Microsoft Patches Zero-Day Flaws in Windows, Internet Explorer

SecurityWeek | August 15, 2018

Microsoft’s Patch Tuesday updates for August 2018 address 60 vulnerabilities, including two zero-day flaws affecting Windows and Internet Explorer. One of the actively exploited vulnerabilities is CVE-2018-8414, which Microsoft learned of from Matt Nelson of SpecterOps. Nelson disclosed the details of the bug in June after Microsoft told him that “the severity of the issue is below the bar for servicing and that the case will be closed.” Proofpoint then revealed in July that a financially-motivated threat actor tracked by the company as TA505 had been exploiting the flaw to deliver the FlawedAmmyy RAT. Microsoft described the issue as a Windows Shell remote code execution vulnerability that can be exploited by getting the targeted user to open a specially crafted file. The company says the flaw impacts Windows 10 and Windows Server (versions 1709 and 1803). According to Trend Micro’s Zero Day Initiative (ZDI), the same vulnerability also impacts Adobe Acrobat Reader. ZDI researcher Abdul-Aziz Hariri reported the weakness to Adobe, which also released a patch for it on Tuesday. “The Acrobat patch blocks the embedding of certain files types – a tactic Microsoft has already done with Office 365 docs,” ZDI explained in a blog post published after the patches were released. “This [Microsoft] patch prevents the bypassing of traditional file execution restrictions within Windows. It’s fascinating to see exploit authors combine different products to evade detection and proliferate their malware.” The second zero-day vulnerability patched on Tuesday by Microsoft is CVE-2018-8373, a remote code execution flaw that exists due to how the scripting engine in Internet Explorer handles objects in memory.

Spotlight

Listen to Eric Ericsson, from Ericsson Digita, being interviewed by Ronald van Loon speak about NFV and Distributed Cloud will create possibilities for operators and enterprises here and now. IoT brings opportunities and challenges for operators, how can NFV help operators on the journey to a more inter-connected world.


Other News
SOFTWARE

Perpetua launches first-to-market self-serve Amazon DSP optimization software unlocking an over 20% increase in performance

Perpetua | July 29, 2022

Perpetua, a leader in eCommerce advertising software, today becomes the first to offer clients a self-serve platform for creating, optimizing, and measuring Amazon DSP (Demand-Side Platform) ads. Designed to help unlock scalable revenue generation on the Amazon DSP for agencies and brand aggregators, Perpetua's Amazon DSP Optimization empowers users to build each component of a DSP order in a single, linear workflow. Paired with 11 pre-built audience templates embedded with industry best-practices and Perpetua's industry-leading optimization engines, advertisers can seamlessly create full Amazon DSP orders in seconds. "The Amazon DSP is incredibly effective at driving full-funnel growth for advertisers. "We saw an opportunity to help increase efficiencies for our largest customers by developing a self-serve solution that enables them to scale their business and drive growth." Perpetua Co-President Adam Epstein As the industry pivots into a post-cookie world, the Perpetua self-serve Amazon DSP software is the leading choice for advertisers looking to target audiences by lifestyle segments and shopping behavior. The platform provides unparalleled transparency, the capacity to empower advertisers to manage ads, bid real-time, track and optimize performance across Amazon properties. Highlights of Perpetua's Amazon DSP offering: Create audiences, generate creatives, and attach them to line items in seconds New 'Target Markets' creator reduces the time spent building custom audiences in an external workflow Full customization capabilities to target your intended audience, no matter how broad or narrow in scope Dynamically shift budgets between line items to maximize your performance and budget utilization ASIN-level reporting across Amazon Sponsored Ads and Amazon DSP with consolidated dashboards Access to advanced reporting via Amazon Marketing Cloud (AMC) About Perpetua Perpetua is building the growth infrastructure for eCommerce which includes optimization and reporting technology for the world's smartest eCommerce businesses. Through the platform, advertisers create goals based on strategy and leverage Perpetua's best in class experts and automation to execute tactically. Integrations with Amazon, Instacart and Google ensure brands achieve optimal reach and engagement across the full shopper journey, and provide unified performance intelligence for maximum visibility. Perpetua is an Ascential company and has offices in San Francisco, Toronto, London and Tokyo.

Read More

GENERAL AI

SoftWorks AI Rebrands as TRUE and Answers Need for Lending Intelligence

TRUE | June 23, 2022

SoftWorks AI, the leader in lending intelligence, today launched an extensive rebrand, including changing its name to TRUE. The new name reflects the company’s unique ability to give lenders a true picture of a borrower by using AI to inspect and audit every data point when verifying a loan and its underlying documentation. By providing deeper, more comprehensive, and more accurate insights on borrowers, TRUE allows lenders to gain market share by enabling faster turn times and reducing risk. TRUE’s new name and logo demonstrate how the company harnesses the power of AI to turn lending – especially in the mortgage space – into a near real-time experience. While other vendors need humans in the loop to get data right, TRUE’s platform accurately analyzes every data point in a loan package automatically. TRUE’s technology can reduce manual reviews by up to 85% and has increased underwriter productivity by up to 300%. The lending industry has long been focused on automation, with an end-state goal of touchless automation. This can only be achieved with lending intelligence, which uses AI to ensure all data going into the automation process is 100% correct and verify that every extrapolated insight is accurate and provably true. The TRUE brand is focused on using cutting-edge technology to find what is true, a process the company calls Lending Intelligence. “TRUE uses AI to help lenders address customers’ most important expectations – speed, accuracy and reduced risk. “We are an AI lab focused executively on the lending sector and our AI platform is fully trained to address the challenges and nuances of lending. TRUE optimizes every step of the lending cycle, efficiently delivering critical information so our clients can get a full picture of their risk exposure. By providing a fast, thorough, and explainable analysis of every last data point, we reduce errors and improve decisioning, powering trustworthy lending.” Ari Gross, CEO of TRUE TRUE is transforming both the primary and secondary lending markets with technology that reads documents chronologically and holistically, going far beyond generic data classification that misses important details and nuances – and results in costly bad decisions. By ensuring that loan documents tell a consistent and coherent story and that all documents are cross-validated, TRUE enables lenders to get a holistic view of lending risk while delivering greater certainty to customers. The company currently serves major institutions from across the lending industry including Rocket Mortgage, Carrington, and 50% of the top mortgage insurers. TRUE processes millions of loans and billions of documents through its AI powered lending technology annually. About TRUE TRUE is a software solutions company and AI lab that helps lenders harness the power of artificial intelligence to make accurately informed lending decisions – increasing revenue while reducing operating costs and risk. Since 2017, it has set the industry standard for intelligent lending technology, delivering results that provide a true competitive advantage.

Read More

AI APPLICATIONS

Knock® CRM Announces Artificial Intelligence-Powered AI Voice, Call Intelligence Tools

Knock | June 17, 2022

Knock® CRM, the leading industry CRM and performance management platform for multifamily property owners and managers, today announced its upcoming launch of new artificial intelligence-powered leasing tools, AI Voice and Call Intelligence. Both tools integrate seamlessly into the Knock CRM platform, enabling leasing teams to leverage the power of AI to improve conversions while eliminating reliance on external services. The number of phone calls to apartment buildings has doubled in the past year and simultaneously, multifamily operators are struggling to keep up with nationwide talent shortages. The result is at least 40% of inbound phone calls go unanswered. Knock's AI Voice solution addresses this problem by engaging in natural dialogue with each caller. Call Intelligence captures data on every call between prospects and leasing teams, helping teams evaluate performance to improve sales effectiveness and the consistency of a high quality customer experience. Calls are also analyzed to provide information that can be leveraged to prioritize future capital projects like property amenity improvements or other value-add projects. "Knock's AI Voice product is unique in that it provides a value-added solution to multifamily operators regardless of whether calls are answered or unanswered. "Unanswered calls will be greeted by Knock's AI Voice assistant, collecting important information and quickly converting them into booked appointments 24/7. Additionally, the transcript data from these calls is used to power multifamily's first ever Call Intelligence reporting, enabling managers to monitor performance and accelerate positive outcomes like never before." Demetri Themelis, co-founder and CEO Current solutions exist but rely on multiple API integrations without any of them acting as the single source of truth for data. Knock is fully integrating AI Voice and Call Intelligence into its CRM platform so that all data is captured and referenced as easily as possible, providing a seamless user experience for both the leasing agent and prospective resident. By harnessing the power of AI, Knock is enabling property management teams to maximize their resources and meet rising demand from prospective renters. About Knock Knock® offers an integrated suite of front office technology that provides multifamily owners and operators with the levers they need to more profitably acquire and retain high-value, long-term residents. Knock CRM empowers leasing teams with tools to accelerate successful leasing and renewal outcomes, provides marketers the data to optimize spend, and ensures executives have the business intelligence and insights needed to outperform their competitors.

Read More

SOFTWARE

Landing AI Adds New Edge Capabilities to LandingLens to Bring Deep Learning to the Factory Floor

Landing AI | June 06, 2022

Landing AI today announced the launch of LandingEdge, a new deployment application within the company's flagship platform, LandingLens. With LandingEdge, manufacturers will more easily deploy deep learning visual inspection solutions to edge devices on the factory floor to better and more consistently detect product defects. Announced at Automate 2022, North America's largest automation trade show and conference, LandingEdge extends the capability of LandingLens into even more manufacturing environments. LandingLens enables teams to build deep learning models. With the new edge capabilities, LandingLens customers will more easily integrate with factory infrastructure to communicate with cameras, apply models to images and make predictions to inform real-time decision making on the factory floor. If the factory is connected to the cloud, LandingEdge can update LandingLens with new data to continuously improve deep learning models. LandingLens has also been enhanced to enable training a deep learning model up to seven times faster than before. By reducing the time it takes to train models, customers achieve fast and iterative AI processes and optimize model accuracy. "These products mark huge steps in bringing deep learning solutions to the factory floor that are easily integrated to perform automated inspection for a broad range of applications. "They put ever more powerful tools in the hands of manufacturers and systems integrators to quickly implement inspection solutions that result in lower costs, increased productivity, and improve customer product satisfaction." David L. Dechow, Vice President of Outreach and Vision Technology at Landing AI The mission of Landing AI, under the leadership of AI pioneer Andrew Ng, is to bring the benefits of deep learning-based inspection to all industries with its pioneering data-centric approach in which the power of deep learning is unleashed even if companies have limited datasets. First unveiled in 2020, LandingLens provides Landing AI's customers with the end-to-end automated inspection platform that enables manufacturing, quality, and AI teams alike to quickly and easily train, test, confirm, and deploy visual inspection solutions based on high-quality and verified data on the plant floor. Deep learning is a key machine vision trend for 2022 and beyond in industrial automated inspection applications. But deep learning is not magic and does not automatically make it easy to program an inspection system. As with any vision application, the quality of the input data — the images — is essential to the quality of the output. This is particularly true for data used to train an algorithm. In addition, proper labeling is essential for the implementation of a deep learning inspection system. About Landing AI Landing AI™ is pioneering the next era of AI in which companies with limited data sets can realize the business and operational value of AI and move AI projects from proof-of-concept to full scale production. Guided by a data-centric AI approach, Landing AI's flagship product is LandingLens™, an enterprise MLOps platform that offers to build, iterate and deploy AI powered visual inspection solutions for manufacturers. With data quality being key to the success of production AI systems, LandingLens™ enables users to achieve optimal data accuracy and consistency. Founded by Andrew Ng, co-founder of Coursera, former chief scientist of Baidu, and founding lead of Google Brain, Landing AI is uniquely positioned to lead the development of AI from a technology that benefits a few to a technology that benefits all.

Read More

Spotlight

Listen to Eric Ericsson, from Ericsson Digita, being interviewed by Ronald van Loon speak about NFV and Distributed Cloud will create possibilities for operators and enterprises here and now. IoT brings opportunities and challenges for operators, how can NFV help operators on the journey to a more inter-connected world.

Resources