Microsoft has urged VMware ESXi hypervisor users to address the CVE-2024-37085 vulnerability, which is exploited by ransomware groups to gain full administrative control over servers. Threat groups including Storm-0506 and Octo Tempest have used this flaw in post-compromise attacks to encrypt file systems and disable servers. The vulnerability allows any domain group named "ESX Admins" to automatically receive admin privileges, a flaw recently patched by VMware. Attackers have leveraged this in escalating privileges and deploying ransomware like Black Basta. Administrators are advised to prioritize patching this vulnerability and monitoring for suspicious domain group modifications.

Hackers exploit VMware vulnerability that gives them hypervisor admin arstechnica

A cybersecurity leader's effectiveness is closely tied to their relationships with key business leaders such as the CIO, General Counsel, Head of Internal Audit, CFO, and CEO, as well as with the board of directors. The evolution of the role now often requires regular reporting to the board, especially in high-risk industries. Support from the board can influence senior leadership decisions on investment and priorities and establish organizational tone from the top. Key strategies for building a strong board relationship include understanding the board's oversight role, knowing each member's background, speaking their language, providing clear information on risks and actions, and using real examples to build credibility. Regularly updating and seeking feedback from the board, and engaging in activities like tabletop exercises, can deepen this critical relationship and enhance cybersecurity efforts.

Connecting with your board of directors paulconnelly https://paulconnelly.substack.com

**Apple Delays AI Features for New iPhone and iPad Software Updates**

Apple has delayed the release of its new AI features, Apple Intelligence, for iPhone and iPad software until October, post the September launch of iOS 18 and iPadOS 18. Developers will access early versions via iOS 18.1 and iPadOS 18.1 betas. This delay aims to ensure stability and smooth consumer rollout, especially for advanced features like a revamped Siri. Meanwhile, competitors like Microsoft and OpenAI are advancing their AI capabilities. Regulators globally are scrutinizing AI industry practices to address potential antitrust concerns.

**Maverick COO Says Embedded Finance Drives Growth and Personalization in Digital Ecosystems**

Ben Griefer, COO of Maverick Payments, highlights the transformative impact of embedding financial services into digital ecosystems. This integration not only adds value to platforms but also boosts revenue. Historically challenging, embedded finance is now more accessible due to advanced technologies, leading to its adoption in various sectors. By leveraging customer data, businesses can offer personalized financial products, enhancing customer loyalty and satisfaction. Scalability remains a key advantage, allowing businesses to use established payment infrastructures while focusing on their core services. Griefer predicts continued growth and integration

Apple Delays AI Features for New iPhone and iPad Software Updates PYMNTS

Abridge, Epic, and Mayo Clinic have partnered to develop a generative AI documentation platform that integrates Abridge’s AI tools into Epic’s EHR system, specifically for Mayo Clinic nurses. Established in 2018, Abridge provides an AI tool that records, transcribes, and organizes medical conversations, summarizing key information like health conditions and care plans. The new platform aims to streamline nursing workflows and is expected to be available by the end of 2024. This collaboration leverages Abridge’s AI capabilities, Epic’s developmental resources, and Mayo Clinic’s nursing expertise. Abridge recently raised significant funding and has secured multiple partnerships to expand its clinical documentation tools across various health systems.

Abridge partners with Epic, Mayo Clinic to create a genAI nurse workflow tool mobihealthnews