We’re finally reaching the end of January and have the news to prove it. From slyly announced Google updates to a new, even more sophisticated malware attack for Windows users. Want the roundup? We’ve got all you need to know right here, digestible, easy to follow, and relevant to you and your business.
Google Chrome stops updates and support for older Macs
Nothing good lasts forever, and for many, Apple products are no exception. MacOS Monterey (version 12) was released in October 2021, but in 2025, Chrome support for it will end. Google quietly announced this news in a Chrome Platform Status update earlier this month.
Essentially, this means that when Google eventually releases Chrome 151, users on macOS 12 will not be able to install it and will be stuck on 150. You will still be able to use Chrome, just without new features and with an increased security risk. Right now, we are on Chrome 143, and while Chrome hasn’t explicitly provided a date, MacRumors estimate it will be sometime in mid-2026.
For those using Macs with older operating systems, it may soon be time to either upgrade or switch to other browsers that still support macOS 12, or else your security will become compromised.
Gmail spam filter issue affects 1.8B users
Noticed issues with your Gmail’s automatic filters and spam scanning your inbox over the weekend? You weren’t the only one. According to the Google Workplace Status Dashboard, users were experiencing misclassification of emails in their inbox, delays in receiving emails and additional spam warnings.
This issue has now been officially resolved as of Sunday morning, so your filters should be back to normal. However, they mention some warnings “may persist” for emails sent before the problem was resolved, and state they will provide an analysis once an internal investigation has taken place.
Hackers disable Windows security with new malware attack
Unlike traditional attacks that rely on exploits, a sophisticated new malware campaign has come under the spotlight, and it requires no security vulnerabilities to work. Unlike traditional attacks that often depend on complex exploits, this campaign’s success lies in its pure social engineering, combined with sophisticated abuse of Windows own security architecture.
With this attack, victims receive what seem to be routine accounting documents delivered via compressed archives – these files look exactly like standard business communications you might receive from a client or colleague.
However, they contain malicious shortcuts that mimic text files. When executed, the contents launch PowerShell with execution policy bypasses, downloading a first-stage loader from GitHub, and generating decoy documents to distract users.
Organisations are recommended to reassess their security strategies beyond antivirus solutions – meaning implementing stronger security awareness training and reminders that even legitimate-looking documents can contain malware that when clicked, cannot be protected by traditional security tools.
Remember, your employees are your front-line, and no matter how up-to-scratch your security is, all it takes is one employee clicking a dodgy link for it all to come crashing down.
Stay informed, stay ahead
Tune into Daffodil IT’s monthly news roundup to stay informed on the most relevant news to your business. Whether it’s current events or updates, stay informed here!
Want enhanced cybersecurity for your organisation? We can help. Schedule a chat over a coffee and see how we can strengthen your organisation’s security today.
