Daily Archives: May 14, 2020

FDA Approves RET Inhibitor Retevmo for Lung and Thyroid Cancer – Cancer Health Treatment News

Posted: May 14, 2020 at 5:38 pm

On May 8, the Food and Drug Administration (FDA) granted accelerated approval of Retevmo (selpercatinib), the first RET inhibitor, for people with non-small-cell lung cancer (NSCLC) and two types of thyroid cancer with specific genetic mutations.

Innovations in gene-specific therapies continue to advance the practice of medicine at a rapid pace and offer options to patients who previously had few, Richard Pazdur, MD, director of the FDAs Oncology Center of Excellence, said in a press release.

Retevmo, from Eli Lilly and companywhich obtained the drug, then known as LOXO-292, when it acquired Loxo Oncology last yearis a selective inhibitor of a receptor tyrosine kinase known as RET. This enzyme plays a role in cell proliferation, and mutations or fusions in the RET gene can drive cancer development. RET alterations are rare overall, occurring in less that 1% of all cancers and 2% of NSCLC, but they are more frequent in certain cancer types.

Although Retevmo is considered a pancancer, or site-agnostic, therapy that works against cancers with a specific genetic alteration anywhere in the body, last weeks FDA approval is more limited. Retevmo is indicated for adults with metastatic RET fusion-positive NSCLC and for adults and adolescents (age 12 and up) with advanced or metastatic RET fusion-positive thyroid cancer or advanced or metastatic RET-mutant medullary thyroid cancer. Medullary thyroid cancer, which involves a specific type of cell, is uncommonaccounting for only 4% of all thyroid cancersbut it frequently has RET mutations.

The accelerated approval was based on promising findings from the Phase I/II LIBRETTO-001 trial. Study results were previously presented at the 2018 American Society of Clinical Oncology annual meeting,the 2019 World Conference on Lung Cancerand the 2019 European Society for Medical Oncology Congress.

LIBRETTO-001 enrolled people with NSCLC, thyroid cancer and a variety of other solid tumors with RET mutations or fusions. Both previously treated patients and those starting systemic treatment for the first time were eligible. Everyone was treated with Retevmo, taken as a pill twice daily; there was no placebo group.

Retevmo led to an overall response ratemeaning complete or partial tumor shrinkagein 64% of the 105 previously treated people with NSCLC, rising to 85% for the 39 patients new to treatment. The mediation duration of response was 17.5 months for the treatment-experienced group, and was not reached in the newly treated group because a majority were still responding.

When he presented preliminary study findings last year, Alexander Drilon, MD, of Memorial Sloan Kettering Cancer Center in New York City, noted that Retevmo appeared particularly active against cancer that had spread to the brain. Ten of the 11 people with brain metastasis (91%) experienced shrinkage of cancer in the brain, including 18% with complete remission.

In the clinical trial, we observed that the majority of metastatic lung cancer patients experienced clinically meaningful responses when treated with selpercatinib, including responses in difficult-to-treat brain metastases, Drilon said in a Lilly press release. The approval of selpercatinib marks an important milestone in the treatment of NSCLC, makingRET-driven cancers now specifically targetable in the same manner as cancers with activating EGFR and ALK alterations, across all lines of therapy.

Looking at the participants with thyroid cancer, the overall response rate was 69% for the 55 treatment-experienced patients and 73% for the 88 previously untreated people with RET-mutant medullary thyroid tumors. Here, the duration of response was 22.0 months for the previously untreated group and not reached for the treatment-experienced group. In the smaller subset of 19 previously treated and eight newly treated people with RET fusion-positive thyroid cancer, the overall response rates were 79% and 100%, respectively. Response duration was 18.4 months in the former group and not reached in the latter group.

RETalterations account for the majority of medullary thyroid cancers and a meaningful percentage of other thyroid cancers, saidLori Wirth, MD, of Massachusetts General Hospital Cancer Center. For patients living with these cancers, the approval of selpercatinib means they now have a treatment option that selectively and potently inhibitsRET.

Treatment with Retevmo was generally safe and well tolerated, with just 5% of participants stopping treatment because of adverse events. The most common adverse reactions include diarrhea, constipation, dry mouth, fatigue, swelling, rash, high blood pressure, elevated ALT and AST liver enzymes, elevated glucose, cholesterol and creatinine, and various other laboratory test abnormalities.

The product label for Retevmo includes warnings about several potential serious side effects: liver toxicity, severe high blood pressure, bleeding, heart rhythm abnormalities, hypersensitivity reactions and slow wound healing. Retevmo can cause fetal harm if used during pregnancy.

A Lilly spokesperson told FiercePharma that Retevmo would be available from specialty pharmacies within a week at a list price of about $20,600 for a 30-day supply.

Drugs that receive accelerated approval based on response rates in early studies are expected to undergo further testing in larger randomized trials to confirm clinical benefits such as improved survival, and the FDAcan rescind approval if they dont measure up. Two Phase III trials, Libretto-431 for NSCLC (ClinicalTrials.gov number NCT04194944) and Libretto-531 for medullary thyroid cancer (ClinicalTrials.gov number NCT04211337), are currently underway.

Another investigational RET inhibitor, Blueprint Medicines pralsetinib (formerly known as BLU-667) has also demonstrated good activity in an early study, with overall response rates of 60% for NSCLC patients who used prior platinum-based chemotherapy and 71% for previously untreated people.

The availability of RET inhibitors underscores the need for genetic testing to determine which patients have gene mutations or fusions that could make them eligible for these new targeted therapies. Next-generation sequencing of a tumor tissue biopsy sample or liquid biopsy using a blood sample can reveal multiple actionable genetic alterations. However, there is currently no FDA-approved companion test specifically for RET alterations.

Increasingly, through the use of comprehensive biomarker testing, patients with metastatic cancer have an opportunity to receive a treatment tailored to the specific genomic nature of their tumor, Andrea Ferris, president and chief executive officer of LUNGevity, said in the Lilly press release. We urge patients to ask their doctors about broad biomarker tests that includeRETalterations.

Click here for full prescribing information for Retevmo.

Click here to learn more about lung cancer.

Click here to learn more about thyroid cancer.

Go here to see the original:
FDA Approves RET Inhibitor Retevmo for Lung and Thyroid Cancer - Cancer Health Treatment News

Posted in Gene Medicine | Comments Off on FDA Approves RET Inhibitor Retevmo for Lung and Thyroid Cancer – Cancer Health Treatment News

The Cell Therapy Industry to 2028: Global Market & Technology Analysis, Company Profiles of 309 Players (170 Involved in Stem Cells) -…

Posted: at 5:38 pm

DUBLIN--(BUSINESS WIRE)--The "Cell Therapy - Technologies, Markets and Companies" report from Jain PharmaBiotech has been added to ResearchAndMarkets.com's offering.

The cell-based markets was analyzed for 2018, and projected to 2028. The markets are analyzed according to therapeutic categories, technologies and geographical areas. The largest expansion will be in diseases of the central nervous system, cancer and cardiovascular disorders. Skin and soft tissue repair as well as diabetes mellitus will be other major markets.

The number of companies involved in cell therapy has increased remarkably during the past few years. More than 500 companies have been identified to be involved in cell therapy and 309 of these are profiled in part II of the report along with tabulation of 302 alliances. Of these companies, 170 are involved in stem cells.

Profiles of 72 academic institutions in the US involved in cell therapy are also included in part II along with their commercial collaborations. The text is supplemented with 67 Tables and 25 Figures. The bibliography contains 1,200 selected references, which are cited in the text.

This report contains information on the following:

The report describes and evaluates cell therapy technologies and methods, which have already started to play an important role in the practice of medicine. Hematopoietic stem cell transplantation is replacing the old fashioned bone marrow transplants. Role of cells in drug discovery is also described. Cell therapy is bound to become a part of medical practice.

Stem cells are discussed in detail in one chapter. Some light is thrown on the current controversy of embryonic sources of stem cells and comparison with adult sources. Other sources of stem cells such as the placenta, cord blood and fat removed by liposuction are also discussed. Stem cells can also be genetically modified prior to transplantation.

Cell therapy technologies overlap with those of gene therapy, cancer vaccines, drug delivery, tissue engineering and regenerative medicine. Pharmaceutical applications of stem cells including those in drug discovery are also described. Various types of cells used, methods of preparation and culture, encapsulation and genetic engineering of cells are discussed. Sources of cells, both human and animal (xenotransplantation) are discussed. Methods of delivery of cell therapy range from injections to surgical implantation using special devices.

Cell therapy has applications in a large number of disorders. The most important are diseases of the nervous system and cancer which are the topics for separate chapters. Other applications include cardiac disorders (myocardial infarction and heart failure), diabetes mellitus, diseases of bones and joints, genetic disorders, and wounds of the skin and soft tissues.

Regulatory and ethical issues involving cell therapy are important and are discussed. Current political debate on the use of stem cells from embryonic sources (hESCs) is also presented. Safety is an essential consideration of any new therapy and regulations for cell therapy are those for biological preparations.

Key Topics Covered

Part I: Technologies, Ethics & Regulations

Executive Summary

1. Introduction to Cell Therapy

2. Cell Therapy Technologies

3. Stem Cells

4. Clinical Applications of Cell Therapy

5. Cell Therapy for Cardiovascular Disorders

6. Cell Therapy for Cancer

7. Cell Therapy for Neurological Disorders

8. Ethical, Legal and Political Aspects of Cell therapy

9. Safety and Regulatory Aspects of Cell Therapy

Part II: Markets, Companies & Academic Institutions

10. Markets and Future Prospects for Cell Therapy

11. Companies Involved in Cell Therapy

12. Academic Institutions

13. References

For more information about this report visit https://www.researchandmarkets.com/r/7h12ne

Here is the original post:
The Cell Therapy Industry to 2028: Global Market & Technology Analysis, Company Profiles of 309 Players (170 Involved in Stem Cells) -...

Posted in Gene Medicine | Comments Off on The Cell Therapy Industry to 2028: Global Market & Technology Analysis, Company Profiles of 309 Players (170 Involved in Stem Cells) -…

INOVIO’s INO-5401 in Combination with PD-1 Inhibitor Libtayo (cemiplimab) Demonstrates 85% of Newly Diagnosed Glioblastoma Patients Are Alive 12…

Posted: at 5:38 pm

PLYMOUTH MEETING, Pa., May 14, 2020 /PRNewswire/ -- INOVIO (NASDAQ: INO) today announced that 85 percent (44 out of 52) of patients newly diagnosed with the deadly brain cancer glioblastoma multiforme (GBM) who received the company's DNA medicine INO-5401, in combination with INO-9012 and PD-1 inhibitor Libtayo (cemiplimab), were alive for at least 12 months or more (overall survival at 12 months: OS12) following treatment. These data will be featured at an oral poster presentation at the ASCO 2020 Virtual Scientific Program, May 29-31, 2020.

GBM is the most common and aggressive type of brain cancer. Currently, the median overall survival with standard of care therapy, which includes radiation and chemotherapy (temozolomide: TMZ), is approximately 15 to 22 months.

The Phase 1/2 clinical trial demonstrated that 84.4% percent (27 of 32) of patients with MGMT promoter unmethylated tumors, and 85% (17 of 20) of patients with MGMT promoter methylated tumors were alive at 12 months. This promising clinical result is coupled with a robust immunological response to all three cancer antigens in INO-5401, including human telomerase (hTERT), Wilms Tumor-1 (WT-1) and prostate specific membrane antigen (PSMA). Activated, cytotoxic T cells directed towards these cancer antigens commonly expressed on GBM tumors were detected in all patients tested to date and continue to support the immunogenic potential of INOVIO's DNA medicines. Importantly, INO-5401 + INO-9012 was safe and well-tolerated when given not only with radiation and TMZ, but also with PD-1 inhibition with Libtayo, which is being jointly developed by Regeneron and Sanofi. These results are being presented in a virtual format at the 2020 Annual ASCO meeting (Abstract #2514).

Dr. David Reardon, Clinical Director, Center for Neuro-Oncology of Dana-Farber Cancer Institute and coordinating principal investigator of GBM-001 said, "Although these data are preliminary, and follow-up remains early, this novel combination of a cancer antigen-specific, T cell generating DNA medicine with a PD-1 inhibitor is exciting and may overcome more than 20 years of a standard of care that has proven sub-optimal for our patients with GBM. A tolerable, new combination of medicines utilizing a novel mechanism of action, such as that provided by INO-5401 and INO-9012 with cemiplimab, is very welcome for this hard-to-treat brain cancer, especially when shown to be tolerable with standards such as radiation and chemotherapy, and when demonstrating the immunogenicity seen in the GBM-001 study."

Dr. J. Joseph Kim, INOVIO's President & CEO, said, "While we recognize these data are early, we are very excited to see robust immunogenicity and the potential for extending survival, coupled with a clear ability to be able to combine not only with the standard of care, but with a checkpoint inhibitor, Libtayo. Where others have failed with single-agent checkpoint inhibition in GBM, our DNA medicine combined with Libtayo and standard of care has demonstrated clear immunogenicity and the potential to extend overall survival."

In a previous announcement, INOVIO reported key interim data from the 52-patient clinical trial showed that 80% (16 of 20) of MGMT gene promoter methylated patients and 75% (24 of 32) unmethylated patients were progression-free at six months (PFS6) measured from the time of their first dose, exceeding historical standard-of-care data.

This immunotherapy combination with a PD-1 checkpoint inhibitor also exhibited supportive safety, tolerability, and immunogenicity data and suggested an acceptable safety profile consistent with that of Libtayo and INOVIO's platform technology. The majority of patients tested had a T cell immune response to one or more tumor-associated antigens encoded by INO-5401. Immune responses to all three tumor-associated antigens were demonstrated in this study. INOVIO plans to report 18-month overall survival data later this year.

Study Design

The trial was designed to evaluate safety, immunogenicity and preliminary efficacy of INO-5401 and INO-9012 in combination with Libtayo, with radiation and chemotherapy, in subjects with newly-diagnosed glioblastoma (GBM). This is a Phase 1/2, open-label, multi-center trial conducted in 52 evaluable patients with GBM. There are two cohorts in this trial. Cohort A includes 32 participants with a tumor with an unmethylated O6-methylguanine-deoxyribonucleic acid (DNA) methyltransferase (MGMT) promoter. Cohort B includes 20 participants with a tumor with a MGMT methylated promoter. Both cohorts received INO-5401 and INO-9012 and Libtayo at the same doses and on the same dosing schedule, and both cohorts received radiation and temozolomide (TMZ). Interim data presented here and at SITC was obtained as of October 2019 and overall survival data at 18 months is expected in Q4 2020. For more information of the clinical study, see http://www.clinicaltrials.gov, identifier NCT03491683.

Poster Details

Abstract/Poster 2514Poster Discussion Session: Central Nervous System TumorsThe ASCO 2020 Virtual Scientific Program runs from May 29 -31.

About Glioblastoma Multiforme (GBM)

GBM is the most common and aggressive type of brain cancer and remains a devastating disease for both patients and caregivers. Its prognosis is extremely poor, despite a limited number of new therapies approved over the last 10 years. The median overall survival for patients receiving standard of care therapy is approximately 15 to 22 months and the median progression-free survival is approximately 7 months. In the U.S., the estimated annual incidence of GBM is 11,362 cases or 3.21 cases per 100,000 persons and the median age at diagnosis is 65 years.

About INO-5401 and INO-9012

INO-5401 encodes for INOVIO's SynCon antigens for hTERT, WT1, and PSMA, and has the potential to be a powerful cancer immunotherapy in combination with checkpoint inhibitors. The National Cancer Institute previously highlighted hTERT, WT1, and PSMA among a list of important cancer antigens, designating them as high priorities for cancer immunotherapy development. These three antigens were reported to be over-expressed, and often mutated, in a variety of human cancers, and targeting these antigens may prove efficacious in the treatment of patients with cancer. INO-9012 encodes for IL-12, which is a T cell immune activator.

About INOVIO's DNA Medicines Platform

INOVIO has 15 DNA medicine clinical programs currently in development focused on HPV-associated diseases, cancer, and infectious diseases, including coronaviruses associated with MERS and COVID-19 diseases being developed under grants from the Coalition for Epidemic Preparedness Innovations (CEPI). DNA medicines are composed of optimized DNA plasmids, which are small circles of double-stranded DNA that are synthesized or reorganized by a computer sequencing technology and designed to produce a specific immune response in the body.

INOVIO's DNA medicines deliver optimized plasmids directly into cells intramuscularly or intradermally using INOVIO's proprietary hand-held smart device called CELLECTRA. The CELLECTRA device uses a brief electrical pulse to reversibly open small pores in the cell to allow the plasmids to enter, overcoming a key limitation of other DNA and other nucleic acid approaches, such as mRNA. Once inside the cell, the DNA plasmids enable the cell to produce the targeted antigen. The antigen is processed naturally in the cell and triggers the desired T cell and antibody-mediated immune responses. Administration with the CELLECTRA device ensures that the DNA medicine is efficiently delivered directly into the body's cells, where it can go to work to drive an immune response. INOVIO's DNA medicines do not interfere with or change in any way an individual's own DNA. The advantages of INOVIO's DNA medicine platform are how fast DNA medicines can be designed and manufactured, the stability of the products which do not require freezing in storage and transport, and the robust immune response, safety profile, and tolerability that have been demonstrated in clinical trials.

With more than 2,000 patients receiving INOVIO investigational DNA medicines in more than 6,000 applications across a range of clinical trials, INOVIO has a strong track record of rapidly generating DNA medicine candidates with potential to meet urgent global health needs.

About INOVIO

INOVIO is a biotechnology company focused on rapidly bringing to market precisely designed DNA medicines to protect and treat people from infectious diseases, cancer, and diseases associated with HPV. INOVIO is the first and only company to have clinically demonstrated that a DNA medicine can be delivered directly into cells in the body via a proprietary smart device to produce a robust and tolerable immune response. Specifically, INOVIO's lead candidate VGX-3100, currently in Phase 3 trials for precancerous cervical dysplasia, destroyed and cleared high-risk HPV 16 and 18 in a Phase 2b clinical trial. High-risk HPV is responsible for 70% of cervical cancer, 91% of anal cancer, and 69% of vulvar cancer. Also in development are programs targeting HPV-related cancers and a rare HPV-related disease, recurrent respiratory papillomatosis (RRP); non-HPV-related cancers glioblastoma multiforme (GBM) and prostate cancer; as well as externally funded infectious disease DNA vaccine development programs in Zika, Lassa fever, Ebola, HIV, and coronaviruses associated with MERS and COVID-19 diseases. Partners and collaborators include Advaccine, ApolloBio Corporation, AstraZeneca, The Bill & Melinda Gates Foundation, Coalition for Epidemic Preparedness Innovations (CEPI), Defense Advanced Research Projects Agency (DARPA)/Department of Defense (DOD), GeneOne Life Science/VGXI, HIV Vaccines Trial Network, International Vaccine Institute (IVI), Medical CBRN Defense Consortium (MCDC), National Cancer Institute, National Institutes of Health, National Institute of Allergy and Infectious Diseases, Ology Bioservices, the Parker Institute for Cancer Immunotherapy, Plumbline Life Sciences, Regeneron, Richter-Helm BioLogics, Roche/Genentech, University of Pennsylvania, Walter Reed Army Institute of Research, and The Wistar Institute. INOVIO also is a proud recipient of 2020 Women on Boards "W" designation recognizing companies with more than 20% women on their board of directors. For more information, visit http://www.inovio.com.

CONTACTS:

Media: Jeff Richardson, 267-440-4211, jrichardson@inovio.comInvestors: Ben Matone, 484-362-0076, ben.matone@inovio.com

This press release contains certain forward-looking statements relating to our business, including our plans to develop DNA medicines, our expectations regarding our research and development programs, including the planned initiation and conduct of preclinical studies and clinical trials, and the availability and timing of data from those studies and trials. Actual events or results may differ from the expectations set forth herein as a result of a number of factors, including uncertainties inherent in pre-clinical studies, clinical trials, product development programs and commercialization activities and outcomes, the availability of funding to support continuing research and studies in an effort to prove safety and efficacy of electroporation technology as a delivery mechanism or develop viable DNA medicines, our ability to support our pipeline of DNA medicine products, the ability of our collaborators to attain development and commercial milestones for products we license and product sales that will enable us to receive future payments and royalties, the adequacy of our capital resources, the availability or potential availability of alternative therapies or treatments for the conditions targeted by us or our collaborators, including alternatives that may be more efficacious or cost effective than any therapy or treatment that we and our collaborators hope to develop, issues involving product liability, issues involving patents and whether they or licenses to them will provide us with meaningful protection from others using the covered technologies, whether such proprietary rights are enforceable or defensible or infringe or allegedly infringe on rights of others or can withstand claims of invalidity and whether we can finance or devote other significant resourcesthat may be necessary to prosecute, protect or defend them, the level of corporate expenditures, assessments of our technology by potential corporate or other partners or collaborators, capital market conditions, the impact of government healthcare proposals and other factors set forth in our Annual Report on Form 10-K for the year ended December 31, 2019, our Quarterly Report on Form 10-Q for the quarter ended March 31, 2020 and other filings we make from time to time with the Securities and Exchange Commission. There can be no assurance that any product candidate in our pipeline will be successfully developed, manufactured or commercialized, that final results of clinical trials will be supportive of regulatory approvals required to market products, or that any of the forward-looking information provided herein will be proven accurate. Forward-looking statements speak only as of the date of this release, and we undertake no obligation to update or revise these statements, except as may be required by law.

Read the original post:
INOVIO's INO-5401 in Combination with PD-1 Inhibitor Libtayo (cemiplimab) Demonstrates 85% of Newly Diagnosed Glioblastoma Patients Are Alive 12...

Posted in Gene Medicine | Comments Off on INOVIO’s INO-5401 in Combination with PD-1 Inhibitor Libtayo (cemiplimab) Demonstrates 85% of Newly Diagnosed Glioblastoma Patients Are Alive 12…

21-Gene Recurrence Scores of 26 or Higher Can Help Determine If Chemotherapy Will Be Effective – MedicalResearch.com

Posted: at 5:38 pm

MedicalResearch.com Interview with:

MedicalResearch.com: What is the background for this study?

Response: More than 40% of women withhormone receptor-positive, HER2-negative early-stage breast cancer have high recurrence scores (RS)of 26-30. Optimal adjuvant systemic therapy in this subgroup remains unclear, and national guidelinescurrently recommendeither chemoendocrine therapy or endocrine therapy alone.In addition, the difference in overall survival of a patient with a RS 26-30 versus RS >30 is unclear.

MedicalResearch.com: What are the main findings?

Response: Our main findings are:

1) Chemotherapy improves outcomes for those with RS 26-30,

(2) RS >30 carries a worse prognosis for survival compared to RS 26-30 despite receiving chemoendocrine therapy, and

(3) The magnitude of chemotherapy benefit appears to be similar between those with RS 26-30 and RS >30.

MedicalResearch.com: What should readers take away from your report?

Response: Breast cancer patients with a 21-gene recurrence score of 26 or higher are a heterogeneous group of patients with different prognosis and outcomes, and chemotherapy may benefit patients with recurrence scores of 26-30.

MedicalResearch.com: What recommendations do you have for future research as a result of this work?

Response: Further prospective studies are needed to investigate optimal adjuvant therapy regimens for patients with a high 21-gene recurrence score

No relevant disclosures

Citation:

Ma SJ, Oladeru OT, Singh AK. Association of Adjuvant Chemotherapy With Overall Survival in Patients With Early-Stage Breast Cancer and 21-Gene Recurrence Scores of 26 or Higher.JAMA Netw Open.2020;3(5):e203876. doi:10.1001/jamanetworkopen.2020.3876

https://jamanetwork.com/journals/jamanetworkopen/fullarticle/2765371

We respect your privacy and will never share your details.

The information on MedicalResearch.com is provided for educational purposes only, and is in no way intended to diagnose, cure, or treat any medical or other condition. Always seek the advice of your physician or other qualified health and ask your doctor any questions you may have regarding a medical condition. In addition to all other limitations and disclaimers in this agreement, service provider and its third party providers disclaim any liability or loss in connection with the content provided on this website.

0

Go here to see the original:
21-Gene Recurrence Scores of 26 or Higher Can Help Determine If Chemotherapy Will Be Effective - MedicalResearch.com

Posted in Gene Medicine | Comments Off on 21-Gene Recurrence Scores of 26 or Higher Can Help Determine If Chemotherapy Will Be Effective – MedicalResearch.com

Microsoft Patch Tuesday, May 2020 Edition Krebs on Security – Krebs on Security

Posted: at 5:36 pm

Microsoft today issued software updates to plug at least 111 security holes in Windows and Windows-based programs. None of the vulnerabilities were labeled as being publicly exploited or detailed prior to today, but as always if youre running Windows on any of your machines its time once again to prepare to get your patches on.

May marks the third month in a row that Microsoft has pushed out fixes for more than 110 security flaws in its operating system and related software. At least 16 of the bugs are labeled Critical, meaning neer-do-wells can exploit them to install malware or seize remote control over vulnerable systems with little or no help from users.

But focusing solely on Microsofts severity ratings may obscure the seriousness of the flaws being addressed this month. Todd Schell, senior product manager at security vendor Ivanti, notes that if one looks at the exploitability assessment tied to each patch i.e., how likely Microsoft considers each can and will be exploited for nefarious purposes it makes sense to pay just as much attention to the vulnerabilities Microsoft has labeled with the lesser severity rating of Important.

Virtually all of the non-critical flaws in this months batch earned Microsofts Important rating.

What is interesting and often overlooked is seven of the ten [fixes] at higher risk of exploit are only rated as Important, Schell said. It is not uncommon to look to the critical vulnerabilities as the most concerning, but many of the vulnerabilities that end up being exploited are rated as Important vs Critical.

For example, Satnam Narang from Tenable notes that two remote code execution flaws in Microsoft Color Management (CVE-2020-1117) and Windows Media Foundation (CVE-2020-1126) could be exploited by tricking a user into opening a malicious email attachment or visiting a website that contains code designed to exploit the vulnerabilities. However, Microsoft rates these vulnerabilities as Exploitation Less Likely, according to their Exploitability Index.

In contrast, three elevation of privilege vulnerabilities that received a rating of Exploitation More Likely were also patched, Narang notes. These include a pair of Important flaws in Win32k (CVE-2020-1054, CVE-2020-1143) and one in the Windows Graphics Component (CVE-2020-1135). Elevation of Privilege vulnerabilities are used by attackers once theyve managed to gain access to a system in order to execute code on their target systems with elevated privileges. There are at least 56 of these types of fixes in the May release.

Schell says if your organizations plan for prioritizing the deployment of this months patches stops at vendor severity or even CVSS scores above a certain level you may want to reassess your metrics.

Look to other risk metrics like Publicly Disclosed, Exploited (obviously), and Exploitability Assessment (Microsoft specific) to expand your prioritization process, he advised.

As it usually does each month on Patch Tuesday, Adobe also has issued updates for some of its products. An update for Adobe Acrobat and Reader covers two dozen critical and important vulnerabilities. There are no security fixes for Adobes Flash Player in this months release.

Just a friendly reminder that while many of the vulnerabilities fixed in todays Microsoft patch batch affect Windows 7 operating systems including all three of the zero-day flaws this OS is no longer being supported with security updates (unless youre an enterprise taking advantage of Microsofts paid extended security updates program, which is available to Windows 7 Professional and Windows 7 enterprise users).

If you rely on Windows 7 for day-to-day use, its time to think about upgrading to something newer. That something might be a PC with Windows 10. Or maybe you have always wanted that shiny MacOS computer.

If cost is a primary motivator and the user you have in mind doesnt do much with the system other than browsing the Web, perhaps a Chromebook or an older machine with a recent version of Linux is the answer (Ubuntu may be easiest for non-Linux natives). Whichever system you choose, its important to pick one that fits the owners needs and provides security updates on an ongoing basis.

Keep in mind that while staying up-to-date on Windows patches is a must, its important to make sure youre updating only after youve backed up your important data and files. A reliable backup means youre not losing your mind when the odd buggy patch causes problems booting the system.

So backup your files before installing any patches. Windows 10 even has some built-in tools to help you do that, either on a per-file/folder basis or by making a complete and bootable copy of your hard drive all at once.

And if you wish to ensure Windows has been set to pause updating so you can back up your files and/or system before the operating system decides to reboot and install patches on its own schedule, see this guide.

As always, if you experience glitches or problems installing any of these patches this month, please consider leaving a comment about it below; theres a better-than-even chance other readers have experienced the same and may chime in here with some helpful tips. Also, keep an eye on the AskWoody blog from Woody Leonhard, who keeps a reliable lookout for buggy Microsoft updates each month.

Further reading:

SANS Internet Storm Center breakdown by vulnerability and severity

Microsofts Security Update catalog

BleepingComputer on May 2020 Patch Tuesday

Tags: adobe acrobat, adobe reader, CVE-2020-1054, CVE-2020-1117, CVE-2020-1126, CVE-2020-1135, CVE-2020-1143, Flash Player, Ivanti, Satnam Narang, Tenable, Todd Schell

This entry was posted on Tuesday, May 12th, 2020 at 5:16 pmand is filed under Latest Warnings, Time to Patch.You can follow any comments to this entry through the RSS 2.0 feed.You can skip to the end and leave a comment. Pinging is currently not allowed.

Follow this link:

Microsoft Patch Tuesday, May 2020 Edition Krebs on Security - Krebs on Security

Comments Off on Microsoft Patch Tuesday, May 2020 Edition Krebs on Security – Krebs on Security

Microsoft is acquiring Metaswitch Networks to expand its Azure 5G strategy – TechCrunch

Posted: at 5:36 pm

Just weeks after announcing a deal to acquire 5G specialist Affirmed Networks, Microsoft is making another acquisition to strengthen its cloud-based telecoms offering. Its acquiring Metaswitch Networks, a U.K.-based provider of cloud-based communications products used by carriers and network providers (customers include the likes of BT in the U.K., Sprint and virtual network consortium RINA.

Terms of the deal were not disclosed in todays announcement. Metaswitchs investors included the PE firms Northgate and WRV, Francisco Partners and Sequoia, but its unclear how much it had raised nor its last valuation. (The company has been around since 1981.)

The deal speaks to a growing focus from tech companies leveraging cloud architectures and the adoption of new networking technologies specifically 5G to capitalise on a bigger role in becoming service providers both to carriers and to those who would like to build carrier-like services (potentially bypassing telcos in the process), through the offering of virtualised products delivered from its cloud.

It comes just one day after Rakuten, the Japanese e-commerce and streaming services giant, announced that it would be acquiring Innoeye, another specialist in cloud-based communications services. Others like Amazon have also been building up their offerings in AWS serving the same market.

Microsoft describes the Metaswitch portfolio of cloud-native services which include 5G data, voice and unified communications (contact center)products as complementary to Affirmed.

Microsoft intends to leverage the talent and technology of these two organizations, extending the Azure platform to both deploy and grow these capabilities at scale in a way that is secure, efficient and creates a sustainable ecosystem, the company said.

The migration to 5G represents a window of opportunity to companies that provide services to carriers. The latter have long been saddled with expensive, ageing equipment and now have the potential to replace some or all of that with software-based services, delivered via the cloud, that can be more easily updated and modified with market demand. That is the hope, at least. The reality may be that many carriers sweat out their assets and upgrade in small increments, as operational expenditure still represents a big investment and cost.

Microsoft is all too aware of that reality and also of the prospect of appearing like a threat, not a saviour.

We will continue to support hybrid and multi-cloud models to create a more diverse telecom ecosystem and spur faster innovation, an expanded set of unique offerings and greater opportunities for differentiation, it notes. We will continue to partner with existing suppliers, emerging innovators and network equipment partners to share roadmaps and explore expanded opportunities to work together, including in the areas of radio access networks (RAN), next-generation core, virtualized services, orchestration and operations support system/business support system (OSS/BSS) modernization. A future that is interoperable has never been more important to ensure the success of customers and partners.

Indeed, Microsofts been providing services to, and selling its own IT through, carriers for years before this. These latest acquisitions, however, represent a growing focus on what role it can play in that enterprise vertical in the years to come.

Link:

Microsoft is acquiring Metaswitch Networks to expand its Azure 5G strategy - TechCrunch

Comments Off on Microsoft is acquiring Metaswitch Networks to expand its Azure 5G strategy – TechCrunch

Microsoft: Here’s how we’re killing a class of memory security bugs in Windows 10 – ZDNet

Posted: at 5:36 pm

Microsoft has detailed how it's changed Windows 10 to wipe out a class of memory bugs called uninitialized memory vulnerabilities using a new security feature that has plagued users of games that employ anti-cheat software.

Microsoft has been experimenting with Rust for certain Windows components written in C and C++ to weed out memory-related bugs, which make up about 70% of all patches Microsoft has shipped over the past decade.

One type of memory bug is uninitialized memory vulnerabilities, which according to Microsoft, have been trending upwards in recent years and made up about 5% to 10% of all the Windows flaws it fixed between 2017 and 2018.

The Heartbleed vulnerability in the OpenSSL software library for HTTPS web servers was one example of this type of bug, which caused private encryption keys to be stored in uninitialized memory and therefore made it possible for an attacker to retrieve them.

To address uninitialized memory vulnerabilities in Windows, Microsoft has kicked off a project called InitAll, which is now enabled for all kernel-mode code, Hyper-V code, and networking related user-mode services. InitAll first shipped with Windows 10 version 1903 from Spring 2019.

The type of memory bug poses a challenge for products with large code bases, in part because of the design of C and C++.

Joe Bialek, a security engineer in the Microsoft Security Response Center (MSRC), noted in a recent talkit is "extremely difficult" to rule out an uninitialized memory bug doesn't have a security impact.

This type of memory bug can be found using commonly-used processes, however Bialek argues that static analysis can't find everything, fuzzing can't identity all bugs of this type, and manual code review doesn't scale and is prone to error.

Microsoft's InitAll automatically initializes stack variables to zero to address issues caused by C and C++.

As Bialek explains in a new blogpost, the design of C and C++ doesn't prevent developers from incorrectly using uninitialized variables, which can introduce uninitialized memory disclosure vulnerabilities and uninitialized memory use.

"The C and C++ programming language were designed with performance and developer control top of mind. As part of this, the language has no enforcement around variable initialization. Using uninitialized variables is undefined behavior. Developers must initialize variables before they are used and it's up to them to get this right," he explains.

Microsoft targeted InitAll at kernel-mode first because of the large number of uninitialized kernel memory vulnerabilities affecting it, while Hyper-V code was prioritized due to recent stack information disclosure bugs.

It hasn't rolled the feature out to all Windows code yet due the risk of causing performance issues in Windows 10 but it is starting apply it more broadly now.

"The reason we did not immediately roll InitAll out for all code was to ensure we could succeed in doing something rather than fail at trying to do everything," he noted.

"Now that we've successfully rolled the technology out to the highest priority targets, we can shift our focus to the rest of our code."

Interestingly, the long running issues that the latest versions of Windows 10 have had with anti-cheat software stems from InitAll.

"Shortly after enabling InitAll in Windows, we received complaints that certain anti-cheat software was causing kernel crashes," says Bialek.

"Investigations revealed that these anti-cheat solutions included kernel-mode drivers. These drivers were scanning the NT kernel image in memory and looking for byte patterns to locate undocumented functions. The way these pattern matchers work is by searching for specific byte patterns indicating the beginning of the function.

"When InitAll was enabled, some extra initializations (that could not be proven away) were added to the beginning of these functions which effectively changed their signature. We reached out of these anti-cheat companies and they updated their drivers to stop causing kernel crashes."

View post:

Microsoft: Here's how we're killing a class of memory security bugs in Windows 10 - ZDNet

Comments Off on Microsoft: Here’s how we’re killing a class of memory security bugs in Windows 10 – ZDNet

Amazon, Microsoft Or Google: Which Is The Best Play On Surging Cloud Infrastructure Demand? – Forbes

Posted: at 5:36 pm

BRETIGNY-SUR-ORGE, FRANCE - APRIL 21: The logo of Amazon is seen on the facade of the company ... [+] logistics center on April 21, 2020 in Bretigny-sur-Orge, France. The French government has ordered the American e-commerce giant Amazon to take measures at four of its sites in France to better protect employees against Covid-19. This Tuesday, the Versailles Court of Appeal examined the appeal filed by Amazon against a decision requiring it to restrict its activity in France during this period of confinement. Amazon Logistique France has finally decided to close all of its warehouses pending the decision of the Versailles Court of Appeal, which will be made on Friday April 24. The Coronavirus (COVID-19) pandemic has spread to many countries across the world, claiming over 171,000 lives and infecting over 2.5 million people. (Photo by Chesnot/Getty Images)

The Coronavirus pandemic is making people rely increasingly on the Internet to work, learn, shop, and entertain themselves as they spend more time at home. This, in turn, is boosting demand for public cloud infrastructure which allows businesses that range from retailers to video streaming service providers to essentially rent computing infrastructure via the internet, without owning any physical servers of their own. A handful of large companies dominate this space including Microsoft , Alphabet , Amazon, and Oracle, and most popular applications and services ranging from Zoom, Slack, Snapchat, and Netflix rely on their infrastructure at least to a certain extent to power their services. Our indicative theme of stocks offering Cloud Infrastructure Services is up by about 7% year to date, compared to the broader S&P 500 which is down by about 10%. Below, we take a look at how the key names in the cloud infrastructure as a service (IaaS) space have fared.

Amazon (28% YTD return, $1.2 trillion market cap) Amazon, a pioneer in the cloud IaaS space, has seen its stock rise to all-time highs through the pandemic due to higher demand for both cloud computing services and optimism surrounding its e-commerce operations. Although the AWS division accounted for just 12% of Amazons revenues in 2019 (AWS sales were $35 billion), they contributed ~63% of Amazons total operating income. This could make Amazon a solid way to gain exposure to the cloud infrastructure space.

Microsoft (16% YTD return, $1.38 trillion market cap) - The software titans fast-growing Azure cloud infrastructure business has been gaining market share, at Amazons expense. Although the company does not break down Azure dollar revenues, it indicated that revenues expanded ~59%year-over-year over the last quarter. The intelligent cloud segment, which includes Azure as well as other server products, posted sales of about $39 billion, accounting for about 31% of Microsofts revenues in FY19.

Google (3% YTD return, $940 billion market cap) While Googles core advertising business is likely to shrink through the pandemic as marketers scale back on advertising budgets, the companys cloud services operations could emerge as a bright spot for the company. The Cloud division grew revenues by about 52% over Q1 to $2.78 billion.

Oracle (-0.5% YTD return, $165 billion market cap) : Although Oracle is a smaller player in the cloud space, the company has been significantly scaling up its data center operations, building 20 new data centers by the end of 2020. The company has significant experience in catering to enterprise clients and this could enable it to scale up its cloud operations going forward. Zoom recently signed a deal with Oracle for its core video conferencing service, as demand has been soaring through the pandemic.

Is Microsoft stock significantly overvalued compared to Google? We think so! View our dashboard analysis: Google vs. Microsoft: Microsofts 4x Price Rise Wont Last for underlying numbers and rationale.

See allTrefis Price EstimatesandDownloadTrefis Datahere

Whats behind Trefis? See How Its Powering New Collaboration and What-Ifs ForCFOs and Finance Teams |Product, R&D, and Marketing Teams

Continue reading here:

Amazon, Microsoft Or Google: Which Is The Best Play On Surging Cloud Infrastructure Demand? - Forbes

Comments Off on Amazon, Microsoft Or Google: Which Is The Best Play On Surging Cloud Infrastructure Demand? – Forbes

Microsoft announces pricing terms for its exchange offers and increases the New 2060 Notes Issue Cap – NBC Right Now

Posted: at 5:36 pm

REDMOND, Wash., May 14, 2020 /PRNewswire/ -- Microsoft Corp. (NASDAQ: MSFT) ("Microsoft") announced today the pricing terms with respect to its offers to (i) exchange (the "Pool 1 Offer") the ten series of notes described in the table below (collectively, the "Pool 1 Notes") for a new series of Microsoft's 2.525% notes due June 1, 2050 (the "New 2050 Notes") and a cash payment, as applicable. For each $1,000 principal amount of Pool 1 Notes validly tendered and not validly withdrawn prior to 11:59 p.m., New York City time, on May 28, 2020 (the "Expiration Time") and accepted by Microsoft, the following table sets forth the yield, the total exchange consideration, the principal amount of the New 2050 Notes and the amount of the cash payment, as applicable:

Pool 1 Table(1)

Title of

Security

CUSIP

Number

Acceptance Priority Level

Reference

UST Security(2)

Fixed

Spread

(basis

points)

Yield(3)

Early

Exchange

Premium(4)

Total

Exchange

Consideration

(4)(5)

Principal

Amount

of New

Notes(6)

Cash Payment(4)

4.875% Notes due 2043

594918AX2

1

30-year

+110

2.375%

$30

$1,441.62

$1,000.00

$441.62

5.300% Notes due 2041

594918AM6

2

30-year

+105

2.325%

$30

$1,486.31

$1,000.00

$486.31

4.450% Notes due 2045

594918BL7

3

30-year

+110

2.375%

$30

$1,388.59

$1,000.00

$388.59

4.250% Notes due 2047

594918CA0

4

30-year

+110

2.375%

$30

$1,363.95

$1,000.00

$363.95

5.200% Notes due 2039

594918AD6

5

30-year

+95

2.225%

$30

$1,458.92

$1,000.00

$458.92

4.500% Notes due 2040

594918AJ3

6

30-year

+100

2.275%

$30

$1,360.57

$1,000.00

$360.57

3.750% Notes due 2043

594918AU8

7

30-year

+110

2.375%

$30

$1,237.91

$1,000.00

$237.91

3.750% Notes due 2045

594918BD5

8

30-year

Continue reading here:

Microsoft announces pricing terms for its exchange offers and increases the New 2060 Notes Issue Cap - NBC Right Now

Comments Off on Microsoft announces pricing terms for its exchange offers and increases the New 2060 Notes Issue Cap – NBC Right Now

Microsoft To Give Edge Browser Users Access To NewsGuard Tools 05/15/2020 – MediaPost Communications

Posted: at 5:36 pm

NewsGuard Technologies is expanding its partnership with Microsoft through browser expansions, adoption in new programs and continued sponsorships.

Through the deal, NewsGuard, a platform thatreviews and rate the credibility of websites and social media via trained journalists, will supply its ratings and nutrition labels to users of the Microsoft Edge browser, cross-platform, forfree.

Users of other browsers pay a $2.95 monthly subscription fee.

NewsGuard will also deliver real-time data to Microsofts Bing search engine.

All departmentswithin Microsoft will also have access to the ratings and labels, allowing them to apply those tools to projects like the Defending Democracy Program, which finds Microsoft Research teams working tocounter misinformation, disinformation and health-care hoaxes.

Tom Burt, corporate vice president of customer security and trust, Microsoft, stated: Defending against disinformationcampaigns is a key focus of our Defending Democracy Program. NewsGuards work has become especially relevant because of its trailblazing efforts to root out online hoaxes related to health andhealthcare issues, including those concerning COVID-19.

advertisement

advertisement

In addition to the new elements of the partnership, Microsoft will continue to sponsor NewsGuards new literacy program,which serves more than 700 libraries and 7 million patrons across the U.S., Great Britain, France, Germany and Italy.

The sponsorship will support NewsGuard as it expands its literacy programinto new countries, such as Australia and Canada, later this year.

Here is the original post:

Microsoft To Give Edge Browser Users Access To NewsGuard Tools 05/15/2020 - MediaPost Communications

Comments Off on Microsoft To Give Edge Browser Users Access To NewsGuard Tools 05/15/2020 – MediaPost Communications