Flying The Web For News.
  • Career Exam Study
    Career Exam Study
  • US Politics
    US Politics
  • E-commerce Guide
    E-commerce Guide
  • Dropshipping Guide
    Dropshipping Guide
  • Microsoft Exam
    Microsoft Exam
  • IT Career News
    IT Career News

Article Tools/Herramientas de artículos
+ Larger Font/Fuente más grande | - Smaller Font/Fuente más pequeña




Consumer Daily Reports

[unable to retrieve full-text content]

Here are the top 15 Common Vulnerabilities and Exposures

By Mark Huffman Consumer News: Feds warn of rise in ‘zero-day’ cyberattacks of ConsumerAffairs
November 13, 2024

Photo

In a stark warning to enterprises worldwide, cybersecurity experts have highlighted a troubling rise in the exploitation of zero-day vulnerabilities by malicious cyber actors.

This revelation comes from the latest annual Cybersecurity Advisory (CSA) titled "2023 Top Routinely Exploited Vulnerabilities," co-authored by the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and several international partners.

The advisory details the top 15 Common Vulnerabilities and Exposures (CVEs) identified in 2023, with 11 of these 15 vulnerabilities initially exploited as zero-days. This marks a significant increase from the previous year, where only two such vulnerabilities were zero-days.

Zero-day vulnerabilities are particularly dangerous as they are unknown to the system's owner, developer, and the general public, making them prime targets for cybercriminals. They are called zero-day threats because there is no time to prepare a patch.

Urgent need

Jeffrey Dickerson, NSAs cybersecurity technical director, emphasized the urgency of addressing these vulnerabilities.

"All of these vulnerabilities are publicly known, but many are in the top 15 list for the first time," he said. "Network defenders should pay careful attention to trends and take immediate action to ensure vulnerabilities are patched and mitigated. Exploitation will likely continue in 2024 and 2025."

The CSA not only lists the top 15 exploited CVEs but also provides a comprehensive overview of additional routinely exploited vulnerabilities. This information, along with previous reports, is intended to aid in future trend analysis and retrospection, offering valuable insights for cybersecurity professionals.

To combat these threats, the report urges vendors, designers, and developers to prioritize secure-by-default configurations and ensure that published CVEs include the correct Common Weakness Enumerations (CWEs) to pinpoint the root causes of vulnerabilities.

Advice to end-users

End-user organizations are advised to apply timely patches, implement centralized patch management systems, and utilize security tools such as endpoint detection and response (EDR), web application firewalls, and network protocol analyzers. Additionally, organizations should inquire about their software providers' secure-by-design programs to enhance their defenses.

The advisory is a collaborative effort, with contributions from the FBI, the Australian Signals Directorates Australian Cyber Security Centre, the Canadian Centre for Cyber Security, New Zealand's National Cyber Security Centre, Computer Emergency Response Team New Zealand, and the United Kingdoms National Cyber Security Centre.



Photo Credit: Consumer Affairs News Department Images


Posted: 2024-11-13 15:03:03

Get Full News Story On Consumer Affairs



Listen to this article. Speaker link opens in a new window.
Text To Speech BETA Test Version.



More News From This Category

Consumer News: The SNAP food program is back ... partly

Mon, 03 Nov 2025 23:07:08 +0000

The WIC program that funds programs for women and infant children is also partly back in action

By James R. Hood of ConsumerAffairs
November 3, 2025

  • The Agriculture Department will use $4.65 billion in emergency funds to partially restart food aid programs halted by the government shutdown.

  • Millions of Supplemental Nutrition Assistance Program (SNAP) recipients will receive only about half their normal benefits this month.

  • Aid for women and children under the WIC program will continue for now, but only for two to three more weeks.


Government taps emergency funds to partially restore food aid

Tens of millions of Americans who rely on federal food assistance will see some relief after the Agriculture Department announced it will partially resume funding for the Supplemental Nutrition Assistance Program, or SNAP.

The move comes after a federal judge ordered the government to restart benefits during the ongoing shutdown. In a court filing, the Trump administration said it would release $4.65 billion in emergency moneyenough to cover roughly half of this months $8 billion in benefits.

That means some funds will soon reach families who rely on SNAP to buy groceries, but the payments will fall short of normal levels, and delays could stretch for weeks. USDA officials said they would not draw from other contingency accounts to cover the full amount. New applicants this month will not be eligible to receive benefits until further notice.

WIC program gets temporary lifeline

The administration will also inject $450 million in emergency funds to keep the Special Supplemental Nutrition Program for Women, Infants and Children, or WIC, running for now. The program serves about 7 million low-income mothers and children.

Earlier in the shutdown, USDA had used $300 million in reserve money to sustain WIC operations. The new funding could keep the program afloat for another two to three weeks, though that timeline could shrink if families facing reduced SNAP aid turn to WIC for additional support.

Shutdowns effects ripple across low-income programs

The partial restoration of food aid comes as other vital services for low-income families begin to falter under the prolonged shutdown.

Some Head Start centers around the country have already begun closing after grant funding lapsed over the weekend, leaving children without preschool instruction, meals, and therapy sessions. Many working parents are now scrambling to find child care alternatives.

Meanwhile, federal court-appointed defense attorneys have begun working without pay, raising concerns that the justice system could soon struggle to guarantee representation for defendants who cannot afford lawyers.

The governments emergency measures may stave off a deeper food crisis for now, but advocates warn that millions of families remain in limbo uncertain when or whether their full benefits will return.


Read More ...


Consumer News: LillyDirect and Walmart team up to make Zepbound easier to access

Mon, 03 Nov 2025 23:07:08 +0000

New partnership brings direct-to-consumer pricing and in-store pickup to thousands of Walmart pharmacies

By Kristen Dalli of ConsumerAffairs
November 3, 2025
  • The partnership between LillyDirect and Walmart allows patients to pick up Zepbound at Walmart pharmacies at the same self-pay price as online.

  • Self-pay pricing starts at $349/month for the lowest dose, with higher doses at $499/month, and its available to anyone with a valid prescription, regardless of insurance.

  • By mid-November, pharmacies at nearly 4,600 Walmart locations nationwide will support this new model, giving patients more choice between home-delivery or in-store pickup.


If youve been tracking weight-management medications, you may have seen the buzz around Zepbound, the weekly injectable from Eli Lilly designed for weight loss and certain obesity-related conditions.

Now imagine skipping the insurance shuffle, getting a set self-pay price, and walking into your local Walmart pharmacy to pick it up.

Thats exactly whats happening: LillyDirect and Walmart are teaming up to streamline how people access Zepbound less paperwork, one clear price, and more convenience.

Managing a chronic disease like obesity can be a significant and ongoing burden physically, emotionally, and financially, Jennifer Mazur, SVP and General Manager of LillyDirect, said in a news release.

This collaboration with Walmart is designed to reduce that burden by streamlining access to prescribed treatment. By combining LillyDirects innovative, patient-centered platform with Walmarts nationwide pharmacy footprint, were expanding options for patients facing access challenges, making it easier to start and stay on authentic Lilly medicine.

Whats going on (and why it matters):

Eli Lillys LillyDirect platform has already been offering Zepbound vials direct-to-consumer online, at self-pay prices that are 50% or more below typical GLP-1 obesity drug list pricing.

Now, for the first time, this same pricing model is being extended into a major retail pharmacy setting through Walmart. Under the deal, approved single-dose vials of Zepbound will be available for pick-up in Walmart pharmacies nationwide by mid-November.

Heres how it breaks down: with a valid on-label prescription, a patient can choose between having the drug delivered from LillyDirect or walking into a Walmart pharmacy and picking it up locally. Its the same price for both options.

For example: the starting 2.5 mg dose is priced at $349/month, and the higher doses (5 mg up through 15 mg) are $499/month under the LillyDirect Self Pay Journey Program.

Why this matters: many patients told Lilly and Walmart that access and convenience were major barriers in starting or staying on treatment. With Walmarts network of 4,600+ pharmacies and Lilly's direct-to-consumer platform, this initiative offers more flexibility whether you prefer ordering online or popping into a familiar retail location.

What to watch

  • Make sure your health care provider writes an on-label prescription for Zepbound that can be routed to LillyDirect Self Pay Pharmacy Solutions, with your pickup option at Walmart.

  • Check whether the $499/month higher-dose pricing applies to you and whether you meet program terms (for higher-dose eligibility).

  • Confirm which Walmart pharmacy locations will support the program once it launches mid-Novemberits slated to be nationwide, but local rollout may vary.

In short: If youre eligible for Zepbound and looking for a more streamlined way to access it, this partnership could make a meaningful difference less hassle, clearer cost, and more flexibility in how you get your medicine.

Life is busy, and this will help people discover new, easy ways to get their medication, Kevin Host, Senior Vice President of Pharmacy at Walmart, said in the news release. We are known for building great relationships with our patients, and our teams look forward to doing more of that through making this pickup option available from our trusted pharmacists and pharmacy technicians.


Read More ...


Consumer News: Amazon is offering Thanksgiving dinner for five people for $25

Mon, 03 Nov 2025 23:07:08 +0000

From turkey to pie, shoppers can feed five for just $5 a person this season

By Kristen Dalli of ConsumerAffairs
November 3, 2025
  • Amazons Thanksgiving meal deal feeds five for $25, complete with turkey and sides.

  • Additional November savings include discounts on pies, baking staples, and wine.

  • Shoppers can order online, use same-day delivery, or visit Amazon Fresh and Whole Foods.


This Thanksgiving, Amazon wants to make sure dinner is one less thing to stress about.

The company is serving up an affordable, ready-to-assemble meal that feeds five people for just $25 or about $5 per person from November 12 through 27.

Amazon is using its grocery network including Amazon Fresh and Whole Foods Market to make it easier (and cheaper) for families to prepare a full holiday spread without last-minute store runs. Customers can shop the bundle online, in-store, or through Amazons Same-Day Delivery service in eligible areas, so the turkey and trimmings can arrive right on time.

Whats included in Amazons $25 Thanksgiving meal

The Amazon Thanksgiving bundle is designed to cover every essential, from the main course to dessert. The meal includes:

  • Butterball frozen turkey $0.69/lb

  • Resers homestyle stuffing

  • Mashed potatoes and gravy

  • Green bean casserole

  • Cranberry relish

  • Amazon Grocery crescent rolls

  • Holiday pie (from select national brands)

Altogether, the bundle feeds five people for just $25. And for those who like to customize, Amazon is also running additional seasonal discounts throughout November:

  • Pre-made pies under $7 Pumpkin, pecan, sweet potato, cherry, berry, and apple varieties

  • 25% or more off baking essentials from Amazon Grocery, Amazon Saver, Aplenty, and 365 by Whole Foods Market

  • Whole Foods Market turkey savings for Prime members $1.49/lb frozen or $2.99/lb organic (through Dec. 24)

  • 20% off six or more bottles of wine (750 ml) at Amazon Fresh stores and online through Nov. 30

With free same-day pickup, fast delivery, and exclusive Prime grocery benefits, Amazon is giving consumers multiple ways to stretch their holiday budgets and still serve a classic Thanksgiving dinner that feels homemade.

How to order the meal

Customers can find Amazons $25 Thanksgiving meal bundle by searching Thanksgiving meal on Amazon.com or through the Amazon Fresh section online or in-store.

Availability and delivery options vary by location, but eligible shoppers can use Same-Day Delivery or free pickup at participating stores from November 1227.


Read More ...


Consumer News: Walmart’s app just grew up for the holidays and it’s a money-saver

Mon, 03 Nov 2025 23:07:08 +0000

In-store deal finder, aisle maps, and an AI party planner

By Kyle James of ConsumerAffairs
November 3, 2025
  • See real deals fast: Open the Walmart app in-store, hit In-Store Savings, and filter by clearance/rollback to spot actual discounts (not just endcap hype).
  • Shop in a straight line: Build your list at home and sort by aisle when you arrive so youre in and out without criss-crossing the store.
  • Let AI do the budgeting: Ask Sparky for a party or grocery list under $___ and tell it to show Rollbacks firstit will swap in cheaper, in-stock items for you.

Walmart rolled out a slate of new app features aimed at making in-store shopping feel as guided as buying online. Some of the more interesting updates include live In-Store Savings, enhanced search with aisle navigation, wish lists that sort by aisle, and helpful AI tools like Sparky.

For shoppers, it means fewer laps around the store looking for what you need and faster access to the real deals (including Black Friday).

Whats new inside the store

  • In-Store Savings (one-tap local deals): Open the app in your local Walmart and tap the savings view to see Black Friday promos, Rollbacks, and clearance items listed all in one place. You can then filter by category (e.g., TVs) and compare prices on a single screen. This solves the question of wondering whats actually on sale,not just what Walmart wants you to think is a deal.
  • Enhanced search + aisle location: You can now use the app to search like you would online and see real-time stock levels plus the exact aisle so you can walk straight to it. No more hunting for an associate to ask what endcap theyre hiding their clearance items on.
  • Wish lists that sort by aisle: You can now build a gift list at home, then when you walk in, the app reorders your list by aisle so your trip follows a clean route around the store. Very handy feature for one-and-done holiday runs that will you get you in and out quickly.

New AI helpers

  • Sparky, the AI assistant (now with party planning): Within the app, tell Sparky something like Holiday open house for 10 under $100, and it will generate a curated list of snacks, drinks, and paper goods based on your stores inventory and deals. It will also summarize product reviews so you spot customer complaints right away.
  • AI audio summaries: Walmart has started with the beauty category first to test out this feature. For 1,000+ premium beauty items, the app can read a short audio summary that distills product descriptions and reviews. Look for this to expand to other categories soon.
  • AI-powered 3D dcor shopping: Walmarts Deck the Halls in 3D turns product photos into 3D scenes you can browse and shop. You can actually Shop the Background and add items like artwork and dcor items directly to your cart. You can even shop a Dynamic Showroom and swap out furniture and different styles to find the exact look you want.

How to actually use the app in real life (2-minute setup)

Update the Walmart app and allow location so it detects your store when you walk in. Then when you enter the store, the app will automatically load your In-Store Savings.

Build a wish list at home before you shop then when you get to the store, just open your list and tap Sort by aisle to turn your trip into a smart route so youre not criss-crossing the store unnecessarily.

Sparky can definitely help you save money. Get used to the feature by asking Sparky for a budget plan like, Game-day snacks for 8 under $40, please show Rollbacks and clearance items first, or Holiday party for 12 under $100.

Ive found that by filtering your app searches by clearance/rollback first, then by unit price, its the best way to cut through the holiday noise and spot the real deals before you get tempted by the full-price stuff.

Use the app to plan a holiday party on a budget. Try giving Sparky a hard cap number like under $60 and permission to swap out-of-stocks. By doing so, Ive found that it will backfill with similar items that are often cheaper.


Read More ...


Consumer News: New rules limit forgiveness of student debt for public servants

Mon, 03 Nov 2025 20:07:06 +0000

Supporters call it a refocus; critics call it retaliation

By James R. Hood of ConsumerAffairs
November 3, 2025

  • A new Education Department rule could disqualify some nonprofit workers from Public Service Loan Forgiveness (PSLF).

  • The rule allows the agency to bar entire organizations if they engage in activities deemed substantially illegal.

  • Critics say the move politicizes student debt relief and threatens borrowers close to forgiveness.


Thousands of nonprofit employees may soon lose eligibility for federal student loan forgiveness under a sweeping new Education Department rule that redefines who qualifies for the Public Service Loan Forgiveness program.

The 185-page regulation, published Thursday, gives the education secretary power to disqualify entire employers not just individual workers if their organizations are found to have a substantial illegal purpose. The rule, which takes effect July 1, fulfills a directive from President Donald Trumps March executive order targeting nonprofits accused of supporting illegal immigration, child trafficking, pervasive damage to public property and disruption of the public order.

That means workers at nonprofits serving undocumented immigrants, providing gender-affirming care to minors, or taking part in protest movements could lose PSLF eligibility. Payments made after a group is disqualified would no longer count toward the 120 qualifying payments required for forgiveness.

Activities that could trigger disqualification

Among the listed disqualifying activities: aiding violations of federal immigration law, supporting terrorism, performing gender-transition procedures on minors where prohibited, trafficking minors across state lines for emancipation, or engaging in organized violence to influence policy.

Employers may appeal if removed from the program, but the Education Department said payments made after disqualification will not count toward forgiveness even if the appeal later succeeds.

The change could affect a broad range of community organizations from legal-aid groups and immigrant-rights advocates to health clinics and humanitarian charities that rely on PSLF eligibility to recruit and retain staff.

Administration officials said the rule restores the programs original purpose. This regulation refocuses the PSLF program to ensure federal benefits go to our nations teachers, first responders, and civil servants who tirelessly serve their communities, said Undersecretary of Education Nicholas Kent.

Conservative lawmakers applauded the move. Taxpayers shouldnt be forced to subsidize employees of radical organizations that violate state and federal laws, said Rep. Tim Walberg (R-Mich.), chair of the House Education Committee.

But Democrats and borrower advocates blasted the rule as politically motivated. Rep. Robert C. Bobby Scott (D-Va.) said it follows the Trump Administrations disturbing pattern of making repayment less affordable and attempting to police political speech.

Jaylon Herbin, director of federal policy at the Center for Responsible Lending, called the policy a cruel trick that would saddle public workers with decades of additional debt and worsen shortages in critical community services.

Program with high stakes for millions

Created in 2007 under President George W. Bush, PSLF was designed to encourage graduates to pursue careers in public service by erasing their remaining federal student loan debt after 10 years of qualifying payments.

More than 1 million borrowers have already received forgiveness under the program. If the new rule withstands anticipated legal challenges, experts say it could reshape PSLFs reach across more than 20 economic sectors and upend forgiveness for thousands of borrowers already nearing the finish line.

What this means for borrowers

  • If you are already working in a qualifying job and meeting the rules (qualifying loan type, full-time with a qualifying employer, making qualifying payments, submitting required certification), you should continue doing so and keep tracking your progress.

  • If your employer is a nonprofit or governmental entity, youll want to check whether your employer is (or will be) considered a qualifying employer under the updated rules. Any changes or uncertainty about your employers eligibility could impact your path to forgiveness.

  • Because the rules are in flux, its advisable to document your employment history, payments, certifications, and keep up-to-date with communications from loan servicers and the Department of Education.

  • If youre considering starting public-service employment specifically for PSLF eligibility, you may want to ask: Will this job/employer still qualify if the rules change? especially for nonprofits that may have ambiguous status.


Read More ...


Related Bing News Results

Consumer Reports finds unsafe lead levels in many protein supplements

Tue, 14 Oct 2025 17:00:00 GMT
An investigation released Tuesday by Consumer Reports sounded the alarm about lead and heavy metals in many protein supplements. File Photo by Jose Luis Palma/Pixabay Oct. 14 (UPI) --Many protein ...

Your daily protein shake could contain lead. Consumer Reports says these powders contain the most

Tue, 14 Oct 2025 17:00:00 GMT
Do you use protein powder? According to a recent announcement from Consumer Reports, their tests conducted on 23 popular protein powders and ready-to-drink shakes revealed an increased prevalence of ...

Use protein powder? New report reveals that some have high levels of lead

Tue, 14 Oct 2025 17:00:00 GMT
Some protein powders and shakes are riddled with high levels of lead, a Consumer Reports investigation has found. The organization purchased multiple samples of protein products over a three-month ...

Your Daily Protein Shake Might Be Exposing You to Lead, Consumer Reports Finds

Tue, 14 Oct 2025 03:00:00 GMT
A Consumer Reports investigation found that more than two-thirds of tested protein powders and shakes contained more lead per serving than what food safety experts deem safe for daily consumption.

Consumer Reports: Tips to cut kitchen costs

Thu, 09 Oct 2025 04:32:00 GMT
The kitchen is often the busiest room in the house and one of the most expensive. From energy use to food prices, it all adds up, but Consumer Reports has some easy fixes that can help you save. Every ...


Blow Us A Whistle




Related Product Search/Búsqueda de productos relacionados