January 2023 – We Fix PC

New Sh1mmer ChromeBook exploit unenrolls managed devices

A new exploit called ‘Sh1mmer’ allows users to unenroll an enterprise-managed Chromebook, enabling them to install any apps they wish and bypass device restrictions. […]

31 Jan

Over 29,000 QNAP devices unpatched against new critical flaw

Tens of thousands of QNAP network-attached storage (NAS) devices exposed online are waiting to be patched against a critical security flaw addressed by the Taiwanese company on Monday. […]

31 Jan

Microsoft stops selling Windows 10 licenses a day early

Marking an end to an era, Microsoft is no longer directly selling Windows 10 product keys on their website, instead redirecting users to Windows 11 product pages. […]

31 Jan

OpenAI releases tool to detect AI-written text

OpenAI has released an AI text classifier that attempts to detect whether input content was generated using artificial intelligence tools like ChatGPT. […]

31 Jan

Microsoft releases emergency updates to fix XPS display issues

Microsoft has released out-of-band (OOB) updates for some .NET Framework and .NET versions to address XPS display issues triggered by December 2022 cumulative security updates. […]

30 Jan

Porsche halts NFT launch, phishing sites fill the void

Porsche cut its minting of a new NFT collection short after a dismal turnout and backlash from the crypto community, allowing threat actors to fill the void by creating phishing sites that steal digital assets from cryptocurrency wallets. […]

30 Jan

KeePass disputes vulnerability allowing stealthy password theft

The development team behind the open-source password management software KeePass is disputing what is described as a newly found vulnerability that allows attackers to stealthily export the entire database in plain text. […]

30 Jan

Cybercrime job ads on the dark web pay up to $20k per month

Cybercrime groups are increasingly running their operations as a business, promoting jobs on the dark web that offer developers and hackers competitive monthly salaries, paid time off, and paid sick leaves. […]

30 Jan

GitHub revokes code signing certificates stolen in repo hack

GitHub says that unknown attackers have stolen encrypted code-signing certificates for its Desktop and Atom applications after gaining access to some of its development and release planning repositories. […]

30 Jan

QNAP fixes critical bug letting hackers inject malicious code

QNAP is warning customers to install QTS and QuTS firmware updates that fix a critical security vulnerability allowing remote attackers to inject malicious code on QNAP NAS devices. […]

Month: January 2023

New Sh1mmer ChromeBook exploit unenrolls managed devices

Over 29,000 QNAP devices unpatched against new critical flaw

Microsoft stops selling Windows 10 licenses a day early

OpenAI releases tool to detect AI-written text

Microsoft releases emergency updates to fix XPS display issues

Porsche halts NFT launch, phishing sites fill the void

KeePass disputes vulnerability allowing stealthy password theft

Cybercrime job ads on the dark web pay up to $20k per month

GitHub revokes code signing certificates stolen in repo hack

QNAP fixes critical bug letting hackers inject malicious code