News Week Ending July 10, 2022


Coinbase Login Security Flaw
by Artie Kaye

If you deal in cryptocurrency and are a user of CoinBase, you should know about a security concern regarding their login page.  When you type in an email address for the login, if there is no account registered with that address, it will return a message stating “no account here is linked to that address.”  This is not secure.  It can allow someone to phish for valid email addresses simply by using the login screen.  From there a scammer could use the address to attempt to scam the actual account holder. 

Update August 10, 2022:  Coinbase’s login is still functioning like this.  

https://youtu.be/VORSwN09TtI?t=3785

https://coinbase.com

Windows End of Service
by Artie Kaye

Microsoft has ended service for Windows 10 20H2 and 1909 editions.  May’s security update was the last for these editions.  This means that no more patches will be coming for them.  Without updates, security vulnerabilities and bugs can cause problems as they won’t be fixed.  What this means for you, contact your support to make sure your machines are all updated to an edition that will continue to get updates.  

https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-10-20h2-reaches-end-of-service-next-month/

https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-10-1909-reaches-end-of-service-next-month/