Palo Alto Networks Releases Security Update for PAN-OS

Palo Alto Networks Releases Security Update for PAN-OS

This article is contributed. See the original author and article here.

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

SSL

Secure .gov websites use HTTPS

A lock (lock icon) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

CISA Releases Cybersecurity Toolkit to Protect U.S. Elections

This article is contributed. See the original author and article here.

CISA—through the Joint Cyber Defense Collaborative (JCDC)—has released a toolkit of free cybersecurity resources for the election community. The toolkit aims to help state and local government officials, election officials, and vendors enhance the cybersecurity and cyber resilience of U.S. election infrastructure. The toolkit resources, which come from CISA, JCDC members, and others across the cybersecurity community, focus on assessing risk and protecting election infrastructure assets commonly targeted by phishing, ransomware, and distributed denial-of-service (DDoS) attacks.

CISA strongly encourages election community stakeholders to use the Cybersecurity Toolkit to Protect Elections to strengthen the cybersecurity and cyber resilience of U.S. election infrastructure. 

Released: August 2022 Exchange Server Security Updates

Released: August 2022 Exchange Server Security Updates

This article is contributed. See the original author and article here.

Microsoft has released security updates (SUs) for vulnerabilities found in:



  • Exchange Server 2013

  • Exchange Server 2016

  • Exchange Server 2019


IMPORTANT: Updates are released in a self-extracting auto-elevating .exe package. Please see this post for more information. Older version of update packages can be downloaded from Microsoft Update Catalog.


These SUs are available for the following specific builds of Exchange Server:



The SUs address vulnerabilities responsibly reported to Microsoft by security partners and found through Microsoft’s internal processes. Although we are not aware of any active exploits in the wild, our recommendation is to immediately install these updates to protect your environment.


These vulnerabilities affect Exchange Server. Exchange Online customers are already protected from the vulnerabilities addressed in these SUs and do not need to take any action other than updating any Exchange servers in their environment.


More details about specific CVEs can be found in the Security Update Guide (filter on Exchange Server under Product Family).


Manual enablement of Windows Extended Protection


Addressing some of CVEs released this month requires admins to enable Windows Extended protection on your Exchange servers. To help you enable this feature, we have developed a script for this process. Please carefully evaluate your environment and review all known issues mentioned in the script documentation before enabling Windows Extended protection on your Exchange servers.


Please note that enabling Extended Protection (EP) is only supported on specific versions of Exchange (please see documentation for full list of prerequisites).


The current version of this script can be found at https://aka.ms/ExchangeEPScript and the documentation is at https://aka.ms/ExchangeEPDoc. For script and documentation changes and suggestions, please engage with us via GitHub to ensure proper issue and change tracking. The script provided to enable Extended Protection will automatically perform an automatic update if the computer on which it is executed has an internet connection (direct or via proxy). However, if you don’t have internet access, make sure to download the latest version of the script as we are continuously improving it.


It is important that you fully understand Windows Extended Protection prerequisites and all known issues before running the script in your environment. Enabling Extended Protection affects communication between your Exchange servers and between clients and servers.


Update installation


Update paths available:


Aug2022SUsV5.jpg 


Inventory your Exchange Servers / determine which updates are needed


Use the Exchange Server Health Checker script (use the latest release) to inventory your servers. Running this script will tell you if any of your Exchange Servers are behind on updates (CUs and SUs).


Update to the latest Cumulative Update


Go to https://aka.ms/ExchangeUpdateWizard and choose your currently running CU and your target CU to get directions for your environment.


If you encounter errors during or after installation of Exchange Server updates


If you encounter errors during installation, see the SetupAssist script. If something does not work properly after updates, see Repair failed installations of Exchange Cumulative and Security updates.


Known issues with this release


We are not aware of any known issues with this release.


FAQs


My organization is in Hybrid mode with Exchange Online. Do I need to do anything?
While Exchange Online customers are already protected, the August 2022 SUs do need to be installed on your on-premises Exchange servers, even if they are used only for management purposes. You do not need to re-run the Hybrid Configuration Wizard (HCW) after installing updates.


Do I need to install the updates on ‘Exchange Management Tools only’ workstations?
Servers or workstations running only the Management Tools role (no Exchange services) do not need these updates.


NOTE: This post might receive future updates; they will be listed here (if available).


The Exchange Server Team

Social Media, Azure Synapse & PowerBI

Social Media, Azure Synapse & PowerBI

This article is contributed. See the original author and article here.

Make Insightful decisions with Social Media Analytics


Problem Statement


Imagine you are a product developer for a healthcare company who wants to find trending topics around your recently developed product. Or, you are a researcher for a company who wants to search around what is trending on the market to come up with new innovative product(s)..


You’ll first need to find a way to scrape different news sites and search popular social media platform, like Twitter, to find trending topics.


Also imagine, after all the scraping the company wants to map relevant geolocations, search through hashtags, find authors, translate languages in real-time and even run text analytics to retrieve sentiment analysis. Now you want to show this on a dashboard to make a case for your research to your business executive!


 


Possible solution…


In order to create this solution from scratch you’d need to create some sort of a web application to go and fetch different news sites (e.g. News API). Then authenticate/authorize yourself with Twitter and hit Twitter’s search endpoints. Store all this data and use it to hit the Bing Maps endpoint, then hit the Azure Cognitive Services to run translation and text analytics. Then, finally wrap it all up with mapping all the information on to the dashboard and visualize the result in PowerBI!

That’s a lot of time spent on development, integration, and design to get to the finished solution.


 


Enter… Social Media Analytics Solution!


DanielKim_0-1659975130586.png


 


 


Checkout the Github repo: microsoft/Azure-Social-Media-Analytics-Solution-Accelerator (github.com)


There will be a follow-up post with learnings!

Please comment for any questions.

Thanks for reading :smiling_face_with_smiling_eyes: