zero

Re: CVE-2024-36905: Linux kernel: Divide-by-zero on shutdown of TCP_SYN_RECV sockets

Posted by Solar Designer on Nov 12

NIST doesn't appear to provide their own CVSS vectors/scores lately.
However, they republish (with attribution) some third-party ones, this
time from CISA-ADP. The CISA-ADP CVSS vector for this vulnerability
specifies that it not only is network-reachable, but also that it has
High impact not only on Availability, but also on Confidentiality and
Integrity. This results in a CVSSv3.1 score of 9.8. Even merely
correcting the vector not to...




zero

Re: CVE-2024-36905: Linux kernel: Divide-by-zero on shutdown of TCP_SYN_RECV sockets

Posted by Clemens Lang on Nov 12

Hi,

I think the source for the CISA-ADP data is at [1]. For this specific CVE, the relevant file would be [2]. Their readme
has a section at the bottom, where they encourage feedback:

I’m aware of at last one prior case where a similar case of (IMHO) overblown CVSS scores was discussed in an issue on
this particular GitHub project [3].

Somebody seems to already have opened a ticket for this CVE, too: [4]

[1]:...




zero

RE: CVE-2024-36905: Linux kernel: Divide-by-zero on shutdown of TCP_SYN_RECV sockets

Posted by Joel GUITTET on Nov 12

Hello
First thanks to Alexander for reposting because I was not able to do so!
You're right Clemens, I have myself ask the question on this github
(https://github.com/cisagov/vulnrichment/issues/130), but still no information for the moment.
Joel




zero

High-performance Buildings Zero in on Zero-Net Energy

State and local regulations are driving new building construction as well as existing buildings to implement energy-efficient technologies in order to meet future carbon emissions reduction goals. These facilities, known as high-performance buildings, strive to deliver optimal efficiency, reliability, value, and comfort to tenants.




zero

SE-Radio Episode 334: David Calavera on Zero-downtime Migrations and Rollbacks with Kubernetes

Jeremy Jung talks with David Calavera about zero-downtime migrations and rollbacks with Kubernetes. In this episode we define migrations, rollbacks, and discuss how Netlify was able to migrate to Kubernetes and roll back off of it multiple times without impacting their users. David explains how developers can run old and new systems simultaneously, the importance of defining errors in your system, and when to apply fixes vs rolling back. We also discuss their decision to move to Kubernetes, and the benefits they received.




zero

Episode 385: Evan Gilman and Doug Barth on Zero-Trust Networks

Evan Gilman and Doug Barth, authors of Zero-Trust Networks: building secure systems in untrusted networks discuss zero-trust networks.




zero

SE Radio 635: Stevie Caldwell on Zero-Trust Architecture

Stevie Caldwell, Senior Engineering Technical Lead at Fairwinds, joins host Priyanka Raghavan to discuss zero-trust network reference architecture. The episode begins with high-level definitions of zero-trust architecture, zero-trust reference architecture, and the pillars of Zero Trust. Stevie describes four open-source implementations of the Zero Trust Reference Architecture: Emissary Ingress, Cert Manager, LinkerD, and the Policy Engine Polaris. Each component is explored to help clarify their roles in the Zero Trust journey. The episode concludes with a look at the future direction of Zero Trust Network Architecture.

This episode is sponsored by QA Wolf.




zero

Screen Innovations Slate 1.2 Zero Edge Pro Screen Review

Screen Innovations Slate 1.2 ALR material mated with the company's Zero Edge Pro frame design makes for a high performance, high style combo.



  • Home Theater Projectors

zero

"Zero Waste” Blister Pack Wins Packaging Design Award

Winning entry suggests replacing the plastic and aluminum often used in medication packaging with paperboard.




zero

ALPLA and zeroo Partner to Launch Reusable PET Bottles for Cosmetic Products

This reusable and fully recyclable plastic packaging is available in three colors and is suitable for all caps.




zero

Zero Emission Vehicle Mandate: National Franchised Dealers Association

Room 29, Parliament Buildings



  • Committee for Infrastructure

zero

Changing the Conversation on Net-Zero Emissions




zero

Feds Aim for Net Zero in Facilities




zero

Trump wins U.S. presidency! Net Zero, UN climate pacts, Green New Deal & Inflation Reduction Act face ruin

Climate Depot's Marc Morano: "Congratulations to President Trump and Sen. J.D. Vance. Finally, US leadership has returned to fight the international climate agenda. The U.S. will finally have a president back in the Oval Office who will be pro-science, pro-environment, and fight the demented net zero climate agenda, the Green New Deal, and the UN climate treaty process.

President Trump will also be able to face off against the ridiculous, unsustainable, and unscientific claims that emanate from our most esteemed institutions. America will once again be a beacon of scientific realism regarding climate change and energy policy. Bravo!"  




zero

Europe’s Latest Net-Zero Victim is Germany

https://www.wsj.com/opinion/germany-net-zero-policy-olaf-scholz-christian-lindner-europe-climate-energy-6c7fb13a By The Editorial Board The costs of net-zero climate policies continue to roil Western politics, and the latest evidence is the collapse last week of Chancellor Olaf Scholz’s coalition in Germany, paving the way for voting no later than March. Germany has been governed since late 2021 by an unwieldy condominium of Mr. Scholz’s […]




zero

Cruise lines’ new leaders have net-zero challenge on their mind

The powers that be for the big cruise lines have been handing off the reins since steering their companies through the pandemic with new CEOs in place, but while still chasing prepandemic profits, a future with net-zero emissions by 2050 remains a specter that doesn’t have an obvious solution, yet.




zero

TR.zt-acp - Guidelines for zero-trust based access control platform in telecommunication networks

TR.zt-acp - Guidelines for zero-trust based access control platform in telecommunication networks




zero

Battery recycling startup Tozero bags €11M to boost Europe’s lithium supply


In 1991, Sony brought the first rechargeable lithium-ion battery to market. The unique chemistry proved a game-changer in energy storage. Today everything from EVs to smartphones depends on it, with demand skyrocketing.  But lithium is rare, most of it comes from unstable markets outside Europe, and its extraction can cause extensive pollution. We need more lithium to enable the green transition and yet, currently, its use is unsustainable — both environmentally and economically. We’re stuck in a paradox. Munich-based startup Tozero believes that battery recycling offers a way out. Recycling batteries is far from a new concept, but the German venture…

This story continues at The Next Web




zero

Case Study: The Net Zero Home of New Jersey

This state-of-the-art 6,000-square-foot LEED Platinum Certified residence is built solely with sustainability, energy efficiency and comfort in mind.




zero

Project Profile: New Jersey School District Enters Net-Zero Revolution with SolarEdge PV Rooftop Installation

The SolarEdge DC-optimized systems are forecast to reduce carbon emissions by the equivalent of 1,500 tons of coal burned, or 171 homes’ electricity use per year.




zero

Zero To Hero: Magnet Advertising

 Traditional advertising attempted to interrupt, disengage and refocus attention from what the audience was doing to promote a product or service. 





zero

Applying zero trust to OT requires ‘common sense approach’

Operational technology suffers from a technical debt that renders infrastructure vulnerable to cyberattacks as it becomes further enmeshed with IT systems.

The post Applying zero trust to OT requires ‘common sense approach’ first appeared on Federal News Network.




zero

Applying zero trust in federal IT

Patrick Sullivan, CTO of Security Strategy at Akamai Technologies, joins host John Gilroy on this week's Federal Tech Talk to discuss Zero Trust and how to apply it to federal information technology.

The post Applying zero trust in federal IT first appeared on Federal News Network.




zero

How the Army is always testing, training on zero trust

The Army I Corps used the recent Yama Sakura 85 exercise to further prove out how to create a single, secure network to share information with allied partners.

The post How the Army is always testing, training on zero trust first appeared on Federal News Network.




zero

From AI to zero trust, how 2023 will be remembered by federal IT experts

Federal News Network asked a panel of current and former federal executives for their opinions about 2023 and what federal IT and acquisition storylines stood out over the last 12 months.

The post From AI to zero trust, how 2023 will be remembered by federal IT experts first appeared on Federal News Network.




zero

Portnox survey reveals CISO’s views on job security, zero trust, multi-factor authentication and more

Portnox, provider of cloud-native, zero trust access control solutions, today unveiled the results of its latest survey, ‘CISO Perspectives for 2025’, revealing critical insights into the challenges faced by Chief Information Security Officers (CISOs) at large enterprises.




zero

Women in Green Business Awards: The top 20 women accelerating the UK’s net zero transition revealed ahead of Net Zero Festival 2024

We Mean Business Coalition’s chief executive officer Maria Mendiluce, Zapmap’s co-founder and chief operating officer Melanie Shufflebotham, and co-leader of the Green Party England and Wales Carla Denyer are among those to have been awarded an inaugural Women in Green Business Award celebrating their work driving the UK's net zero transition. 




zero

DoD agencies confront zero trust challenges, misunderstandings ahead of 2026 deadline

The Defense Department’s zero trust framework is acting as a catalyst, driving mission owners to industry in search of zero trust solutions

The post DoD agencies confront zero trust challenges, misunderstandings ahead of 2026 deadline first appeared on Federal News Network.




zero

CMS looks to make ‘intentional’ investments in push to underlying zero trust pillars

During this exclusive CISO Handbook webinar, moderator Justin Doubleday and guest Robert Wood, chief information security officer at Centers for Medicare and Medicaid Services will explore how his agency is implementing zero trust and other modern security practices. In addition, David Chow, global chief technology strategy officer at Trend Micro, will provide an industry perspective.

The post CMS looks to make ‘intentional’ investments in push to underlying zero trust pillars first appeared on Federal News Network.




zero

Building zero trust as IT devices continue to multiply

During this exclusive webinar, moderator Scott Maucione and guest Steve Wallace, chief technology officer at the Defense Information Systems Agency will discuss the IT landscape and asset management in the era of zero trust. In addition, Tom Kennedy, vice president at Axonius will provide an industry perspective.

The post Building zero trust as IT devices continue to multiply first appeared on Federal News Network.




zero

Cyber leaders aim to embed zero trust principles in systems

As civilian and defense agencies work through the nuances of incorporating zero trust strategies, the question becomes: How can this process be sped up? During this exclusive webinar, moderator Justin Doubleday will discuss tools and techniques accelerating the move to zero trust with agency and industry leaders.

The post Cyber leaders aim to embed zero trust principles in systems first appeared on Federal News Network.




zero

DISA pushes companies to adopt standards to ensure interoperability across zero trust architectures

During this exclusive CISO Handbook webinar, moderator Justin Doubleday and guests Brian Hermann from the Defense Information Systems Agency and Christopher Day from Tenable will explore zero trust progress and strategy at DISA.

The post DISA pushes companies to adopt standards to ensure interoperability across zero trust architectures first appeared on Federal News Network.





zero

If I am zero to one for Nykaa, Anchit is one to 100 and that makes us a good fit: Adwaita Nayar

Adwaita and Anchit Nayar, leaders at Nykaa, highlight their complementary roles in driving the company's success. They share insights on India's consumer tech and quick commerce growth, Nykaa's rapid expansion in warehouse capacity, and plans for same-day or next-day delivery, leveraging their efficient capital use and market competition to build the category.




zero

Chris Hall: There's no path to net-zero without nuclear power, says O'Regan

Minister of Natural Resources Seamus O'Regan says Canadians have to be open to more nuclear power generation if this country is to meet the carbon emissions reduction targets it agreed to five years ago in Paris.



  • Radio/The House

zero

Jouw contentstrategie voor 2025: zero-click-content

Zero-click searches zijn, met de opkomst van featured snippets in zoekresultaten en de steeds grotere rol van AI, aan de orde van de dag. De zero-click-contenttrend heeft een enorme vlucht genomen. De algoritmes van platforms zoals Google en LinkedIn evolueren continu om gebruikers sneller en directer van antwoorden te voorzien. Het tijdperk van zero-click-content breidt […]




zero

Album Review: LINKIN PARK From Zero

"Controversies aside, From Zero is a mostly strong (if unsurprising) rebirth for Linkin Park."




zero

The Price Can Go to Zero

For many years, the fees charged by investment managers of mutual funds grew ever so slightly, gradually approaching 1.5%. Over the last few years, though, the growth in these management fees has stopped. In fact, it reversed. Last year the average management fee charged for actively managed mutual funds was 1.38%, or 138 basis points, where a basis point is one tenth of one percent. But that average is badly misleading. It’s misleading because it treats all funds, regardless of size, as the same. When you adjust the fees for the size of the funds, you find that the dollar-weighted average for actively managed funds is now below 100 basis points. Three things have caused this reversal in management fees: low returns in the stock market, the growth of exchange-traded funds (ETFs) and a price war among the biggest players in the market.

The first two of these factors need little explanation. Over the last ten years, an investment in many bond funds out-performed an investment in diversified equity funds. These low returns have many investors focusing on the costs they incur for the management of their money. These costs include transaction fees for trading securities and management fees for the companies managing mutual funds or exchanged-traded funds. The second factor, the growth of ETFs, is somewhat less obvious, but important. ETFs have garnered a significant share of new money invested in equity funds over the last few years. Companies managing ETFs charge low fees for managing these funds because they have very low costs for shareholder servicing and some other administrative functions associated with investment management. Shrewd mutual fund managers have reduced prices in order to manage the gap in pricing they allow for their managed mutual funds compared to comparable ETFs.

These two causes of the fall in prices for investment management now have a third important factor. This third factor may turn out to be the most important of all. (See the Symptom & Implication, “The industry is seeing its first price wars” on StrategyStreet.com.) As described in other blogs (see blogs HERE and HERE), Vanguard has started, and continued, a price war in the ETF market. For example, iShare’s MSCI Emerging Market’s ETF and Vanguard’s Emerging Market’s ETF compete directly. Vanguard’s fund charges 27 basis points. The iShare’s fund charges 69 basis points. The iShare’s fund entered the market well before the Vanguard fund, and was much larger than the Vanguard fund. However, during 2010, the Vanguard ETF added $18 billion to its fund while iShare’s added about $4 billion. Price matters among peers.

The iShare’s funds are not always market share losers, however. The iShare’s Gold Trust is an ETF that competes with a larger rival, SPDR Gold Trust. Until June of last year, both of these ETFs charged 40 basis points. In June, iShares cut its management fees to 25 basis points. SPDR Gold Trust stayed pat at 40 basis points. Over the next few months, the iShare’s fund gained $875 million in new money, while the SPDR Gold Trust saw a net loss of $1.2 billion of money under management. Price matters among peers.

These management fees can even go to zero. One ETF today has no management fee, zero. It gets its revenues by lending out the securities in its portfolio. (See the Symptom & Implication, “Technology improvements bring falling prices” on StrategyStreet.com.)

Of course, as companies engage in price wars, they advertise their lower prices extensively in order to capture as much market share as possible before their competitors respond. The result: customers are becoming ever more price sensitive about the management fees they pay, simply because the management companies tell them to be more sensitive.

How long will it be until this fee warfare spreads to other smaller types of ETFs? Not very long, as long as price moves share.




zero

Bulgarian president supports net zero carbon target in Baku

Bulgarian President Rumen Radev spoke about the threat of climate change at the COP29 climate summit in Baku on Tuesday, where he backed a net zero target, admitting that just 10 years ago, he would have thought the goal was incompatible with competitiveness. The UN summit in Baku runs from 11 to…




zero

CABN modular homes will be part of a net-zero community

Where modern design, affordable living and sustainability meet, there is CABN. The first home of this project has just been created and soon, CABN's design will be the basis of a 67-home, net-zero community. If this is what the future looks like, there is hope that humans will actually have a healthy, happy future on this planet.[...]




zero

Colorado house becomes the first net-zero home in its city

Fargo is a house located in Louisville, Colorado and is designed for a former high-level design engineer at Apple. Despite the project's modern aesthetic, it blends into the historical neighborhood and meets multiple spatial criteria set by the client. These include a detached studio garage, an indoor-outdoor kitchen and easy access to the outdoors. The overall goal for DAJ Design was to incorporate these design elements while achieving net-zero energy consumption.[...]




zero

The first home in California to be Zero Carbon certified

It sits on a flat stretch of green, surrounded by the rolling hills and pretty palm trees of Southern California. It's an amazing little oasis, a quiet getaway. And it's the first building in California to receive Zero Carbon Certification from the International Living Future Institute. It's only the fourth building in the entire world to reach this status. This home is called Zero One by MariSol Malibu and it's the first of its kind.[...]





zero

These zero energy ready homes are solar and energy efficient

Lots of people want to have more sustainable homes, not just to help the environment. Because at the end of the day, it's a lot more affordable to get your energy from the sun and the wind than to pay some oil or coal plant to provide it. But for many people, being sustainable means having a home built. Hiring an architect and a contractor and going to all that trouble gets pretty expensive. Thanks to Clayton, sustainable living is about to get much more accessible.[...]




zero

Google’s AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine

Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large language model (LLM) assisted framework called Big Sleep (formerly Project Naptime). The tech giant described the development as the "first real-world vulnerability" uncovered using the artificial intelligence (AI) agent. "We believe this is the first public example of an AI agent finding




zero

Synology Urges Patch for Critical Zero-Click RCE Flaw Affecting Millions of NAS Devices

Taiwanese network-attached storage (NAS) appliance maker Synology has addressed a critical security flaw impacting DiskStation and BeePhotos that could lead to remote code execution. Tracked as CVE-2024-10443 and dubbed RISK:STATION by Midnight Blue, the zero-day flaw was demonstrated at the Pwn2Own Ireland 2024 hacking contest by security researcher Rick de Jager. RISK:STATION is an "




zero

Leveraging Wazuh for Zero Trust security

Zero Trust security changes how organizations handle security by doing away with implicit trust while continuously analyzing and validating access requests. Contrary to perimeter-based security, users within an environment are not automatically trusted upon gaining access. Zero Trust security encourages continuous monitoring of every device and user, which ensures sustained protection after




zero

Getting to net-zero, in the U.S. and the world

Princeton's Jesse Jenkins on the new momentum in clean energy, and big challenges left to solve.




zero

China’s zero-COVID cannot continue, reopening is needed

China’s zero-COVID cannot continue, reopening is needed Expert comment NCapeling 1 December 2022

Unsure of how to loosen rules, local officials have doubled down on severe restrictions behind so much economic damage. Reopening will quell public anger.

When President Xi Jinping was seen unmasked at the G20 summit in Indonesia, he maintained a largely positive tone with President Joe Biden and other world leaders. This left an impression that China was on the verge of withdrawing its zero-COVID strategy.

A set of loosening policy measures introduced by Beijing seemed to further suggest that China was on track to reopen. As outlined in the 20th party congress, Xi wants to forge a pathway towards economic modernization and this means building economic resilience and a further increase in household incomes.

However, a series of displays of public defiance against the government’s zero-COVID policy has left the rest of the world perplexed. Some loosening of restrictions announced on 11 November by the central government, with the number of new cases still rising rapidly, left the provincial governments in confusion as to which direction to turn.

Absolute political loyalty

The persistent slogan of ‘zero-COVID’ was in stark contrast to the slackening of restrictions. Local officials decided to double down on stringent COVID measures as a way of displaying absolute political loyalty to the top, which inevitably caused daily agonies among large parts of the Chinese population.

The strategy has intensified economic pressures, exacerbated rising levels of youth unemployment, and tested the patience of the entire country

This decision-making process sheds some light on the way the Chinese bureaucracy approaches crises at a time when the party leadership is tightening political control. Lower-level officials avoided making important decisions and instead decided to wait for instructions from the top. As the rules were unclear, they implemented policies according to past precedents, in this case zero-COVID, which had worked relatively well for China in 2020 and 2021.

For decades, local governments have been major political actors in China and have known what works best under local conditions. But with tighter regulation being exercised by lower-level bureaucrats and civil servants, there is less opportunity for the input of local knowledge, increasing the risk of ineffective policies being implemented.

Away from Beijing, those not employed by the state have been hit particularly hard by zero-COVID measures. The strategy has intensified economic pressures, exacerbated rising levels of youth unemployment, and tested the patience of the entire country.

It is difficult to see how China’s economy can crank up again until the country reduces its internal restrictions and reconnects with the world

Billions of Chinese people want to have their life return to normal without the fear of having the wrong colour – yellow or red – on their COVID health QR code or endless mandatory testing. Only a green code shows that a person is healthy and able to move around freely.

Economy is suffering

China is still balancing its twin aims of containing the spread of COVID and re-engineering its economy along similar lines to the rest of the world. It is difficult to see how China’s economy can crank up again until the country reduces its internal restrictions and reconnects with the world.