Starts: Thu, 12 Dec 2024 09:30:00 -0500
12/12/2024 08:00:00AM
Location: Vancouver, Canada

Vulnerability management remains a cornerstone of preventive cybersecurity, but organizations still struggle with vulnerability overload and sophisticated threats. Tenable’s new Exposure Signals gives security teams comprehensive context, so they can shift from vulnerability management to exposure management and effectively prioritize high-risk exposures across their complex attack surface.

A critical vulnerability has been disclosed and attackers worldwide are actively exploiting it in the wild. Your vulnerability management team jumps into action and determines that the vulnerability is present in hundreds of your organization’s assets. Which ones do you patch first? How do you prioritize your remediation efforts? What criteria do you use? The clock is ticking. Hackers are on the prowl.

Historically, your vulnerability management team would rely on severity scores like Vulnerability Priority Rating (VPR). This is a great start, but only gives you one indicator of risk. To prioritize remediation precisely and effectively, you need to consider a variety of other criteria, such as a vulnerable asset’s type, owner, and function; the access-level and privileges on the asset; and critical attack paths into your environment.

This type of comprehensive, holistic context will let you prioritize correctly, but it can only be achieved with a different approach that goes beyond traditional vulnerability management. That approach is exposure management. 

With exposure management, your vulnerability management team would be able to pinpoint the subset of assets affected by our hypothetical vulnerability that, for example, are externally accessible, possess domain-level privileges and are part of a critical attack path. That way they would know where the greatest risk is and what they need to remediate first. Having this deep insight, context and visibility transforms the risk assessment equation, and allows your vulnerability management team to move decisively, quickly and strategically.

In this blog, we’ll outline why it’s imperative for your vulnerability management teams to shift to an exposure management mindset, and we’ll explain how Tenable can help them do it.

To pinpoint riskiest vulns, vulnerability management needs broader exposure context 

In today's evolving cybersecurity landscape, vulnerability management remains one of the foundational pieces of an organization's proactive defense strategy. However, these teams still have difficulty in addressing the increased level of risks posed by the continuous surge of Common Vulnerabilities and Exposures (CVEs) and other flaws.

Many security teams are frequently overwhelmed by the sheer volume of vulnerabilities with limited resources to manage them effectively. The sophistication and speed of threat actors has escalated, with attackers having more entry points and using new tactics, techniques and procedures to access other critical areas of the business - demonstrating that attacks are no longer linear but multifaceted.

It’s common for security teams to struggle with:

• Vulnerability overload - This long-standing problem keeps getting worse. Security teams are finding it more difficult than ever to sift through the avalanche of CVEs and identify the areas of the business that have the most risk.
   
•  Lack of exposure context for prioritization - Your teams are making decisions while missing layers of context. Threat intelligence and vulnerability severity are a great start, but limiting yourself to them doesn’t give you the full context you need to prioritize properly. 
   
• Slow remediation response - Both proactive and reactive security teams devote massive amounts of time to responding to critical vulnerabilities. Resources are spread thin, making it more important than ever for teams to confidently identify the most high risk exposures when recommending remediation efforts.

Need to shift from a vulnerability to an exposure mindset

Knowing the struggles that you are dealing with today can help illuminate the benefits of exposure management. The missing links between a vulnerability and an exposure are the additional layers of context. Having multidimensional context enables you to understand not just the vulnerabilities themselves but their potential impact within the broader attack surface. This approach provides a more comprehensive view of an organization's security posture by considering factors such as threat intelligence, asset criticality, identities and access, as well as other pieces of context. With this additional information, you spend significantly less time sorting through stacks of similar vulnerabilities and you can be more focused on identifying key issues that pose risk - exposures.

For those who have never heard of exposure management or are just getting started, there are many benefits to this discipline. When it comes to Tenable’s approach, we adopt that same mentality with our exposure management platform. The goal is simple: exposure management empowers organizations to prioritize remediation efforts more effectively. It surfaces information that helps develop strategies to address not only the vulnerabilities themselves but the emergence of exposures that could lead to significant breaches.

The jump from vulnerability to exposure

Bridging the gap from vulnerability management to exposure management requires connecting context across the entire attack surface. Vulnerability management provides context that predicts the likelihood of an attack and displays key drivers, age of vulnerability and threat sources. These attributes are helpful, but we can go much further to improve our prioritization effectiveness. This requires having broader visibility and deeper insights across the attack surface to understand the bigger picture of exposures.

Specifically, security teams need additional context around:

• Asset context - There are many levels to an asset that can help drive prioritization decisions. It’s key to understand the criticality of an asset related to its type, function, owner name and its relationships to other assets. Even knowing if the asset is accessible from the internet or not will shape how its remediation is prioritized.
   
• Identities - Identities serve as the cornerstone for successful attacks, so it’s key to contextualize them for exposure management. Understanding user-privilege levels, entitlements and user information can help prevent attackers from gaining privilege escalation and moving laterally. Focusing prioritization efforts on vulnerable assets with domain and admin-level privileges is a critical best practice in order to reduce the likelihood of a breach.
   
• Threat context - Having various levels of threat context is also important to prioritize exposures. We know that threats change over time, so leveraging dynamic scoring like VPR or Asset Exposure Score (AES) can show indicators of risk. We can also bring in context from attack path modeling to influence remediation decisions based on the attacker’s perspective by understanding the number of critical attack paths or choke points in your environment.

When security analysts have this additional information, they can now truly understand the breadth and depth of the exposure. This is how prioritization is done in this new world of exposure management.

Introducing Exposure Signals

To help make it easier for you to shift to this exposure management mindset, we have developed a new prioritization capability called Exposure Signals. Available in Tenable One, Tenable’s exposure management platform, Exposure Signals allows security teams to have more comprehensive context in a centralized place for a focused view of risk. 

There are two ways to use these new Exposure Signals. The first is to access a comprehensive library of high-risk, prebuilt signals. Easy to refer to, they signal potential risk in your environment and create a great starting point for you to get your exposure management juices flowing. For example, you can easily see and refer to: 

• Domain admin group on internet-exposed hosts with critical vulnerabilities
• Devices exposed to the internet via RDP with an associated identity account with a compromised password
• Cloud assets with critical severity findings and asset exposure score above 700

Exposure Signals allow you to track the number of violations that signal high-risk scenarios in your environment. View this list on a regular basis to see how it changes over time with its unique trendline. Take exploration into your own hands by viewing the impacted asset and its contextual intelligence in our Inventory Module. 

The second way to use Exposure Signals is by creating your own signals using a query builder or natural language processing (NLP) search powered by ExposureAI. That way, you can go as broad or as precise as needed. For example, let’s say there is a new zero day vulnerability that sweeps the industry, similar to Log4Shell. You can easily create a signal to target which assets have the vulnerability, are internet facing and have domain admin-level privileges. We are stringing these components together so that you can understand your true risk and better direct your prioritization efforts.

To learn more about Tenable One and Exposure Signals, check out our interactive demo:

In preparation for this year’s SpotOn London 2013 workshop, Interdisciplinary research: what can scientists, humanists

"A desperate call for help interrupts holiday celebrations at the Bureau of Balance, and sends Taako, Magnus and Merle on a high-stakes mission to find and reclaim a fourth deadly relic: a powerful transmutation stone, hidden somewhere in the depths of a floating arcane laboratory that's home to the Doctors Maureen and Lucas Miller. An unknown menace has seized control of the stone, and is using it to transform the lab into a virulent pink crystal that spreads to everything it touches. It's only a matter of time before this sparkling disaster crash-lands, but in order to find the stone and save the whole planet from being King Midased, our heroes will have to fight their way through a gauntlet of rowdy robots and crystal golems, decide whether they can trust the evasive Lucas Miller, and solve the mystery of what— or who— has put them all in peril, before there's no world left to save." -- Provided by publisher

2022年，世界面临多重危机。旷日持久的2019冠状病毒病疫情(COVID-19)、重大自然灾害、内乱和政治动荡以及气候变化日益严重的影响对食物系统的破坏仍在继续，而与此同时，俄乌战争和通货膨胀加剧了全球粮食和化肥危机。危机数量不断增加，多种危机的叠加影响日益加剧，饥饿人口和流离失所者数量不断攀升，促使人们呼吁重新思考粮食危机应对措施，从而为变革创造了一个真正的机会。

Full Book [download]

لقد واجه العالم الكثير من الازمات خلال عام 2022. واستمرت معاناة النظم الغذائية من تداعيات جائحة كوفيد-19 المطولة، والكوارث الطبيعية الكبرى، والاضطرابات المدنية، وحالة عدم الاستقرار السياسي، والاثار المتزايدة لتغير المناخ، وتفاقمت ازمة الغذاء والأسمدة العالمية نتيجة الحرب الروسية الأوكرانية والتضخم. أدى تزايد عدد الأزمات وتأثيرها المتصاعد، وارتفاع عدد الجياع والنازحين الى الحث على إعادة التفكير في طرق الاستجابة للأزمات الغذائية، مما خلق فرص حقيقية للتغيير.

After several successful years of bringing science communicators together in London and New York, the

"This riveting story set in the future pits the old guard— Superman, Batman, Wonder Woman and their peers, against a new, uncompromising generation of heroes in the final war to determine the fate of the planet." -- Description provided by publisher.

"Collects Spider-Woman (2020) #6-10. Road trip— to space! After learning some startling secrets about her family, Jessica Drew goes on a mission to find the one person who might know more: the High Evolutionary! But she's going to need her BFF by her side— and that means it's Captain Marvel team-up time! Before long though, those closest to Spider-Woman will abandon her. Only one person will come to her aid: Octavia Vermis! Octavia has a cure for Jessica, and the prescription is crime! Is Jess willing to resort to theft to gather all the tools needed to fix what's wrong? In the shadow of Knull's invasion, Spider-Woman must put everything on the line— and then cross it! Even if Jess can find the cure for what ails her, will she still have a life worth saving?" -- Page [4] of cover.

The Stories of Edgar Allan Poe is a brilliant collection of some of his best-known stories: The Tell Tale Heart (a murder's haunting guilt), The Cask of Amontillado (a story of brilliant revenge), and The Fall of the House of Usher (an ancient house full of very dark secretes). Also included in this collection are The Mask of the Red Death (horrors of 'the Plague'), and the most famous of all his poems: The Raven (a lover's decline into madness). Best read in a dimly-lit room with the curtains drawn, Poe's brilliant works come to life in darkly thrilling ways in this Manga Classic adaptation.

"Sail the Pacific Islands in search of destiny and the demigod Maui in this retelling of Disney Moana. Moana is a spirited teenager who loves the ocean, yet she is forbidden to travel beyond the reef that surrounds her island home of Motunui. But she feels called to something more, and wants to discover who she was meant to be. When darkness begins to consume the island, and nature is out of balance, Moana knows the solution lies beyond the safety of the reef. Following the messages of her ancestors, and with encouragement from the ocean itself, Moana sails into the open sea to find the demigod Maui and right a wrong from his past. Together they face rough waters, monstrous creatures, and the unknown, in a mission to stop the darkness from spreading, and restore life to the islands! Become a master wayfinder in this action-packed story as Moana's love for the sea turns her into a hero among her people, the gods, and the ocean." -- Provided by publisher

"A graphic biography of civil rights leader and American icon Martin Luther King Jr. This graphical biography tells the story of the most prominent leader of the American civil rights movement. With full-color illustrations and a historically accurate narrative, Martin Luther King Jr.: Voice for Equality! will inform and entertain readers of all ages. From his childhood in Atlanta to his rise as an international icon of human rights and a fiery orator who refused to back down in the face of adversity, King's life story serves as an ongoing source of inspiration." -- Provided by publisher.

Tackling global challenges to food systems means we must better understand the future of aquatic foods. Research is critical to understand emerging opportunities for innovations—including the rise of lab-grown fish—and how these innovations can advance a healthy, sustainable, and equitable food system. To advance this research, I recently had the honor of formalizing a new […]

Tenable®, the exposure management company, today announced the release of AI Aware, advanced detection capabilities designed to rapidly surface artificial intelligence solutions, vulnerabilities and weaknesses available in Tenable Vulnerability Management, the world’s #1 vulnerability management solution. Tenable AI Aware provides exposure insight into AI applications, libraries and plugins so organizations can confidently expose and close AI risk, without inhibiting business operations.

The rapid development and adoption of AI technologies in the past two years has introduced major cybersecurity and compliance risks that organizations must proactively address without established best practices. As a result, cybersecurity teams face significant AI-related challenges, such as vulnerability detection and remediation, containing data leakage and reining in unauthorized AI use. 

According to recent Tenable Research, more than one-third of security teams are finding usage of AI applications in their environment that might not have been provisioned via formal processes. In fact, during a 75-day period between late June and early September, Tenable found over 9 million instances of AI applications on more than 1 million hosts. The cybersecurity risk of unfettered AI usage is compounded by the increasing volume of AI vulnerabilities. Tenable Research has found and disclosed several vulnerabilities in AI solutions, including in Microsoft Copilot, Flowise, Langflow, among others.

With AI Aware, Tenable transforms proactive security for AI solutions. Tenable AI Aware uniquely leverages agents, passive network monitoring, dynamic application security testing and distributed scan engines to detect approved and unapproved AI software, libraries and browser plugins, along with associated vulnerabilities, thereby mitigating risks of exploitation, data leakage and unauthorized resource consumption. The combined depth of these multiple assessment methods delivers the most complete detection of AI in the modern ecosystem. 

[Watch the Tenable AI Aware product demo video here.]

“In an effort to keep pace with the sea change introduced by AI, organizations around the world ran full speed ahead, potentially bypassing countless cybersecurity, privacy and compliance red flags,” said Shai Morag, chief product officer, Tenable. “Perhaps more so than with any other new technology we’ve seen, there are many risk factors to consider, especially with rushed development and deployment. Tenable AI Aware empowers organizations to deploy AI confidently, ensuring their security measures keep pace with the rapid evolution of AI technologies.”

In addition to AI software and vulnerability detection, key AI Aware features available in Tenable Vulnerability Management, Tenable Security Center and Tenable One include:

• Dashboard Views provide a snapshot of the most common AI software discovered in the ecosystem, top assets with vulnerabilities related to AI and the most common communication ports leveraged by AI technologies. 
• Shadow Software Development Detection illuminates the unexpected existence of the building blocks of AI development in the environment, enabling businesses to align initiatives with organizational best practices.
• Filter Findings for AI Detections enable teams to focus on AI-related findings when reviewing vulnerability assessment results. Combined with the power of Tenable Vulnerability Prioritization Rating (VPR), teams can effectively assess and prioritize vulnerabilities introduced by AI packages and libraries. 
• Asset-Centric AI-Inventory provides a complete inventory of AI-related packages, libraries and browser plugins while reviewing the detailed profile of an asset. 

Join the upcoming Tenable webinar titled, "Mitigating AI-Related Security Risks: Insights and Strategies with Tenable AI Aware" on October 9, 2024 at 11:00 am ET, by registering here.

More information on Tenable AI Aware is available at: https://www.tenable.com/products/vulnerability-management/ai-aware 

About Tenable

Tenable® is the exposure management company, exposing and closing the cybersecurity gaps that erode business value, reputation and trust. The company’s AI-powered exposure management platform radically unifies security visibility, insight and action across the attack surface, equipping modern organizations to protect against attacks from IT infrastructure to cloud environments to critical infrastructure and everywhere in between. By protecting enterprises from security exposure, Tenable reduces business risk for more than 44,000 customers around the globe. Learn more at tenable.com. 

###

Media Contact:

Tenable

tenablepr@tenable.com

From your heart's deepest cry to life's joyful praises, nothing is off limits to Jesus. Knowing Jesus on a deeper, more personal level means sharing all aspects of your life with Him...every day. In Dear Jesus, Sarah Young exemplifies what it means to do this-to dialogue with the Savior. She begins each of the 120 devotionals by sharing intimate struggles and longings that weigh on the heart-being preoccupied with problems; being dissatisfied with oneself, and other spiritual issues. Jesus then responds in His loving way by giving guidance and encouragement, using Scripture as the foundation from which His words flow. Readers will be drawn into the presence of God through these spiritual letters of grace.

One of the common questions often asked of the IT team is “how many systems are missing patches and how many patches are missing on each system?”  This dashboard uses the “Patch Report” plugin and organizes the current patch status for systems scanned with credentials.  The IT team can now easily communicate the specific systems with missing patches to executives.

The Nessus "Patch Report" plugin (66334) elegantly summarizes all of the missing patches and general remediation actions required to remediate the discovered vulnerabilities on a given host. Instead of counting the number of vulnerabilities, the plugin lists applications that need to be upgraded. The approach is not only much easier for IT administrators to consume, but the count of applications provides a measure of how much "work" is required to secure a system.

The dashboard provides risk guidance using the “Remediation Summary” tool.  This tool works by employing a concept called “top patch”.  Tenable Security Center uses proprietary technology to identify a chain of patches.  The first patch in the chain is called the “top patch”.  If the “top patch” is applied, all subsequent vulnerabilities will also be remediated at the same time.  Using both the Remediation Summary tool and “Patch Report” plugin, the organization can better plan remediation efforts.   

The dashboard and its components are available in the Tenable Security Center Feed, a comprehensive collection of dashboards, reports, assurance report cards and assets.  The dashboard can be easily located in the Tenable Security Center Feed under the category Executive. The dashboard requirements are:

• Tenable Security Center
• Nessus
• This dashboard requires “Full Text Search” to be enabled for each analyzed repository.

Please note the "Full Text Search" option must be enabled for the repository to support the trending component.

Tenable Security Center has the ability to identify all discoverable vulnerabilities, eliminating blind spots. Tenable detects missing patches, incorrect configurations, lapsed defenses, incomplete monitoring and network intruders—so you can mitigate them.  Tenable Security Center can show risk across all systems, enabling informed decisions.  Tenable’s approach to continuous monitoring reaches across cloud, virtual, mobile and traditional systems and measures attack vectors in each of these domains.  Tenable Security Center provides a unique combination of detection, reporting, and pattern recognition utilizing industry recognized algorithms and models.  By providing that single point of data collection, Tenable.sc enables sharing of vulnerability scanning results across the technical groups and business owners. Tenable.sc is continuously updated with information about advanced threats and zero-day vulnerabilities, and new types of regulatory compliance configuration audits.

Components

Remediations Tracking - Top 25 Remediations: This component provides the top 25 remediation actions that can be taken to reduce overall risk.  The table is sorted using vulnerability weight scores, which are calculated differently for each organization.  To determine score weights, login with the admin account, edit your organization and then select “Analysis”.  In the upper right hand corner, there are four scores, one for each severity level. The default scores are: critical = 40, high = 10, medium = 3 and low = 1. The vulnerability weight helps to determine a fully calculated score used in risk analysis.

The Outstanding Remediations - Time Since Patch Publication (Assets) matrix displays the total count of missing patches across the environment. The matrix is comprised of five columns. The first column provides a count of the vulnerabilities that are exploitable, and the last four columns provide counts of vulnerabilities based on Vulnerability Priority Rating (VPR) levels. VPR scores are displayed as column headers in traditional severity text.  Critical represents VPR 9-10, High represents VPR 7-8.9, Medium represents VPR 4-6.9, and Low represents VPR 0.1-3.9. Each row filters the vulnerabilities based on the patch publication date of less than 30 days ago, Current Quarter, Last Quarter, Current Year, Last Year, and greater than 365 Days.

The End of Life Software Detection table displays a list of software that is no longer supported by the vendor. The table is sorted by the count column, which lists a count of the total number of assets affected by the unsupported software package. The filter used is for Plugin Name equals Unsupported. Tenable recommends that assets found here be upgraded to a higher supported version as soon as possible, since vendors no longer list active vulnerabilities for end-of-life software.

The Outstanding Remediations by Device Type (Vulnerabilities) matrix displays the total count of missing patches by device type. The matrix is comprised of five columns. The first column provides a count of the vulnerabilities that are exploitable, and the last four columns provide counts of vulnerabilities based on Vulnerability Priority Rating (VPR) levels. VPR scores are displayed as column headers in traditional severity text.  Critical represents VPR 9-10, High represents VPR 7-8.9, Medium represents VPR 4-6.9, and Low represents VPR 0.1-3.9.  There is a row present which groups devices by type, such as Linux, Windows, or macOS devices. Counts present in each cell represents the number of vulnerabilities present for the device group and VPR score.

From the Yangtze to the Yellow River, China is traversed by great waterways, which have defined its politics and ways of life for centuries. Water has been so integral to China’s culture, economy, and growth and development that it provides a window on the whole sweep of Chinese history. In The Water Kingdom, renowned writer Philip Ball opens that window to offer an epic and powerful new way of thinking about Chinese civilization.

Art Ibleto, who died Tuesday at age 94, was a genuine Sonoma County icon.

More than 20 million face acute food insecurity.

Unpacking the 2023 Africa agriculture assessment report (CNBC Africa) 

CNBC Africa interviewed John Ulimwengu, IFPRI Senior Research Fellow and the technical editor and lead researcher of the Africa Agriculture Status Report 2023, launched on September 6 at the Africa Food Systems Forum (AGRF). .  The Report titled “Empowering Africa’s Food Systems for the Future” highlights the ways in which Africa is uniquely positioned to redefine its future and […]

The post Unpacking the 2023 Africa agriculture assessment report (CNBC Africa)  appeared first on IFPRI.

Extended Parking Lane Closures & Traffic Shifts at W. Lawrence Avenue between N. Broadway and N. Winthrop Avenue for Street Reconstruction & Final Asphalt.

Updated Dates & Impacts with Extended Parking Lane Closures & Traffic Shifts at W. Foster Avenue between N. Broadway and N. Winthrop Avenue for Street Reconstruction & Shoring Tower Construction & Staging.

There will be a partial sidewalk closure and parking lane closure on N Broadway near W Bryn Mawr to allow crews to install new decorative sidewalk pavers as part of streetscape improvements in the project area.

Extended Parking Lane Closure, W. Ainslie Street between N. Broadway and the CTA Tracks for Track Structure Segment Delivery.

Daily Sidewalk and Parking Lane Closures at N. Clark Street between W. Roscoe Street and approx. 250ft south for substation wall construction.

Update Dates and Impacts with Parking Lane and Partial Sidewalk Closure at 5600 – 5605 N. Broadway

New Dates, Daily Sidewalk and Parking Lane Closures at N. Clark Street between W. Roscoe Street and approx. 250ft south for Substation Wall Construction.

Updated Dates Parking Lane and Partial Sidewalk Closure at 5600 – 5605 N. Broadway for Decorative Sidewalk Paver Installation.

Parking Lane and Sidewalk Closure at W. Newport Avenue between N. Clark Street and 927 W. Newport Avenue - N. Clark Street between W. Roscoe Street and W. Newport Avenue for Street Reconstruction & Utility Connection.

In alignment with its ongoing commitment to bringing equity and inclusion to all aspects of its decision-making, the Chicago Transit Authority (CTA) announced today it will be seeking new applicants to join the agency’s Americans with Disabilities Act (ADA) Advisory Committee.

New Dates, Parking Lane Closure and Traffic Shifts at W. Foster Avenue between N. Broadway and N. Winthrop Avenue for Asphalt Placement

Daily Sidewalk Closure and Parking Lanes at W. Lawrence Avenue between the CTA Tracks and N. Winthrop Avenue for decorative paver installation.

Updated Dates Parking Lane and Sidewalk Closure for - W. Newport Avenue between N. Clark Street and 927 W. Newport Avenue - N. Clark Street between W. Roscoe Street and W. Newport Avenue

Parking Lane Closure and Daily Lane Shift at W. Newport Avenue between N. Clark Street and 927 W. Newport Avenue for Asphalt Placement.

(Mon, Nov 4 2024 11:45 AM to TBD) The exit -only elevator from the Cottage Grove-bound platform at King Drive (Green Line) is temporarily out-of-service due to a mechanical issue.

(Mon, Nov 4 2024 11:45 AM to TBD) The exit -only elevator from the Cottage Grove-bound platform at King Drive (Green Line) is temporarily out-of-service due to a mechanical issue.

The post Asda to slash 475 jobs and curb hybrid working appeared first on Personnel Today.

The post Hybrid working is the ‘new normal’, according to ONS appeared first on Personnel Today.

Investing legend Bill Gross revolutionized the bond market, built an empire, and lost it all. Our very own Mary Childs talks about her new book, The Bond King. | Subscribe to our weekly newsletter here.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

How one man's quest to dominate the onion market changed commodities trading, and potentially how much you pay at the grocery store, forever. | Subscribe to Planet Money+ in Apple Podcasts or at plus.npr.org/planetmoney.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

Inflation can be one of the scariest forces in the economy. As prices rise and your dollar doesn't go as far, you feel poorer, and it's all out of your control. To better understand inflation, we turn to the story of Brazil, where, in the 90s, hyperinflation threatened to derail the whole economy until the country turned to a group of unlikely heroes: four drinking buddies. | Subscribe to Planet Money+ in Apple Podcasts or at plus.npr.org/planetmoney. |At this Summer School, phones ARE allowed during class... Check out this week's PM TikTok! | Listen to past seasons of Summer School here.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

High gas prices have fueled speculation and investigations — is anyone raising prices and keeping prices high for profit? To find out, we break down the price of gas, piece by piece, to show you how we get to the price we see at the pump and how much everyone profits at each step of the way. | Subscribe to Planet Money+ in Apple Podcasts or at plus.npr.org/planetmoney.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

Xi Jinping recently secured his third term as China's president – so we're looking at two shocks to the world's second-largest economy. First: How China's housing boom turned into a real estate crisis. Second: How the recent U.S. ban on selling advanced semiconductor chips to China could affect China's technology industry.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

Since we started Planet Money Records and released the 47-year-old song "Inflation," the song has taken off. It recently hit 1 million streams on Spotify. And we now have a full line of merch — including a limited edition vinyl record; a colorful, neon hoodie; and 70s-inspired stickers — n.pr/shopplanetmoney.

After starting a label and negotiating our first record deal, we're taking the Inflation song out into the world to figure out the hidden economics of the music business. Things get complicated when we try to turn the song into a viral hit. Just sounding good isn't enough and turning a profit in the music business means being creative, patient and knowing the right people.

This is part three of the Planet Money Records series. Here's part one and part two.

Listen to "Inflation" on Apple Music, Spotify, YouTube Music, Tidal, Amazon Music & Pandora.

Listen to our remix, "Inflation [136bpm]," on Spotify, YouTube Music & Amazon Music.

"Inflation" is on TikTok. (And — if you're inspired — add your own!)

This episode was reported by Erika Beras and Sarah Gonzalez, produced by Emma Peaslee and James Sneed, edited by Jess Jiang and Sally Helm, engineered by Brian Jarboe, and fact-checked by Sierra Juarez.
Music: "Inflation," "Superfly Fever," "Nola Strut" and "Inflation [136bpm]."

Help support Planet Money and get bonus episodes by subscribing to Planet Money+ in Apple Podcasts or at plus.npr.org/planetmoney.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

It's been a month since the collapse of Silicon Valley Bank touched off the worst episode of banking turmoil since 2008. While the financial system appears to have stabilized, we're still reckoning with what happened. Regulators are getting dragged before Congress. The Federal Reserve and the FDIC have promised reports on what went wrong with bank oversight. And judging by our inbox, you, our listeners, have a lot of lingering questions.

Questions like: Was it a bailout? Where were the regulators? Is it over yet? And what about those other banks that were teetering on the edge?

Today on the show, some answers for you.

This episode was produced by Sam Yellowhorse Kesler with help from Willa Rubin. It was engineered by Brian Jarboe. It was fact-checked by Sierra Juarez and edited by Molly Messick. Jess Jiang is our acting executive producer.

Help support Planet Money and get bonus episodes by subscribing to Planet Money+ in Apple Podcasts or at plus.npr.org/planetmoney.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

Picture the Pacific Ocean of the 16th century. Spanish Galleons sail the wide open seas, carrying precious cargo like silver, porcelain, and textiles. The waters are dangerous; ship logs show concerns over pirates. But pirates are not to blame for a mysterious event that keeps happening.

For, you see, one in five of the ships leaving from the port of Manila didn't make it to Acapulco. It's a shipwrecking rate much higher than rates for other routes of the time. And the mystery of the serial shipwrecking Spanish ships remains unsolved, until today.

Everyone involved with these Spanish ships were aligned in a goal: Don't wreck the Spanish ships. And yet, wreck they did. Three economists took a look at the incentives for profit and risk at the time, and found the key to unlocking this ancient booty (of knowledge).

Our show today was produced by James Sneed, edited by Jess Jiang, fact-checked by Sierra Juarez, and engineered by Cena Loffredo. Alex Goldmark is Planet Money's executive producer.

Help support Planet Money and get bonus episodes by subscribing to Planet Money+ in Apple Podcasts or at plus.npr.org/planetmoney.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

We've lived amongst Elon Musk headlines for so long now that it's easy to forget just how much he sounds like a sci-fi character. He runs a space company and wants to colonize mars. He also runs a company that just implanted a computer chip into a human brain. And he believes there's a pretty high probability everything is a simulation and we are living inside of it.

But the latest Elon Musk headline-grabbing drama is less something out of sci-fi, and more something pulled from HBO's "Succession."

Elon Musk helped take Tesla from the brink of bankruptcy to one of the biggest companies in the world. And his compensation for that was an unprecedentedly large pay package that turned him into the richest person on Earth. But a judge made a decision about that pay package that set off a chain of events resulting in quite possibly the most expensive, highest stakes vote in publicly traded company history.

The ensuing battle over Musk's compensation is not just another wild Elon tale. It's a lesson in how to motivate the people running the biggest companies that – like it or not – are shaping our world. It's a classic economics problem with a very 2024 twist.

Help support Planet Money and hear our bonus episodes by subscribing to Planet Money+ in Apple Podcasts or at plus.npr.org/planetmoney.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

You might have seen ads for online banking services that seem to offer a lot of great stuff — accounts you can open in minutes and without a minimum balance or monthly fees. The ads seem to say: "These aren't your parents' boring old banks." But the truth is: Even though they might resemble banks, they aren't.

These "bank-like" companies are a type of "fintech" or financial technology company. And this is a story about the potential risks of putting your money into these apps.

Banks go through a whole regulatory gauntlet in order to exist. But, in the past several years, there has been a rise in fintechs that skirt regulations. And many of these pose a real threat to even the most savvy of depositors.

When a little known tech company filed for bankruptcy a few months ago, thousands of people couldn't access the millions of dollars they saved. On today's show, we meet some of the people affected and learn what the fintech industry reveals about banking regulation.

Today's show was hosted by Erika Beras and Sally Helm. It was produced by Sam Yellowhorse Kesler and Sofia Shchukina with help from James Sneed. It was edited by Jess Jiang and fact-checked by Kevin Volkl. It was engineered by Valentina Rodríguez Sánchez with help from James Willetts. Alex Goldmark is our executive producer.

Help support Planet Money and hear our bonus episodes by subscribing to Planet Money+ in Apple Podcasts or at plus.npr.org/planetmoney.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

The saxophonist has spent his life developing his unique, physically demanding performance style.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy