Weekly Cyber Security News 13/11/2020

A selection of this week’s more interesting vulnerability disclosures and cyber security news. For a daily selection see our twitter feed at #ionCube24. We do our best to avoid falling for a scammer, but the lure of yummy comfort goodies especially with the pandemic’s toll on our lives, may be just the one step too far:

• Cadbury Social Media Scammers Take Chocoholics for a Ride

It is a real concern that 3rd party support for Android updates (or lack of) is utterly shocking, and even though this article does draw awareness to the inconvenience of broken certificates, the underlying drag of other security issues exposes too many devices to risk:

• Let”s Encrypt warns about a third of Android devices will from next year stumble over sites that use its certs

Talking of mobile phones, I really hate it when websites only offer SMS 2FA…

• Microsoft warns against SMS, voice calls for multi-factor authentication: Try something that can”t be SIM swapped