Windows 10: In my google account's security checkup> recent security events one changed password event...

I changed my google account password a couple of times on my desktop today (firefox browser), but when I view my google account, in its security checkup> recent security events one changed password event is extra. I changed password once and after hours only I changed once again. But on recent security events, minutes after changing password the first time, one more changed password is seen which I did not do. Totally, in recent security events, there are 11 changed password events out of which 10 I remember doing.. 1 is extra! I write down each time I change password on a book of mine, & I've written only 10, so 1 password change I did not make for sure! What could be the issue here? how can there be a change password event which I did not do? Also I've enabled two step verification and when I tried to change password, and the webpage to enter code was shown but there was an incoming call on my phone and the phone was ringing.. so did not receive the text message with the code.. i opted to resend code and i received it. But later after I completed changing the password, verification codes messages started coming to my phone. they were all same codes.. they could be that previous one that failed to send at first right? and not someone trying to change password of my account from elsewhere right?

Also before changing google password, I was going through "My Activity" of my google account and when I clicked on an item from 10 days ago, a popup came in the middle suddenly saying; "500. That's an error.Try again in a few minutes." Its nothing related to the password issue right?

:)

 

[FAKE] CD PROJEKT RED Forums Important security update

Just got this email from them and it's kinda late i think.

Dear Forum Users,

Recently it has come to our attention that an obsolete cdprojektred.com forum database was accessed by an unauthorized party sometime in March 2016.

At the time of the event, the database was not in active use, as almost a year earlier forum members had been asked to create secure GOG.com accounts for login purposes. These accounts are additionally protected by two-step authentication. The forum engine has also been upgraded since then to the newest and most secure version, fixing the vulnerability that allowed said access.

It is our understanding that the obsolete forum database contained usernames, email addresses and passwords that were hashed and “salted.” Salting is a common practice that involves adding random characters to the password when hashing to increase security. It is this, a “salted hash” of a password, that was stored in the database and that was accessed. Your passwords were not stored in plain text, hence they were not directly accessible by anyone.

Since you did not connect your account with the GOG.com-powered login system, your account was not migrated to the new forum and no action is required on your end. However, if you used your old forum password for any other services, it is still advisable to change it. We also suggest you never use the same password across multiple services.

From the time of the event, we’ve conducted additional external security tests, and we will double our efforts to ensure such situations don’t occur in the future.

We would like to deeply apologize to everyone affected.

CD PROJEKT RED Forum Staff

 

Gmail "Critical security alert" message, hacking attempt blocked (long post)

This is not true, it depends how and when you used 2FA. I never get security tokens from Google, I just get an email notification asking if it was me with a button to click, and only if the IP / device used is not in the registered devices list on the account.

That said, if you get these kinds of messages, it means someone knows your password and you need to change that on ALL accounts you have, not just Google.

 

Windows 10 workstation Security log filling with Event ID 4703

My Windows 10 workstation's Security Event Log is filled with informational Event ID 4703 (like 20/second).

It's an Audit Success on Authorization Policy Change category.

Pretty much all are about the javaw.exe process & SeSecurityPrivilege. But also a few of them list svchost.exe as the process & a whole list of privileges.

I can't find anything on the Net about event 4703.

Sometimes it lists the privilege as Disabled (as below), and some are Enabled. Back & forth, multiple events per second.

Does anyone have any idea what/why this is, or anyone else experiencing it?

Here are the details of the event (edited for privacy)...

Task Category: Authorization Policy Change

Level: Information

Keywords: Audit Success

User: N/A

Computer: xxxxx.yyyy.com

Description:

A user right was adjusted.

Subject:

Security ID: SYSTEM

Account Name: XXXXXX

Account Domain: YYYYYYYY

Logon ID: 0x3E7

Target Account:

Security ID: SYSTEM

Account Name: XXXXXXX

Account Domain: YYYYYYYYY

Logon ID: 0x3E7

Process Information:

Process ID: 0xb24

Process Name: C:\Windows\SysWOW64\ContegoSPOP\jre1.7.0_65\bin\javaw.exe

Enabled Privileges:

-

Disabled Privileges:

SeSecurityPrivilege