Starts: Sat, 16 Nov 2024 17:30:00 -0500
11/16/2024 05:30:00PM
Location: North Point, Hong Kong (china)

Starts: Sat, 30 Nov 2024 20:00:00 -0500
11/30/2024 05:00:00PM
Location: Lac-Brome (Knowlton), Canada

This document is only available in PDF format.

The Minister of Finance has approved amendments to Ontario Securities Commission (OSC) Rule 91-507 Trade Repositories and Derivatives Data Reporting and consequential amendments to OSC Rule 13-502 Fees (collectively, the Amendments) pursuant to

This document is only available as a PDF.

Frequently asked questions about a zero-day vulnerability in Fortinet’s FortiManager that has reportedly been exploited in the wild.

Background

The Tenable Security Response Team (SRT) has compiled this blog to answer Frequently Asked Questions (FAQ) regarding a zero-day vulnerability in Fortinet’s FortiManager.

FAQ

What is FortiJump?

FortiJump is a name given to a zero-day vulnerability in the FortiGate-FortiManager (FGFM) protocol in Fortinet’s FortiManager and FortiManager Cloud. It was named by security researcher Kevin Beaumont in a blog post on October 22. Beaumont also created a logo for FortiJump.

What are the vulnerabilities associated with FortiJump?

On October 23, Fortinet published an advisory (FG-IR-24-423) for FortiJump, assigning a CVE identifier for the flaw.

What is CVE-2024-47575?

CVE-2024-47575 is a missing authentication vulnerability in the FortiGate to FortiManager (FGFM) daemon (fgfmsd) in FortiManager and FortiManager Cloud.

How severe is CVE-2024-47575?

Exploitation of FortiJump could allow an unauthenticated, remote attacker using a valid FortiGate certificate to register unauthorized devices in FortiManager. Successful exploitation would grant the attacker the ability to view and modify files, such as configuration files, to obtain sensitive information, as well as the ability to manage other devices.

Obtaining a certificate from a FortiGate device is relatively easy:

Comment
by from discussion
infortinet

According to results from Shodan, there are nearly 60,000 FortiManager devices that are internet-facing, including over 13,000 in the United States, over 5,800 in China, nearly 3,000 in Brazil and 2,300 in India:

When was FortiJump first disclosed?

There were reports on Reddit that Fortinet proactively notified customers using FortiManager about the flaw ahead of the release of patches, though some customers say they never received any notifications. Beaumont posted a warning to Mastodon on October 13:

Post by @GossiTheDog@cyberplace.social

View on Mastodon

Was this exploited as a zero-day?

Yes, according to both Beaumont and Fortinet, FortiJump has been exploited in the wild as a zero-day. Additionally, Google Mandiant published a blog post on October 23 highlighting its collaborative investigation with Fortinet into the “mass exploitation” of this zero-day vulnerability. According to Google Mandiant, they’ve discovered over 50 plus “potentially compromised FortiManager devices in various industries.”

Which threat actors are exploiting FortiJump?

Google Mandiant attributed exploitation activity to a new threat cluster called UNC5820, adding that the cluster has been observed exploiting the flaw since “as early as June 27, 2024.”

Is there a proof-of-concept (PoC) available for this vulnerability/these vulnerabilities?

As of October 23, there are no public proof-of-concept exploits available for FortiJump.

Are patches or mitigations available for FortiJump?

The following table contains a list of affected products, versions and fixed versions.

Fortinet’s advisory provides workarounds for specific impacted versions if patching is not feasible. These include blocking unknown devices from attempting to register to FortiManager, creating IP allow lists of approved FortiGate devices that can connect to FortiManager and the creation of custom certificates. Generally speaking, it is advised to ensure FGFM is not internet-facing.

Has Tenable released any product coverage for these vulnerabilities?

A list of Tenable plugins for this vulnerability can be found on the individual CVE page for CVE-2024-47575 as they’re released. This link will display all available plugins for this vulnerability, including upcoming plugins in our Plugins Pipeline.

Get more information

• Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs
• FortiGuard Labs PSIRT FG-IR-24-423 Advisory

Join Tenable's Security Response Team on the Tenable Community.
Learn more about Tenable One, the Exposure Management Platform for the modern attack surface.

Toronto ─ On October 21, the Canadian Securities Administrators (CSA), the Canadian Public Accountability Board (CPAB), and the Office of the Superintendent of Financial Institutions (OSFI) co-hosted the sixth annual Canadian Audit Quality Roundtable.

TORONTO – The Canadian Securities Administrators (CSA) today published

Here is a Storify round up of the SpotOn London session: ORCID – why do we

"As the House of Slaughter arrives to clean up the situation by any means necessary, Erica will find that the true threat to those around her isn't who— or what— she ever expected. And the cost of saving the day may be too high for anyone to pay … ." -- Description provided by publisher.

وجز :

TORONTO – The Canadian Securities Administrators (CSA), the Canadian Investment Regulatory Organization (CIRO), and the Ombudsman for Banking Services and Investments (OBSI) remind investors that they all offer investors services related to claims or complaints free of charge.

Citation Marivoet, Wim; and Hema, Aboubacar. 2024. How did households in Mali cope with covariate shocks between 2018 and 2023? Source: IFPRI Africa Regional Office (AFR)

En el Perú, se estima que hay aproximadamente 6 millones de personas que migraron internamente en algún momento de su vida. Esto equivale al 20.3% de la población, siendo su mayoría originaria de la serranía peruana. Aunque Lima es el principal polo de atracción, en los últimos años, se ha observado un aumento en la migración hacia las regiones de Madre de Dios, Tacna, Arequipa y Moquegua (INEI, 2022). Entre el 2002 y 2007, Madre de Dios fue el departamento que tuvo la mayor cantidad de migrantes con un saldo migratorio neto de 14,8% (Yamada, 2012).

"Batman: White Knight Presents: Harley Quinn takes place two years after Batman: Curse of the White Knight. Azrael has wiped out criminals in Gotham, Jack Napier (formerly The Joker) is dead, Bruce Wayne (Batman) is in prison, and Harley Quinn is adjusting to life as a single mother, raising the twins she had with Jack. But as new villains arise, Harley is forced to dance with madness once again and confront her own past with The Joker and Batman while helping the Gotham City police and an eager young FBI agent uncover the truth behind a series of gruesome murders. This collection also features a chapter from Harley Quinn's newest digital first series, Harley Quinn Black + White + Red, told in a traditional black-and-white format with the color red uniquely shaping Harley Quinn's story." -- Provided by publisher.

"Miles Morales, the Ultimate Universe's newest Spider-Man, is back in action with a new status quo and a new outlook on life! But now Miles must face with the worst nightmare of the Spider-Man legacy: Norman Osborn, the Green Goblin— the man who killed Peter Parker! Or did he … ? Even as new villains start coming out of the woodwork, Miles finds himself with— a girlfriend! Her name is Katie Bishop, but she has a secret … and it's bad news for Spider-Man! As Miles makes a life-changing decision, he discovers a mind-blowing truth about his family! But what does it have to do with S.H.I.E.L.D.? Doctor Doom steps from the shadows and Spider-Man gathers the mighty Ultimates— but no matter what happens next, this might be the end of the world for Miles Morales!" -- Description provided by publisher.

"Jim Panzee is out for his usual Wednesday walk when he accidentally squishes his stress orange into orange juice. He and his friends must cross the jungle before all of the fresh oranges are gone." -- Provided by publisher.

"A graphic biography of civil rights leader and American icon Martin Luther King Jr. This graphical biography tells the story of the most prominent leader of the American civil rights movement. With full-color illustrations and a historically accurate narrative, Martin Luther King Jr.: Voice for Equality! will inform and entertain readers of all ages. From his childhood in Atlanta to his rise as an international icon of human rights and a fiery orator who refused to back down in the face of adversity, King's life story serves as an ongoing source of inspiration." -- Provided by publisher.

This document is only available in PDF format.

This document is available as PDF only. The following links go to sections in the PDF. 

Tenable®, the exposure management company, announced today that Shelly Raban, senior cloud security researcher for Tenable, will give a presentation at fwd:cloudsec Europe 2024, taking place on 17 September, 2024 in Brussels, Belgium.

During the session titled, “Who Watches the Watchmen? Stealing Credentials from Policy-as-Code Engines (and Beyond),” Raban will explore techniques adversaries use to exploit modern policy-as-code and Infrastructure-as-code (IaC) domain-specific languages (DSLs), compromise cloud identities and exfiltrate sensitive data. Raban will conclude her presentation by sharing various detection strategies that cyber defenders can implement to detect malicious activity. 

The session will be hosted in the Main Room from 2:50 - 3:10 pm CEST. 

More information on the event is available on the fwd:cloudsec Europe website. 

More information about Tenable Cloud Security is available at: https://www.tenable.com/products/tenable-cloud-security 

About Tenable

Tenable® is the exposure management company, exposing and closing the cybersecurity gaps that erode business value, reputation and trust. The company’s AI-powered exposure management platform radically unifies security visibility, insight and action across the attack surface, equipping modern organizations to protect against attacks from IT infrastructure to cloud environments to critical infrastructure and everywhere in between. By protecting enterprises from security exposure, Tenable reduces business risk for more than 44,000 customers around the globe. Learn more at tenable.com. 

###

Media Contact:

Tenable

tenablepr@tenable.com

Overcoming your pain-proven strategies for grief recovery Coping with loss is difficult, but that doesn't mean you have to suffer alone. Based on the proven-effective acceptance and commitment therapy (ACT) treatment, Moving Through Grief provides simple and effective techniques to help you get unstuck and start living a rich and fulfilling life again, loss and all. ACT is all about embracing what hurts and committing to actions that will improve and enrich your life. Whether you're dealing with the loss of a loved one, your health, home, or even career, Moving Through Grief provides you with creative exercises that will help you work through your pain and reconnect with the things you love. In Moving Through Grief, you will learn: - How you can show up for your life and experience joy and satisfaction again, even as you work through the pain of your loss -Ddiscover how the six tools of ACT-values, committed action, acceptance, being present, cognitive diffusion, and self-as-context-can ease your pain and aid with the healing process - And make real progress towards feeling like yourself again with straightforward exercises, like identifying your values and setting realistic goals. Find out how ACT can change the way you relate to your pain with Moving Through Grief.

How do we find lasting, trusting, and fulfilling friendships? Is it by being popular? Dazzling others with your genius? Looking for that ultimate BFF? Hiding all your imperfections and trying hard to fit in? Deep and enduring friendships are essential to our psychological and physical well-being. Unfortunately, between bullying, social anxiety, peer pressure, and other issues, many teens feel isolated. In Dear Libby, trusted columnist Libby Kiszner offers a breakthrough approach to friendship and connection. You can create friendships from the inside out-rather than from the outside in. You can experience friendships with vibrant self-expression in every stage of life, making Dear Libby a book that can be read and reread at any age. Containing seven core principles, this life-changing resource not only explains the dynamics of connections and friendships but also gives practical tools to develop them. Integrating contemporary issues, timeless insight, real-life skills, and unique perspectives, Dear Libby provides a hands-on guide for dealing with everyday friendship struggles faced by teens today. Teens and readers of all ages will gain insight and understanding on how to make profound, joyful relationships possible. Find answers to real questions like: What should I do when people who are supposed to be my friends call me names or embarrass me? What should I do I do if I'm being ignored at school? What is the best way to handle loneliness? Someone just stole my friend. What can I do? What can I do when my friends get together and "forget" to invite me?

L’investissement dans les agriculteurs, c’est-à-dire le capital humain de l’agriculture, est crucial pour relever les défis que posent nos systèmes agroalimentaires.

Le changement climatique constitue une menace croissante pour nos systèmes alimentaires, dont les implications sont graves pour la sécurité alimentaire et nutritionnelle, les moyens de subsistance et le bien-être général, en particulier pour les personnes pauvres et vulnérables du monde entier. Une action urgente contre le changement climatique est attendue à l’échelle mondiale – à la fois pour réaliser les importantes réductions d’émissions requises pour limiter le réchauffement climatique et pour accroître les capacités d’adaptation et la résilience.

L'enorme potentiel agricole de la Republique Democratiqu du Congo (RDC) est bien documente. Le pays est doté de plus de deux millions de kilomètres carrés (km²) de terres, dont 800 mille sont arables, et pourtant, la portion de terres cultivées ne s’élève qu’à 10 pour cent. La RDC bénéficie également de conditions climatiques et météorologiques favorables, permettant plusieurs récoltes de nombreuses cultures chaque année.

Les modèles d’équilibre général calculable (MEGC), largement admis dans la littérature et utilisés comme outils d’analyse d’impacts potentiels de politiques économiques, sont alimentés par des données provenant de la Matrice de Comptabilité Sociale (MCS). Celle-ci appartient à la grande famille des comptes nationaux, représentant l’ensemble des interrelations entre les activités, les institutions d’une économie.

Cette note propose un résumé des politiques, stratégies et plans d’action ayant trait à la nutrition (désignés ici sous le terme de « politiques ») en Afrique de l’Ouest.

Ce document présente une analyse des chaînes de valeur agroalimentaires de manioc, de riz, de lait et de poisson le long du corridor économique entre les capitales provinciales de Bukavu (Sud-Kivu) et Kalemie (Tanganyika) situées dans la partie orientale de la République démocratique du Congo (RDC). Les principales données utilisées pour cette étude proviennent d’enquêtes menées en 2021 auprès d’environ 3000 acteurs conomiques familiaux, y compris des agriculteurs, des transformateurs et des intermédiaires, actifs dans une ou plusieurs des quatre filières ciblées.

En 2022, le monde a subi des crises multiples. Les perturbations des systèmes alimentaires dues à la longue pandémie de COVID-19, des catastrophes naturelles majeures, des troubles civils, l’instabilité politique et les impacts croissants du changement climatique ont persisté, tandis qe l’inflation et la guerre entre la Russie et l’Ukraine ont exacerbé la crise alimentaire mondiale et la crise des engrais.

Créée notamment pour promouvoir le commerce intra-régional de biens dans la région, la Communauté économique des États d'Afrique de l'Ouest devait aussi permettre d'y réduire l'insécurité alimentaire. Mais les « points de sécurité », dressés le long des corridors de commerce par les autorités administratives qui prélèvent des pots-de-vin, sont venus limiter cette ambition. S’élevant jusqu’à 576 dollars aux 100 kms au Togo en 2017, cette corruption se mesure aussi en temps perdu, avec plus de trois heures aux 100 kms.

Enhancing milk quality in Uganda: Challenges and innovations in the dairy value chain

Improving market incentives.

The post Enhancing milk quality in Uganda: Challenges and innovations in the dairy value chain appeared first on IFPRI.

Written by locals, Fodor's travel guides have been offering expert advice for all tastes and budgets for more than 80 years. Packed with landmark sights, world-renowned museums, awe-inspiring churches, fabulous trattorias, and, of course, the Vatican, Rome is a city that's worth returning to over and over again. And with so much to see and do in the Eternal City, Fodor's Rome is the guide to help travelers make the most of every trip.

Event Begins: Wednesday, November 13, 2024 7:00pm
Location: Off Campus Location
Organized By: Wesley Foundation Campus Ministry

We'll gather for discussion, Bible or book studies, and discover the intersection of faith and identity. This group is for the LGBTQIA2S+ community and allies.

Event Begins: Wednesday, November 13, 2024 6:30pm
Location: Museum of Art
Organized By: Spectrum Center

Who are you? What is your story? How do you express yourself? The experiences of Black queer life are reflected in the ways we tell our stories. We will explore a kiki methodology grounded in ballroom culture and Black queer storytelling. Drawing from queer of color critique and narrative construction, kiki methodology engages in three components: Black queer meaning-making, Black queer storytelling, and Black queer artistic expression. Kiki methodology connects envisioning and centering words, feelings, and voices of the Black queer community in the form of storytelling in higher education. We will engage about what is needed to be in queer community and kinship through storytelling.

ABOUT DR. HUTCHINGS
Dr. Quortne R. Hutchings (they, them) is a first-generation college graduate, proud Ronald E. McNair scholar alum, and assistant professor of higher education at Northern Illinois University. Their research primarily focuses on Black gay, bisexual, queer, and non-binary undergraduate and graduate students’ academic and social experiences in higher education, minoritized student affairs professionals’ experiences in student and academic affairs, and supporting students, faculty, and staff navigating substance use and recovery. Their research has been published in the Journal of College Student Development, Departures in Critical Qualitative Research, Journal of Higher Education, and International Journal of Qualitative Studies in Education.

TRANS AWARENESS MONTH
Trans Awareness Month is presented by Spectrum Center, and events are presented by units across campus. Find more Trans Awareness Month events at spectrumcenter.umich.edu/trans-awareness-month

Event Begins: Wednesday, November 13, 2024 4:00pm
Location: Davidson Wintergarden
Organized By: Sessions @ Michigan

Event Begins: Wednesday, November 13, 2024 10:00am
Location: Haven Hall
Organized By: Department of Afroamerican and African Studies

It's back! Brought to you by the Department of Afroamerican and African Studies (DAAS), GalleryDAAS celebrates the 50th anniversary of hip hop with “Hip Hop @ 50,” an exhibition highlighting this constantly evolving phenomenon. Explore various aspects of hip hop culture, including definitions, dates, divas, the Detroit scene, and a special tribute to J Dilla (James Dewitt Yancey), a prolific producer. Through examining the five pillars of hip hop — rapping, break dancing, DJing, graffiti and historical knowledge — it becomes evident that what began as a musical genre has impacted society, fashion, language, entertainment and even politics. Visitors will also be treated to a GREAT playlist! The gallery is open Monday–Friday from 10 a.m. to 4 p.m.

Event Begins: Wednesday, November 13, 2024 10:00am
Location: Zoom
Organized By: Sessions @ Michigan

A culture where identities do not predict outcomes is achieved through equitable behaviors, practices, policies and systems. This track equips participants with the knowledge and skills needed to address and advocate for equity. The components of this track include topics that focus on pronouns, allyship, anti-racism, bystander intervention and making institutional change for equity.

Event Begins: Wednesday, November 13, 2024 9:00am
Location: Lane Hall
Organized By: Judaic Studies

In Fall 2024, the Lane Hall exhibit space will feature works by two exciting visual artists: Rafael Neis and Anne Vetter.

Vetter’s photography exhibition, “Love is Not the Last Room” is made in collaboration with the artist’s family—their parents, their brothers, and their partner. It is an examination of play and leisure, tension and freedom. Through photographs, Vetter processes how they learned to relate in their most intimate connections, and how they relate now. This project explores queer familial relationships, and uses Vetter’s own gender fluidity as a lens to examine the gendered experiences of their family members.

Neis and Vetter’s exhibits will be on view from September 3 - December 6, 2024. A reception with the artists is planned for September 17 from 5-6:30 PM in the exhibit space.
The fall exhibits are presented with support from the Department of Women's & Gender Studies, the Frankel Center for Judaic Studies, the Frankel Institute for Advanced Judaic Studies, and the CEW+ Frances and Sydney Lewis Visiting Leaders Fund.

Located on the first floor of Lane Hall (204 S. State Street), the Exhibit Space is free and open to the public, M-F, 9am-4pm

Event Begins: Wednesday, November 13, 2024 9:00am
Location: Lane Hall
Organized By: Judaic Studies

KIN assembles the queer beings who dwell beyond the confines of binary gender and species categories. It highlights communities whose members and affiliations strain normative arrangements of “nature” and “culture.” KIN transmutes these categories by its joinings of oddbods and oddkin. It envisions worlds in which creatures form kinship beyond the monogamous, cisheterosexual, human family unit.

Transversing painting, drawing, comics, and installation, KIN’s menagerie of media, draws on ancient Jewish sources, demi-fictional autobiography, deviant zoology, and a love for the materiality of mark-making itself. Process, rather than product; becoming, rather than stasis; collaboration rather than closure: this is KIN’s hope.

Matt Horn persevered through the pandemic to open his West Oakland restaurant Horn Barbecue—to the delight of hungry crowds

Sudan’s catastrophe: farmers could offer quick post-war recovery, if peace is found

Despite the stark reality, there is a potential path forward for Sudan, believe IFPRI experts.

The post Sudan’s catastrophe: farmers could offer quick post-war recovery, if peace is found appeared first on IFPRI.

Micropillar arrays, wide window acquisition and AI-based data analysis improve comprehensiveness in multiple proteomic applications  Nature.com

Exploring the Molecular Therapeutic Mechanisms of Gemcitabine through Quantitative Proteomics  ACS Publications

Comprehensive Proteomics Analysis of the Hemolymph Composition of Sugar-Fed Aedes aegypti Female and Male Mosquitoes  ACS Publications

At ASHG, Illumina to Share Updates to Sequencing, Proteomics, and Single-Cell Technologies  Genetic Engineering & Biotechnology News

Nanoparticle enrichment mass-spectrometry proteomics identifies protein-altering variants for precise pQTL mapping  Nature.com