Entertainment news

Ivanti Patches Two Critical Avalanche Flaws in Major Update – Infosecurity Magazine

Ivanti has released a new product update for its flagship Avalanche mobile device management (MDM) product designed to fix 27 vulnerabilities, including two critical bugs.

The security vendor said it was not aware of any of the vulnerabilities currently being actively exploited in the wild. However, the two critical flaws could lead to remote code execution (RCE).

CVE-2024-24996 is described as a heap overflow in the WLInfoRailService component of the product, while CVE-2024-29204 is a heap overflow bug in the WLAvalancheService component. Both could allow a remote unauthenticated attacker to execute arbitrary commands, which is why they have been given a CVSS score of 9.8.

Avalanche is designed to offer IT administrators in large organizations the ability to centrally manage large deployments of potentially 100,000+ devices. As such, it would be an attractive target for attackers – although Ivanti claimed the vulnerabilities recently listed are not under active exploitation.

The remaining 25 CVEs fixed in this update are mainly path traversal and out-of-bounds read flaws with CVSS scores ranging from 5.3 to 8.8.

“Avalanche 6.4.3 has addressed some new security hardening and vulnerabilities in our Q1 2024 release. We are not aware of any exploitation of these vulnerabilities at the time of disclosure,” the advisory noted.

“To address the security vulnerabilities listed below, it is highly recommended to download the Avalanche installer and update to the latest Avalanche 6.4.3.”

Ivanti patched another 13 critical vulnerabilities in Avalanche back in December 2023.

The vendor’s products have proven to be a happy hunting ground for likely state-sponsored threat actors over the past year.

Two zero-day vulnerabilities in Ivanti Endpoint Manager (EPMM), formerly known as MobileIron Core, were exploited by Chinese threat actors in January 2023 to compromise 12 Norwegian government ministries.

Then around a year later it revealed three more zero-days were being chained in Chinese attacks designed to compromise its Connect Secure VPN product and Policy Secure network access control (NAC) offerings.

Some insurers have claimed they now require prospective policyholders to put in place specific mitigations if running certain Ivanti products.

Entertainment news

WOTA Global Training Trust rebrands, holds 3rd graduation ceremony – Chronicle

WOTA Global Training Trust rebrands, holds 3rd graduation ceremony

Mbulelo Mpofu, [email protected]

WIN Over Trauma Addiction (WOTA) Global Training Trust has rebranded to WOTA Global Training: The Light of Knowledge and on Saturday held its third annual graduation ceremony at S.O.S Hermann Gmeiner Primary School.

Over 140 students were conferred with certificates of completion after undergoing courses in medical theory and practice.

The graduands, trained in dementia care, geriatric aide, and other medical conditions are equipped with the right knowledge and skillset to help the government fight medical battles, especially the deadly drug and substance abuse scourge.

At the ceremony, guest of honour was Mr Henry Ndlovu charged the graduands to keep learning.

“Today, you have achieved something but this doesn’t end here. You need to acquire more knowledge and you can never be too learned to learn,” he said.

On the other hand, WOTA Global Trust Training Trust Centre CEO and dementia care expert, Mr Jabulani Mguni said the idea it to tap into the President’s idea of nurturing talent.

“Wota Global Training Trust is the Future. Zimbabwe is a great nation, full of talented youths. Our President once said that Zimbabwe is open for business and we want to tap into that.
It is very true, there are greener pastures in our country.

“Education is an eye opener. It takes education to enlighten the youth that greener pastures are not only over seas but there are also greater greener pastures in our beautiful country Zimbabwe.

“As an organisation, our vision is to equip the youth with diverse short courses such as Hotel and Catering, Braiding and Weaving , Beauty therapy, Health care assistant, Dementia care and many others.These courses will play a very essential role in equipping the youth with skills will help them open their businesses. By doing so, its easier for them to earn a living and create employment.

“Our target is to train every youth of Zimbabwe, even those who don’t have any qualifications. We equip them with entrepreneurial skills so that they can use those skills to start their own business and create employment,” he said.

The graduates were plucked from branches including Bulawayo, Harare, and Gwanda as the Trust’s expansion drive towards having 50 branches nationwide by the end of 2025 continues.

With that in mind, Mguni said they are “targeting to launch branches in all cities of Zimbabwe and abroad.”

At the event, entertainment was provided by the music duo of Simz Masuku and Reilo Viekk, and dancer MJ. –

@MbuleloMpofu

Entertainment news

Joni Mitchell Revisits Her Move From the ‘Hit Department’ to the ‘Art Department’ on Late Seventies Box Set – Rolling Stone

Following Joni Mitchell‘s return to Spotify, the singer-songwriter will release The Asylum Albums (1976-1980), out June 21 via Rhino.

The box set contains a remastering of Mitchell’s albums from the late Seventies: 1976’s Hejira (1976), 1977’s Don Juan’s Reckless Daughter, 1979’s Mingus, and the 1980 live album Shadows and Light. You won’t find any unreleased recordings or outtakes here; Mitchell will include those on the official Archives Vol. 4, expected later this year.

Each record on The Asylum Albums (1976-1980) was remastered from flat analong master tapes by Bernie Grundman. Rhino will release them as a 5-CD set, a 6-LP edition limited to 5,000 copies, as well as digitally. You can hear the remastered take of “Coyote” — a fan favorite off Hejira — below.

The liner notes were written by Meryl Streep, who said, “It’s not just the artifact – music and lyrics – that Joni gives us. Her artistry leaves us, ourselves, changed. She has shifted things around inside us. And that’s how artists change the world.”

The Asylum Albums (1976-1980) marked Mitchell’s move from the “hit department” to the “art department.” She kicked off the era following her Hissing of Summer Lawns tour, when she retreated to her pal Neil Young‘s beach house. “I had an idea; I knew I wanted to travel,” she told Cameron Crowe in her 1979 Rolling Stone cover story. “I was sitting out at the beach at Neil’s place and I was thinking, ‘I want to travel, I don’t know where and I don’t know who with.’ Two friends of mine came to the door and said, ‘We’re driving across country.’ I said, ‘I’ve been waiting for you; I’m gone.‘”

The Asylum Albums (1976-1980) will be accompanied by Vol. 4. Mitchell has been pairing remastered box sets with each volume since she began the series in 2020, which kicked off with Vol. 1: The Early Years (1963-1967), a documentation of her folkie days. She followed that up in 2021 with Vol. 2: The Reprise Years (1968 To 1971) — the remastered release being The Reprise Albums (1968-1971) — and Vol. 3: The Asylum Years (1972-1975) in 2022, which was released alongside The Asylum Albums (1972-1975).

Editor’s picks

The Asylum Albums (1976-1980) LP Track List
Hejira
Side One

“Coyote”
“Amelia”
“Furry Sings The Blues”
“A Strange Boy”
“Hejira

Side Two

“Song For Sharon”
“Black Crow”
“Blue Motel Room”
“Refuge Of The Road”

Don Juan’s Reckless Daughter
LP One
Side One

“Overture – Cotton Avenue”
“Talk To Me”
“Jericho”

Side Two

“Paprika Plains”

LP Two
Side One

“Otis And Marlena”
“The Tenth World”
“Dreamland”

Side Two

“Don Juan’s Reckless Daughter”
“Off Night Backstreet”
“The Silky Veils Of Ardor”

Mingus
LP One
Side One

“Happy Birthday 1975”
“God Must Be A Boogie Man”
“Funeral” (Rap)
“A Chair In The Sky”
“The Wolf That Lives In Lindsey”

Side Two

“I’s A Muggin” (Rap)
“Sweet Sucker Dance”
“Coin In The Pocket” (Rap)
“The Dry Cleaner From Des Moines”
“Lucky” (Rap)
“Goodbye Pork Pie Hat”

Shadows and Light
LP One
Side One

Introduction
“In France They Kiss On Main Street”
“Edith And The Kingpin”
“Coyote”
“Goodbye Pork Pie Hat”

Side Two

“The Dry Cleaner From Des Moines”
“Amelia”
Pat’s Solo
“Hejira”

LP Two
Side One

“Black Crow”
Don’s Solo
“Dreamland”
“Free Man In Paris”
Band Introduction
“Furry Sings The Blues”

Side Two

“Why Do Fools Fall In Love”
“Shadows And Light”
“God Must Be A Boogie Man”
“Woodstock”

Entertainment news

Brucella back with track Bad featuring M.U.S.E – Chronicle

Brucella back with track Bad featuring M.U.S.E

Sipepisiwe Moyo, [email protected]

AWARD-winning Hip-hop musician Brucella is set to launch a new track “Bad” that features M.U.S.E in Bulawayo as she returns from her American base.

The launch will be held at Cillas Conference located at Mimosa House at 6PM, said Brucella in a statement.

“Brucella slows down the tone with strong bass and heavy weight written bars with “Bad.” “The single track is titled “Bad” and it features M.U.S.E. and is produced by the Balcony, the track follows the success of her single “King” which featured Asaph Afrika and has a total of five nominations across the Zimbabwe Hip-hop awards ’23 and the Bulawayo Arts Awards ’23,” read the statement.