{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"Office 2021 Stops Getting Security Updates on October 13. Windows Update Won\u2019t Tell You What Else Has.","description":"On October 13, Microsoft ends support for Office 2021 \u2014 Word, Excel, Outlook, and PowerPoint stop receiving security patches that day \u2014 along with the extended security updates for Windows Server 2012. Danny, sitting in for Jim Polito, asked the obvious follow-up: how does anyone find out what they are running? Craig\u2019s answer started with what people assume covers them. \u201cMost people think, oh, I\u2019ve got antivirus software. I\u2019ve got Windows Update turned on. So, I\u2019m all set. It is not true.\u201d Windows Update does not update all the software on a Windows machine, and antivirus only tries to stop an attacker who is already in. The average person has more than 60 programs on their computer that they don\u2019t know about. Danny had just found a pile of them himself, cleaning up his startup list to speed up a slow machine. Craig pointed out that he had done more than speed it up: every old program deleted is one less thing that can go out of date. He described the scan he wrote to show every installed program, flag the ones that are vulnerable, and explain the worst one in detail \u2014 what it is, why it matters, and what to do. He is updating it for the Microsoft announcements, and the new version goes to the newsletter list later in the week. Then Boston Scientific, in Marlborough. Hit on August 25, it took two full weeks to recover. Investigators traced the entry to a single internet-facing network-management device on the perimeter. No patient data was stolen and no files were encrypted, but for weeks the company could not ship product. Craig\u2019s advice was to have someone check the outside of the network, starting with Microsoft Remote Desktop and the firewall. Also in this segment: Zero-day vulnerabilities explained: the hole the attackers know about before anyone else does Almost 1,000 Microsoft patches a month, which Craig ties to vulnerabilities found with AI The U.S. ban on imported Chinese firewalls Eleven federal prison sentences in Virginia for a scam that borrowed strangers\u2019 phones to get into their Navy Federal banking apps \u2014 and Craig\u2019s 12-digit passcode before Face ID will work Turning the air conditioning back on for an 80-degree day after taking the unit out: \u201cWe\u2019ll get through a couple of days, honey. Put the fan on.\u201d How to reach Craig with a question: me@CraigPeterson.com, and Danny vouches that he answers Newsletter and Insider Session announcements: CraigPeterson.com ","author_name":"Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity","author_url":"https:\/\/cptt.libsyn.com\/podcast","html":"