The Role of Cardiovascular Exercise in Weight Loss

Introduction

When it comes to weight loss, one of the most effective strategies is incorporating cardiovascular exercise into your routine. Cardiovascular exercise, also known as aerobic exercise, is any activity that increases your heart rate and improves your cardiovascular fitness. It plays a crucial role in burning calories, shedding excess pounds, and maintaining a healthy weight. In this article, we will delve into the various aspects of cardiovascular exercise and its significance in achieving weight loss goals.

Understanding Weight Loss

Before we explore the role of cardiovascular exercise in weight loss, it is important to understand the fundamental principles behind losing weight. Weight loss occurs when the calories you consume through food and drink are less than the calories you burn through physical activity and bodily functions. This calorie deficit prompts your body to utilize stored fat as an energy source, resulting in weight loss over time.

Calories Burned through Exercise

When engaging in cardiovascular exercise, your body expends energy in the form of calories. The more intense the exercise, the more calories you burn. Cardiovascular exercises such as running, cycling, swimming, and brisk walking elevate your heart rate and increase your metabolic rate, leading to higher calorie expenditure during and after your workout.

Incorporating regular cardiovascular exercise into your routine can have a significant impact on your daily caloric expenditure. For instance, a 30-minute jog can burn approximately 300 calories, depending on factors such as body weight, speed, and terrain. Over time, consistently burning more calories through exercise than you consume can lead to substantial weight loss.

Learn more about recommended physical activity levels from the American Heart Association

Cardiovascular Exercise and Fat Burning

One of the primary reasons cardiovascular exercise is effective for weight loss is its ability to burn fat. During aerobic exercise, your body primarily relies on stored fat as a fuel source. As you exercise, enzymes break down triglycerides (stored fat) into fatty acids and glycerol, which are then transported to your muscles and used for energy.

Engaging in moderate to high-intensity cardiovascular exercise for extended periods helps your body tap into fat stores. Over time, this can lead to a reduction in overall body fat and a leaner physique. It is important to note that while cardiovascular exercise aids in fat burning, it is most effective when combined with a balanced diet that promotes a calorie deficit.

Read more about the effects of aerobic exercis...

Okta announced Okta Device Access, a new product that enables organizations to extend Oktas Identity and Access Management (IAM) capabilities to secure access to corporate devices for a hybrid workforce. As part of Oktas Workforce Identity Cloud, the solution will deliver stronger authentication to unlock a device, helping organizations achieve zero trust while simplifying the login experience for employees. Okta Device Access is part of Oktas broader effort to move the industry beyond traditional multi-factor More

The post Okta Device Access enables businesses to secure access to both devices and applications appeared first on Help Net Security.

Series parts:

1. New Series: Inside the Real Linux Foundation
2. What the 2022 Tax Filing (From 7 Months Ago, for Tax Year 2021) Teaches Us About the Linux Foundation
3. The Real Linux Foundation Part 3: How It Splits Into Subgroups, Including New Ones
4. The Real Linux Foundation Part 4: How the Foundation Makes Its Money
5. The Real Linux Foundation Part 5: The Annual Cost of the Office Has Jumped to Almost 8 Million Dollars for Just 261 Employees (About $30,000 Per Employee Per Year)
6. YOU ARE HERE Raising Money From Monopolies, Living Extravagant Lifestyles, Crushing Software Communities

Video download link | md5sum a493de3051fe57e5b733f16337b1a721
LF Showing Off by Wasting Money
Creative Commons Attribution-No Derivative Works 4.0

Summary: A Linux Foundation millionaires club (people who never touched GNU/Linux but made millions in salaries from the Linux Foundation) is a growing problem and a liability for the GNU/Linux community; today we meticulously take a look and scrutinise more closely how money gets spent in the San Francisco Bay Area, under the overtly misleading guise of Linux

THE Linux...

Read the original blog at The Linux Foundation 

The post Linux Foundation Newsletter: June 2023 appeared first on Linux.com.

By Waqas

DoubleFinger Malware: Two-Fold Attack on Crypto Wallets with GreetingGhoul Stealer.

This is a post from HackRead.com Read the original post: New DoubleFinger Malware Strikes Cryptocurrency Wallets

Echoworx announced that passkeys have been added to their authentication options. This versatile, advanced authentication method adds to their existing suite of security offerings and provides organizations with another layer of assurance that their data is safe. Organizations that use Echoworx for their secure communications now have the added security of passkeys. Customers can take advantage of passwordless login by utilizing passkeys or other FIDO2-compliant authenticators, empowering users with a seamless and secure login process. More

The post Echoworx improves email security offerings with implementation of passkeys appeared first on Help Net Security.

The Workshop on Security and Human Behaviour is happening right now in Carnegie-Mellon University and Ill be liveblogging it in followups to this post. The participants papers are here, while the liveblogs and papers from previous workshops are here.

There are some "magic links" in kernel pseudo-filesystems, like procfs, that can behave been(ab)used to cause security problems, such as a container-confinement breach in 2019. Aleksa Sarai has long been working on ways to blunt the impact of these magic links. He led a filesystem session at the 2023 Linux Storage, Filesystem, Memory-Management and BPF Summit to discuss the status of those efforts.

Deloitte is working with Amazon Web Services (AWS) to deliver ConvergeSECURITY, a cloud focused security and compliance service. ConvergeSECURITY allows enterprises to accelerate their cloud transformation efforts through a combination of artificial intelligence (AI)-enabled cloud security and compliance product solutions, consulting expertise and tailored resources leveraging actionable security threat intelligence and Amazon Security Lake, all in conjunction with the AWS Global Partner Security Initiative. Looking ahead, according to the Deloitte US Future of Cloud Survey More

The post Deloitte and AWS deliver ConvergeSECURITY to enable cloud transformation and adoption appeared first on Help Net Security.

One of the best things about Linux is that there are always multiple ways to do anything you want to do. However, some ways are easier than others. Take, for example, virtual networking. There are plenty of ways to make a bunch of Internet-connected computers appear to be on a single private network. Thats nothing new, of course. Linux and Unix have robust networking stacks. Since 2018, though, Wireguard has been the go-to solution; it has a modern architecture, secure cryptography, and good performance.

Theres only one problem: it is relatively difficult to set up. Not impossible, of course. But it is a bit difficult, depending on what you want to accomplish.

How Difficult?

You must set up a wireguard server and one or more clients. Youll need to pick a range of IP addresses. You might need to turn on routing. You have to generate keys. You might need to configure DNS and other routing options. Youll certainly need to modify firewall rules. Youll also need to distribute keys.

None of these steps are terribly difficult, but it is a lot to keep straight. The wg program and wg-quick script do most of the work, but you have a lot of decisions and configuration management to keep straight.

Browse the official ...

Two "dangerous" security vulnerabilities have been disclosed in Microsoft Azure Bastion and Azure Container Registry that could have been exploited to carry out cross-site scripting (XSS) attacks. "The vulnerabilities allowed unauthorized access to the victim's session within the compromised Azure service iframe, which can lead to severe consequences, including unauthorized data access,

Hundreds of thousands of online stores are potentially exposed to hacking due to a critical vulnerability in the WooCommerce Stripe Payment Gateway plugin.

The WooCommerce Stripe Payment Gateway plugin is affected by a critical vulnerability tracked as CVE-2023-34000.

The Stripe plugin extends WooCommerce allowing administrators of the e-commerce sites to take payments directly on their store via Stripes API.

Stripe is a simple way to accept payments online, it supports Visa, MasterCard, American Express, Discover, JCB, and Diners Club cards, even Bitcoin payment channels.

The plugin is very popular and has more than 900,000 active installations.

A security flaw has been uncovered in the WooCommerce Stripe Gateway WordPress plugin that could lead to the unauthorized disclosure of sensitive information.

The vulnerability is an unauthenticated Insecure direct object references (IDOR) issue that impacts versions 7.4.0 and below. An attacker can exploit the vulnerability to bypass authorization and access sensitive information.

This plugin suffers from an Unauthenticated Insecure Direct Object Reference (IDOR) vulnerability. This vulnerability allows any unauthenticated user to view any WooCommnerce orders PII data including email, users name, and full address. reads the advisory published by securityfirm PatchStack. The described vulnerability was fixed in version 7.4.1 with some backported fixed assigned CVE-2023-34000.

The issue resides in the javascript_params function and the way order objects are managed, specifically, the experts noticed that there is no proper control to access javascript_params...

Silent Push launches with a total of $10M in seed funding led by global cybersecurity specialist investor Ten Eleven Ventures. Silent Push takes a unique approach to identifying emerging cyber threats by providing the most comprehensive view of global internet-facing infrastructure available and applying deep analysis to reveal new attacker infrastructure and campaigns. Customers can now understand emerging threats before launch, be prepared, and proactively solve problems. As cyber threats continue to grow, organizations have More

The post Silent Push launches with a total of $10 million in total funding appeared first on Help Net Security.

As a launch partner for the Wiz Integrations (WIN) platform, ContrastContrast Security brings the power of the Contrast Secure Code Platform to WIN, so that customers can seamlessly integrate Contrasts application security and protections into their existing Wiz workflows. The integration between Contrast and Wiz offers an efficient method for strengthening security across customers cloud and applications. Contrasts innovative Shift Smart approach leverages the appropriate technology at the optimal part of the software development life More

The post Wiz partners with Contrast Security to provide real-time insights into potential security risks appeared first on Help Net Security.

Lynda Barry included this delightful food recipe in Its So Magic:

So I was thinking did I ever invent any recipes for food-like substances as a child? And indeed I did, so Im going to present these magnificent inventions in a short blog series.

Well, OK, I didnt actually invent this first one: There was one fast food place in my home town that had this on the menu, but (for some reason!) it closed when I was like ten, so I had to adjust the recipe to make it at home. And I refuse to google to see whether everybody else has already invented this, because I want to live confidently with my delusions.

But heres the incredibly complex recipe.

...

Posted by Bob Friesenhahn on Jun 14

Video download link | md5sum f4f239686d76f30d562cc44bb70cb997
Serious Scandal by Sirius
Creative Commons Attribution-No Derivative Works 4.0

Summary: What started as fraud committed by one company (since 2011 if not earlier) is becoming a blunder and major embarrassment to high-profile clients that are government agencies, in effect employing programmers and system administrators via a contractor that grossly underpays workers while secretly defrauding them (stealing money from them)

THE previous part spoke of the brain drain that had reduced Sirius Open Source to almost nothing; even before pension fraud was exposed (we broke the story here this past spring) the company had almost nothing left in terms of physical assets, monetary assets, human resources, and clients. Its just milking whats left of contracts signed or renewed last year.

The really obnoxious thing is the two-faceted coverup (to use the term loosely) by entities that should know better and should do better. If the British authorities are so desperate to save face and spare themselves negative publicity, then they should hurry up and act, showing strength of law, accountability, and drastic consequences. Instead, based on the lack of interaction (also my Member of Parliament is being ignored), it certainly seems like this scandal will just deepen, implicating a growing network of facilitators and enablers. This scandal isnt about just Sirius anymore; Sirius received millions of pounds from the British government and the government oughtnt look the other way when people who worked on government computer systems become victims of employment crimes and embezzlement or just plain old fraud.

Posted by Daniel Beck on Jun 14

Series parts:

1. New Series: The End of Sirius Open Source
2. Sirius Open Source Cannot Retain Staff and Clients (Many of the Remaining Ones Leave the Company)
3. Police Out of Control (or Oversight) Part 3: Action Fraud and Reports of Sirius Fraud
4. Police Out of Control (or Oversight) Part 4: The Pokmon Village of Sirius Open Source and British Government
5. Police Out of Control (or Oversight) Part 5: Whats Left of the Company is a Skeleton Crew (While Police is Dragging Its Heels)
6. YOU ARE HERE This Scandal Has Become a Lot Bigger Than Sirius Open Source

Video download link | md5sum f4f239686d76f30d562cc44bb70cb997
Serious Scandal by Sirius
Creative Commons Attribution-No Derivative Works 4.0

Summary: What started as fraud committed by one company (since 2011 if not earlier) is becoming a blunder and major embarrassment to high-profile clients that are government agencies, in effect employing programmers and system administrators via a contractor that grossly underpays workers while secretly defrauding them (stealing money from them)

THE...

The post Sycope 2.3 detects network problems and identifies security threats appeared first on Help Net Security.

Germanene a two-dimensional, graphene-like form of the element germanium can carry electricity along its edges with no resistance. This unusual behaviour is characteristic of materials known as topological insulators, and the researchers who observed it say the phenomenon could be used to make faster and more energy-efficient electronic devices.

Like graphene, germanene is an atomically thin material with a honeycomb structure. Like graphene, germanenes electronic band structure contains a point at which the valence and conduction bands meet. At this meeting point, spin-orbit coupling creates a narrow gap between the bands within the materials bulk, causing it to act as an insulator. Along the materials edges, however, special topological states arise that bridge this gap and allow electrons to flow unhindered.

\r \r

Explore our carefully curated list of the top 10 Generative AI courses, designed to equip you with essential skills for mastering the field.

Meta-formerly-Facebook CEO Mark Zuckerberg has a genius new plot to add some interest to Meta-owned products: just jam in some generative AI, absolutely everywhere.

Axios reports that in an all-hands meeting on Thursday, Zuckerberg unveiled a barrage of generative AI tools and integrations, which are to be baked into both Metas internal and consumer-facing products, Facebook and Instagram included.

In the last year, weve seen some really incredible breakthroughs qualitative breakthroughs on generative AI, Zuckerberg told Axios in a statement, and that gives us the opportunity to now go take that technology, push it forward, and build it into every single one of our products.

More apologism for aging and death.

Eviden, an Atos business, announces AIsaac Cyber Mesh, a next generation of cybersecurity detection and response, reinforced by AWS Security Data Lake and powered by generative AI technologies. AIsaac Cyber Mesh offers an advanced end-to-end detection, response, and recovery solution, built on a cybersecurity mesh-enabled architecture using generative AI and predictive analytics. Combined with Amazon Security Lake, which centralizes data from multiple sources including on-premises and custom sources, AIsaac Cyber Mesh enables businesses to have More

The post Eviden AIsaac Cyber Mesh helps enterprises detect security threats appeared first on Help Net Security.

Read the original post at: Read More 

The post Linux Foundation and IOWN Global Forum to Collaborate for Future Smart Connected World appeared first on Linux.com.

Posted by Rafael Silva on Jun 14

Posted by Yasser Zamani on Jun 14

Posted by Yasser Zamani on Jun 14

Learn the shocking truth behind the Balada Injector campaign and find out how to protect your organization from this relentless viral invasion.

A deadly cyber campaign has been working silently to undermine website security by exploiting popular WordPress plugins infiltrating over a million websites and leaving administrators scrambling for solutions.

In April 2023, Bleeping Computer and other tech outlets like TechRadar began circulating reports of cybercriminals successfully hacking WordPress websites. They were able to gain access via a toxic combination of the popular plugins Elementor Pro Premium (Webpage builder) and WooCommerce (Online storefront).

Initially attributed to security researcher Jerome Braundet of the Ninja Tech Network, this recently disclosed vulnerability produces a base 8.8 CVSS score (High), giving WordPress administrators and cybersecurity teams much to fret over.

As of May 2023, an official CVE designation is still pending. Websites running Elementor Pro 3.11.6 or earlier, alongside an activated WooCommerce plugin, are advised to upgrade ElementorPro to at least 3.11.7 or face the risk of authenticated users (think of standard e-commerce customers) achieving total control of websites by exploiting Broken Access Control the most severe of OWASPs Top 10 risks.

While reports of this vulnerability have circulated wildly across the interwebs, a lesser-known but directly related set of hack-tivities has been occurring on a similar front against these and other standard WordPress plugins.

This article will focus on the widespread and highly persistent malware injector campaign Balada, which has reportedly infected over 1 million individual websites by exploiting weaknesses in Elementor Pro, WooCommerce, and several other WordPress plugins. This article will provide a brief history of the Balada Injector, its common objectives, common Indicators of Compromise (IoC), and a quick exploitation overview, including some general tips that organizations should adopt to avoid being the next victim.

What is Balada?

Cybersecurity firm Sucuri has been tracking Balada Injector activity since 2017 but has only recently given this long-running campaign its name. Primarily leveraging functions written in the Go language, Balada, which translates to Ballad in several languages, achieves initial infection through commonly known but unpatched WordPress plugins, themes, or other software vulnerabilities.

Balada then attempts to spread itself and maintain persistence by executing a series of rehearsed attacks, cross-site infections, and installation of backdoors, living up to its namesake. The Elementor Pro and WooCommerce compromise path allows authenticated users to modify WordPress configurations to create administrator accounts or inject URL redirects into website pa...

Swiss government websites are under DDoS attacks, but several ransomware gangs have also turned their sights on Swiss government organizations, cantonal governments, cities and companies in the last few months. Government sites under DDoS attacks Several Federal Administration websites are/were inaccessible on Monday 12 June 2023, due to a DDoS attack on its systems, the Swiss National Cyber Security Centre (NCSC) said on Monday. The Swiss governments portal www.admin.ch remains accessible. But the attackers did More

The post Switzerland under cyberattack appeared first on Help Net Security.

Alright, were calling it we need a pejorative equivalent to script kiddie to describe someone using a Flipper Zero for annoyingly malign purposes. If you need an example, check out the apparent smart meter snuff video below.

The video was posted by [Peter Fairlie], who we assume is the operator of the Flipper Zero pictured. The hapless target smart meter is repeatedly switched on and off with the Flipper some smart meters have contactors built in so that service can be disconnected remotely for non-payment or in emergencies which rapidly starts and stops a nearby AC compressor. Eventually, the meter releases a puff of Magic Smoke, filling its transparent enclosure and obscuring the display. The Flippers operator mutters a few expletives at the results, but continues turning the meter on and off even more rapidly before eventually running away from the scene of the crime.

We qualify this as apparent because the minute we saw this over on...

hubie writes:

Job seekers in the era of 'social impact framing' are afraid to ask for higher pay:

For many companies today, recruiting employees includes luring them with job postings that tout the organization's altruistic goals, such as to "make an impact" or fulfill a mission or purpose that benefits the greater good.

Appealing to job seekers' altruism isn't just for nonprofits anymore. Both for-profit and nonprofit organizations increasingly employ what has been termed "social impact framing" that emphasizes that their work has welfare benefits for society.

Although companies might have entirely noble intentions when using social impact framing, a recent study by Texas McCombs Assistant Professor of Management Insiya Hussain illustrates how it may work against prospective employees during salary negotiations. Specifically, job candidates exposed to such messaging feel it would be against company norms to ask for higher pay.

"This speaks to a broader social phenomenon about how we view money when it comes to doing good," Hussain says. "There's an implicit assumption that money and altruism don't mix. Money taints attempts to do good. Even if job candidates might not necessarily subscribe to this view, they're assuming that hiring managers will."

[...] The research suggests job applicants might experience a fearful thought process around salary: "I can't even ask. I feel like if I ask, it might be held against me or against the norms of the organization. It might be seen as greedy," Hussain says, paraphrasing the job seekers.

The researchers describe this attitude as a "self-censoring" effect, which Hussain says is a novel finding for research on social impact framing and wage demands. Prior work assumed that candidates sacrificed pay for meaningful work. Hussain and colleagues show this effect may be driven by job candidates feeling uncomfortable with such negotiation.

That mindset was true across the age spectrum and several industries, including education, financial services, food manufacturing, and health care in both nonprofit and for-profit businesses.

[...] "Job seekers could consider whether companies that stress social impact take care of their own employees financially or otherwise." Hussain says. "And, companies shouldn't assume that extrinsically motivated workers don't care about the job and aren't willing to work hard to perform well."

Journal Reference:
Insiya Hussain et al., Pay Suppression in Social Impact Contexts: How Framing Work Around the Greater Good Inhibits Job Candidate Compensation Demands, INFORMS, 2023. https://doi.org/10.1287/orsc.2023.16...

A new Golang-based information stealer called Skuld has compromised Windows systems across Europe, Southeast Asia, and the U.S. "This new malware strain tries to steal sensitive information from its victims," Trellix researcher Ernesto Fernndez Provecho said in a Tuesday analysis. "To accomplish this task, it searches for data stored in applications such as Discord and web browsers; information

Thomas Gleixner of Linutronix, which was acquired by Intel last year, and his team are working on cleaning up the Linux x86/x86_64 boot process. A set of 17 patches that touch the early Linux kernel initialization code and other tree-wide changes have now been posted for discussion...

For the better part of the 90s and early aughts, the sysadmin handbook said, "Filter your incoming traffic, not everyone is nice out there" (later coined by Gandalf as "You shall not pass"). So CIOs started to supercharge their network fences with every appliance they could get to protect against inbound (aka INGRESS) traffic. In the wake of the first mass phishing campaigns in the early 2010s,

The 6.3.8, 6.1.34, 5.15.117, 5.10.184, 5.4.247, 4.19.286, and 4.14.318 stable kernel updates have all been released; each contains another set of important fixes.

Security updates have been issued by Debian (ffmpeg, owslib, php7.4, and php8.2), Fedora (ntp-refclock, php, and python3.7), Red Hat (c-ares, firefox, and thunderbird), SUSE (kernel, openldap2, and tomcat), and Ubuntu (binutils, dotnet6, dotnet7, node-fetch, and python-tornado).

A critical flaw has been discovered in the WooCommerce Stripe Gateway WordPress plugin, potentially exposing sensitive information.

At least half of dozen GitHub accounts from fake researchers associated with a fraudulent cybersecurity company have been observed pushing malicious repositories on the code hosting service. All seven repositories, which are still available as of writing, claim to be a proof-of-concept (PoC) exploit for purported zero-day flaws in Discord, Google Chrome, and Microsoft Exchange Server. VulnCheck,

Microsoft has published the latest release of their Windows Subsystem for Linux (WSL) implementation for running Linux distributions within the confines of Windows. With the WSL 1.3.10 update there is now experimental memory reclaim support and other changes...

Oracle has published the latest community edition releases of GraalVM targeting JDK17 and JDK20. GraalVM also continues to support a variety of other languages beyond Java as well...

While Imagination continues bringing-up their PowerVR Vulkan driver within Mesa, when it comes to their open-source Direct Rendering Manager (DRM) kernel driver it for now continues living PowerVR kernel driver being published...