Palo Alto Networks on Friday issued an informational advisory urging customers to ensure that access to the PAN-OS management interface is secured because of a potential remote code execution vulnerability. "Palo Alto Networks is aware of a claim of a remote code execution vulnerability via the PAN-OS management interface," the company said. "At this time, we do not know the specifics of the

Cybersecurity researchers have discovered a new phishing campaign that spreads a new fileless variant of known commercial malware called Remcos RAT. Remcos RAT "provides purchases with a wide range of advanced features to remotely control computers belonging to the buyer," Fortinet FortiGuard Labs researcher Xiaopeng Zhang said in an analysis published last week. "However, threat actors have

Hewlett Packard Enterprise (HPE) has released security updates to address multiple vulnerabilities impacting Aruba Networking Access Point products, including two critical bugs that could result in unauthenticated command execution. The flaws affect Access Points running Instant AOS-8 and AOS-10 - AOS-10.4.x.x: 10.4.1.4 and below Instant AOS-8.12.x.x: 8.12.0.2 and below Instant AOS-8.10.x.x:

Cybersecurity researchers have uncovered nearly two dozen security flaws spanning 15 different machine learning (ML) related open-source projects. These comprise vulnerabilities discovered both on the server- and client-side, software supply chain security firm JFrog said in an analysis published last week. The server-side weaknesses "allow attackers to hijack important servers in the

Cyber threats are intensifying, and cybersecurity has become critical to business operations. As security budgets grow, CEOs and boardrooms are demanding concrete evidence that cybersecurity initiatives deliver value beyond regulation compliance. Just like you wouldn’t buy a car without knowing it was first put through a crash test, security systems must also be validated to confirm their value.

In an unusually specific campaign, users searching about the legality of Bengal Cats in Australia are being targeted with the GootLoader malware. "In this case, we found the GootLoader actors using search results for information about a particular cat and a particular geography being used to deliver the payload: 'Are Bengal Cats legal in Australia?,'" Sophos researchers Trang Tang, Hikaru Koike,

⚠️ Imagine this: the very tools you trust to protect you online—your two-factor authentication, your car’s tech system, even your security software—turned into silent allies for hackers. Sounds like a scene from a thriller, right? Yet, in 2024, this isn’t fiction; it’s the new cyber reality. Today’s attackers have become so sophisticated that they’re using our trusted tools as secret pathways,

Cybersecurity researchers have flagged a new ransomware family called Ymir that was deployed in an attack two days after systems were compromised by a stealer malware called RustyStealer. "Ymir ransomware introduces a unique combination of technical features and tactics that enhance its effectiveness," Russian cybersecurity vendor Kaspersky said. "Threat actors leveraged an unconventional blend

Behavioral analytics, long associated with threat detection (i.e. UEBA or UBA), is experiencing a renaissance. Once primarily used to identify suspicious activity, it’s now being reimagined as a powerful post-detection technology that enhances incident response processes. By leveraging behavioral insights during alert triage and investigation, SOCs can transform their workflows to become more

Threat actors with ties to the Democratic People's Republic of Korea (DPRK aka North Korea) have been found embedding malware within Flutter applications, marking the first time this tactic has been adopted by the adversary to infect Apple macOS devices. Jamf Threat Labs, which made the discovery based on artifacts uploaded to the VirusTotal platform earlier this month, said the Flutter-built

Cybersecurity researchers are calling attention to a new sophisticated tool called GoIssue that can be used to send phishing messages at scale targeting GitHub users. The program, first marketed by a threat actor named cyberdluffy (aka Cyber D' Luffy) on the Runion forum earlier this August, is advertised as a tool that allows criminal actors to extract email addresses from public GitHub

Cybersecurity researchers have disclosed new security flaws impacting Citrix Virtual Apps and Desktop that could be exploited to achieve unauthenticated remote code execution (RCE) The issue, per findings from watchTowr, is rooted in the Session Recording component that allows system administrators to capture user activity, and record keyboard and mouse input, along with a video stream of the

Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager (NTLM) and Task Scheduler have come under active exploitation in the wild. The security vulnerabilities are among the 90 security bugs the tech giant addressed as part of its Patch Tuesday update for November 2024. Of the 90 flaws, four are rated Critical, 85 are rated Important, and one is rated Moderate in

The Iranian threat actor known as TA455 has been observed taking a leaf out of a North Korean hacking group's playbook to orchestrate its own version of the Dream Job campaign targeting the aerospace industry by offering fake jobs since at least September 2023. "The campaign distributed the SnailResin malware, which activates the SlugResin backdoor," Israeli cybersecurity company ClearSky said

Why is it that in every recent Presidential election I’ve found myself saying, “We’re a nation of (now) some 330 million people, and these are the best two we can pick from to lead us?” In a recent piece, Wall Street Journal defined the choice as Awful versus Empty. (Google will get you there, though […]

Mark Smith is a brilliant attorney, gun-focused and one of our most articulate spokespersons for firearms owners civil rights. Check out his blog called The Four Boxes Diner. That’s a reference to Boxes of Liberty: the soapbox, the ballot box, the jury box, and finally the cartridge box. You also want to check out his […]

Hurricane Milton was gonna be the big one, and while we weren’t in the crosshairs for this one like we were for Hurricane Helene a few weeks ago, we were still will within its field of fire. They were predicting Category 4 and possibly Category 5.  I’m told FEMA- approved “hurricane-resistant homes” are spec’d to […]

I was saddened to be told of the recent death of my old friend Ed Lovette. He had a long and distinguished career in military, law enforcement, and the CIA. Ed was a thinking man’s instructor. We took each other’s classes. He went through my LFI-I course back in the day , and about thirty […]

Recently saw this on YouTube, from a grandmaster competition shooter who is also in law enforcement. I agree with him. I’ve said for years that while a shooting match is not a gunfight, a gunfight most certainly is a shooting match. Competition experience makes shooting under pressure the norm. Wyatt Earp competed in the informal […]

…remind them of this. I was recently reading “Andrew Jackson and the Miracle of New Orleans” by Brian Kilmeade and Don Yeager. The War of 1812 was going badly for the Americans. The British had burned the White House, and a huge contingent of British troops was in Louisiana planning to march north in conquest. […]

Don’t you hate it when the candidate “on your side” acts as if he’s trying to throw the fight? I voted for Donald Trump and urged others to do the same in 2016 and 2020, and as soon as early voting opens in my state will vote for him again in 2024. Not because he’s […]

Historically, both law and facts are on the gun owners’ side of the “gun control” debate, and the Other Side had relied largely on emotion.  I respectfully submit that emotion is something our side should play to, as well. I made that point recently at the 2024 Gun Rights Policy Conference in San Diego last […]

The Second Amendment Foundation has released a 22-minute video celebrating its fifty years of fighting for gun owners’ civil rights. Some of those who’ve been along for most or all of the ride, including founder Alan Gottlieb, give insight into how far we’ve come.  See it here:

The difficulty of this weeknotes things is that entire weeks can go by without anything interesting happening. That’s…

This is, without doubt, the stupidest coffee device I have ever bought. But I have bought it.

I completed Mass Effect 2 a couple of days ago for the first time. This article contains spoilers…

This is Rylan. How (Not) To Buy A Puppy There’s a meme wandering around Twitter/Facebook at the moment:…

On the interesting properties of becoming the kind of person who buys vinyl records.

I’ve played some computer games in 2022. Here are some words about some of them. Final Fantasy 14…

It is possible, even likely, that we will not have a projected winner of the presidential race on Nov. 5 – Election Day. And that doesn't mean there's something nefarious going on with the vote-counting.

The post Election Night Expectations appeared first on FactCheck.org.

In the waning days of his campaign, former President Donald Trump has further embraced some of Robert F. Kennedy Jr.’s incorrect or controversial views on health, including vaccines and fluoride.

The post Trump Embraces RFK Jr.’s Views on Vaccines, Fluoride appeared first on FactCheck.org.

We'll know soon enough who won the 2024 general elections for president, Congress and other important positions. But we don't have to wait a second longer to find out this year's FactCheck Award winners.

The post The 2024 FactCheck Awards appeared first on FactCheck.org.

A misspelling of former President Donald Trump's name occurred on an optional ballot review screen in Virginia, prompting an unfounded claim on social media of "election fraud." The error was a typo that appeared only on the ballot review screen, not on actual ballots, and would not affect any votes, election officials said.

The post Typo in Trump’s Name on Ballot Review Screen Is Not ‘Election Fraud’ appeared first on FactCheck.org.

Posts shared on Facebook make an unfounded claim of racially motivated threats of violence in Gwinnett County, Georgia, "from now until the Inauguration." The county sheriff's office said it had "not received any information indicating threats to any group(s) on or after election day."

The post Posts Spread Unfounded Claim of Race-Based Threat of Violence in Georgia appeared first on FactCheck.org.

Former President Donald Trump posted to social media an unsupported claim about "massive CHEATING" in Philadelphia, which he claimed had drawn the attention of law enforcement. The Philadelphia Police Department, the Philadelphia district attorney, a Republican city council member and the Pennsylvania Department of State all refuted the claim.

The post Trump Makes Unsupported Claim About ‘Massive CHEATING’ in Philadelphia appeared first on FactCheck.org.

Social media users have spread a quote attributed to Democratic Rep. Jamie Raskin, claiming he said "we won’t be certifying the election" if former President Donald Trump wins. Raskin responded, saying the quote is "100% fabricated" and that "America is having a free and fair election and Congress will certify the winner." The origin of the posts appears to be a misleading account of Raskin's comments in February.

The post Raskin Didn’t Say He ‘Won’t Be Certifying the Election’ appeared first on FactCheck.org.

Social media users alleged bias against former President Donald Trump when a Google search on Election Day for “where to vote” returned an interactive map to find a person’s polling station when including the word “Harris” but not “Trump.” The reason is because “Harris” is a county in Texas, whereas “Trump” is not a location.

The post Google’s ‘Where to Vote’ Search Result Reflects Quirk of Candidate Surname, Not Bias appeared first on FactCheck.org.

Q: What will happen in Donald Trump’s New York state criminal case now that he is president-elect?

A: Trump is scheduled to be sentenced on Nov. 26, but the judge could decide that sentencing is no longer appropriate. If Trump does receive a sentence, it could be appealed, or the judgment could be deferred until 2029, when Trump would be out of office.

FULL QUESTION

What happens if Trump wins the election and then he gets sentenced at the end of the month?

The post Trump’s New York Case: What Happens Now? appeared first on FactCheck.org.

Some social media posts falsely claimed that CBS News reported there was "cheating" in the 2024 presidential election that benefitted President-elect Donald Trump. We found no evidence of such a report, and a CBS News spokesperson said the outlet "did not report or say there was cheating in the election."

The post Posts Falsely Claim CBS News Reported ‘Cheating’ in Election appeared first on FactCheck.org.

The new 2024-25 COVID vaccines are available, so FunkyPlaid and I got ours on Friday. Because we went to a pharmacy, my health insurance didn’t cover them, so I had to use funds from my HRA. (We could have waited until our medical provider had appointments, but that would have been late September or early October — and with travel coming up soon, I was unwilling to wait.)

It is bizarre and enraging to see how agencies supposedly dedicated to public health are flailing in this moment. I’m extremely fortunate to have a job that provides health insurance, an HRA, and sick leave, and I can afford KN95 masks and rapid antigen tests. What about people who are uninsured or underinsured?

I know it’s a bummer to read this, but it’s a bigger bummer to try to survive during yet another COVID surge. Let’s take care of our health, for ourselves and for our communities.

Concentrating on

This time of year is Planner Season, when the 2025 planners are released and people like me (and maybe you too) gobble them up and then spend the rest of this year hoping that next year we have lives exciting enough to plan.

Ever the optimist, my planner line-up for 2025 is:

• For my personal planner, daily log, habit tracker, reading journal, and commonplace book, I’ll be trying the Sterling Ink Common Planner in their new N1 size, which fits inside a Traveler’s Notebook. I’m currently using a Hobonichi Weeks, which is 95mm x 186mm; the N1 size is 110mm x 210mm.
• For my work planner, the Wonderland 222 A5 Weekly Planner has been working well for me this year, so I’ll try it again in 2025.

Cultivating

✍???? Drafting two stories, one for performance (I hope ????????) and one for a collection.

???? Still knitting that gift for someone.

???? Food I made that was yummy:

• Peperonata with peppers from a coworker’s CSA box, plus peppers from our own CSA box. CSA boxes are great!
• Gluten-free vegan apple crisp. I am not a huge fan of apples in their primary form; I prefer them as a cinnamon delivery device. So this recipe from Minimalist Baker, apples chopped up and baked with oats and sugar? That works.
• Sliced heirloom tomatoes on toast spread thinly with mayonnaise. Truffle salt if you’re feeling fancy. (I was.)

???????? Learning Italian with Duolingo.

???? The workweek was short because of the holiday on Monday, but also long because of everything. I’m still trying to create better boundaries around that.

Consuming

????️ One of my planner pals shared a sample of Bungukan Kobayashi’s Yagentoshiro Reflex Violet, a dusky blue with iridescent purple shimmer.

???? “girlfriend” by Hemlocke Springs is on repeat on my brain radio.

???? You don’t need to be a Rolling Stones fan to enjoy the “I Can’t Get No Legal Action” episode of the Judge John Hodgman podcast.

???? Still working my way through the crossword puzzle books I’ve hoarded and enjoying the daily Cross|word on Puzzmo. Also, Minute Cryptic is quite humbling.

???? One last episode of “Fargo” to go, then we’ll start the latest season of “Slow Horses”.

???? What I’m reading and quoting:

• “The Mountain in the Sea” by Ray Nayler: “The great and terrible thing about humankind is simply this: we will always do what we are capable of.”

Some links

From “What would an adequate COVID response look like?” by Julia Doubleday:

Right now, state representatives are deliberately avoiding mention of COVID, while propagandizing the safety of infection and/or the end of the pandemic by refusing to mask. It is hard to imagine how successful a pandemic response might be if public officials were actually trying to end the pandemic. We quite literally have public health and political and media figures working to hide three pieces of critical information: public knowledge of the virus, public knowledge of mitigation measures that would reduce viral spread, and public knowledge of the severity of the virus (which would motivate desire to reduce viral spread).

Other links:

• NaNoWriMo Shits The Bed On Artificial Intelligence (Chuck Wendig)
• Why Goblin Mode Is the New Self-Care Routine (Cleveland Clinic)
• 2024 Winners of the 17th Annual iPhone Photography Awards

One more thing

Today I’m journaling about this quote from Seneca: “Life, if well lived, is long enough.”

Look at this absolutely good girl: my canine sister, Willa.

Concentrating on

Rest, relaxation, and quality time with loved ones! We’re visiting family in Pennsylvania this week and attending a wedding in Kentucky on Friday.

When packing, I restricted myself to three notebooks and three pens because I tend to overpack and then immediately regret as I am schlepping around a stationery store in my backpack.

Cultivating

✍???? Drafting two (very different) stories. I’m looking forward to time off work to let my creative writing brain percolate.

???? Food I made that was yummy:

• Pork chops in garlic mushroom sauce, with mashed potatoes and salad on the side. I am not a huge fan of pork chops, but I got them in our CSA box, so I looked for a recipe that incorporated other things I am a huge fan of, like garlic and mushrooms.

???????? When my brain is full of Italian, I switch over to music lessons in Duolingo. It’s fun!

???? No.

Consuming

????️ Only three pens means only three inks: De Atramentis Charles Dickens, Sailor Manyo Hinoki, and Robert Oster Sydney Lavender.

???? I heard “White Gloves” by Khruangbin for the first time in a while and forgot how much I enjoy their music.

???? Recently FunkyPlaid and I tried to watch the show “Kaos” and lasted about ten minutes. I had listened to the Pop Culture Happy Hour episode on the show and thought I might enjoy it.

???? No time for games this week. I’m looking forward to some Puzzmo!

???? We started watching “My Brilliant Friend”, the adaptation of Elena Ferrante’s Neapolitan quartet, which I read last year and loved.

???? What I’m reading and quoting:

• “The Mountain in the Sea” by Ray Nayler: “How we see the world matters — but knowing how the world sees us also matters.”

Some links

• I love Tracy Durnell’s latest weeknotes post. I’m not even mad at how it makes me feel like I’ve done absolutely nothing in comparison. ????
• Neither Elon Musk Nor Anybody Else Will Ever Colonize Mars (Albert Burneko)
• Firefly Atlas: I’m eager to see fireflies while I’m here, so I’m doing some research.

One more thing

I was a bit anxious to travel during a COVID surge, so in addition to getting the new vaccine as soon as I could, I invested in a Flo Mask Pro to wear in airports, planes, and any other crowded spaces. I’m so glad I did; it was very comfortable to wear all day, once I got used to how it felt. My glasses didn’t fog up at all, which is a minor miracle. I did get some looks (you know the kind) but that was a small price to pay for a greater chance of avoiding Covid and/or Long Covid. I only saw a handful of other people masked.