gmail-users-tell-the-fec-unsolicited-political-emails-are-the-definition-of-spam\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-family: helvetica, arial, sans-serif;\">Gmail users \u201chard pass\u201d on plan to let political emails bypass spam filters<\/span><\/a><\/span><\/strong><\/p>\n<p><span style=\"color: #999999;\"><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">The deadline to comment on &#8220;special treatment&#8221; for political emails is July 16.<\/span><\/strong><\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Earlier this month, Google sent a request to the Federal Election Commission seeking an advisory opinion on the potential launch of a pilot program that would allow political committees to bypass spam filters and instead deliver political emails to the primary inboxes of Gmail users. During a public commenting period that&#8217;s still ongoing, most people commenting have expressed staunch opposition for various reasons that they&#8217;re hoping the FEC will consider.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">&#8220;Hard pass,&#8221; wrote a commenter called Katie H. &#8220;Please do not allow Google to open up Pandora&#8217;s Box on the people by allowing campaign\/political emails to bypass spam filters.&#8221;<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Out of 48 comments submitted as of July 11, only two commenters voiced support for Google&#8217;s pilot program, which seeks to deliver more unsolicited political emails to Gmail users instead of marking them as spam. The rest of the commenters opposed the program, raising a range of concerns, including the potential for the policy to degrade user experience, introduce security risks, and even possibly unfairly influence future elections.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Business Insider reported that the period for public commenting ends on Saturday, July 16, which is longer than what was shared in conflicting reports that said the initial deadline to comment was July 11. That means there&#8217;s still time for more Gmail users and interested parties to chime in.<\/span><\/p>\n<p><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Top concerns from Gmail users<\/span><\/strong><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Having the extra five days to comment may not seem like a lot, but at least the minor extension provides an opportunity to those who perhaps are not yet aware of Google&#8217;s proposal. FEC spokesperson Judith Ingram told Business Insider that the FEC &#8216;declined to comment on whether the agency believes it has given the public adequate time to comment on the matter.&#8217; The FEC and Google did not immediately respond to Ars&#8217; requests for comment.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Already, many Gmail users have rushed to weigh in, though, with the majority of commenters citing their top concerns and urging the FEC to disapprove of the pilot program as much as they do.<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/arstechnica.com\/tech-policy\/2022\/07\/gmail-users-tell-the-fec-unsolicited-political-emails-are-the-definition-of-spam\/\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\"><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Read more at Ars Technica<\/span><\/strong><\/span><\/a><\/p>\n<blockquote>\n<hr \/>\n<p><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\"><a href=\"https:\/\/www.theverge.com\/2022\/7\/12\/23205450\/microsoft-hardwear-clothing-collection-windows-xp-t-shirt\" target=\"_blank\" rel=\"noopener\">Microsoft will sell you a $60 T-shirt with the Windows XP background<\/a><\/span><\/strong><\/p>\n<p><span style=\"color: #999999;\"><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Say hello to Microsoft\u2019s new \u2018Hardwear\u2019 clothing collection<\/span><\/strong><\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Microsoft is launching a new \u201cHardwear\u201d clothing collection that includes a Windows XP T-shirt. If you\u2019ve always wanted to wander the streets with the Windows XP bliss wallpaper strapped to your back, now is your time. The famous blue sky and green hill are emblazoned on a mustard or black tee, available for $60.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The nine-piece collection of T-shirts, hats, sweats, jackets, and pants is part of a collaboration between Supervsn founder Gavin Mathieu and Microsoft. It\u2019s Microsoft\u2019s first capsule collection of clothing and merchandise, and the software maker clearly wanted to create a trendy nerd vibe with its collaboration.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">&#8216;The collection is reflective of the Normcore style, a lifestyle aesthetic that puts the focus on individuals and not on the clothing they wear,&#8217; explains Amanda O\u2019Neal, director of multicultural and social communications at Microsoft. &#8216;Every piece is intentional, and there is meaning behind each item in Hardwear.&#8217;<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The normcore range also includes an MS Paint T-shirt that mimics the original color palette of the app and a \u201cHardwear\u201d hat with Microsoft\u2019s 1990s logo colorings.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">This isn\u2019t Microsoft\u2019s first experiment with clothing, though&#8230;<\/span><\/p><\/blockquote>\n<p><span style=\"text-decoration: underline;\"><a href=\"https:\/\/www.theverge.com\/2022\/7\/12\/23205450\/microsoft-hardwear-clothing-collection-windows-xp-t-shirt\" target=\"_blank\" rel=\"noopener\"><strong><span style=\"font-family: helvetica, arial, sans-serif; font-size: 18pt;\">Read more at The Verge<\/span><\/strong><\/a><\/span><\/p>\n<hr \/>\n<blockquote><p><a href=\"https:\/\/www.slashgear.com\/918660\/why-you-need-to-stop-charging-your-android-phone-to-100\/\" target=\"_blank\" rel=\"noopener\"><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">Why You Need To Stop Charging Your Android Phone To 100%<\/span><\/strong><\/a><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">If you&#8217;re concerned about your phone&#8217;s battery life and making it last as long as possible, you certainly aren&#8217;t alone. A survey conducted by\u00a0USA Today showed that battery life was the most common factor chosen by Android users when asked what&#8217;d get them excited about buying a new phone. There are plenty of ways the average Android smartphone user can improve their battery life in the short term, but today we&#8217;re focusing on one of the most important factors in battery longevity.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">There is a direct correlation between your battery&#8217;s life span and the number of times you charge your phone. Your smartphone&#8217;s battery life depends on charge cycles or the number of times your battery charges from zero all the way up to 100%. The more full charge cycles your phone experiences, the faster the battery will degrade.\u00a0<\/span><\/p>\n<p><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Smartphone batteries don&#8217;t last forever<\/span><\/strong><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Most lithium-ion phone batteries have between 400 to 500 charge cycles before a user will need to go shopping for a new one. A new phone, that is to say, as most modern smartphones aren&#8217;t particularly user-friendly when it comes to battery replacement. So, if you want to extend your battery life and stop further degradation, you may not want to charge your phone to full capacity every time you plug it in.<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.slashgear.com\/918660\/why-you-need-to-stop-charging-your-android-phone-to-100\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\"><strong><span style=\"text-decoration: underline;\">Read More at SlashGear<\/span><\/strong><\/span><\/a><\/p>\n<hr \/>\n<blockquote><p><a href=\"https:\/\/www.reuters.com\/lifestyle\/science\/chinese-scientists-develop-robot-fish-that-gobble-up-microplastics-2022-07-12\/\" target=\"_blank\" rel=\"noopener\"><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">Chinese scientists develop robot fish that gobble up microplastics<\/span><\/strong><\/a><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">BEIJING, July 12 (Reuters) &#8211; Robot fish that &#8220;eat&#8221; microplastics may one day help to clean up the world&#8217;s polluted oceans, says a team of Chinese scientists from Sichuan University in southwest China.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Soft to touch and just 1.3 centimetres (0.5 inch) in size, these robots already suck up microplastics in shallow water.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The team aims to enable them to collect microplastics in deeper water and provide information to analyse marine pollution in real time, said Wang Yuyan, one of the researchers who developed the robot.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">&#8216;We developed such a lightweight miniaturised robot. It can be used in many ways, for example in biomedical or hazardous operations, such a small robot that can be localised to a part of your body to help you eliminate some disease.&#8217;<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The black robot fish is irradiated by a light, helping it to flap its fins and wiggle its body. Scientists can control the fish using the light to avoid it crashing into other fish or ships&#8230;<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.reuters.com\/lifestyle\/science\/chinese-scientists-develop-robot-fish-that-gobble-up-microplastics-2022-07-12\/\" target=\"_blank\" rel=\"noopener\"><strong><span style=\"text-decoration: underline; font-family: helvetica, arial, sans-serif;\"><span style=\"font-size: 18pt;\">Read more at Reuters.<\/span><\/span><\/strong><\/a><\/p>\n<hr \/>\n<p><span style=\"color: #339966;\"><strong><span style=\"font-family: 'comic sans ms', sans-serif;\"><em><span style=\"font-size: 18pt;\">Thanks for reading this week&#8217;s Wednesday Newbytes. We hope you found these articles useful, informative, interesting, fun, and\/or helpful. Darcy &amp; TC<\/span><\/em><\/span><\/strong><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; &nbsp; Wednesday Newsbytes: Hackers Can Get You on YouTube, CISA Orders Agencies to Patch Windows, Gmail Seeks Ruling on Political Emails, Microsoft&#8217;s &#8216;Hardwear&#8217;, Android Phone Charging Tips &amp; More Every day we scan the tech world for interesting news in the world of technology. Every Wednesday, we feature some news articles that grabbed our attention over the\u2026 <span class=\"read-more\"><a href=\"https:\/\/www.thundercloud.net\/infoave\/new\/wednesday-newsbytes-hackers-can-get-you-on-youtube-cisa-orders-agencies-to-patch-windows-gmail-seeks-ruling-on-political-emails-microsofts-hardwear-android-phone-charging-tips-more\/\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":23363,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1655,101,4179,1751,1678,1669,2509,1,1426,4202,1674,4372,2366],"tags":[],"_links":{"self":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/23858"}],"collection":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/comments?post=23858"}],"version-history":[{"count":1,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/23858\/revisions"}],"predecessor-version":[{"id":23859,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/23858\/revisions\/23859"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media\/23363"}],"wp:attachment":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media?parent=23858"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/categories?post=23858"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/tags?post=23858"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}