Whats up guys,
My name's Ryan. I've been an athlete my whole life and hardly ever have even gotten a cold or the flu. I eat super clean, hydrate adequately, sleep 7-8 hours a night, dont smoke or drink, etc.
I'm by no means a conspiracy theorist or an anti-vaxxer. I just want to share my experience with getting the vaccine and then being subsequently infected with the covid virus and the life altering impacts of it. Take what you want from it.
It was right after my second dose of the Pfizer vaccine that my whole life flipped upside down. The symptoms were almost sudden, I was weak, tired, my feet turned hot and red, my head was pounding 24/7, my heart felt like it was beating out of my chest and it was like I suddenly contracted social anxiety. Noises all seemed amplified 10x and I just wasn't feeling normal anymore. I ended up having to quit my job because I couldn't be on my feet for long periods of time anymore.
For context, I have always been a social butterfly. I get energy from organizing community and making new friends. I'm the first person to welcome a new person into a group or walk into a crowded room and befriend everyone. I was in college in south florida at the time and it was like my whole life flatlined and there were no resources to support me understand what was happening to my body. I ended up quitting my job, I dropped out of school and all the stress made my girlfriend and I break up.
I didn't know what to do anymore and was just ready to do anything to feel better again. I thought that perhaps getting out in nature for a while and into a cooler climate could help my symptoms. So I took a random job out west as an adventure coordinator but first I stopped in Breckenridge CO where I helped my buddy work on his new boutique hotel in exchange for a place to stay.
It was amazing how being in the high elevation and the cold weather alleviated my symptoms. I was finally able to work again. After being there for two months, I transitioned to a new job in SF where I was hoping to raise some money to purchase the company that way I could hire a manager to do a lot of the work and I could focus on organizing.
A month into working there after leading programs back to back, I noticed my symptoms came back with a vengance. Anytime I pushed my body and mind hard, these symptoms pushed back harder. I was also getting back in shape at the time because I was feeling good again and like i said guys, Ive always been an athlete, so when I get in the gym, I put in the work. Its so damn frustrating to not be able to move the way I know I can without the most insane post exertional fatigue.
The SF business deal fell through for various reasons and I was starting to struggle again with these unexplainable symptoms. I planned on returning to the east coast to regroup but was invited to LA to attend an Oscars party for Angel Bassett. I get there, have the time of my life and I catch Covid for the first time (that im aware of) and it just crushes me.
The acute illness was rough but it was the immediate after effects that were just baffling. My vision was becoming quite blurry and I couldnt stand up for longer than a minute without getting an insane head rush and my heart beating out my chest. I thought that maybe I was developing POTs. Shortly after I tested negative for Covid I was at a cafe working and I suddenly almost past out. I went to an urgent care and they put me on a steroid and gave me beta blockers (I didnt take them).
A few days into the steroid course and I felt like myself again but right as soon as I got off of them, I tanked. I could hardly walk anymore without feeling like I was going to lose consciousness. I had to catch a flight directly to Atlanta to be taken care of by my aunt whose a nurse.
One year later and here I am sitting in a cafe still struggling to get my life back. I writing to you all because I am tired of feeling like I'm screaming underwater. I'm 29, highly intelligent, highly skilled, have an amazing network, I love working, I love life and at this point I'm just feeling like a failure to launch. I was independent since 16 and have shamefully become financially dependent on my family again. I work for my money but I'm constantly reminded of how I am not living up to my full potential. The cognitive disonance is just destroying my mental health. I am dreaming of ripping up my birth certificate, my social security card and going to die alone in the remote wilderness and leave the world with a philosophical dissertation on how the modern world is failing its young people.
I desperately want to be reliably high functioning again and what I've always done to improve that is exercise but now that feels like a double edged sword these days. I have periods of amazing productivity followed by sudden crashes and the most insane symptoms which just make no sense to me. I need coffee just to get going but at the same time, I feel like it's overstimulating my nervous system.
I'm getting ready to do a cross country road trip from Atlanta to Banff and after I am considering trying to find some sort of peaceful job out in nature for the next year. I was recently offered 30% in my families real estate investing company and my body just cant handle anything high stress right now.
I've gotten my full blood panel done end of last year and I feel like I should go back and get new labs. Everything came back normal but my cholesterol was THROUGH the roof.
Total 292 HDL 50.1 LDL 230 Triglyceride 59.2
I had my heart monitored with a Zio patch and the cardiologist says my hearts normal - even though I've regularly experience heart palpitations/chest pain though not as frequently anymore.
One important fact I didnt mention is that I got Dengue fever in January 2020. I wonder if that has played a role in how my body reacted to covid and the vaccine?
What's your story? What have you done to make a comeback?
Thanks for reading!

I'm hiring 3 mercenaries on Thursday 16th (tomorrow) 7pm Eve Time, for at least 2 or 3 hours of fun. Ship: Rook or Buzzard #underTheRadar #caldariTreasureHunters. In English on Discord vocal. No multiboxing. Wanna do something different from usual? That's happening.
Rook: lots of actions on field. Buzzard: scanning, scouting, and leading the way (not a passive eye-scout). Which one is more your type: Rook? Buzzard? Any?
If ROOK, then Let's now check your skills. Must have : fly rook, excellent shields, including remote shields, HAM T2. Do you confirm? Can you data/relic T2?
If BUZZARD, then Do you have perfect scanning skills and experience in the field? Can you data T2? (I think I'll do this job myself unless someone insists)
Isk-reward will be determined by how you'll pull it off. Knowledge will sure be the big prize anyway.

Sorry, it's a long one, but I could really use your advice 😞. I'm not sure if I'm being paranoid due to my insecure attachment style and past relationship baggage, or if my gut feeling is onto something and I'm slowly losing it... My partner (46M) and I (40F) have been together for nearly a year, but so far, I've only met one of his friends and not a single family member on his side. He has met several of my friends. I have no contact with my family since almost 6 years, so he technically also never met someone of my family.
We met about a year and a half ago on a dating app geared towards casual dating. At that time, neither of us were looking for a serious relationship; we were just in it for some casual fun. On our first date, he mentioned he was still technically married but separated from his wife for about a year, and they shared a 13-year-old son. Since the separation, he's been staying with his parents, while his wife and son reside in the adjacent house. He never spoke ill of his wife, which is something I really appreciate.
He claimed it was love at first sight for him when he first met me, but I didn't feel the same way. I found him intriguing and attractive, but the idea of a relationship didn't appeal to me at that moment, mainly due to our lack of shared interests. He never pressured me and always respected my space, but he did actively pursue me. For every date we had, he brought food and flowers, even though we were just friends with benefits at that point. He also went above and beyond, helping me with various tasks like gardening, fixing my shower and car, all at his own expense. And even insisted on me not paying him back. He even picked me up in the wee hours of the morning when I was stranded in a bar with friends and couldn't find my way home, had medications delivered to my doorstep when we both had COVID-19 and couldn't meet, and these are just a few examples...
Our physical connection is fantastic, and he is very attentive to my needs. Surprisingly, from the beginning we also had dates without sex, despite that being our initial intention. Things quickly became emotionally and mentally intimate, and we started sharing more and more of ourselves. He treated me with more care and attention than anyone ever had, which initially set off alarm bells in my head, but his gestures continued, I just found myself enjoying his company immensely, both in and out of bed, feeling incredibly comfortable and happy with him. He always made me feel valued and appreciated, never failing to be loving and attentive. And to this day there has never been a single negative word or action from him towards me.
Around four months into our dating, he had to travel abroad for work for a week. During that time apart, I unexpectedly found myself missing him dearly, which came as a surprise because I wasn't looking for a serious relationship. One evening during that week, he insisted on hearing my voice, and we ended up talking on the phone all night. A few days later, I confessed to him that I missed him more than I expected and that everything felt strange, especially since I didn't even know his last name. In response, he admitted feeling the same way and expressed his desire to come over and properly introduce himself when he returned. True to his word, he showed up at my door late that night, despite his delayed flight.
However, what followed was a bombshell. As he sat on my couch, he handed me his ID, revealing not only his last name but also a different first name, birthdate, and birthplace. I was so stunned and literally nearly passed out. He had lied about his first name and was actually two years older than he claimed. Even details about his son, whom he claimed was 13, turned out to be false; the boy was actually 17. This revelation shook me to the core because I had never suspected he was lying to me. Being the child of an alcoholic, I prided myself on having keen intuition, but I had failed to detect his deceit. While I had actually suspected he was still married to his wife, his lies about his identity blindsided me. He apologized profusely that night, explaining that he didn't know how to come clean after lying for so long. But when I confronted him about his last name, he realized he couldn't keep up the facade any longer.
He confessed that he and his wife had indeed been living separate lives for a while, even agreeing to see other people. However, a woman he had met on the dating app years ago had stalked him, leading him to adopt a new identity to protect himself. He never intended to fall in love with someone and only sought casual arrangements. Although they broke up, he maintained proximity due to familial and business obligations, leading him to remain close to his family, and he committed to fulfilling his responsibilities towards them. His wife suffered from cancer a few years ago, which apparently returned at the beginning of this year.
The day after this revelation, he came to speak with me during his lunch break, begging for another chance. The following weekend, I met his best friend for the first time. Despite my shattered trust, I believed that he was sincere in his remorse and transparency, so we decided to it another shot and shortly after even committed to an official relationship. Things seemed to go well afterward; we even went on a vacation together, and he started spending more nights at my place. He continued to be incredibly supportive and attentive to my needs. However, he never made any efforts for me to meet his son, which I tried to understand given the sensitivity of the situation.
About three months later, I broached the subject of meeting his son again, but he claimed that he and his wife had agreed to wait until their son had settled into his first semester at university before introducing him to me. I had no children of my own so I have no experience with this, but friends of mine with adult children suggested that it was unusual to wait so long. Despite my doubts, I trusted his explanation, although I wondered if his family even knew about me. He told me that he was committed to his family until the end of the year and planned to move out thereafter. However, when the year ended, his mother caused a commotion when he moved out, leading to our first crisis over Christmas.
His parents insisted that he drive them to a city four hours away on Christmas Eve to celebrate with relatives, which disappointed me, but I understood. I assumed he would want to spend Christmas Eve with his son, so I suggested that we meet on Christmas Day instead to cook and spend a nice evening together. He informed me that his son didn't want to celebrate Christmas with the family anyway, so my suggestion was fine. Although we spent the evening before Christmas Eve together, our plans were disrupted when he insisted on going home instead of staying over as originally planned, leading to our first argument. He received a message from someone, read it, and his demeanor completely changed; he began to repeatedly look at the clock. When I asked, he said he needed to go home. I asked if I could read the message because I immediately had a bad gut feeling, but he declined and drove off. Despite feeling uneasy, I let it go until Christmas Day, when he arrived two hours late without prior notice. Also, I only rarely heard from him the entire Christmas Eve and most of Christmas Day, which is pretty unusual for him. This pattern continued after Christmas, with him becoming increasingly unreliable with his timing. After pressing him on the matter of meeting his son and family soon, he admitted that his family was resistant to the idea of accepting me due to their loyalty to his wife.
Our relationship hit another rough patch on Easter when he spent Easter Saturday with his son, arriving at my place much later than expected. Frustrated that I still hadn't met his son, I confronted him, leading to another argument and him storming off to his best friend's place without contacting me for the rest of the day. His lack of communication left me feeling hurt and confused, but we eventually reconciled after a few days. Even today, we're still crazy about each other and often behave like teenagers. But for some time now, I haven't been able to enjoy our meetings. I question everything he says and does, wondering, can I believe him? Can I trust him? He lied to me so skillfully at the beginning. Is what he says about his family even true? It feels like we're not making any progress. He insists it's exactly as he says. But over a year has passed, and it seems like nothing has changed. I just have to keep being patient and endure.
Actually, he never really settled into his own apartment. Everything is makeshift; there's no functional kitchen, no chairs... not even a mirror in the bathroom. Yet, we still occasionally sleep there. At first, it was amusing, but we’re both two old for this sh*t and the student apartment adventure ended for me after five months of stagnation. I really tried to make the best of it, and I'm actually really self-sufficient and easygoing. But it has become draining... He also sleeps at his family's place more often lately, and less frequently at my place...
What are your thoughts on this? Am I overreacting? Should I give him and his family more time? I'm feeling exhausted and grappling with my trust issues. Am I being paranoid, or is my gut feeling accurate? What steps should I take? Extend more patience? Show more understanding towards his son and family for their reluctance to get to know me? Consider giving him an ultimatum? I'm feeling lost.

We've got no direct sun on our plot, patches with 4 hour windows of sun in the morning and afternoon. Rocky/terraced soil in the back, a driveway and grassy front yard on a busy street. Any suggestions for fruit or veg to plant? I don't want to plant for eating in the front where the plants will absorb street pollution. In a little spot of sun in the back, I have seeded kale, salad greens, carrots, beets, onions, and used a bunch of herb starts & swiss chard starts since I was super late with the seed starts and just wanted some green & color immediately. Would love additional ideas for edibles or beauty for low sun.
Or what are other creative ways I could use the land? Previous owners let ivy & wisteria grow in, a gardener did a lot of work last year taking up the ivy, I got most of the wisteria out. Gardener last year said ironically vines do not help prevent erosion or something I didn't quite understand, I think she was a permaculture gardener my friend hired (but both friend/owner is out of town/not available & Idk who the gardener was to get back in touch). I believe the previous owners who were landscapers imported in a bunch of soil, created rock wall ledges, to create a garden/terraced soil over the natural, sloping granite bedrock. Trees from all sides of neighbors & buildings create inescapable shade - perhaps in decades past, before these invasive norway maples grew so big and low over our land, there was a lot of sun in the yard, but no longer. What are other things I could creatively do with this land? I love the layout for a peaceful garden & dream of walking throughout the terraced paths the previous owners created, and being able to harvest edibles & reading and meditating and exercising.

MS-ISAC CYBERSECURITY ADVISORY
MS-ISAC ADVISORY NUMBER: 2024-056
DATE(S) ISSUED: 05/14/2024
SUBJECT: Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
OVERVIEW: Multiple vulnerabilities have been discovered in Mozilla Products, the most severe of which could allow for arbitrary code execution.

• Mozilla Firefox is a web browser used to access the Internet.
• Mozilla Firefox ESR is a version of the web browser intended to be deployed in large organizations.
• Mozilla Thunderbird is an email client.

Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLIGENCE: There are no reports that these vulnerabilities are being exploited in the wild
SYSTEMS AFFECTED:

• Firefox ESR versions prior to 115.11
• Thunderbird versions prior to 115.11
• Firefox versions prior to 126

RISK: Government:

• Large and medium government entities: High
• Small government entities: High

Businesses:

• Large and medium business entities: High
• Small business entities: High

Home users: Low
TECHNICAL SUMMARY: Multiple vulnerabilities have been discovered in Mozilla Products, the most severe of which could allow for arbitrary code execution. Details of the most critical vulnerabilities are as follows:
Tactic: Initial Access (TA0001):
Technique: Drive-by Compromise (T1189):

• Multiple WebRTC threads could have claimed a newly connected audio input leading to use-after-free. (CVE-2024-4764)
• A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. (CVE-2024-4367)
• Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. This issue only affects Firefox for Android. Other versions of Firefox are unaffected. (CVE-2024-4765)
• Different techniques existed to obscure the fullscreen notification in Firefox for Android. These could have lead to potential user confusion and spoofing attacks. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. (CVE-2024-4766)
• If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox and Thunderbird. (CVE-2024-4767)
• A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. (CVE-2024-4768)
• When importing resources using Web Workers, error messages would distinguish the difference between application/javascript responses and non-script responses. This could have been abused to learn information cross-origin. (CVE-2024-4769)
• When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. (CVE-2024-4770)
• A memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have triggered a crash or potentially be leveraged to achieve code execution. (CVE-2024-4771)
• Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. (CVE-2024-4777)

Additional lower severity vulnerabilities include:

• An HTTP digest authentication nonce value was generated using rand() which could lead to predictable values. (CVE-2024-4772)
• When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. (CVE-2024-4773)
• The ShmemCharMapHashEntry() code was susceptible to potentially undefined behavior by bypassing the move semantics for one of its data members. (CVE-2024-4774)
• An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. (CVE-2024-4775)
• A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. (CVE-2024-4776)
• Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. (CVE-2024-4778)

Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
RECOMMENDATIONS:
We recommend the following actions be taken:

• Apply the stable channel update provided by Mozilla to vulnerable systems immediately after appropriate testing. (M1051: Update Software)
  • Safeguard 7.1 : Establish and Maintain a Vulnerability Management Process: Establish and maintain a documented vulnerability management process for enterprise assets. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 7.4: Perform Automated Application Patch Management: Perform application updates on enterprise assets through automated patch management on a monthly, or more frequent, basis.
  • Safeguard 7.5 : Perform Automated Vulnerability Scans of Internal Enterprise Assets: Perform automated vulnerability scans of internal enterprise assets on a quarterly, or more frequent, basis. Conduct both authenticated and unauthenticated scans, using a SCAP-compliant vulnerability scanning tool.
• Apply the Principle of Least Privilege to all systems and services. Run all software as a non-privileged user (one without administrative privileges) to diminish the effects of a successful attack. (M1026: Privileged Account Management)
  • Safeguard 4.7: Manage Default Accounts on Enterprise Assets and Software: Manage default accounts on enterprise assets and software, such as root, administrator, and other pre-configured vendor accounts. Example implementations can include: disabling default accounts or making them unusable.
  • Safeguard 5.4: Restrict Administrator Privileges to Dedicated Administrator Accounts: Restrict administrator privileges to dedicated administrator accounts on enterprise assets. Conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user’s primary, non-privileged account.
• Use capabilities to detect and block conditions that may lead to or be indicative of a software exploit occurring. (M1050: Exploit Protection)
  • Safeguard 10.5: Enable Anti-Exploitation Features: Enable anti-exploitation features on enterprise assets and software, where possible, such as Microsoft® Data Execution Prevention (DEP), Windows® Defender Exploit Guard (WDEG), or Apple® System Integrity Protection (SIP) and Gatekeeper™.
• Restrict use of certain websites, block downloads/attachments, block JavaScript, restrict browser extensions, etc. (M1021: Restrict Web-Based Content)
  • Safeguard 9.2: Use DNS Filtering Services: Use DNS filtering services on all enterprise assets to block access to known malicious domains.
  • Safeguard 9.3: Maintain and Enforce Network-Based URL Filters: Enforce and update network-based URL filters to limit an enterprise asset from connecting to potentially malicious or unapproved websites. Example implementations include category-based filtering, reputation-based filtering, or through the use of block lists. Enforce filters for all enterprise assets.
  • Safeguard 9.6: Block Unnecessary File Types: Block unnecessary file types attempting to enter the enterprise’s email gateway.
• Block execution of code on a system through application control, and/or script blocking. (M1038: Execution Prevention)
  • Safeguard 2.5 : Allowlist Authorized Software: Use technical controls, such as application allowlisting, to ensure that only authorized software can execute or be accessed. Reassess bi-annually, or more frequently.
  • Safeguard 2.6 : Allowlist Authorized Libraries: Use technical controls to ensure that only authorized software libraries, such as specific .dll, .ocx, .so, etc., files, are allowed to load into a system process. Block unauthorized libraries from loading into a system process. Reassess bi-annually, or more frequently.
  • Safeguard 2.7 : Allowlist Authorized Scripts: Use technical controls, such as digital signatures and version control, to ensure that only authorized scripts, such as specific .ps1, .py, etc., files, are allowed to execute. Block unauthorized scripts from executing. Reassess bi-annually, or more frequently.
• Use capabilities to prevent suspicious behavior patterns from occurring on endpoint systems. This could include suspicious process, file, API call, etc. behavior. (M1040: Behavior Prevention on Endpoint)
  • Safeguard 13.2 : Deploy a Host-Based Intrusion Detection Solution: Deploy a host-based intrusion detection solution on enterprise assets, where appropriate and/or supported.
  • Safeguard 13.7 : Deploy a Host-Based Intrusion Prevention Solution: Deploy a host-based intrusion prevention solution on enterprise assets, where appropriate and/or supported. Example implementations include use of an Endpoint Detection and Response (EDR) client or host-based IPS agent.
• Inform and educate users regarding the threats posed by hypertext links contained in emails or attachments especially from un-trusted sources. Remind users not to visit un-trusted websites or follow links provided by unknown or un-trusted sources. (M1017: User Training)
  • Safeguard 14.1: Establish and Maintain a Security Awareness Program: Establish and maintain a security awareness program. The purpose of a security awareness program is to educate the enterprise’s workforce on how to interact with enterprise assets and data in a secure manner. Conduct training at hire and, at a minimum, annually. Review and update content annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 14.2: Train Workforce Members to Recognize Social Engineering Attacks: Train workforce members to recognize social engineering attacks, such as phishing, pre-texting, and tailgating.

REFERENCES:

Mozilla: https://www.mozilla.org/en-US/security/advisories/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-21/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-22/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-23/

CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4367 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4764 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4765 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4766 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4767 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4768 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4769 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4770 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4771 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4772 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4773 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4774 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4775 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4776 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4777 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4778

MS-ISAC CYBERSECURITY ADVISORY
MS-ISAC ADVISORY NUMBER: 2024-055
DATE(S) ISSUED: 05/14/2024
SUBJECT: Multiple Vulnerabilities in Siemens Ruggedcom Crossbow Could Allow for Arbitrary Code Execution
OVERVIEW: Multiple vulnerabilities have been discovered in Siemens Ruggedcom Crossbow, the most severe of which could allow for arbitrary code execution. Siemens Ruggedcom Crossbow Access Management solution designed to provide cybersecurity compliance for industrial control systems. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged-on user. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLEGENCE: There are no reports of these vulnerabilities being exploited in the wild.
SYSTEMS AFFECTED:

• Ruggedcom Crossbow prior to Version 5.5

RISK: Government:

• Large and medium government entities: High
• Small government entities: Medium

Businesses:

• Large and medium business entities: High
• Small business entities: Medium

Home users: Low
TECHNICAL SUMMARY: Multiple Vulnerabilities have been discovered in Siemens Ruggedcom Crossbow, the most severe of which could allow for arbitrary code execution. Details of these vulnerabilities are as follows:
Tactic: Initial Access (TA0001):

• The affected systems allow the upload of arbitrary files of any unauthenticated user. An attacker could leverage this vulnerability and achieve arbitrary code execution with system privileges.(CVE-2024-27939)
• The affected systems allow any authenticated user to send arbitrary SQL commands to the SQL server. An attacker could use this vulnerability to compromise the whole database.(CVE-2024-27940)
• The affected client systems do not properly sanitize input data before sending it to the SQL server. An attacker could use this vulnerability to compromise the whole database.(CVE-2024-27941)
• The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of service situation. (CVE-2024-27942)
• The affected systems allow a privileged user to upload generic files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution. (CVE-2024-27943)
• The affected systems allow a privileged user to upload firmware files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution. (CVE-2024-27944)
• The bulk import feature of the affected systems allow a privileged user to upload files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution. (CVE-2024-27945)
• Downloading files overwrites files with the same name in the installation directory of the affected systems. The filename for the target file can be specified, thus arbitrary files can be overwritten by an attacker with the required privileges. (CVE-2024-27946)
• The affected systems could allow log messages to be forwarded to a specific client under certain circumstances. An attacker could leverage this vulnerability to forward log messages to a specific compromised client.(CVE-2024-27947)

Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
RECOMMENDATIONS: We recommend the following actions be taken:

• Apply appropriate updates provided by Siemens to vulnerable systems immediately after appropriate testing. (M1051: Update Software)
  • Safeguard 7.1: Establish and Maintain a Vulnerability Management Process: Establish and maintain a documented vulnerability management process for enterprise assets. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 7.4: Perform Automated Application Patch Management: Perform application updates on enterprise assets through automated patch management on a monthly, or more frequent, basis.
  • Safeguard 7.7: Remediate Detected Vulnerabilities: Remediate detected vulnerabilities in software through processes and tooling on a monthly, or more frequent, basis, based on the remediation process.
  • Safeguard 9.1: Ensure Use of Only Fully Supported Browsers and Email Clients: Ensure only fully supported browsers and email clients are allowed to execute in the enterprise, only using the latest version of browsers and email clients provided through the vendor.
• Apply the Principle of Least Privilege to all systems and services. Run all software as a non-privileged user (one without administrative privileges) to diminish the effects of a successful attack. (M1026: Privileged Account Management)
  • Safeguard 4.7: Manage Default Accounts on Enterprise Assets and Software: Manage default accounts on enterprise assets and software, such as root, administrator, and other pre-configured vendor accounts. Example implementations can include: disabling default accounts or making them unusable.
  • Safeguard 5.4: Restrict Administrator Privileges to Dedicated Administrator Accounts: Restrict administrator privileges to dedicated administrator accounts on enterprise assets. Conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user’s primary, non-privileged account.​​​​​​
• Restrict execution of code to a virtual environment on or in transit to an endpoint system. (M1048: Application Isolation and Sandboxing)
• Use capabilities to detect and block conditions that may lead to or be indicative of a software exploit occurring. (M1050: Exploit Protection)
  • Safeguard 10.5: Enable Anti-Exploitation Features: Enable anti-exploitation features on enterprise assets and software, where possible, such as Microsoft® Data Execution Prevention (DEP), Windows® Defender Exploit Guard (WDEG), or Apple® System Integrity Protection (SIP) and Gatekeeper™.
• Restrict use of certain websites, block downloads/attachments, block Javascript, restrict browser extensions, etc. (M1021: Restrict Web-Based Content)
  • Safeguard 9.2: Use DNS Filtering Services: Use DNS filtering services on all enterprise assets to block access to known malicious domains.
  • Safeguard 9.3: Maintain and Enforce Network-Based URL Filters: Enforce and update network-based URL filters to limit an enterprise asset from connecting to potentially malicious or unapproved websites. Example implementations include category-based filtering, reputation-based filtering, or through the use of block lists. Enforce filters for all enterprise assets.
  • Safeguard 9.6: Block Unnecessary File Types: Block unnecessary file types attempting to enter the enterprise’s email gateway.
• Inform and educate users regarding the threats posed by hypertext links contained in emails or attachments especially from un-trusted sources. Remind users not to visit un-trusted websites or follow links provided by unknown or un-trusted sources. (M1017: User Training)
  • Safeguard 14.1: Establish and Maintain a Security Awareness Program: Establish and maintain a security awareness program. The purpose of a security awareness program is to educate the enterprise’s workforce on how to interact with enterprise assets and data in a secure manner. Conduct training at hire and, at a minimum, annually. Review and update content annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 14.2: Train Workforce Members to Recognize Social Engineering Attacks: Train workforce members to recognize social engineering attacks, such as phishing, pre-texting, and tailgating.

REFERENCES:

This is the worst year in sixteen years that we have experienced with these insane birds. A huge northern flicker has gone nuts and has drilled another fist sized hole in the west side of my stucco, less than 24 hours after a stucco repair business patched a dozen holes that this pest has caused.
I've tried putting out an owl in previous years with no success. My neighbor just put up a birdhouse on our behalf to try and give the flicker an alternative nest, no signs it's going to take the bait. I'm seriously considering hiring someone to staple metal mesh along the west side of my house, cosmetics be damned. Does anyone have any (legal) other options for managing this?!??

Sadly, the The University of Queensland has released the following communication:
"The School of Social Science is proposing to phase out the Master of Museum Studies and Graduate Certificate in Museum Studies from 2025. We anticipate that Semester 2 2024 will be the final intake for these programs at UQ".
The rationale behind this is that the program is not financially viable, which highlights a frustrating trend in our society to value the bottom line over education and cultural richness. I believe, and I stand with many industry peers and UQ students in saying this; that prioritising financial incentive over quality programs will damage UQ's reputation, and affect our cultural industry.
If this is to go ahead, GLAM sector institutions will face an employment crisis, with incoming staff being either trained in an online setting from an open university-- affecting their industry experience and educational opportunities-- or face having to hire from graduates inter-state; this particularly poses issue as the GLAM sector staffing pool in QLD is already small, and phasing out the postgraduate Museum Studies Program at UQ will drastically affect the industry in years to come.
I love being a curator, and I appreciate the quality of education I have had in the Masters of Museum Studies program, particularly under the incredible tutelage of Eve Haddow Dr Caroline Wilson-Barnao and Diana J. B. Young.
I urge fellow students interested in pursuing Museum Studies or currently within the program to join with me in writing to Professor Heather Zwicker (HASS Executive Dean) and Professor Deborah Terry (Vice Chancellor of UQ), and Rebecca Lush (Galleries and Museums QLD) to have your say about the proposed decision.
If you would like to hear what students at UQ are also saying, please see the following link: https://www.reddit.com/UQreddit/s/CA3tK89qF2
Heather Zwicker execdean@hass.uq.edu.au Deborah Terry vc@uq.edu.au Rebecca Lush r.lush@uq.edu.au

She is getting nerfed for years over and over nonstop, and only buff she got(which was just base stat arrangement really) was not really something important
here is the eve patch history: https://leagueoflegends.fandom.com/wiki/Evelynn/LoL/Patch_history
and nerfs has been VERY significant, nothing minor or anything
All the item/jungle changes also didnt help her. Now new season will bring lot of exciting stuff for other junglers with all the new items and whatnot, eve still left out
she is barely B tier, in early game every single jungler in the game can just beat her and bully her. she is barely a threat before 6, and even then she is heavily dependant on her ult to be useful.
there is no reason to pick her when there are many other much better junglers who can do any job better than eve. the only way she remains relevant is only if she gets fed early, but also everyone and their mom is better when they are fed early anyway so its not even an exclusive eve advantage.
i understand some people may really dislike playing against her, but now league is in such a state that there are dozens of other way more toxic champs than eve that are way worse when it comes to `not fun to play against` category.
at best scenario, she can barely one shot a carry after 2 items and it is not easy to pull it off too. people are not as bad as before and they know very well how to play against her. Like, she can only do her job under perfect conditions, which is very demanding meanwhile any other jungler with 2+ items can do their job easier without any condition.
Please show eve some love
​

I use to work for McDonald's, got fired a month or two ago. I had a habit of coming in 5-10 minutes late because I lived downtown, I had lived near but moved. I didn't want to quit because I cared about who I worked with which was my 2 nightshift mangers, and a co-employee, and he bullied the f*ck out the co-worker and kinda one of the managers. But before I was fired half, if not most, employees hated the GM.
When he transferred to the location I worked he fired LOT of workers. A few understandable but others were just dumb. He fired and banned two workers that were taking food, understandable. But he fired one for eating a fry out the fry station. Everyone at the location even the managers and cooks, but for some reason he was the only one who got fired without any other reason or, to my knowledge, warnings.
The GM is so rude he told the MANGER, "You should work on your appearance." The manager was fully dressed to code and requirement. meaning he was most likely talking about her face or weight, it clearly wasn't here hair since she never changed it back to stopped coloring her hair.
With the people who worked there that he bullied daily. My co-worker, he noticed when he first came, that she constantly came to work 30 minutes late or not come in but would also stay 1 hour+ late to help and make up for her lost time. He said he was being "fair" and told her he wouldn't fire her if she doesn't miss a day again. FOR 7 WHOLE MONTHS on the schedule HE PUT for her. Keep in mind he NEVER works graveyard, but those who did work Graveyard didn't care or mind. Every week he constantly barraged her with threats to fire her. Motherf*cker even called her one dad and YELLED at her over the phone. It was at the point where she was afraid of him because like most people these days, she has anxiety. One night she worked perfectly, everyone got there food and drinks, and restocked half the whole store, but when he suddenly came in super early, her hands were shaking with fear and she handed out two wrong orders. He would just flat out change her schedule without her permission or knowledge without warning or heads-up.
With the manger he bullied, because we were short-staffed and graveyard just so happen to constantly get the slow and lazy workers. Our time was on average high, 200-700. He told her that she was just bad at her job. He never let her change her schedule even if he changed it on her, even though she had to take her kid(s) to the doctors. He never messed with any other employee or manager schedule without permission.
Me, well we had a lazy employee. So me caring about who I worked with, was asked every time to come in on my day off. Only having 1 day off despite working for a disability company as my main job. And I was the only night shift worker that volunteered to come in 2 hours early to help on X-mas eve and day. I was so incredible, the mangers that day can vouch for me, that I cleared all 3 screens within the 1st hour of working there. My manager during night shift saw our time at 600, left to do something for 10 or 15 minutes. Came back and saw my and the bullied co-worker, me bagging and running food while other was at window handing orders and drinks out, got time down to around 100 or less. One day the lazy employee who actually speaks Spanish got put to a speaker since one cook didn't call in. I ask the employee, if she wanted to switch spots. She said she was told by the night manager to be there and I told her that I know and asked if she wanted to switch to kitchen since the kitchen spoke Spanish only. after telling her she called the GM and told him I was HARASSING her, career ruining accusation. GM calls the manager and asked if I did. She told him I didn't and all he did was tell the manager to send her home. Never came to ask me what happened or anything.
A LOT MORE things happen, but I'll skip to the end. I clocked out, came on time that day, and while on a game on my phone which I'm being timed on. The night manager called me into the OFFICE as I'm waiting for my ride and playing game. As she speaks I'm playing the game and she ask if I'm listening, I say yes but she doesn't believe me so asked what she said. I repeat word for word what she said, and we continued as I'm responding. GM doesn't like it so he tells me to get off my phone, I tell him I can't since I use money on the battle pass so I'm not letting it go to waste. He tells me to put it away and I say no because I'm off the clock and he can't tell me to do so. So he gets angry and makes me sign the termination paper work or whatever he had me sign. But because I put the wrong I put the wrong date and asked the manager for the company number, he tells me it. And I guess he felt like being an a*s he said as I WALKED AWAY, "Make sure you spell my name right." I have dyslexia and anxiety. He felt the need to make the comment so that he can have the last word.
The mangers quit because one reason, the GM. He fired anyone who he didn't like or spoke back to him. And yes I have screen shots, and screen records on my phone of all this evidence and even the lazy worker would say I harassed her so, I can show all evidence. The GM mad ethe place SOO toxic and full of hate and fear. Last thing, he constantly took pictures of the cameras to tell the manager to tell us get off our phones (we went on our phone when we had no customers and nothing else to restocked or clean. However not one of the back window which is where the lazy worker was always on her phone and letting cars pass her window because she had attitude and such. But the kitchen, eventually got to the point where they didn't even care enough to even wear gloves. I was hired to be a Overnight Crew Member, but I had to and could counting inventory, had a thumb print to do refunds, promos and do other stuff, but I promised to only do it for codes and promos when it was busy. I kept that promise till I left. But I ALSO working lobby cashier, and KITCHEN. When I went to kitchen. I listen to my music, but when using my pinky, WITH GLOVES ON, my manger told me to not do that. I even turned off my music when morning staff arrived.
Short story: I worked 6 out of 7 days, as a part-time worker with the ability to do managers and kitchen jobs. But because I live 15 minute drive away, and came in 5-10 minutes late. But on my time off while tired from the work day since we had the lazy worker, as well as from the 6th day, I wanted to relax. But the GM had his feelings hurt, I got fired. Should I report? and How?

I am running the (admittedly outdated) Heartland mod set for Oblivion. After making sure the pack, my addons, and built bash patch all work right on PC (sorted with BOSS), then after installing MO2 on Steam Deck, (Proton 9.0.1 as recommended) I copied over my 'Mods' folder and the load order / modlist .txts into a profile from the computer to the Steam Deck. But, I get a CTD on Steam Deck, during the very initial load, well before the main menu.
I am 100% sure it's the Bashed Patch. The game launches and loads if it's not enabled. What's more, I loaded up a blank profile that's just the official plugins / DLC, added the Bashed Patch, and that immediately crashes too in the same fashion. It's the same bashed patch as desktop - I get the 'Bashed Patch' folder from MO2/Heartland/mods and put it in the respective location on my Deck. Is there something I'm missing?
When I try to rebuild the patch in Wrye on desktop, the following are tagged 'NoMerge':
LoadingScreensSI
Book Jackets DLC
GrimbotsSpeelTomes
EVE-StockEquipmentReplacer
Knights - Book Jackets
EVE_KnightsoftheNine
PotionReplacer
No Starting Map Markers
The following come up in the Merge Patches menu:
Oblivion Citadel Door Fix
LoadingScreens
Book Jackets Oblivion
DLCSpellTomes Unofficial Patch
Weapon Improvement Project
Alluring Wine Bottles
DLCFrostcrag-SnowyRoad Patch
Harvest [Flora] Shivering Isles (and Vile Lair and Frostcrag as separate ESPs)
Clutter and Container Ownership
Enemy Weapons dont drop
more mechant money v1.1
ShinySeptims_Septimus
Enhanced Vegetation SI
OCO DLC Faces
No Persistant Enchantment Glow Fix
Book Jackets DLC Misc
SGP Interior Draw Distance Fix
DistinctAyleidBossChests
GreyPrince
WaterFPS
Balanced NPC Level Cap
Balanced NPC Level Cap - DLC Patches
KvGuardFeaturesDevastationReduxPatch
OCO_Eyes_Fix
OCO Cleaned - Vanilla Hair
NAO-Brighter-Nights-Sam
tbskGuardsFeatures-NoGreatHelmets
Here is my loadorder.txt and my modlist.txt (which seems to be in reverse order from how it appears in MO2, but I doubt that's the problem), although, again, this happens with the Bashed Patch on an otherwise clean profile, so that's why I included the merged stuff above and I'm still baffled why this just happens on deck, just to the Bashed Patch, but PC is fine with all the same files.

So I'm now stuck at the eve story where it says try walking around all cause I went into the bed room. Now I can't proceed any further. Is there gonna be a patch to fix this?

MS-ISAC CYBERSECURITY ADVISORY
MS-ISAC ADVISORY NUMBER: 2024-053
DATE(S) ISSUED: 05/14/2024
SUBJECT: Critical Patches Issued for Microsoft Products, May 14, 2024
OVERVIEW: Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLIGENCE: Microsoft is aware of CVE-2024-30040 and CVE-2024-30051 being exploited in the wild, as well as functional exploit code being available for CVE-2024-30050.
SYSTEMS AFFECTED:

• .NET and Visual Studio
• Azure Migrate
• Microsoft Bing
• Microsoft Brokering File System
• Microsoft Dynamics 365 Customer Insights
• Microsoft Edge (Chromium-based)
• Microsoft Intune
• Microsoft Office Excel
• Microsoft Office SharePoint
• Microsoft WDAC OLE DB provider for SQL
• Microsoft Windows SCSI Class System File
• Microsoft Windows Search Component
• Power BI
• Visual Studio
• Windows Cloud Files Mini Filter Driver
• Windows CNG Key Isolation Service
• Windows Common Log File System Driver
• Windows Cryptographic Services
• Windows Deployment Services
• Windows DHCP Server
• Windows DWM Core Library
• Windows Hyper-V
• Windows Kernel
• Windows Mark of the Web (MOTW)
• Windows Mobile Broadband
• Windows MSHTML Platform
• Windows NTFS
• Windows Remote Access Connection Manager
• Windows Routing and Remote Access Service (RRAS)
• Windows Task Scheduler
• Windows Win32K - GRFX
• Windows Win32K - ICOMP
• .NET and Visual Studio
• Azure Migrate
• Microsoft Bing
• Microsoft Brokering File System

RISK: Government:

• Large and medium government entities: High
• Small government entities: Medium

Businesses:

• Large and medium business entities: High
• Small business entities: Medium

Home users: Low
TECHNICAL SUMMARY:
Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution.
A full list of all vulnerabilities can be found at the link below:
~https://learn.cisecurity.org/e/799323/ate-guide-releaseNote-2024-May/4tnfnq/2147784747/h/sfkh77CiXNiMcKvLpP2ZecVdYu-zA4BB7DKUmzXfROk~
Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
RECOMMENDATIONS: We recommend the following actions be taken:

• Apply appropriate patches or appropriate mitigations provided by Microsoft to vulnerable systems immediately after appropriate testing. (~M1051~: Update Software)
  • Safeguard 7.1: Establish and Maintain a Vulnerability Management Process: Establish and maintain a documented vulnerability management process for enterprise assets. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 7.4: Perform Automated Application Patch Management: Perform application updates on enterprise assets through automated patch management on a monthly, or more frequent, basis.
• Apply the Principle of Least Privilege to all systems and services, and run all software as a non-privileged user (one without administrative rights) to diminish the effects of a successful attack. (~M1026~: Privileged Account Management)
  • Safeguard 4.7: Manage Default Accounts on Enterprise Assets and Software: Manage default accounts on enterprise assets and software, such as root, administrator, and other pre-configured vendor accounts. Example implementations can include: disabling default accounts or making them unusable.
  • Safeguard 5.4: Restrict Administrator Privileges to Dedicated Administrator Accounts: Restrict administrator privileges to dedicated administrator accounts on enterprise assets. Conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user’s primary, non-privileged account.
• Remind all users not to visit untrusted websites or follow links/open files provided by unknown or untrusted sources. (~M1017~: User Training)
  • Safeguard 14.1: Establish and Maintain a Security Awareness Program: Establish and maintain a security awareness program. The purpose of a security awareness program is to educate the enterprise’s workforce on how to interact with enterprise assets and data in a secure manner. Conduct training at hire and, at a minimum, annually. Review and update content annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 14.2: Train Workforce Members to Recognize Social Engineering Attacks: Train workforce members to recognize social engineering attacks, such as phishing, pre-texting, and tailgating.
• Use capabilities to prevent suspicious behavior patterns from occurring on endpoint systems. This could include suspicious process, file, API call, etc. behavior. (~M1040~ : Behavior Prevention on Endpoint)
  • Safeguard 13.2 : Deploy a Host-Based Intrusion Detection Solution: Deploy a host-based intrusion detection solution on enterprise assets, where appropriate and/or supported.
  • Safeguard 13.7 : Deploy a Host-Based Intrusion Prevention Solution: Deploy a host-based intrusion prevention solution on enterprise assets, where appropriate and/or supported. Example implementations include use of an Endpoint Detection and Response (EDR) client or host-based IPS agent.

REFERENCES:

Microsoft: https://msrc.microsoft.com/update-guide/ https://msrc.microsoft.com/update-guide/releaseNote/2024-MayMS-ISAC CYBERSECURITY ADVISORY

MS-ISAC ADVISORY NUMBER: 2024-053
DATE(S) ISSUED: 05/14/2024
SUBJECT: Critical Patches Issued for Microsoft Products, May 14, 2024
OVERVIEW: Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLIGENCE: Microsoft is aware of CVE-2024-30040 and CVE-2024-30051 being exploited in the wild, as well as functional exploit code being available for CVE-2024-30050.

MS-ISAC CYBERSECURITY ADVISORY
MS-ISAC ADVISORY NUMBER: 2024-052
DATE(S) ISSUED: 05/14/2024
SUBJECT: A Vulnerability in Google Chrome Could Allow for Arbitrary Code Execution
OVERVIEW: A vulnerability has been discovered in Google Chrome, which could allow for arbitrary code execution. Successful exploitation of this vulnerability could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLIGENCE: There are reports of this vulnerability being exploited in the wild.
SYSTEMS AFFECTED:

• Chrome versions prior to 124.0.6367.207/.208 for Windows and Mac
• Chrome versions prior to 124.0.6367.207 for Linux

RISK: Government:

• Large and medium government entities: High
• Small government entities: Medium

Businesses:

• Large and medium business entities: High
• Small business entities: Medium

Home users: Low
TECHNICAL SUMMARY: A vulnerability has been discovered in Google Chrome, which could allow for arbitrary code execution. Details of this vulnerability are as follows:
Tactic: Initial Access (TA0001):
Technique: Drive-By Compromise (T1189):

• Out of bounds write in V8. (CVE-2024-4761)

Successful exploitation of this vulnerability could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
RECOMMENDATIONS: We recommend the following actions be taken:

• Apply appropriate updates provided by Google to vulnerable systems immediately after appropriate testing. (M1051: Update Software)
  • Safeguard 7.1: Establish and Maintain a Vulnerability Management Process: Establish and maintain a documented vulnerability management process for enterprise assets. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 7.4: Perform Automated Application Patch Management: Perform application updates on enterprise assets through automated patch management on a monthly, or more frequent, basis.
  • Safeguard 7.7: Remediate Detected Vulnerabilities: Remediate detected vulnerabilities in software through processes and tooling on a monthly, or more frequent, basis, based on the remediation process.
  • Safeguard 9.1: Ensure Use of Only Fully Supported Browsers and Email Clients: Ensure only fully supported browsers and email clients are allowed to execute in the enterprise, only using the latest version of browsers and email clients provided through the vendor.
• Apply the Principle of Least Privilege to all systems and services. Run all software as a non-privileged user (one without administrative privileges) to diminish the effects of a successful attack. (M1026: Privileged Account Management)
  • Safeguard 4.7: Manage Default Accounts on Enterprise Assets and Software: Manage default accounts on enterprise assets and software, such as root, administrator, and other pre-configured vendor accounts. Example implementations can include: disabling default accounts or making them unusable.
  • Safeguard 5.4: Restrict Administrator Privileges to Dedicated Administrator Accounts: Restrict administrator privileges to dedicated administrator accounts on enterprise assets. Conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user’s primary, non-privileged account.
• Restrict execution of code to a virtual environment on or in transit to an endpoint system. (M1048: Application Isolation and Sandboxing)
• Use capabilities to detect and block conditions that may lead to or be indicative of a software exploit occurring. (M1050: Exploit Protection)
  • Safeguard 10.5: Enable Anti-Exploitation Features: Enable anti-exploitation features on enterprise assets and software, where possible, such as Microsoft® Data Execution Prevention (DEP), Windows® Defender Exploit Guard (WDEG), or Apple® System Integrity Protection (SIP) and Gatekeeper™.
• Restrict use of certain websites, block downloads/attachments, block Javascript, restrict browser extensions, etc. (M1021: Restrict Web-Based Content)
  • Safeguard 9.2: Use DNS Filtering Services: Use DNS filtering services on all enterprise assets to block access to known malicious domains.
  • Safeguard 9.3: Maintain and Enforce Network-Based URL Filters: Enforce and update network-based URL filters to limit an enterprise asset from connecting to potentially malicious or unapproved websites. Example implementations include category-based filtering, reputation-based filtering, or through the use of block lists. Enforce filters for all enterprise assets.
  • Safeguard 9.6: Block Unnecessary File Types: Block unnecessary file types attempting to enter the enterprise’s email gateway.
• Inform and educate users regarding the threats posed by hypertext links contained in emails or attachments especially from un-trusted sources. Remind users not to visit un-trusted websites or follow links provided by unknown or un-trusted sources. (M1017: User Training)
  • Safeguard 14.1: Establish and Maintain a Security Awareness Program: Establish and maintain a security awareness program. The purpose of a security awareness program is to educate the enterprise’s workforce on how to interact with enterprise assets and data in a secure manner. Conduct training at hire and, at a minimum, annually. Review and update content annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 14.2: Train Workforce Members to Recognize Social Engineering Attacks: Train workforce members to recognize social engineering attacks, such as phishing, pre-texting, and tailgating.

REFERENCES:

Google: https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html

CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4761MS-ISAC CYBERSECURITY ADVISORY
MS-ISAC ADVISORY NUMBER: 2024-052
DATE(S) ISSUED: 05/14/2024
SUBJECT: A Vulnerability in Google Chrome Could Allow for Arbitrary Code Execution
OVERVIEW: A vulnerability has been discovered in Google Chrome, which could allow for arbitrary code execution. Successful exploitation of this vulnerability could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLIGENCE: There are reports of this vulnerability being exploited in the wild.

I’m beyond frustrated with some of my Gen-Z coworkers who are fresh out of law school. They seem to think that the legal profession stops at 5 PM and don’t grasp the level of responsibility required.
Case in point: I recently assigned an associate to draft a motion for summary judgment. Instead, she handed me a complaint. The complaint had already been filed, and she decided to draft another one. I mean, how does one think the action is initiated? This shows me that she didn’t review the docket, didn’t check the calendar, and didn’t read my email with the assignment fully.
Now, with the deadline in two days, she refuses to work after hours to fix her error, citing the need to set clear boundaries. The lack of communication is astonishing—she was asking her clueless desk neighbor for advice instead of coming to me, the person who assigned the task and is familiar with the case.
And to top it off, she had the audacity to ask for a template on how to draft a motion for summary judgment in response? She has access to all of our files. She has access to other cases. She has access to Lexis. I now need to STOP what I’m doing and make sure you get something that you can copy and paste from? Law schools need to do better. Honestly, close the doors because I learned something completely different. These grads need to understand the realities of the profession they chose.
I'm five years out of law school, finally with the authority to make assignments. I strive to be a supportive manager and mentor, but there's only so much one can take. I've always burned the midnight oil to meet deadlines, while she’s had this assignment for 2.5 weeks with barely any interruptions. It's mind-boggling that she turned in a complaint instead of a fully drafted motion. This isn’t an isolated incident with our new associates—they seem to lack a basic sense of urgency and responsibility. Most of them are pending admission and expect me to catch every error before submission, but ultimately, my name is on the filing. Now, I brace myself to receive a subpar product on the eve of the deadline and will have to use every waking hour to salvage it. Despite being relatively young in the profession, I would never treat someone who entrusted me with an assignment this way.
Has anyone else been dealing with this? How do you handle such situations? I want to ensure we're fostering growth and responsibility, but this kind of behavior is unacceptable.
EDIT: Contemplating deleting this because I didn’t realize it would spark such a fight.
The associate is getting me another draft by 5 PM to take over for the next day. In reality, I’m still learning. I’m still working and I have spent the past five years drinking from a fire hydrant with little to no help. I’ve never managed others before but look at them for assistance to take things off my plate.
It gets frustrating to have this idea of a profession versus a job engraved in me and to see others forget it. I work so late and have no personal life. Admittedly, I wrote this out of frustration of having to pick up the slack from everyone else. I have had four different clerks/associates do all the same things with different assignments. One actually quit while I was informing him of his mistakes and said it was my job to fix the problem not his. It’s a trend that I’m observing with those fresh to field. Five years ago I would have been so afraid to say something like that.
This associate is new and been here six months. I’m not a part of our training staff. I’m not a part of our hiring staff. But I’ve realized that I need to be a part of her training to avoid things like this from happening again. We could have had a conversation prior and perhaps resolved this. I’m committed to doing better.
Thanks for all the feedback.

I’m on the chapter “Eve” and currently soft locked before the last battle with the empire. Anyone know of a workaround or even better, a patch in the works??

I just hope that everyone who is stuck in entry level IT hell sees this and feels a bit encouraged. Granted, Sysadmin can still be a little entry-level and every company is going to be different, however:
In my old tech support job, we weren’t actually expected to come up with solutions or really do anything fulfilling for a tech minded person. We were all part of this well-oiled (“Hah…”) machine that was just supposed to run just fine with the automated systems and knowledgebase with the near unusable search system.
You know what wasn’t automated very well? Our ticketing system and logistics data entry. That was our real job, if I’m being honest. Entering serial numbers manually, documenting our every move, hauling around heavy monitors, swearing about our catalog offering desktops without SSDs… Really we were warehouse workers at the highest tier of local tech support. When it came to actual OS support the call center got to close out all the easy tickets, and we got stuck with the stuff that required bending the rules to fix and then choosing our words carefully in the documentation. If any of us wrote a helpful script, we knew it would be dismissed as a potential security vulnerability by people that didn’t have the time to look it over. I really could write pages and pages ranting, but this is more about the good parts of my next job.
Then it finally happened for me, I got out. I was hired onto a System Administrator role. Suddenly every PowerShell script I make is appreciated. My work and opinions are valued. If I find that a policy needs changing for my customer, I can make my case and be heard. When a patch breaks, I have full access to try to fix it and run it again. I only have to reload the OS when I see it fit, not when there’s still potential solutions left behind rights I don’t have. Years later I’m seeing procedures that I helped change, workloads that I helped reduce, and systems that I helped build. I’ve made a change, and that helps work not just feel like an endless grind against a brick wall. Sure, patching and scanning is super routine and a bit boring, but hey, I’m no longer worried I’m going to come back and find three toner delivery tickets on the clock like my last job. And, I don’t have a customer breathing down my back while I’m running those scans.
It feels like I’m actually working on computers again and using my brain. I’ve been a system administrator for a few years now and I’m really not burning out.

1. Alfie
2. Andy
3. Archie
4. Ares
5. Aspen
6. Aurora
7. BabyBella
8. Bandit
9. Bella
10. Benji
11. Berry
12. Big Bill
13. Boba
14. Boi
15. Bonbon
16. Boop
17. Bubbles
18. Buck
19. Bunny
20. Cali
21. Cashew
22. Charlie
23. Charlie Bear
24. Chef
25. Chester
26. Chevy
27. Chewy
28. Chi X
29. Chloe
30. Coco
31. Cole Beans
32. Cooper
33. Copilot
34. Copper
35. Count Grimm
36. Cricket
37. Daisy Mae
38. Dakota
39. Dolly
40. Esme
41. Eevee
42. Ella
43. Emmy
44. Eve
45. Faith
46. Fizzgigi
47. Fluffy
48. Foxy Cleopatra
49. Giko
50. Gimli
51. Gnar
52. Goliath
53. Gordie
54. Grace
55. Griffin
56. Gucci Rabanne
57. Hamhock
58. Haribo
59. Harley
60. Hemi
61. Hero
62. Hooty
63. Jasper
64. Jimmy
65. Joule E
66. Kea
67. Kiki
68. Kleo
69. Koda
70. Kods
71. Lady
72. Larry Fox
73. Leopold
74. Lincoln
75. Lishka
76. Lizzy
77. Loki
78. Lucy
79. Lucy
80. Lumi
81. Luna
82. Macchi
83. Maggie
84. Magnus
85. Mama Squish
86. Mapo
87. Max
88. Maxwell
89. Meadow
90. Meeko
91. Mika
92. Milo
93. Milo
94. Minna
95. Miss Coco
96. Miso
97. Mochi
98. Mochi
99. Mowgli
100. Mr. Beaver
101. Ms Lou
102. Muffin
103. Mugen
104. Mugen
105. Murray
106. Nala
107. Nala
108. Napoleon
109. Nemo
110. Nori
111. Nova
112. Nutmeg
113. Olive
114. Oso
115. Otto
116. Ozzy
117. Padfoot
118. Panda Bear
119. Peanut
120. Peppa
121. Pepper
122. Pepper
123. Pepper
124. Perry
125. Pete
126. Petey
127. Pfeffer
128. Phoebe
129. Phoebe
130. Phoebe
131. Pip
132. Pippa
133. Pixie
134. Porter
135. Rémy
136. Reeses
137. Ricky
138. Ricky
139. Rocket
140. Rocket
141. Rocko
142. Roo
143. Rose
144. Rosie
145. Roxy
146. Sadie
147. Samwise
148. Scotty Evil
149. Shinji
150. Sir Alexander
151. Slayyyter
152. Smudge
153. Sophia
154. Sophia
155. Sophie
156. Sugarbear
157. Teddy
158. Tinkerbell
159. Tinky
160. Tobi
161. Toni
162. Trixie
163. Vader
164. Waby King
165. Wally
166. Waylon
167. Willy
168. Winnie
169. Winslow
170. Winter
171. Winston
172. Witcher
173. Yumi
174. Zoey

abandon, ability, able, about, above, absence, absolute, absolutely, abstract, abundance, academy, accent, accept, access, accident, accompany, accomplish, according, account, accurate, achieve, achievement, acid, acknowledge, acquire, across, action, active, activity, actor, actual, actually, adapt, addition, additional, address, adequate, adjust, administration, admire, admission, admit, adolescent, adopt, adult, advance, advantage, adventure, advertise, advice, advise, adviser, advocate, affair, affect, afford, afraid, after, afternoon, again, against, age, agency, agenda, agent, aggressive, ago, agree, agreement, agriculture, ahead, aid, aim, air, aircraft, airline, airport, alarm, album, alcohol, alive, all, alliance, allow, ally, almost, alone, along, already, also, alter, alternative, although, always, amateur, amazing, ambition, ambulance, among, amount, analysis, analyst, analyze, ancient, and, anger, angle, angry, animal, anniversary, announce, annual, another, answer, anticipate, anxiety, any, anybody, anymore, anyone, anything, anyway, anywhere, apart, apartment, apologize, apparent, apparently, appeal, appear, appearance, apple, application, apply, appoint, appointment, appreciate, approach, appropriate, approval, approve, approximately, architect, area, argue, argument, arise, arm, armed, army, around, arrange, arrangement, arrest, arrival, arrive, art, article, artist, artistic, as, ashamed, aside, ask, asleep, aspect, assault, assert, assess, assessment, asset, assign, assignment, assist, assistance, assistant, associate, association, assume, assumption, assure, at, athlete, athletic, atmosphere, attach, attack, attempt, attend, attention, attitude, attorney, attract, attraction, attractive, attribute, audience, author, authority, auto, available, average, avoid, award, aware, awareness, away, awful, baby, back, background, bad, badly, bag, balance, ball, ban, band, bank, bar, barely, barrel, barrier, base, baseball, basic, basically, basis, basket, basketball, bath, bathroom, battery, battle, be, beach, bear, beat, beautiful, beauty, because, become, bed, bedroom, bee, beef, beer, before, begin, beginning, behavior, behind, being, belief, believe, bell, belong, below, belt, bench, bend, beneath, benefit, beside, besides, best, bet, better, between, beyond, bicycle, big, bike, bill, billion, bind, biological, bird, birth, birthday, bit, bite, black, blade, blame, blanket, blind, block, blood, blow, blue, board, boat, body, bomb, bombing, bond, bone, book, boom, boot, border, boring, born, borrow, boss, both, bother, bottle, bottom, boundary, bowl, box, boy, boyfriend, brain, branch, brand, brave, bread, break, breakfast, breast, breath, breathe, brick, bridge, brief, briefly, bright, brilliant, bring, broad, broken, brother, brown, brush, buck, budget, build, building, bullet, bunch, burden, burn, bury, bus, business, busy, but, butter, button, buy, buyer, by, cabin, cabinet, cable, cake, calculate, call, camera, camp, campaign, campus, can, Canadian, cancer, candidate, cap, capability, capable, capacity, capital, captain, capture, car, carbon, card, care, career, careful, carefully, carrier, carry, case, cash, cast, cat, catch, category, Catholic, cause, ceiling, celebrate, celebration, celebrity, cell, center, central, century, CEO, ceremony, certain, certainly, chain, chair, chairman, challenge, chamber, champion, championship, chance, change, changing, channel, chapter, character, characteristic, characterize, charge, charity, chart, chase, cheap, check, cheek, cheese, chef, chemical, chest, chicken, chief, child, childhood, Chinese, chip, chocolate, choice, cholesterol, choose, Christian, Christmas, church, cigarette, circle, circumstance, cite, citizen, city, civil, civilian, claim, class, classic, classroom, clean, clear, clearly, client, climate, climb, clinic, clinical, clock, close, closely, closer, clothes, clothing, cloud, club, clue, cluster, coach, coal, coalition, coast, coat, code, coffee, cognitive, cold, collapse, colleague, collect, collection, collective, college, colonial, color, column, combination, combine, come, comedy, comfort, comfortable, command, commander, comment, commercial, commission, commit, commitment, committee, common, communicate, communication, community, company, compare, comparison, compete, competition, competitive, competitor, complain, complaint, complete, completely, complex, complexity, compliance, complicate, complicated, component, compose, composition, comprehensive, computer, concentrate, concentration, concept, concern, concerned, concert, conclude, conclusion, concrete, condition, conduct, conference, confidence, confident, confirm, conflict, confront, confusion, Congress, congressional, connect, connection, consciousness, consensus, consequence, conservative, consider, considerable, consideration, consist, consistent, constant, constantly, constitute, constitutional, construct, construction, consultant, consume, consumer, consumption, contact, contain, container, contemporary, content, contest, context, continue, continued, contract, contrast, contribute, contribution, control, controversial, controversy, convention, conventional, conversation, convert, conviction, convince, cook, cookie, cooking, cool, cooperation, cop, cope, copy, core, corn, corner, corporate, corporation, correct, correspondent, cost, cotton, couch, could, council, count, counter, country, county, couple, courage, course, court, cousin, cover, coverage, cow, crack, craft, crash, crazy, cream, create, creation, creative, creature, credit, crew, crime, criminal, crisis, criteria, critic, critical, criticism, criticize, crop, cross, crowd, crucial, cry, cultural, culture, cup, curious, current, currently, curriculum, custom, customer, cut, cycle, dad, daily, damage, dance, danger, dangerous, dare, dark, darkness, data, database, date, daughter, day, dead, deal, dealer, dear, death, debate, debt, decade, decide, decision, deck, declare, decline, decrease, deep, deeply, deer, defeat, defend, defendant, defense, defensive, deficit, define, definitely, definition, degree, delay, deliver, delivery, demand, democracy, Democratic, Democrat, demonstrate, demonstration, deny, department, depend, dependent, depending, depict, depression, depth, deputy, derive, describe, description, desert, deserve, design, designer, desire, desk, desperate, despite, destroy, destruction, detail, detailed, detect, detection, detective, determine, develop, developing, development, device, devil, dialogue, diet, differ, difference, different, differently, difficult, difficulty, dig, digital, dimension, dining, dinner, direct, direction, directly, director, dirt, disability, disagree, disappear, disaster, discipline, disclose, discover, discovery, discrimination, discuss, discussion, disease, dish, dismiss, disorder, display, dispute, distance, distinct, distinction, distinguish, distribute, distribution, district, diverse, diversity, divide, division, divorce, DNA, do, doctor, document, dog, domestic, dominant, dominate, door, double, doubt, down, downtown, dozen, draft, drag, drama, dramatic, dramatically, draw, drawer, drawing, dream, dress, drink, drive, driver, drop, drug, dry, due, during, dust, duty, dwell, dying, dynamic, each, eager, ear, earlier, early, earn, earnings, earth, earthquake, ease, easily, east, eastern, easy, eat, economic, economy, edge, edit, edition, editor, educate, education, educational, educator, effect, effective, effectively, efficiency, efficient, effort, egg, eight, either, elderly, elect, election, electric, electrical, electricity, electronic, element, elementary, eliminate, elite, else, elsewhere, e-mail, embrace, emerge, emergency, emission, emotion, emotional, emphasis, emphasize, employ, employee, employer, employment, empty, enable, encounter, encourage, end, enemy, energy, enforcement, engage, engine, engineer, engineering, English, enhance, enjoy, enormous, enough, ensure, enter, enterprise, entertain, entertainment, entire, entirely, entrance, entry, environment, environmental, episode, equal, equally, equipment, equivalent, era, error, escape, especially, essay, essential, essentially, establish, establishment, estate, estimate, etc, ethics, ethnic, European, evaluate, evaluation, evening, event, eventually, ever, every, everybody, everyday, everyone, everything, everywhere, evidence, evolution, evolve, exact, exactly, exam, examination, examine, example, exceed, excellent, except, exception, exchange, exciting, executive, exercise, exhibit, exhibition, exist, existence, existing, expand, expansion, expect, expectation, expense, expensive, experience, experiment, expert, explain, explanation, explode, explore, explosion, expose, exposure, express, expression, extend, extension, extensive, extent, external, extra, extraordinary, extreme, extremely, eye, fabric, face, facility, fact, factor, factory, faculty, fade, fail, failure, fair, fairly, faith, fall, false, familiar, family, famous, fan, fantasy, far, farm, farmer, fashion, fast, fat, fate, father, fault, favor, favorite, fear, feature, federal, fee, feed, feel, feeling, fellow, female, fence, festival, few, fewer, fiber, fiction, field, fifteen, fifth, fifty, fight, fighter, fighting, figure, file, fill, film, final, finally, finance, financial, find, finding, fine, finger, finish, fire, firm, first, fish, fishing, fit, fitness, five, fix, flag, flame, flat, flavor, flee, flesh, flight, float, floor, flow, flower, fly, focus, folk, follow, following, food, foot, football, for, force, foreign, forest, forever, forget, form, formal, formation, former, formula, forth, fortune, forward, found, foundation, founder, four, fourth, frame, framework, free, freedom, freeze, French, frequency, frequent, frequently, fresh, friend, friendly, friendship, from, front, fruit, frustration, fuel, fulfill, full, fully, fun, function, fund, fundamental, funding, funeral, funny, furniture, furthermore, future, gain, galaxy, gallery, game, gang, gap, garage, garden, garlic, gas, gate, gather, gay, gaze, gear, gender, gene, general, generally, generate, generation, genetic, gentleman, gently, German, gesture, get, ghost, giant, gift, gifted, girl, girlfriend, give, given, glad, glance, glass, global, glove, go, goal, God, gold, golden, golf, good, govern, government, governor, grab, grace, grade, gradually, graduate, grain, grand, grandmother, grant, grass, grave, gray, great, green, grocery, ground, group, grow, growing, growth, guarantee, guard, guess, guest, guide, guideline, guilty, gun, guy, habit, habitat, hair, half, hall, hand, handful, handle, hang, happen, happy, harbor, hard, hardly, hat, hate, have, he, head, headline, headquarters, health, healthy, hear, hearing, heart, heat, heaven, heavily, heavy, heel, height, helicopter, hell, hello, help, helpful, hence, her, herb, here, heritage, hero, herself, hey, hi, hide, high, highlight, highly, highway, hill, him, himself, hip, hire, his, historic, historical, history, hit, hold, hole, holiday, holy, home, homeless, honest, honey, honor, hope, horizon, horror, horse, hospital, host, hot, hotel, hour, house, household, housing, how, however, huge, human, humor, hundred, hungry, hunter, hunting, hurt, husband, hypothesis, ice, idea, ideal, identification, identify, identity, ignore, ill, illegal, illness, illustrate, image, imagination, imagine, immediate, immediately, immigrant, immigration, impact, implement, implication, imply, importance, important, impose, impossible, impress, impression, impressive, improve, improvement, incentive, incident, include, including, income, incorporate, increase, increased, increasingly, incredible, indeed, independence, independent, index, indicate, indication, individual, industrial, industry, infant, infection, inflation, influence, inform, information, ingredient, initial, initially, initiative, injury, inner, innocent, inquiry, inside, insight, insist, inspire, install, instance, instead, institute, institution, institutional, instruction, instructor, instrument, insurance, intellectual, intelligence, intend, intense, intensity, intention, interaction, interest, interested, interesting, internal, international, Internet, interpret, interpretation, intervention, interview, introduce, introduction, invasion, invest, investigation, investigator, investment, investor, invite, involve, involved, involvement, Iraqi, Irish, iron, Islamic, island, Israeli, issue, it, Italian, item, its, itself, jacket, jail, Japanese, jet, Jew, Jewish, job, join, joint, joke, journal, journalist, journey, joy, judge, judgment, juice, jump, junior, jury, just, justice, justify, keep, key, kick, kid, kill, killer, killing, kind, king, kiss, kitchen, knee, knife, knock, know, knowledge, lab, label, labor, laboratory, lack, lady, lake, land, landscape, language, lap, large, largely, last, late, later, Latin, latter, laugh, launch, law, lawsuit, lawyer, lay, layer, lead, leader, leadership, leading, leaf, league, lean, learn, learning, least, leather, leave, left, leg, legacy, legal, legend, legislation, legislative, legislator, legitimate, lemon, length, less, lesson, let, letter, level, liberal, library, license, lie, life, lifestyle, lifetime, lift, light, like, likely, limit, limitation, limited, line, link, lip, list, listen, literary, literature, little, live, living, load, loan, local, locate, location, lock, long, long-term, look, loose, lose, loss, lost, lot, lots, loud, love, lovely, lover, low, lower, luck, lucky, lunch, luxury, machine, mad, magazine, mail, main, mainly, maintain, maintenance, major, majority, make, maker, makeup, male, mall, man, manage, management, manager, manner, manufacturer, manufacturing, many, map, margin, mark, market, marketing, marriage, married, marry, mask, mass, massive, master, match, material, math, matter, may, maybe, mayor, me, meal, mean, meaning, meanwhile, measure, measurement, meat, mechanism, media, medical, medication, medicine, medium, meet, meeting, member, membership, memory, mental, mention, menu, mere, merely, mess, message, metal, meter, method, Mexican, middle, might, military, milk, million, mind, mine, minister, minor, minority, minute, miracle, mirror, miss, missile, mission, mistake, mix, mixture, mm-hmm, mode, model, moderate, modern, modest, mom, moment, money, monitor, month, mood, moon, moral, more, moreover, morning, mortgage, most, mostly, mother, motion, motivation, motor, mountain, mouse, mouth, move, movement, movie, Mr, Mrs, Ms, much, multiple, murder, muscle, museum, music, musical, musician, Muslim, must, mutual, my, myself, mystery, myth, naked, name, narrative, narrow, nation, national, native, natural, naturally, nature, near, nearby, nearly, necessarily, necessary, neck, need, negative, negotiate, negotiation, neighbor, neighborhood, neither, nerve, nervous, net, network, never, nevertheless, new, newly, news, newspaper, next, nice, night, nine, no, nobody, nod, noise, nomination, nominee, none, nonetheless, nor, normal, normally, north, northern, nose, not, note, nothing, notice, notion, novel, now, nowhere, nuclear, number, numerous, nurse, nut, object, objective, obligation, observation, observe, observer, obtain, obvious, obviously, occasion, occasionally, occupation, occupy, occur, ocean, odd, odds, of, off, offense, offensive, offer, office, officer, official, often, oh, oil, okay, old, Olympic, on, once, one, ongoing, onion, online, only, onto, open, opening, operate, operating, operation, operator, opinion, opponent, opportunity, oppose, opposed, opposite, opposition, option, or, orange, order, ordinary, organic, organization, organize, orientation, origin, original, originally, other, others, otherwise, ought, our, ours, ourselves, out, outcome, outside, oven, over, overall, overcome, overlook, owe, own, owner, pace, pack, package, page, pain, painful, paint, painter, painting, pair, pale, Palestinian, palm, pan, panel, panic, pant, paper, paragraph, parent, park, parking, part, participant, participate, participation, particle, particular, particularly, partly, partner, partnership, party, pass, passage, passenger, passion, past, patch, path, patient, pattern, pause, pay, payment, PC, peace, peak, peer, pen, penalty, people, pepper, per, perceive, percentage, perception, perfect, perfectly, perform, performance, perhaps, period, permanent, permission, permit, person, personal, personality, personally, personnel, perspective, persuade, pet, phase, phenomenon, philosophy, phone, photo, photographer, phrase, physical, physically, physician, piano, pick, picture, pie, piece, pile, pilot, pine, pink, pipe, pitch, place, plan, plane, planet, planning, plant, plastic, plate, platform, play, player, please, pleasure, plenty, plot, plus, PM, pocket, poem, poet, poetry, point, police, policy, political, politically, politician, politics, poll, pollution, pool, poor, pop, popular, population, porch, port, portion, portrait, portray, pose, position, positive, possess, possession, possibility, possible, possibly, post, pot, potato, potential, potentially, pound, pour, poverty, powder, power, powerful, practical, practice, prayer, preach, precisely, predict, prediction, prefer, preference, pregnancy, pregnant, preparation, prepare, prescription, presence, present, presentation, preserve, president, presidential, press, pressure, pretend, pretty, prevent, previous, previously, price, pride, priest, primarily, primary, prime, principal, principle, print, prior, priority, prison, prisoner, privacy, private, probably, problem, procedure, proceed, process, processing, processor, proclaim, produce, producer, product, production, profession, professional, professor, profile, profit, program, progress, progressive, project, prominent, promise, promote, prompt, proof, proper, properly, property, proportion, proposal, propose, prosecutor, prospect, protect, protection, protein, protest, proud, prove, provide, provider, province, provision, psychological, psychology, public, publication, publicity, publish, publisher, pull, punishment, purchase, pure, purpose, pursue, push, put, qualify, quality, quarter, quarterback, quarterly, queen, quest, question, quick, quickly, quiet, quietly, quit, quite, quote, race, racial, radiation, radical, radio, rail, rain, raise, range, rank, rapid, rapidly, rare, rarely, rate, rather, rating, ratio, raw, reach, react, reaction, reader, reading, ready, real, reality, realize, really, reason, reasonable, recall, receive, recent, recently, reception, recipe, recipient, recognition, recognize, recommend, recommendation, record, recording, recover, recovery, recruit, red, reduce, reduction, refer, reference, reflect, reflection, reform, refugee, refuse, regard, regarding, regardless, regime, region, regional, register, regular, regularly, regulate, regulation, regulator, reinforce, reject, relate, relation, relationship, relative, relatively, relax, release, relevant, relief, religion, religious, rely, remain, remaining, remarkable, remember, remind, remote, remove, repeat, repeatedly, replace, replacement, reply, report, reporter, represent, representation, representative, Republican, reputation, request, require, requirement, research, researcher, resemble, reservation, resident, residential, resign, resist, resistance, resolution, resolve, resort, resource, respect, respond, response, responsibility, responsible, rest, restaurant, restore, restriction, result, retain, retire, retirement, return, reveal, revenue, review, revolution, rhythm, rice, rich, rid, ride, rifle, right, ring, rise, risk, river, road, rock, role, roll, romantic, roof, room, root, rope, rose, rough, roughly, round, route, routine, row, rub, rubber, rude, ruin, rule, run, running, rural, rush, Russian, sacred, sad, safe, safety, sake, salad, salary, sale, sales, salt, same, sample, sanction, sand, satellite, satisfaction, satisfied, satisfy, sauce, save, saving, say, scale, scandal, scare, scatter, scenario, scene, schedule, scheme, scholar, scholarship, school, science, scientific, scientist, scope, score, scream, screen, script, sea, search, season, seat, second, secondary, secret, secretary, section, sector, secure, security, see, seed, seek, seem, segment, seize, select, selection, self, sell, Senate, senator, send, senior, sense, sensitive, sentence, separate, sequence, series, serious, seriously, servant, serve, service, session, set, setting, settle, settlement, seven, several, severe, sex, sexual, shade, shadow, shake, shall, shallow, shape, share, sharp, she, sheet, shelf, shell, shelter, shift, shine, ship, shirt, shock, shoe, shoot, shooting, shop, shopping, short, shortly, shot, should, shoulder, shout, show, shower, shrug, shut, shy, sibling, sick, side, sigh, sight, sign, signal, significant, significantly, silence, silent, silver, similar, similarly, simple, simply, sin, since, sing, singer, single, sink, sir, sister, sit, site, situation, six, size, ski, skill, skin, skirt, sky, slave, sleep, slice, slide, slight, slightly, slip, slow, slowly, small, smart, smell, smile, smoke, smooth, snap, snow, so, so-called, soccer, social, society, soft, software, soil, solar, soldier, sole, solid, solution, solve, some, somebody, somehow, someone, something, sometimes, somewhat, somewhere, son, song, soon, sophisticated, sorry, sort, soul, sound, soup, source, south, southern, Soviet, space, Spanish, speak, speaker, special, specialist, species, specific, specifically, specify, speech, speed, spend, spending, spin, spirit, spiritual, split, spoil, sponsor, sport, spot, spray, spread, spring, square, squeeze, stability, stable, staff, stage, stain, stair, stake, stand, standard, standing, star, stare, start, state, statement, station, statistical, status, stay, steady, steal, steel, steep, stem, step, stick, still, stimulate, stimulus, stir, stock, stomach, stone, stop, storage, store, storm, story, straight, strange, stranger, strategic, strategy, stream, street, strength, strengthen, stress, stretch, strike, string, strip, stroke, strong, strongly, structural, structure, struggle, student, studio, study, stuff, stupid, style, subject, submit, subsequent, substance, substantial, substitute, succeed, success, successful, successfully, such, sudden, suddenly, sue, suffer, sufficient, sugar, suggest, suggestion, suicide, suit, summer, summit, sun, super, supply, support, supporter, suppose, supposed, Supreme, sure, surely, surface, surgery, surprise, surprised, surprising, surprisingly, surround, survey, survival, survive, survivor, suspect, sustain, swear, sweep, sweet, swim, swing, switch, symbol, symptom, system, table, tactic, tail, take, tale, talent, talk, tall, tank, tap, tape, target, task, taste, tax, taxi, tea, teach, teacher, teaching, team, tear, technical, technique, technology, teen, teenager, telephone, telescope, television, tell, temperature, temporary, ten, tend, tendency, tennis, tension, tent, term, terms, terrible, territory, terror, terrorist, test, testimony, testing, text, than, thank, thanks, that, the, theater, their, them, theme, themselves, then, theory, therapy, there, therefore, these, they, thick, thin, thing, think, thinking, third, thirty, this, those, though, thought, thousand, threat, threaten, three, throat, through, throughout, throw, thus, ticket, tie, tight, time, tiny, tip, tire, tissue, title, to, tobacco, today, toe, together, toilet, token, tolerate, tomato, tomorrow, tone, tongue, tonight, too, tool, tooth, top, topic, toss, total, totally, touch, tough, tour, tourist, tournament, toward, towards, tower, town, toy, trace, track, trade, tradition, traditional, traffic, tragedy, trail, train, training, transfer, transform, transformation, transition, translate, translation, transmission, transmit, transport, transportation, travel, treat, treatment, treaty, tree, tremendous, trend, trial, tribe, trick, trip, troop, trouble, truck, true, truly, trust, truth, try, tube, tunnel, turn, TV, twelve, twenty, twice, twin, two, type, typical, typically, ugly, ultimate, ultimately, unable, uncle, undergo, understand, understanding, unfortunately, uniform, union, unique, unit, United, universal, universe, university, unknown, unless, unlike, until, unusual, up, upon, upper, urban, urge, us, use, used, useful, user, usual, usually, utility, utilize, vacation, valley, valuable, value, variable, variation, variety, various, vary, vast, vegetable, vehicle, venture, version, versus, very, vessel, veteran, via, victim, victory, video, view, viewer, village, violate, violation, violence, violent, virtually, virtue, virus, visibility, visible, vision, visit, visitor, visual, vital, voice, volume, voluntary, volunteer, vote, voter, voting, wage, wait, wake, walk, wall, wander, want, war, warm, warn, warning, wash, waste, watch, water, wave, way, we, weak, weakness, wealth, wealthy, weapon, wear, weather, web, website, wedding, week, weekend, weekly, weigh, weight, welcome, welfare, well, west, western, wet, what, whatever, wheel, when, whenever, where, whereas, whether, which, while, whisper, white, who, whole, whom, whose, why, wide, widely, widespread, wife, wild, wildlife, will, willing, win, wind, window, wine, wing, winner, winter, wipe, wire, wisdom, wise, wish, with, withdraw, within, without, witness, woman, wonder, wonderful, wood, wooden, word, work, worker, working, workout, workplace, works, workshop, world, worried, worry, worth, would, wound, wrap, write, writer, writing, wrong, yard, yeah, year, yell, yellow, yes, yesterday, yet, yield, you, young, your, yours, yourself, youth, zone.

Mold in your home isn't just an eyesore—it can be a health hazard and a structural concern. Whether you're dealing with a musty odor, unexplained allergies, or visible signs of mold, getting a mold inspection is the first step toward a safer, healthier living space. In this guide, we'll explore the ins and outs of Mold in your home isn't just an eyesore—it can be a health hazard and a structural concern. Whether you're dealing with a musty odor, unexplained allergies, or visible signs of mold, getting a mold inspection is the first step toward a safer, healthier living space. In this guide, we'll explore the ins and outs of mold inspections, why they're essential, how they're conducted, and what to do if you find mold in your home.mold inspections

Introduction to Mold Inspections

Mold inspections are assessments performed to detect the presence of mold in a building. They are usually carried out by professionals trained to identify mold inspection near me and its potential sources. However, there are also ways you can inspect for mold yourself. The goal is to identify mold early to prevent health risks and structural damage.

Why Mold Inspections Are Important

Mold isn't just unsightly—it can pose significant risks to both your health and the structure of your home. Here's why mold inspections are crucial:

Health Risks of Mold

Mold spores can trigger allergies, respiratory issues, and other health problems. If left unchecked, they can worsen asthma, cause skin irritations, and even lead to serious illnesses.

Structural Damage from Mold

Mold can weaken building materials like wood, drywall, and insulation. Over time, this can lead to costly repairs and even structural failure if the mold spreads extensively.

Common Signs of Mold in Your Home

Detecting mold early is key to preventing its spread. Here are some common signs that you might have a mold problem:
Visual Clues
Mold can appear as black, green, white, or even orange spots or patches. It often grows in damp areas, like bathrooms, basements, or around leaky pipes.
Odors and Smells
A musty or earthy odor is a strong indicator of mold. If you notice this smell, it's time to investigate further.
Health Symptoms
If you or your family experience unexplained allergies, respiratory issues, or frequent headaches, it could be a sign of mold exposure.

How to Conduct a Mold Inspection

You can perform a preliminary mold inspection yourself or hire a professional. Here's what you need to know:
DIY Methods
Start by checking areas prone to moisture, like bathrooms, basements, and kitchens. Look for visual signs of mold and use your nose to detect any unusual smells. You can also purchase mold test kits, but their accuracy varies.
Professional Mold Inspectors
Professionals use specialized equipment and techniques to identify mold and its sources. They can also test air quality to determine if mold spores are present.

What to Expect During a Professional Mold Inspection

If you decide to hire a professional, here's what typically happens during a mold inspection:
The Process
The inspector will conduct a thorough visual examination, focusing on areas with moisture or visible mold. They may also take samples for laboratory testing to identify the type of mold present.
Tools and Techniques Used
Professionals use thermal cameras, moisture meters, and air quality monitors to detect mold and its sources. These tools help them identify hidden mold and areas at risk of mold growth.

Understanding Mold Types

Knowing the type of mold in your home can help determine the appropriate course of action. Here are some common types of mold:
Black Mold
Black mold, or Stachybotrys, is one of the most toxic molds. It's often found in damp areas and can cause severe health problems.
Other Common Household Molds
Other types of mold include Aspergillus, Cladosporium, and Penicillium. While not as toxic as black mold, they can still cause health issues and damage to your home.

Preventing Mold in Your Home

Prevention is the best way to avoid the problems caused by mold. Here's how you can keep mold at bay:
Controlling Moisture
Mold thrives in moist environments. Fix leaks promptly, keep gutters clean, and use dehumidifiers in damp areas to reduce moisture levels.
Proper Ventilation
Ensure your home has adequate ventilation, especially in areas prone to moisture like bathrooms and kitchens. Exhaust fans and open windows can help keep air flowing.

Dealing with Mold if Found

If you find mold in your home, it's essential to act quickly to prevent its spread. Here's what you can do:
DIY Removal
Small patches of mold can often be removed with household cleaners and proper safety equipment. Always wear gloves and a mask, and ventilate the area while cleaning.

When to Call the Experts

For larger mold infestations or if the mold is in hard-to-reach places, it's best to call an Alhumd Inspections professional. They have the expertise and equipment to safely remove mold without spreading spores.

Cost of Mold Inspections and Remediation

The cost of mold inspections and remediation can vary depending on several factors. Here's what you need to know:
Factors Affecting Cost
The size of the affected area, the type of mold, and the severity of the infestation all impact the cost. Professional mold inspections typically range from $200 to $600, while remediation can cost anywhere from a few hundred to several thousand dollars.
Ways to Save Money
To save money, address moisture issues promptly, and consider DIY mold inspections before calling in professionals. Regular home maintenance can also help prevent costly mold problems.

Conclusion

Mold inspections are essential for maintaining a healthy home. By identifying mold early and taking the appropriate steps to remove it, you can prevent health risks and structural damage. Remember to control moisture, ensure proper ventilation, and conduct regular inspections to keep mold at bay.

Alhumd Inspections

Best Mold inspectors in the USA at an Affordable Price and offer 20$ in the first home inspection. Call us today (667) 686 -7281

FAQs

How often should I conduct a mold inspection?
It's a good idea to inspect for mold at least once a year or after significant water damage, such as flooding or roof leaks.
Can I use bleach to clean mold?
While bleach can kill mold on non-porous surfaces, it's not always effective on porous materials like drywall. It's best to use mold-specific cleaning products or seek professional advice.
Is mold always visible?
No, mold can grow in hidden areas like behind walls or under flooring. That's why it's crucial to look for other signs like musty odors or unexplained health symptoms.
What should I do if I find black mold?
If you find black mold, it's best to call a professional for removal. Black mold can be toxic, and improper removal can spread spores.
Can mold grow in dry climates?
Yes, mold can grow in dry climates if there's enough moisture from leaks, condensation, or poor ventilation. Always address moisture issues promptly to prevent mold growth.
, why they're essential, how they're conducted, and what to do if you find mold in your home.

Introduction to Mold Inspections

Mold inspections are assessments performed to detect the presence of mold in a building. They are usually carried out by professionals trained to identify mold inspection near me and its potential sources. However, there are also ways you can inspect for mold yourself. The goal is to identify mold early to prevent health risks and structural damage.

Why Mold Inspections Are Important

Mold isn't just unsightly—it can pose significant risks to both your health and the structure of your home. Here's why mold inspections are crucial:

Health Risks of Mold

Mold spores can trigger allergies, respiratory issues, and other health problems. If left unchecked, they can worsen asthma, cause skin irritations, and even lead to serious illnesses.

Structural Damage from Mold

Mold can weaken building materials like wood, drywall, and insulation. Over time, this can lead to costly repairs and even structural failure if the mold spreads extensively.

Common Signs of Mold in Your Home

Detecting mold early is key to preventing its spread. Here are some common signs that you might have a mold problem:
Visual Clues
Mold can appear as black, green, white, or even orange spots or patches. It often grows in damp areas, like bathrooms, basements, or around leaky pipes.
Odors and Smells
A musty or earthy odor is a strong indicator of mold. If you notice this smell, it's time to investigate further.
Health Symptoms
If you or your family experience unexplained allergies, respiratory issues, or frequent headaches, it could be a sign of mold exposure.

How to Conduct a Mold Inspection

You can perform a preliminary mold inspection yourself or hire a professional. Here's what you need to know:
DIY Methods
Start by checking areas prone to moisture, like bathrooms, basements, and kitchens. Look for visual signs of mold and use your nose to detect any unusual smells. You can also purchase mold test kits, but their accuracy varies.
Professional Mold Inspectors
Professionals use specialized equipment and techniques to identify mold and its sources. They can also test air quality to determine if mold spores are present.

What to Expect During a Professional Mold Inspection

If you decide to hire a professional, here's what typically happens during a mold inspection:
The Process
The inspector will conduct a thorough visual examination, focusing on areas with moisture or visible mold. They may also take samples for laboratory testing to identify the type of mold present.
Tools and Techniques Used
Professionals use thermal cameras, moisture meters, and air quality monitors to detect mold and its sources. These tools help them identify hidden mold and areas at risk of mold growth.

Understanding Mold Types

Knowing the type of mold in your home can help determine the appropriate course of action. Here are some common types of mold:
Black Mold
Black mold, or Stachybotrys, is one of the most toxic molds. It's often found in damp areas and can cause severe health problems.
Other Common Household Molds
Other types of mold include Aspergillus, Cladosporium, and Penicillium. While not as toxic as black mold, they can still cause health issues and damage to your home.

Preventing Mold in Your Home

Prevention is the best way to avoid the problems caused by mold. Here's how you can keep mold at bay:
Controlling Moisture
Mold thrives in moist environments. Fix leaks promptly, keep gutters clean, and use dehumidifiers in damp areas to reduce moisture levels.
Proper Ventilation
Ensure your home has adequate ventilation, especially in areas prone to moisture like bathrooms and kitchens. Exhaust fans and open windows can help keep air flowing.

Dealing with Mold if Found

If you find mold in your home, it's essential to act quickly to prevent its spread. Here's what you can do:
DIY Removal
Small patches of mold can often be removed with household cleaners and proper safety equipment. Always wear gloves and a mask, and ventilate the area while cleaning.

When to Call the Experts

For larger mold infestations or if the mold is in hard-to-reach places, it's best to call an Alhumd Inspections professional. They have the expertise and equipment to safely remove mold without spreading spores.

Cost of Mold Inspections and Remediation

The cost of mold inspections and remediation can vary depending on several factors. Here's what you need to know:
Factors Affecting Cost
The size of the affected area, the type of mold, and the severity of the infestation all impact the cost. Professional mold inspections typically range from $200 to $600, while remediation can cost anywhere from a few hundred to several thousand dollars.
Ways to Save Money
To save money, address moisture issues promptly, and consider DIY mold inspections before calling in professionals. Regular home maintenance can also help prevent costly mold problems.

Conclusion

Mold inspections are essential for maintaining a healthy home. By identifying mold early and taking the appropriate steps to remove it, you can prevent health risks and structural damage. Remember to control moisture, ensure proper ventilation, and conduct regular inspections to keep mold at bay.

Alhumd Inspections

Best Mold inspectors in the USA at an Affordable Price and offer 20$ in the first home inspection. Call us today (667) 686 -7281

FAQs

How often should I conduct a mold inspection?
It's a good idea to inspect for mold at least once a year or after significant water damage, such as flooding or roof leaks.
Can I use bleach to clean mold?
While bleach can kill mold on non-porous surfaces, it's not always effective on porous materials like drywall. It's best to use mold-specific cleaning products or seek professional advice.
Is mold always visible?
No, mold can grow in hidden areas like behind walls or under flooring. That's why it's crucial to look for other signs like musty odors or unexplained health symptoms.
What should I do if I find black mold?
If you find black mold, it's best to call a professional for removal. Black mold can be toxic, and improper removal can spread spores.
Can mold grow in dry climates?
Yes, mold can grow in dry climates if there's enough moisture from leaks, condensation, or poor ventilation. Always address moisture issues promptly to prevent mold growth.

For starters, it’s a minimum wage food service job and I only make $14.25 /hr. It’s not like it’s incredibly intense or anything but I just absolutely hate this job.
My schedule is completely unpredictable, as I’m opening at 5am some days, closing at 10pm other days.
And I feel like I’m being dramatic when I say this, but often I feel we are very understaffed, and I’m stuck doing the work of what should be multiple people. I’m a cashier but I’m expected to also make drinks, clean the dining room, prep food, etc etc. And some days we have more than enough people working. But it’s the weekends that are always lacking people, which inevitably becomes our busiest days.
And the one thing that has honestly annoyed me the most is that they hired me under the pretense that Sunday would be the ONLY DAY I am completely unavailable. My availability has changed since then but I have stated several times that Sunday is the one day i do not work. And yet, I find myself constantly getting put on the schedule for Sunday. I ultimately cracked and told them if they were desperate for someone or needed a cover that they could call me or schedule me, but even then, only evenings. They ended up scheduling me for 6am on Easter Sunday, and I think that’s when I realized that they really could not give two shits about my schedule. I have worked holidays before, thanksgiving and Christmas Eve, but this was so ridiculous to me. I told them I wouldn’t be working on Easter and they had to scramble to find a cover. Verbatim, I texted that manager “I won’t be able to work this Easter, and I’d like to change my availability to not available on any Sunday” The scheduleing manager told me “you know you will HAVE to work some Sundays” and I’m so non confrontational I just agreed, but this has been an issue since I started. (Almost a year ago)
My coworkers and managers are really good, and I even told my manager that I had no plans of leaving when getting some info for my resume, but I’m so jaded with this job that I know I am not enjoyable to be around when Im there.
I know I’m replaceable and they probably won’t miss me in the long run, and I know I can get paid more working elsewhere, but idk I feel guilty for leaving after I said I wouldn’t. And I’m nervous about getting a good reference if I put in my two weeks out of the blue.
My ask for advice would really just be this:
1) is it unprofessional to leave after telling the manager I had no plans of leaving?
2) should I give my manager a heads up that I’m searching for a new job elsewhere? (I’d think not but idk)
3) am I asking too much to be taken off the schedule for Sunday when I work every other day of the week?