Certified Business Solutions USA

Certified Business Solutions USA Certified Business Solutions USA Inc. Get in touch when you're ready to plan your online business success, and we'll be happy to help you do it.

is an ISP internet hosting, search engine optimization (SEO) and graphic design services company in the upstate NY and Capital District area. offers nationwide ISP internet hosting, search engine optimization (SEO), and graphic design services nationwide from our upstate NY and Capital District area. Reliable, personalized customer service is just one part of what distinguishes the quality of serv

ices we offer for all business sizes from large, small to medium businesses as well as home start-up companies. With clients ranging from national conference organizers to respected attorneys to crafting suppliers and auto repair services, we're confident we can successfully bring your business online, and have you easily found in the search engines.

09/29/2025

Update your Chrome today: Google patches 4 vulnerabilities including one zero-day
Posted: September 18, 2025 by Pieter Arntz

Google has released an update for its Chrome browser to patch four security vulnerabilities, including one zero-day. A zero-day vulnerability refers to a bug that has been found and exploited by cybercriminals before the vendor even knew about it (they have “zero days” to fix it).

This update is crucial since it addresses one vulnerability which is already being actively exploited and, reportedly, can be abused when the user visits a malicious website. It probably doesn’t require any further user interaction, which means the user doesn’t need to click on anything in order for their system to be compromised.

The Chrome update brings the version number to 140.0.7339.185/.186 for Windows, Mac and 140.0.7339.185 for Linux. So, if your Chrome is on the version number 140.0.7339.185 or later, it’s protected against exploitation of these vulnerabilities.

The easiest way to update Chrome is to allow it to update automatically, but you can end up lagging behind if you never close your browser or if something goes wrong—such as an extension stopping you from updating the browser.

To manually get the update, click the more menu (three stacked dots), then choose Settings > About Chrome. If there is an update available, Chrome will notify you and start downloading it. Then all you have to do is reload Chrome in order for the update to complete, and for you to be safe from the vulnerabilities.
Chrome is up to date

You can find more elaborate update instructions and how to read the version number in our article on how to update Chrome on every operating system.
Technical details on the zero-day vulnerability

Google describes the zero-day vulnerability tracked as CVE-2025-10585 as a type confusion in V8. Reported by Google Threat Analysis Group on 2025-09-16.

Despite the short statement—Google never reveals a lot of details until everyone has had a chance to update—there are a few conclusions we can draw.

It helps to know that V8 is Google’s open-source Javascript engine.

A “type confusion” vulnerability happens when code doesn’t verify the object type passed to it and then uses the object without type-checking. So, a program mistakenly treats one type of data as if it were another, like confusing a list for a single value or interpreting a number as text. This mix-up can cause the software to behave unpredictably, creating opportunities for attackers to break in, steal data, crash programs, or even run malicious code.

Google’s Threat Analysis Group (TAG) focuses on spyware and nation-state attackers who abuse zero days for espionage purposes.

So, it stands to reason that an attacker used Javascript to create a malicious site that exploited this vulnerability and lured targeted victims to that website.

TAG reported the bug on September 16, and Google issued the patch one day later. That implies that the bug was urgent, or very easy to fix, and probably that both of those statements are true to some extent.

Usually, as more details become known or a patch gets reverse engineered, cybercriminals will start using the vulnerability in less targeted attacks.

Users of other Chromium-based browsers, such as Microsoft Edge, Brave, Opera, and Vivaldi, are also advised to keep an eye out for updates and install them when they become available.

12/31/2024

Happy New Years

Merry Christmas !!!
12/24/2024

Merry Christmas !!!

12/12/2024

Good day,

As we move into the Holiday Season, I would like to remind everyone that hackers ramp up their efforts to infect your computers, Devices and Business Networks. I recommend keeping all social media and online shopping on your smart phones and home computers. Never use your work e-mail address for online shopping
Increased risk of downloading malware via social media:

Social media is a brilliant tool for sharing links, videos and interesting information with your friends online. But not all those links go to good places quite often those pages will have adware, malware or computer viruses lurking in the background, trying to download themselves onto your computer.

Ignore Strange Emails:

Many companies send holiday shopping and promotional emails all throughout the holiday season. Some hackers try to capitalize on this and try to catch victims through phishing scams. Don’t fall for scams promising unrealistically deep discounts or free merchandise. You know what they say, if it’s too good to be true, it probably is.
Fake delivery-service emails:

Please be extremely cautious when opening emails with unexpected links or attachments, especially if they appear to be from a familiar company or person but have slight variations in the sender address.
Key signs of a phishing email:
• Urgent requests for personal information like passwords, credit card details, or social security numbers.
• Links that seem suspicious or lead to unfamiliar websites.
• Poor grammar or unusual formatting.
• Sender address that looks slightly different from a trusted source.

What to do if you suspect a phishing email:
• Do not click on any links or open attachments.
• Forward the suspicious email to Your IT People for further investigation.

• Delete the email immediately.
If you have already clicked on a suspicious link, change your passwords immediately and contact our IT support team for further assistance.
Stay vigilant and protect your personal information by being cautious of phishing attempts

During December, many Americans receive items shipped by UPS, FedEx, and the US Postal Service - a fact that criminals exploit by sending emails and text messages that impersonate correspondence from these services and that deliver malware via attachments or direct users to phishing websites. If you have questions about a delivery - or receive an email alert about a delivery - visit the carrier's website by entering their URL into a web browser; do not click on links in an email or open attachments.

Remember even if you play it safe someone on your mailing list may get infected if you get an email that has attachments and looks odd in any way do not open the attachment rather e-mail them back and ask what the attachment is all about
If malware does install itself on your work computer, it could cause serious damage to the rest of the network. The time and costs associated with fixing these issues could seriously hurt your company – even if it was an accident.

HAPPY HALLOWEEN
10/31/2024

HAPPY HALLOWEEN

12/13/2023

US government is snooping on people via phone push notifications, says senator
Posted: December 7, 2023 by Pieter Arntz

Many people don’t realize that the instant alert push notifications you get on your phone are routed through Google or Apple’s servers, depending on which device you use. So if you have an iPhone or iPad, any push notifications can be seen by Apple, and if you use an Android, they can be seen by Google.

But, it seems, it’s not just Apple and Google who can view them.

In a letter to Attorney General Merrick B. Garland, Senator Ron Wyden urged the Department of Justice (DOJ) to “permit Apple and Google to inform their customers and the general public about demands for smartphone app notification records.”

And, since Apple and Google serve as intermediaries in the delivery of these push notifications this puts them in “a unique position to facilitate government surveillance of how users are using particular apps, “ wrote Senator Wyden.

The type of information varies from app to app, but in certain cases, it might also contain unencrypted content, which could range from backend directives for the app to the actual text displayed to a user in a notification.

In the letter, Senator Wyden asked the DOJ to repeal or modify any policies that hinder public discussions of push notification spying.

“Apple and Google should be permitted to be transparent about the legal demands they receive, particularly from foreign governments, just as the companies regularly notify users about other types of government demands for data.”

The reason for this request stems from the fact that Apple and Google told the senator’s staff that information about this practice is restricted from public release by the government.

Apple said in a statement that it welcomed Wyden’s letter as it gave the opening it needed to share more details with the public about how governments monitored push notifications.

A source familiar with the matter confirmed to Reuters that both foreign and US government agencies have been asking Apple and Google for metadata related to push notifications to, for example, help tie anonymous users of messaging apps to specific Apple or Google accounts.

This is possible because the data these two companies receive includes metadata, detailing which app received a notification and when, as well as the phone and associated Apple or Google account to which that notification was intended to be delivered. So, if you’re using a messaging app which you’d like not to be tied to your device or online accounts, you probably shouldn’t allow those apps to show you notifications and instead check manually whether there are new messages.
Disabling notifications

After writing the above I went over the list of apps that had permissions to send me notifications and limited this to a few that I feel I need and won’t do too much harm. If you want to do the same, here is what you can do.

On Android devices open your Settings app and click on Notifications. In the dropdown menu, tap All apps. Here you can turn the app’s notifications on or off. There could be slight variations due to Android version and phone vendors.

On iPhones and iPads open the Settings app and click on Notifications. You’ll see a list of apps that are allowed to show push notifications. To disable them, you need to click on the individual app in that list and disable notifications (turn the slider from green to grey).

No doubt there is more to come on this story. We’ll keep you updated.

We don’t just report on privacy—we offer you the option to use it.

Privacy risks should never spread beyond a headline. Keep your online privacy yours by using Malwarebytes Privacy VPN.

06/21/2023

WhatsApp hijackers take over your account while you sleep.
Posted: January 25, 2023 by Malwarebytes Labs
Late last week, Twitter user Zuk () tweeted an issue about WhatsApp that has the potential to turn heads.
He explains that attackers can take advantage of two things: a user's availability and how identity verification works on WhatsApp.
A user who is not available to respond to verification checks—whether they're asleep, in-flight, or have simply set their smartphone to "do not disturb"—may be at risk of losing their WhatsApp account. All an attacker needs is their target's phone number.
Here's how it works.
The attacker attempts to log in to a WhatsApp account. As part of the verification process, WhatsApp sends an SMS with a PIN to the phone number tied to the account.
The user is unavailable so doesn't realize there is a suspicious login. The attacker then tells WhatsApp that the SMS didn't arrive and asks for verification by phone call.
Since the account owner is still unavailable and cannot pick up the call, the call goes to the number's voicemail. Knowing the target's phone number, the attacker then attempts to access their voicemail by keying in the last four digits of the user's mobile number, which is usually the default PIN code to access the user's voicemail.
The attacker then has the WhatsApp verification code, and can use it to access the victim's WhatsApp account. They can then set up their own 2FA (two-factor authentication) on it, leaving the actual owner locked out of their own account.
Once the account has been hijacked, the attacker could use it to hijack accounts of the user's contacts, spread malware, or hold the account hostage until the owner pays up to get it back.
How to protect your own WhatsApp account
This isn't a new tactic, and has been around for a while, but there are two pretty simple things you can do to avoid it happening to you.
1. Change the default PIN of your voicemail.
2. Enable two-step verification on your WhatsApp account:
• Open Settings.
• Tap Account > Two-step verification > Enable.
• Enter a six-digit PIN.
• Enter an email address, or tap Skip if you don’t want to. WhatsApp says it recommends adding an email address so you can reset two-step verification if you need to.
• Tap Next.
• Confirm the details and tap Save or Done.
Stay safe!

02/02/2023

WhatsApp hijackers take over your account while you sleep.
Posted: January 25, 2023 by Malwarebytes Labs
Late last week, Twitter user Zuk () tweeted an issue about WhatsApp that has the potential to turn heads.
He explains that attackers can take advantage of two things: a user's availability and how identity verification works on WhatsApp.
A user who is not available to respond to verification checks—whether they're asleep, in-flight, or have simply set their smartphone to "do not disturb"—may be at risk of losing their WhatsApp account. All an attacker needs is their target's phone number.
Here's how it works.
The attacker attempts to log in to a WhatsApp account. As part of the verification process, WhatsApp sends an SMS with a PIN to the phone number tied to the account.
The user is unavailable so doesn't realise there is a suspicious login. The attacker then tells WhatsApp that the SMS didn't arrive and asks for verification by phone call.
Since the account owner is still unavailable and cannot pick up the call, the call goes to the number's voicemail. Knowing the target's phone number, the attacker then attempts to access their voicemail by keying in the last four digits of the user's mobile number, which is usually the default PIN code to access the user's voicemail.
The attacker then has the WhatsApp verification code, and can use it to access the victim's WhatsApp account. They can then set up their own 2FA (two-factor authentication) on it, leaving the actual owner locked out of their own account.
Once the account has been hijacked, the attacker could use it to hijack accounts of the user's contacts, spread malware, or hold the account hostage until the owner pays up to get it back.
How to protect your own WhatsApp account
This isn't a new tactic, and has been around for a while, but there are two pretty simple things you can do to avoid it happening to you.
1. Change the default PIN of your voicemail.
2. Enable two-step verification on your WhatsApp account:
• Open Settings.
• Tap Account > Two-step verification > Enable.
• Enter a six-digit PIN.
• Enter an email address, or tap Skip if you don’t want to. WhatsApp says it recommends adding an email address so you can reset two-step verification if you need to.
• Tap Next.
• Confirm the details and tap Save or Done.
Stay safe!

Have a Safe and Happy Veterans Day
11/11/2022

Have a Safe and Happy Veterans Day

10/12/2022

TikTok's "secret operation" tracks you even if you don't use it
Posted: October 4, 2022 by Malwarebytes Labs
Consumer Reports (CR), a US-based nonprofit consumer organization, has revealed that TikTok gathers data on people who don't even use the app itself.
If this sounds familiar, it's because it's happened before. Meta's near-omnipresence wherever you are online enabled it to gather data on users, even those who don't have Facebook accounts—thanks, in part, to the Facebook "Like" button, a piece of code embedded on most websites. According to this Facebook Help Centre page, if a logged-in user visits a website with this button, the browser sends user data to Facebook so it can load content to that website.
Something similar happens to users who are either logged out of Facebook or don't have an account. The only difference is that the browser sends a limited set of data. However you look at it, Facebook gets your data.
In TikTok's case, the company embeds a tracker called a "pixel." Pixel gathers user data from these websites to help companies target ads and measure how these work.
CR sought the aid of security firm Disconnect to scan for websites containing TikTok’s pixel, paying particular attention to sites that regularly deal with sensitive information, such as .gov, .org, and .edu sites. It turns out that pixels are already widespread.
"I think people are conditioned to think, 'Facebook is everywhere, and whatever, they're going to get my data.'," said Disconnect Chief Technology Officer (CTO) Patrick Jackson. "I don’t think people connect that with TikTok yet."
Among other data, TikTok collects the IP address; a unique number; the page a user is on; and what they're clicking, typing, or searching for. While the data is used for targeted ads and ad effectiveness, TikTok spokesperson Melanie Bosselait said the data "is not used to group individuals into particular interest categories for other advertisers to target." Data collected from non-TikTok users, however, are used in aggregated reports sent to advertisers.
CR also reported why websites use pixels (on top of other trackers). One school, Michigan State University, uses it to “help generate interest in applying to and enrolling courses at Michigan State”. Dan Olsen, the university spokesperson also said, “They help us target our advertising to relevant audiences. The most sensitive information this pixel captures is potential major interests of prospective students.”
Some sites like Mayo Clinic's public-facing pages and RAINN, a leading anti-sexual-violence organization, have removed pixels, citing their presence was an oversight. Other businesses CR questioned either declined to comment or never responded.
Jackson said that most companies are unaware TikTok and other big brands gather data this way. "The only reason this works is because it's a secret operation. Some people might not care, but people should have a choice. It shouldn't be happening in the shadows."
To prevent clandestine data collection, policymakers need to get involved. "Because of the way the web is structured, companies are able to watch what you do from site to site creating detailed dossiers about the most intimate parts of our lives," said Director of Technology Policy for CR Justin Brookman. "In the US, the tech industry largely gets to decide what is and isn’t appropriate, and they don’t have our best interests front of mind."
CP recommends three guidelines to follow for users to protect their personal information online:
• Use privacy-protected browser extensions, such as uBlock Origin.
• Take advantage of your browser’s privacy settings.
• Use a privacy-focused browser, such as Brave or Firefox.
When it comes to tracker presence online, Google and Meta still lead. But TikTok's advertising business is booming. And, with that, data collection is expected to grow, too.

Address

Nassau, NY
12123

Telephone

+15185339819

Website

Alerts

Be the first to know and let us send you an email when Certified Business Solutions USA posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Certified Business Solutions USA:

Shortcuts

Share

Category