Tilak Varma's fabulous maiden T20I hundred formed the fulcrum of India's narrow 11-run victory over South Africa in the third match in Centurion on Wednesday.

Tilak Varma showcased his talent by scoring his maiden T20I century, leading India to a formidable total of 219/6 in 20 overs against South Africa.

Denver based legal tech company, TermScout, releases FREE Airline Passenger Rights Guides. These easy-to-understand downloadable tools are available just in time for the winter storms impacting holiday travelers.

The term “oriental rug” can be a source of some confusion to those unfamiliar with the subject. It literally means a rug manufactured in the Orient, and could legitimately be applied to any rug of oriental origin, regardless of its appearance or how it was made. In practice, however, the term is normally used only to describe hand-made rugs produced by traditional methods in the ancient weaving regions of Persia (Iran), Anatolia (Turkey), Afghanistan, the Caucasus, Baluchistan, Turkistan, China, India, Pakistan, the Balkans, and parts of North Africa. An oriental rugs, in order to be truly authentic within the generally accepted meaning of the term, must be either hand-knotted or hand-woven, originate from one of the traditional weaving regions and also follow certain ancestral patterns of composition and design.

Offers study guides of all leading certifications includes MCSE, MCSD, MCSA, Oracle 8i, Oracle 9i, CCNA, CCNP and A+.

Guest: Joel Miller, author of the recently published Lifted by Angels: The Presence and Power of Our Heavenly Guides and Guardians discusses with Kevin Allen and the callers the reality and role of angels within the Christian salvation context.

Recommendations from the FP7-funded EU project BESAFE

Biodiversity decline is a fact, but how can society be convinced of the benefits of biodiversity for human well being and of the necessity of further protective action? The FP7 funded EU project Biodiversity and Ecosystem Services: Arguments for our Future Environment (BESAFE) addressed this challenge to produce guidance that can help improve the way we use arguments for conservation and convincingly demonstrate the value of biodiversity to decision-makers.

Credit: Rob Bugter

Two key outputs of the project are the final brochure "How to Argue for Biodiversity Conservation More Effectively: Recommendations from the BESAFE project", including key conclusions from project publications and case studies, and an interactive online tool, which can lead stakeholders to the relevant information in a few mouse clicks.

Key recommendations of BESAFE featured in these resources are:

• The success of a more integrated approach depends on stakeholder engagement. A top-down policy framework that sets goals for the protection of particular sites and species is important, but it is not enough to prevent biodiversity loss. - -- An integrated approach, seeking to 'mainstream' biodiversity concerns across all policy sectors (e.g. agriculture, forestry, water, energy, transport and urban planning) is needed.
• Promote bottom-up initiatives at the local level. All stakeholders need to be actively involved in the decision-making process, which should facilitate building trust and working towards generally agreed and accepted solutions.
• Tailor arguments to the audience. Arguments need to be framed to fit the values and goals of the audience, embracing the plurality of values attached to nature, and using appropriate language. For example, over-emphasising economic arguments could alienate people who are motivated mainly by ethical and moral concerns.
• Use positive arguments. Positive framing of arguments to emphasise benefits is often more powerful than negative framing that focuses on threats and losses. The concept of ecosystem services is useful for emphasising positive benefits, provided that it is properly explained to stakeholders.
• Use a wider range of arguments. Arguments based on the economic value of nature for humans dominate European and national policy-making, and are often seen as central to gaining high-level policy-maker support, but our results show that many decision-makers and other stakeholders also use and respond positively to ethical and moral arguments.

"We aimed to provide the essence of 4 years worth of research in an easy to read and reuse form, to maximise the potential of using the right arguments for conservation at the right time in order to successfully demonstrate the value of biodiversity to decision-makers," comments Rob Bugter, co-ordinator of the BESAFE project.

Try out the resources below:

Bugter R., Smith A.C. and the BESAFE consortium. 2015. How to argue for biodiversity conservation more effectively. Recommendations from the BESAFE project. Pensoft Publishers, Sofia, 26 pp. Available at: http://www.besafe-project.net/img/uplf/BESAFE_brochure_online_18.pdf

BESAFE web tool available at: http://tool.besafe-project.net/

Being a primary caregiver while working full time is a challenge in itself and even more so during the pandemic. Elaine Varelas guides on how to best keep your family members safe while maintaining your work responsibilities.

The post As both a full-time employee and a primary caregiver to one of my family members, I am worried about potentially exposing my family to COVID. Is there anything I can do? Elaine Varelas guides appeared first on Boston.com.

Fairfax, VA — The National Commission for the Certification of Crane Operators has published three employer guides on OSHA’s updated crane operator requirements, a final rule scheduled to go into effect Dec. 10.

After more than a year without in-person events, PSA TEC 2021 was hosted as a hybrid event last week, May 3-6, with around 200 people coming to the Sheraton in downtown Denver, Colo., and more tuning in online.

Now available, Bullet Fiber is ideal for wiring telecom connections and demarcation locations in residential, commercial, and industrial applications.

Camden Door Controls has released two new publications to support its line of industry-leading locking products, including maglocks, strikes, and cabinet locks.

Washington — On the 30th anniversary of the Violence Against Women Act of 1994 becoming law, the Department of Labor’s Women’s Bureau released three issue briefs on safe leave.

More than 9.6 million children — or 13 percent of all children in the U.S. — live in families with annual incomes below the poverty line, according to data from 2015. As closures and restrictions related to COVID-19 begin to impact the U.S. economy, it’s clear many more families will be receiving fewer paychecks and less income in the coming months, putting more children at risk of falling below the poverty line.

Beat the holiday shopping rush and get eyewear gift ideas to give back this Christmas

Beautifully designed digital guides and companion pieces help employees understand and appreciate benefits to make better-informed decisions

Craft Holsters Launches In-Depth Guides Explaining 34 Different Types of Glock Pistols

Robert Rassp, Esq. (author of “Lawyers Guide to the Guides”) and Judge Colleen Casey (former WCAB Commissioner) will cover every aspect of rating a whole person impairment. Mr. Rassp will…

This program instructed by Phil Walker, J.D. and Christopher Brigham, M.D. will focus on the basic ratings under the AMA Guides. This is part one of three on a series…

This program instructed by Phil Walker, J.D. and Christopher Brigham, M.D. will focus on the intermediate ratings under the AMA Guides. This is part two of three on a series…

This program instructed by Phil Walker, J.D. and Christopher Brigham, M.D. will focus on the advanced ratings under the AMA Guides. This is part three of three on a series…

This program focuses on the updates surrounding the AMA Guides, rating and apportionment. Instructors will inspect examples from relevant recent case law and will include practice tips as illustrated by…

If you work with impairment assessments, you must understand the correct use of the AMA Guides to the Evaluation of Permanent Impairment. This is the solution to help you master…

This program will enhance each student's ability to identify poor quality evaluations and erroneous ratings. Dr. Chris Brigham will provide an insider's perspective and practical guidance.

The Alaska Workers' Compensation Division is holding a public meeting Dec. 10 to discuss adopting of the 2024 update to impairment rating guides. Alaska law mandates permanent impairment ratings be assigned…

In this webinar, you will get an insider’s look at the AMA Guides by noted AMA author Kenneth Kingdon, which will provide perspective and understanding of ambiguous and controversial Guides…

Looking for help with shadow AI? Want to boost your software updates’ safety? New publications offer valuable tips. Plus, learn why GenAI and data security have become top drivers of cyber strategies. And get the latest on the top “no-nos” for software security; the EU’s new cyber law; and CISOs’ communications with boards.

Dive into six things that are top of mind for the week ending Oct. 25.

1 - CSA: How to prevent “shadow AI” 

As organizations scale up their AI adoption, they must closely track their AI assets to secure them and mitigate their cyber risk. This includes monitoring the usage of unapproved AI tools by employees — an issue known as “shadow AI.”

So how do you identify, manage and prevent shadow AI? You may find useful ideas in the Cloud Security Alliance’s new “AI Organizational Responsibilities: Governance, Risk Management, Compliance and Cultural Aspects” white paper.

The white paper covers shadow AI topics including:

• Creating a comprehensive inventory of AI systems
• Conducting gap analyses to spot discrepancies between approved and actual AI usage
• Implementing ways to detect unauthorized AI wares
• Establishing effective access controls
• Deploying monitoring techniques

“By focusing on these key areas, organizations can significantly reduce the risks associated with shadow AI, ensuring that all AI systems align with organizational policies, security standards, and regulatory requirements,” the white paper reads.

For example, to create an inventory that offers the required visibility into AI assets, the document explains different elements each record should have, such as:

• The asset’s description
• Information about its AI models
• Information about its data sets and data sources
• Information about the tools used for its development and deployment
• Detailed documentation about its lifecycle, regulatory compliance, ethical considerations and adherence to industry standards
• Records of its access control mechanisms

Shadow AI is one of four topics covered in the publication, which also unpacks risk management; governance and compliance; and safety culture and training.

To get more details, read:

• The full “AI Organizational Responsibilities: Governance, Risk Management, Compliance and Cultural Aspects” white paper
• A complementary slide presentation
• The CSA blog “Shadow AI Prevention: Safeguarding Your Organization’s AI Landscape”

For more information about AI security issues, including shadow AI, check out these Tenable blogs:

• “Do You Think You Have No AI Exposures? Think Again”
• “Securing the AI Attack Surface: Separating the Unknown from the Well Understood”
• “Never Trust User Inputs -- And AI Isn't an Exception: A Security-First Approach”
• “6 Best Practices for Implementing AI Securely and Ethically”
• “Compromising Microsoft's AI Healthcare Chatbot Service”

2 - Best practices for secure software updates

The security and reliability of software updates took center stage in July when an errant update caused massive and unprecedented tech outages globally.

To help prevent such episodes, U.S. and Australian cyber agencies have published “Safe Software Deployment: How Software Manufacturers Can Ensure Reliability for Customers.”

“It is critical for all software manufacturers to implement a safe software deployment program supported by verified processes, including robust testing and measurements,” reads the 12-page document.

Although the guide is aimed primarily at commercial software vendors, its recommendations can be useful for any organization with software development teams that deploy updates internally.

The guide outlines key steps for a secure software development process, including planning; development and testing; internal rollout; and controlled rollout. It also addresses errors and emergency protocols.

“A safe software deployment process should be integrated with the organization’s SDLC, quality program, risk tolerance, and understanding of the customer’s environment and operations,” reads the guide, authored by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the FBI and the Australian Cyber Security Centre.

To get more details, read:

• The “Safe Software Deployment: How Software Manufacturers Can Ensure Reliability for Customers” guide
• The CISA alert “CISA, US, and International Partners Release Joint Guidance to Assist Software Manufacturers with Safe Software Deployment Processes”

For more information about secure software updates:

• “Tenable’s Software Update Process Protects Customers’ Business Continuity with a Safe, Do-No-Harm Design” (Tenable)
• “The critical importance of robust release processes” (Cloud Native Computing Foundation)
• “Software Deployment Security: Risks and Best Practices” (DevOps.com)
• “Software Updates, A Double-Edged Sword for Cybersecurity Professionals” (Infosecurity)
• “DevOps Best Practices for Faster and More Reliable Software Delivery” (DevOps.com)

3 - Report: GenAI, attack variety, data security drive cyber strategies

What issues act as catalysts for organizations’ cybersecurity actions today? Hint: They’re fairly recent concerns. The promise and peril of generative AI ranks first. It’s closely followed by the ever growing variety of cyberattacks; and by the intensifying urgency to protect data.

That’s according to CompTIA’s “State of Cybersecurity 2025” report, based on a survey of almost 1,200 business and IT pros in North America and in parts of Europe and Asia. 

These three key factors, along with others like the scale of attacks, play a critical role in how organizations currently outline their cybersecurity game plans.

“Understanding these drivers is essential for organizations to develop proactive and adaptive cybersecurity strategies that address the evolving threat landscape and safeguard their digital assets,” reads a CompTIA blog about the report.

Organizations are eagerly trying to understand both how generative AI can help their cybersecurity programs and how this technology is being used by malicious actors to make cyberattacks harder to detect and prevent.

Meanwhile, concern about data protection has ballooned in the past couple of years. “As organizations become more data-driven, the need to protect sensitive information has never been more crucial,” reads the blog.

Not only are organizations focused on securing data at rest, in transit and in use, but they’re also creating foundational data-management practices, according to the report.

“The rise of AI has accelerated the need for robust data practices in order to properly train AI algorithms, and the demand for data science continues to be strong as businesses seek competitive differentiation,” the report reads.

To get more details, read:

• The report’s announcement “Cybersecurity success hinges on full organizational support, new CompTIA report asserts”
• CompTIA’s blogs “Today’s top drivers for cybersecurity strategy” and “Cybersecurity’s maturity: CompTIA’s State of Cybersecurity 2025 report”
• The full “State of Cybersecurity 2025” report

For more information about data security posture management (DSPM) and preventing AI-powered attacks, check out these Tenable resources:

• “Harden Your Cloud Security Posture by Protecting Your Cloud Data and AI Resources” (blog)
• “Know Your Exposure: Is Your Cloud Data Secure in the Age of AI?” (on-demand webinar)
• “The Data-Factor: Why Integrating DSPM Is Key to Your CNAPP Strategy” (blog)
• “Mitigating AI-Related Security Risks” (on-demand webinar)
• “Securing the AI Attack Surface: Separating the Unknown from the Well Understood” (blog)

4 - CISA lists software dev practices most harmful for security

Recommended best practices abound in the cybersecurity world. However, CISA and the FBI are taking the opposite tack in their quest to improve the security of software products: They just released a list of the worst security practices that software manufacturers ought to avoid.

Titled “Product Security Bad Practices,” the document groups the “no-nos” into three main categories: product properties; security features; and organizational processes and policies.

“It’s 2024, and basic, preventable software defects continue to enable crippling attacks against hospitals, schools, and other critical infrastructure. This has to stop,” CISA Director Jen Easterly said in a statement.

“These product security bad practices pose unacceptable risks in this day and age, and yet are all too common,” she added.

Here are some of the worst practices detailed in the document, which is part of CISA’s “Secure by Design” effort:

• Using programming languages considered “memory unsafe”
• Including user-provided input in SQL query strings
• Releasing a product with default passwords
• Releasing a product with known and exploited vulnerabilities
• Not using multi-factor authentication
• Failing to disclose vulnerabilities in a timely manner

Although the guidance is aimed primarily at software makers whose products are used by critical infrastructure organizations, the recommendations apply to all software manufacturers.

If you’re interested in sharing your feedback with CISA and the FBI, you can submit comments about the document until December 16, 2024 on the Federal Register.

To get more details, check out:

• CISA’s announcement “CISA and FBI Release Product Security Bad Practices for Public Comment”
• The full document “Product Security Bad Practices”

For more information about how to develop secure software:

• “Tenable Partners with CISA to Enhance Secure By Design Practices” (Tenable)
• “Ensuring Application Security from Design to Operation with DevSecOps” (DevOps.com)
• “What is application security?” (TechTarget)
• “Guidelines for Software Development (Australian Cyber Security Centre)

5 - New EU law focuses on cybersecurity of connected digital products

Makers of digital products — both software and hardware — that directly or indirectly connect to networks and to other devices will have to comply with specific cybersecurity safeguards in the European Union.

A newly adopted law known as the “Cyber Resilience Act” outlines cybersecurity requirements for the design, development, production and lifecycle maintenance of these types of products, including IoT wares such as connected cars.

For example, it specifies a number of “essential cybersecurity requirements” for these products, including that they:

• Aren’t shipped with known exploitable vulnerabilities
• Feature a “secure by default” configuration
• Can fix their vulnerabilities via automatic software updates
• Offer access protection via control mechanisms, such as authentication and identity management
• Protect the data they store, transmit and process using, for example, at-rest and in-transit encryption

“The new regulation aims to fill the gaps, clarify the links, and make the existing cybersecurity legislative framework more coherent, ensuring that products with digital components (...) are made secure throughout the supply chain and throughout their lifecycle,” reads a statement from the EU’s European Council.

The law will “enter into force” after its publication in the EU’s official journal and will apply and be enforceable 36 months later, so most likely in October 2027 or November 2027. However, some of its provisions will be enforceable a year prior.

For more information and analysis about the EU’s Cyber Resilience Act:

• “Cyber Resilience Act Requirements Standards Mapping” (ENISA)
• “The Cyber Resilience Act, an Accidental European Alien Torts Statute?” (Lawfare)
• “EU Cybersecurity Regulation Adopted, Impacts Connected Products” (National Law Review)
• “Open source foundations unite on common standards for EU’s Cyber Resilience Act” (TechCrunch)
• “The Cyber Resilience Act: A New Era for Mobile App Developers” (DevOps.com)

VIDEO

The EU Cyber Resilience Act: A New Era for Business Engagement in Open Source Software (Linux Foundation) 

6 - UK cyber agency: CISOs must communicate better with boards

CISOs and boards of directors are struggling to understand each other, and this is increasing their organizations’ cyber risk, new research from the U.K.’s cyber agency has found.

For example, in one alarming finding, 80% of respondents, which included board members, CISOs and other cyber leaders in medium and large enterprises, confessed to being unsure of who is ultimately accountable for cybersecurity in their organizations.

“We found that in many organisations, the CISO (or equivalent role) thought that the Board was accountable, whilst the Board thought it was the CISO,” reads a blog about the research titled “How to talk to board members about cyber.”

As a result, the U.K. National Cyber Security Centre (NCSC) has released new guidance aimed at helping CISOs better communicate with their organizations’ boards titled “Engaging with Boards to improve the management of cyber security risk.”

“Cyber security is a strategic issue, which means you must engage with Boards on their terms and in their language to ensure the cyber risk is understood, managed and mitigated,” the document reads.

Here’s a small sampling of the advice:

• Understand your audience, including who are the board’s members and their areas of expertise; and how the board works, such as its meeting formats and its committees.
• Talk about cybersecurity in terms of risks, and outline these risks concretely and precisely, presenting them in a matter-of-fact way.
• Don’t limit your communication with board members to formal board meetings. Look for opportunities to talk to them individually or in small groups outside of these board meetings.
• Elevate the discussions so that you link cybersecurity with your organization’s business challenges, goals and context.
• Aim to provide a holistic view, and avoid using technical jargon.
• Aim to advise instead of to educate.

The CareerTech Testing Center (CTTC) works closely with instructors, industry representatives and credentialing entities to identify and develop assessments and assessment preparation materials that are aligned with recognized industry standards.

Presidential Voter Guide https://www.hbgdiocese.org/wp-content/uploads/2024/09/2024-PA-Presidential-Voter-Guide.pdf Allentown Diocese https://www.dropbox.com/scl/fi/38ozcuv2k9a8284l3g5oj/State-Voter-Guide-for-Diocese-of-Allentown.pdf?rlkey=d736o5zt9dim845lp5i8x264g&e=1&st=n431ntpo&dl=0 Harrisburg Diocese  https://www.hbgdiocese.org/wp-content/uploads/2024/09/2024-State-Voter-Guide-Harrisburg.pdf Erie Diocese  https://www.eriercd.org/images/pdf/2024-PCC-Voter%20Guide.pdf Altoona-Johnstown Diocese https://www.dioceseaj.org/2024-pcc-voter-guide/ Scranton Diocese https://www.dioceseofscranton.org/wp-content/uploads/2024/10/PCC-Voter-Guide-Scranton.pdf Pittsburgh Diocese https://acrobat.adobe.com/id/urn:aaid:sc:US:50d08636-546a-4ad1-8030-46a1fa4ed5e3        

Comprehensive playbooks on recyclability, reuse and compostability offer roadmap for sustainable plastic management.

Penn State Abington rehabilitation and human services faculty Abigail Akande, Stacey Conway and Michael Lavetsky wrote a recently published book, "Experiential Learning and Internship for Undergraduates: A Workbook for Undergraduate Interns in the Human Services Field," to help guide human services students at Abington and other Penn State campuses through the internship and career development and exploration processes. 

Jos Buttler's explosive 83 off 45 balls powered England to a seven-wicket win over West Indies in the 2nd T20I. Chasing 159, Buttler and Will Jacks' 129-run stand sealed victory in 14.5 overs.  

Many of us in these past few generations first heard of the Metropolitan Museum of Art while reading E. L. Konigsburg’s novel From the Mixed-Up Files of Mrs. Basil E. Frankweiler. More than a few of us also fantasized about running away to live in that vast cultural institution like the book’s young protagonists Claudia and […]

Playing his first ODI since last year's World Cup in India, Cummins produced a nerveless knock of 32 from 31 balls to push the hosts past Pakistan's modest total of 203 with 16.3 overs to spare

Some tips for creating LibGuides:

Images
To add an image to a LibGuides page, first upload the image to our server. I've put a few in http://www.uflib.ufl.edu/msl/subjects/ but we might want to create a new folder for our LibGuides images. After you link to the image, click the "centered text" icon to center your image in its box.

Editors (secondary authors)
If you create a new page/tab within a Guide of which you are not the primary author, your photo and contact info will appear on that new page/tab! This may be OK, but if you'd rather have the primary author appear, ask the primary author to create a new page/tab, then copy the page created by the secondary author, then delete the secondary author's version.

Subjects
Assign your published page to one or more Subject Categories. Click on Change Status, then in the Subject Categories (Optional) section, pick one, click on "associate," repeat as desired. Be sure to pick at least one from:
* Agriculture
* Biological Sciences
* Chemical & Physical Sciences
* Engineering
* Math & Stats
* Course Guides
and notify Joe so he can add the pages to those listings from http://www.uflib.ufl.edu/msl/subjects/index.html.

Good news: We can alter the Subject Categories at any time (even after a page has been published) and secondary authors may change them, too.

What else?
What other tips have you learned for improving and coordinating our LibGuides???

Dwayne Smith’s stingy spell restricts Kolkata Knight Riders to its lowest score of this season.

A Princeton University-based study could prove significant in answering among the most enduring questions for ecologists: Why do species live where they do, and what are the factors that keep them there? The ranges of animals in the world's temperate mountain areas — often presumed to be determined by competition — may actually be determined more by temperature and habitat, the researchers report. The findings indicate that species living in temperate mountain habitats — particularly in the northern latitudes — could face even greater repercussions from climate change than previously thought.

With shrinking design nodes, a significant portion of the delays are contributed by the wires rather than the cells. Traditional synthesis tools use fan-out-based wire-load models to provide wire delay information, which has led to significant differences...(read more)

Every massive galaxy has a black hole at its center, and the heftier the galaxy, the bigger its black hole. But why are the two […]

The post Dark matter guides growth of supermassive black holes appeared first on Smithsonian Insider.

More than 9.6 million children — or 13 percent of all children in the U.S. — live in families with annual incomes below the poverty line, according to data from 2015. As closures and restrictions related to COVID-19 begin to impact the U.S. economy, it’s clear many more families will be receiving fewer paychecks and less income in the coming months, putting more children at risk of falling below the poverty line.

2006-2011

More Than 600 Destinations Added