Connect with us

TECH

Microsoft Patch Tuesday March 2023 contains security fixes for 83 bugs, 2 zero-day vulnerabilities.

Published

3 days ago

on

What happened now? Since 2003, Microsoft has used “Patch Tuesday” as an unofficial definition for the company’s monthly release of security patches for Windows and other software products. In March 2023, Redmond patched two nasty zero-day vulnerabilities that government-sponsored cybercriminals and ransomware were already exploiting in the wild.

Microsoft released the latest collection of security patches this week. Compared to February 2023, the latest batch of patches fixes an increasing number of vulnerabilities, including a couple of already exploited flaws.

Microsoft’s March Security Bulletin states that this release includes fixes for many Windows security components and features, Hyper-V virtualization technology, Visual Studio, Office programs, and more. The update should fix 83 security vulnerabilities in Windows and other Microsoft software products.

Nine of the 83 vulnerabilities were classified as “critical”, which means that hackers can use them for various attacks. Based on the type of error and the impact it has on Windows and other vulnerable software, the vulnerabilities are divided into the following categories: 21 privilege escalation vulnerabilities, 2 security feature bypass vulnerabilities, 27 remote code execution vulnerabilities, 15 information disclosure vulnerabilities, 4 failures. service vulnerabilities, 10 spoofing vulnerabilities, 1 Edge – Chromium vulnerability.

This list does not include 21 vulnerabilities that Microsoft had already patched in the Edge browser prior to the Patch Tuesday update. bleeding computer published a full report with a list of all closed bugs and related recommendations. The March patch included two fixes for zero-day bugs, which Microsoft confirmed were heavily exploited by hackers.

First Zero Day Bug – “Microsoft Outlook Elevation of Privilege Vulnerability (CVE-2023-23397)”. If successfully exploited, the vulnerability allows access to the user’s Net-NTLMv2 hash, which a hacker could use “as the basis for an NTLM Relay attack against another service to authenticate the user.” Email preview, because the server automatically triggers the vulnerability when it processes the message. Microsoft stated that the prominent Russian state-sponsored cyber group Strontium took advantage of CVE-2023-23397 prior to releasing a fix.

The second zero-day flaw is the “Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-24880)”. Microsoft explains that an attacker can exploit this bug by creating a malicious file that can bypass Mark of the Web (MOTW) protection in Microsoft Office’s Protected View feature. Google researchers found CVE-2023-24880, claiming hackers exploited it. using the Magniber ransomware, noting that it is related to a previous zero-day bug (CVE-2022-44698) that Microsoft fixed in December.

Microsoft distributed its latest updates through the official Windows Update service, update management systems such as WSUS, and as a direct (albeit bulk) download through the Microsoft Update Catalog. Other software companies releasing security updates in conjunction with Microsoft patches include Apple, Cisco, Google, Fortinet, SAP, and backup giant Veeam.

Related Topics:
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

TECH

Court rules Uber and Lyft can continue to treat California drivers as independent contractors

Published

2 days ago

on

March 16, 2023

By

Sacramento, California. (AP) — App-based pickup and delivery companies like Uber and Lyft can continue to treat their California drivers as independent contractors, a state appeals court ruled Monday, allowing the tech giants to bypass other state laws requiring protection and benefits. for workers.

The ruling basically supports a voter-approved law called Proposition 22, which says drivers for companies like Uber and Lyft are independent contractors and are not eligible for benefits like paid sick leave and unemployment insurance. A 2021 lower court ruling declared Proposition 22 illegal, but Monday’s ruling reversed that ruling.

“Today’s decision is a victory for app workers and the millions of Californians who voted for Proposition 22,” said Tony West, Uber’s general counsel. “We are glad that the court respectfully treated the will of the people.”

The decision is a defeat for the unions and their allies in the state legislature, who in 2019 passed a law requiring companies like Uber and Lyft to treat their drivers like employees.

“Today, the Court of Appeals decided to side with powerful corporations, not workers, in allowing companies to buy off our state labor laws and undermine our state constitution,” said Lorena Gonzalez Fletcher, leader of the California Federation of Labor and former state legislator. Author of the law in 2019. “Our system is broken. It would be an understatement to say that we are disappointed with this decision.”

The decision was not a complete defeat for the unions, as the court ruled that companies cannot prevent their drivers from joining a union and collectively bargaining for better working conditions, said Mike Robinson, one of the drivers who filed the lawsuit challenging the proposal. 22

“Our right to associate and bargain collectively opens a clear path for drivers and deliveries to hold giant corporations accountable,” he said. “But make no mistake, we continue to believe that Proposition 22 – as a whole – is an unconstitutional assault on our fundamental rights.”

In 2019, the California Legislature passed a law that changed the rules about who is an employee and who is an independent contractor. This is an important distinction for companies because employees are subject to a wide range of labor laws that guarantee them certain benefits, while independent contractors do not.

While the law has applied to many industries, it has had the biggest impact on app-based car ordering and delivery companies. Their business is based on contracting people to use their own cars for people transportation and delivery. Under the 2019 law, companies will be required to treat these drivers as employees and provide certain benefits that will significantly increase business costs.

In November 2020, voters agreed to exclude app-based car ordering and delivery companies from the 2019 law by endorsing the ballot proposal. The proposal included “alternative benefits” for drivers, including a guaranteed minimum wage and health insurance subsidies if they work an average of 25 hours a week. Companies like Uber, Lyft and DoorDash have spent $200 million on the campaign to make sure it gets through.

Three Drivers and the International Union of Employees in the South, arguing that the proposal to vote was illegal in part because it limited the power of the State Legislature to change the law or pass laws on workers’ compensation programs. In 2021, a state judge agreed with them and ruled that companies like Uber and Lyft are no exception.

On Monday, a state appeals court overturned that decision, allowing companies to continue treating their drivers as independent contractors.

The decision may not be final. Employees International Union still has the option to appeal the decision to the California Supreme Court, which may decide to hear the case.

“We will consider all of these options as we decide how to ensure that the fight for these workers continues,” said Tia Orr, chief executive of SEIU California.

Continue Reading

TECH

Most Frequently Asked Questions About Affiliate Marketing

Published

2 days ago

on

March 16, 2023

By

There are many questions about how affiliate marketing works, what to do and what not to do when it comes to building a business. With so much uncertainty associated with both the personal and business aspects of affiliate marketing. In this post, we will answer the most frequently asked question about affiliate marketing.

1. What is affiliate marketing?

Affiliate marketing is a way to make money by promoting the products and services of other people and companies. You don’t need to create your own product or service, just promote existing ones. That’s why it’s so easy to get started with affiliate marketing. You can even start without a budget!


2. What is an affiliate program?

An affiliate program is a package of information that you create for your product that is then shared with potential publishers. The program usually includes detailed information about the product and its retail value, commission levels and promotional materials. Many affiliate programs are managed through an affiliate network such as ShareASale, which acts as a platform for publishers and advertisers to connect, but it is also possible to offer your program directly.

3. What is an affiliate network and how do affiliate networks make money?

Affiliate networks connect publishers with advertisers. Affiliate networks make money by charging a commission to merchants who advertise with them; these merchants are known as advertisers. The percentage of each sale that the advertiser pays is agreed between the seller and the affiliate network.

4. What is the difference between affiliate marketing and drop shipping?

Dropshipping is a selling method that allows you to run an online store without having to stock items. You advertise products like you own them, but when someone places an order, you create a duplicate order with the distributor at a discounted price. The distributor will take care of shipping and packaging on your behalf. Since affiliate marketing is based on referrals and this type of drop shipping does not require an investment in inventory, when a customer purchases from an affiliate link no money is exchanged from hand to hand.

5. Are affiliate marketing and performance marketing the same?

Effective marketing is a marketing method that pays for performance, such as when a sale is made or an ad is clicked. This may include methods such as PPC (Pay Per Click) or display advertising. Affiliate marketing is a form of performance marketing whereby commissions are paid to affiliates based on the results when they click on their affiliate link and complete a purchase or action.

6. Can I promote affiliate offers on mobile devices?

Smartphones are essentially miniature computers, so publishers can display the same websites and offers that are available on a PC. But mobile phones also offer special tools not available on computers, and these can be put to good use by publishers. Publishers can optimize their ads for mobile users by making them accessible to this audience. Publishers can also make good use of text and instant messaging to promote their offerings. With mobile predicted to account for 80% of traffic in the future, publishers that don’t market on mobile are missing out on a big opportunity.

7. Where can I find qualified publishers?

The best way to find affiliate publishers is through reputable networks like ShareASale Cj (Commission Junction), Awin, and Impact radius. These networks have a rigorous application and compliance process which means that all affiliates are trustworthy.

8. What is an affiliate disclosure statement?

The Affiliate Disclosure Statement informs the reader that the website may contain affiliate links for which the publisher may be paid a commission if visitors click on those links and make a purchase.

9. Does social media activity play a significant role in affiliate marketing?

Publishers promote their programs in a variety of ways, including blogs, websites, email marketing, and pay-per-click advertising. Social networks have a huge interactive audience, which makes this platform a good source of potential traffic.

10. What is a super affiliate program?

A Super Affiliate is an affiliate who consistently generates the most sales in any program they promote compared to other affiliates in that program. Affiliates make a lot of money from affiliate marketing Pat Flynn made over $50,000 in 2013 from affiliate marketing.

11. How do we track publisher sales?

Publishers can be identified by their publisher ID, which is used in tracking cookies to determine which publishers are generating sales. The activity is then viewed in the Network Dashboard.

12. Can we create an affiliate program in several countries?

Thanks to the widespread use of the Internet, affiliate programs can be promoted in any country. Partnership strategies established internationally should be adapted to the language of the target country.

13. How can affiliate marketing help my business?

Affiliate marketing can help you grow your business in the following ways:

  • This allows you to save time and money on marketing, which frees you up to focus on other aspects of your business.
  • You get access to friendly marketers who are willing to help you succeed.
  • It will also help you promote your products by sharing links and banners with new audiences.
  • It offers a high ROI (return on investment) and is cost effective.

14. How to find quality publishers?

One of the best ways to work with qualified affiliates is to hire an affiliate marketing agency that works with all networks. Partners are carefully selected and go through a rigorous application process to join the network.

15. How can we promote affiliate links?

Affiliate marketing is usually associated with websites, but there are other ways to promote your affiliate links, including:

  • Website or blog
  • Through email marketing and newsletters
  • Social networks such as Facebook, Instagram or Twitter.
  • Leave a comment on blogs or forums.
  • Write an e-book or other digital product.
  • YouTube

16. Do I need to pay for registration in the affiliate program?

To build your affiliate marketing business, you don’t need to invest money in the beginning. You can register for free in any affiliate network and start promoting your brands right away.

17. What is a commission?

Commission rates are usually based on a percentage of the total sale, and in some cases may also be a flat fee per transaction. The rates are set by the seller.

Who manages your affiliate program?

Some merchants manage their affiliate programs in-house, while others choose to outsource management to a network or an external agency.

18. What is a cookie?

Cookies are small pieces of data that work with web browsers to store information such as user preferences, login or registration information, and the contents of a shopping cart. When someone clicks on your affiliate link, a cookie is placed on the user’s computer or mobile device. This cookie is used to remember the link or ad that the visitor clicked on. Even if a user leaves your site and comes back a week later to make a purchase, you will still receive credit for the sale and receive a commission that depends on the duration of the site’s cookies.

19. How long do cookies last?

The Seller determines the duration of the cookie, also known as the “cookie duration”. The most common duration of an affiliate program is 30 days. If someone clicks on your affiliate link, you will earn a commission if they buy within 30 days of the click.

Closing Statement

Most new affiliates are looking to start their own affiliate marketing business. Unfortunately, there is a lot of false information that can mislead inexperienced affiliates. We hope that the answer to your question will clarify how affiliate marketing works and what pitfalls you can avoid. Most importantly, keep in mind that success in affiliate marketing takes time. Don’t be discouraged if you don’t start selling or making money right away. Most new affiliates take months to earn a consistent income.

Continue Reading

TECH

UK bans TikTok on government phones for security reasons: NPR

Published

2 days ago

on

March 16, 2023

By

The TikTok video sharing app icon is seen on a smartphone on February 28. British authorities said on Thursday they are banning the use of the Chinese app on government mobile phones for security reasons.

Matt Slocum/AP


hide title

switch title

Matt Slocum/AP

The TikTok video sharing app icon is seen on a smartphone on February 28. British authorities said on Thursday they are banning the use of the Chinese app on government mobile phones for security reasons.

Matt Slocum/AP

LONDON — British authorities said Thursday they are banning Chinese video-sharing app TikTok from using government mobile phones for security reasons, following similar moves by the US and the European Union.

Cabinet Minister Oliver Dowden told Parliament that the ban applies to work phones and other devices used by ministers and civil servants. He called the ban a “cautious move” and said it does not apply to personal phones and devices.

Biden administration demands sale of TikTok or risk nationwide ban

“Given the particular risk associated with government devices that may contain sensitive information, it is reasonable and proportionate to limit the use of certain applications, especially when it comes to applications that can store and access large amounts of data,” Dowden said. British legislators.

Last month, the US government instructed federal agency officials to remove TikTok from all government-issued mobile devices. Congress, the White House, the US military, and more than half of the US states have already banned the app.

The European Union, Belgium and other countries have also temporarily banned the use of the app on employee phones.

TikTok officials go on public glamor offensive amid impasse at Biden White House

The moves were prompted by growing concerns that TikTok’s parent company, ByteDance, would be sharing user data such as browsing history and location with the Chinese government or promoting propaganda and disinformation on its behalf.

The company insists such concerns are based on “misinformation” and said it is taking steps to strengthen the protection of user data from the UK and Europe.

“We believe these bans are based on fundamental misconceptions and driven by broader geopolitics in which TikTok and our millions of users in the UK play no role,” the company said. “We remain committed to working with the government to resolve any issues, but we should be judged on the facts and treated equally with our competitors.”

Citing security concerns, Canada bans TikTok on government devices

On Thursday, China accused the United States of spreading misinformation and cracking down on TikTok following reports that the Biden administration was urging Chinese owners of the short-video service to sell their stakes in the popular app.

Last year, the British Parliament closed its TikTok account, which was aimed at a younger audience, just days after it launched after concerns were raised by lawmakers.

Continue Reading

Trending

Copyright © 2023 News Logics Media.