"Fairphone’s progress on core impact strategies, page 21.
Under the header "Levels of circularity: 8 R’s" are 3 shaded areas pointing to "KPI 2", "KPI 3", then "KPI 3 + 4". A banded arrow along the left bridges these areas, pointing upward. Its label is "Order of Priority" from "Low" to "High".

These point to KPI 2.
Refuse: prevent raw materials use.
Rethink: redesign product in view of circularity.

These point to KPI 3.
Reduce: decrease raw materials use.
Repair: maintain and repair product.
Refurbish: revive product.
Remanufacture: make new product from second hand.
Repurpose: re-use product but with other function.

This points to KPI 3 + 4.
Recycle: salvage material streams with highest possible value.

FAIRPHONE Impact report 2021"

Page 21 of https://www.fairphone.com/wp-content/uploads/2022/06/Fairphone-Impact-Report-2021.pdf

If that's not great alt text, idk what is.

Palo Alto Networks released additional details about CVE-2024-3400: the fact that it is a combination of two bugs in PAN-OS; how an attacker was exploiting it; how disabling telemetry initially worked; and how they fixed it. The timeline from discovery to remediation encompasses the whole blog post. Overall a comprehensive after-action review from a company that notified the public almost immediately of an exploited zero-day. https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/

Zscaler observed exploitation of the Palo Alto Networks PAN-OS command injection zero-day vulnerability CVE-2024-3400 following the release of the PoC exploit code. Zscaler provides an attack flow diagram, and a technical analysis of the Upstyle backdoor and its layers. IOC provided. https://www.zscaler.com/blogs/security-research/look-cve-2024-3400-activity-and-upstyle-backdoor-technical-analysis

TrustedSec CTO Justin Elze shared CVE-2024-3400 exploit in the wild on Twitter yesterday, reports that 149.28.194.95 was attempting to exploit CVE-2024-3400

In case you missed it, Palo Alto Networks updated their security advisory in terms of product and mitigation guidance, exploit status, and PAN-OS fix availability: https://security.paloaltonetworks.com/CVE-2024-3400

• Exploitation status: Proof of concepts for this vulnerability have been publicly disclosed by third parties.
• Workarounds and mitigations: In earlier versions of this advisory, disabling device telemetry was listed as a secondary mitigation action. Disabling device telemetry is no longer an effective mitigation. Device telemetry does not need to be enabled for PAN-OS firewalls to be exposed to attacks related to this vulnerability.
• Solution:
  • - 10.2.6-h3 (Released 4/16/24)
  • - 11.0.3-h10 (Released 4/16/24)
  • - 11.0.2-h4 (Released 4/16/24)
  • - 11.1.0-h3 (Released 4/16/24)

A little proof of concept showing the GrapesJS page builder integrated with Glitch via a browser extension.