News

Send a textGear up for an electric journey through the Jaguars' draft strategy and NFL fandom culture with your favorite gridiron gurus, Phil Smith and James Johnson. As we lament missing live draft action, we promise to make up for it with a wealth of insider info, from our final Read More

The CVE's They are A-Changing https://isc.sans.edu/diary/The%20CVE%27s%20They%20are%20A-Changing!/30850 CrushFTP 0-Day Vulnerability https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/ GitHub Comment Bug Used to Distribute Malware https://www.bleepingcomputer.com/news/security/github-comments-abused-to-push-malware-via-microsoft-repo-urls/ YubiKey Manager Privilege Escalation https://www.yubico.com/support/security-advisories/ysa-2024-01/ Palo Alto Networks GlobalProtect Update https://security.paloaltonetworks.com/CVE-2024-3400

Delinea Secret Server Authn Authz Bypass https://straightblast.medium.com/all-your-secrets-are-belong-to-us-a-delinea-secret-server-authn-authz-bypass-adc26c800ad3 Ivanti Avalanche Poc/Details https://www.tenable.com/security/research/tra-2024-10 Advanced Phishing Campaign https://www.lookout.com/threat-intelligence/article/cryptochameleon-fcc-phishing-kit Hashicorp go-getter update CVE-2024-3817 https://discuss.hashicorp.com/t/hcsec-2024-09-hashicorp-go-getter-vulnerable-to-argument-injection-when-fetching-remote-default-git-branches/66040 OfflRouter Virus https://blog.talosintelligence.com/offlrouter-virus-causes-upload-confidential-documents-to-virustotal/

In this enlightening episode of the Responder Resilience, we dive deep into the heart of mental health within the fire service, featuring a captivating dialogue with Acting Fire Chief David Motes of Clay County Fire Rescue (CCFR), Florida, and Marie Guma, the visionary founder of Command Counseling Center. Together, they Read More

Malicious PDF File As Delivery Mechanism https://isc.sans.edu/diary/Malicious%20PDF%20File%20Used%20As%20Delivery%20Mechanism/30848 Updated Palo Alto Networks GlobalProtect Guidance https://security.paloaltonetworks.com/CVE-2024-3400 Coordinated Social Engineering Takeovers of Open Source Projects; https://openssf.org/blog/2024/04/15/open-source-security-openssf-and-openjs-foundations-issue-alert-for-social-engineering-takeovers-of-open-source-projects/ OpenMetaData Attacks https://www.microsoft.com/en-us/security/blog/2024/04/17/attackers-exploiting-new-critical-openmetadata-vulnerabilities-on-kubernetes-clusters/

Send a textEver find yourself looking for the real scoop on obesity and weight loss? Join Dr. Darlene Bartilucci and Janet Garvey, ARNP, DNP, for a riveting exploration of the latest treatment breakthroughs and a reflective moment on the most profound weight management advice we've ever received. We'll tackle the Read More

Palo Alto Networks GlobalProtect exploit public and widely exploited CVE-2024-3400 https://isc.sans.edu/forums/diary/Palo%20Alto%20Networks%20GlobalProtect%20exploit%20public%20and%20widely%20exploited%20CVE-2024-3400/30844/ Putty Private Key Recovery https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-p521-bias.html Oracle Critical Patch Update https://www.oracle.com/security-alerts/cpuapr2024.html Ivanti Avalanche MDM Patches https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US

In this episode of Everything is Logistics, Blythe speaks with Jack Zwart, the shipping manager at GatorBar, a manufacturer of composite rebar in Michigan's Upper Peninsula. He shares information on the history and importance of the Rust Belt, the role of the Great Lakes in raw material shipping, and the Read More

Quick Palo Alto Networks Global Protect Vulnerablity Update CVE-2024-3400 https://isc.sans.edu/diary/30838 Delinea patches critical vulnerability in secret manager https://trust.delinea.com/?tcuUid=17aaf4ef-ada9-46d5-bf97-abd3b07daae3 Lancom Windows Setup Assistant May Reset Password https://www.lancom-systems.com/service-support/general-security-information PHP Patches https://seclists.org/oss-sec/2024/q2/113 Duo SMS and VoiP Logs Leaked https://app.securitymsp.cisco.com/e/es?e=2785&eid=opguvrs&elq=bd1c1886a59e40c09915b029a74be94e Lastpass Stops Deepfake Attack https://blog.lastpass.com/posts/2024/04/attempted-audio-deepfake-call-targets-lastpass-employee

Send a textThe mysteries of inflammation: deciphering how the flames of inflammation can both heal wounds and incite a series of events leading to cardiovascular diseases. Prepare to be enlightened as we explore the dual nature of this biological response and the groundbreaking research aimed at harnessing its power for Read More

Send a textIn this week's episode, Jay was joined by draft expert Ian Valentino of The 33rd Team. It was only right to start with Ian's latest mock draft where the Jags traded up for Washington receiver Rome Odunze. Specifically, Ian provided a more in-depth look at why the talented Read More

Palo Alto Networks GlobalProtect 0-Day CVE-2024-3400 https://security.paloaltonetworks.com/CVE-2024-3400 https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/#RespondingToCompromise

BatBadBut: You can't securely execute commands on Windows https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ FortiClient Linux Remote Code Execution https://www.fortiguard.com/psirt/FG-IR-23-087 Apple Threat Notifications and Protecting Against Mercenary Spyware https://support.apple.com/en-us/102174 New Technique to Trick Developers Detected in an Open Source Supply Chain Attack https://checkmarx.com/blog/new-technique-to-trick-developers-detected-in-an-open-source-supply-chain-attack/

Welcome to Episode 374 of the Microsoft Cloud IT Pro Podcast where Ben and Scott break down Azure Trusted launch virtual machines – what they are, how they’re different from Gen 1 Azure VMs, and how you can enable them for your new and existing workloads. Like what you hear Read More

Grace Sharkey and Blythe are back with another episode of Freight Friends! This time the duo addresses the evolving retail landscape, including Shein's supply chain services and Amazon's "Just Walk Out" technology halt. They also discuss the Baltimore bridge collapse and the rise of online misinformation, covering a range of Read More

In this eye-opening episode of our podcast, we delve into the life of Rob Rudewicz, a man whose career in law enforcement spanned two decades, culminating in his retirement as a Captain from the Hartford Police Department. Rob's journey is not just a tale of policing a city he grew Read More

Rust Command API code execution vulnerability CVE-2024-24576 https://blog.rust-lang.org/2024/04/09/cve-2024-24576.html Adobe Updates: Magento Adobe Commerce CVE-2024-20759 CVE-2024-20758 https://helpx.adobe.com/security/products/magento/apsb24-18.html https://helpx.adobe.com/security.html Fortinet FortiOS And FortiProxy Vulnerability CVE-2023-41677 https://www.fortiguard.com/psirt/FG-IR-23-493 Smoke and Screen Mirrors Signed Backdoor CVE-2024-26234 https://news.sophos.com/en-us/2024/04/09/smoke-and-screen-mirrors-a-strange-signed-backdoor/

Send a textUnlock the sacred trust between patient and researcher as Dr. Michael Koren and colleague Dr. Mitch Rothstein guide you through the ethical labyrinth of clinical research. Journey with us to the heart of human trials, where we merge the zeal for scientific breakthroughs with the solemn duty of Read More

Microsoft Patches https://isc.sans.edu/forums/diary/April%202024%20Microsoft%20Patch%20Tuesday%20Summary/30822/ D-Link NAS Backdoor https://github.com/netsecfish/dlink LG SmartTV Vulnerabilities https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/

In this episode, Blythe speaks with Greenscreens CEO and Chief Product Officer Dawn Salvucci-Favier about her transition from administrative assistant to freight tech innovator. Dawn discusses the evolution of freight brokerages, TMS systems, and the power of predictive pricing using AI and machine learning. She also shares insights into the Read More