Tenable

JULY 14, 2020

On July 14, Microsoft patched a critical vulnerability in Windows Domain Name System (DNS) Server as part of Patch Tuesday for July 2020. Microsoft has published its own blog post about the flaw , warning that they consider it wormable. Microsoft has published its own blog post about the flaw , warning that they consider it wormable.

Windows 139

Windows Software Review Systems Review Research 139

Tenable

JULY 29, 2020

CVE-2020-10713 is a buffer overflow vulnerability in GRUB2, a piece of software that loads an Operating System (OS) into memory when a system boots up. The flaw exists due to the way GRUB2 parses a configuration file, grub.cfg. Alex Bazhaniuk (@ABazhaniuk) July 29, 2020. CVE-2020-14308. CVE-2020-14309.

Software Review 103

Software Review Linux Systems Review Windows 103

TechCrunch

JANUARY 22, 2022

No further due diligence? As history often reminds us , due diligence matters from a human perspective — and vetting a founder beyond their ability to attract talent can save firms from headaches or legal woes. “Our approach? This is our data set, let’s see if we can put money into them,” he said. No problem.

Software Review 213

Software Review Technical Review Data Windows 213

Tenable

MARCH 10, 2020

Critical unpatched “wormable” remote code execution (RCE) vulnerability in Microsoft Server Message Block 3.1.1 Details about this vulnerability were originally disclosed accidentally in another security vendor’s blog for March’s Microsoft Patch Tuesday. Security Response (@msftsecresponse) March 10, 2020. Background.

Software Review 129

Software Review SMB LAN Windows 129

Tenable

JANUARY 22, 2021

A researcher has published a proof-of-concept exploit script for a critical SAP vulnerability patched in March 2020 and attackers have begun probing for vulnerable SAP systems. It was originally patched in March 2020 as part of SAP’s Security Patch Day. RECALL : CVE-2020-6207 evokes memories of RECON vulnerability. Background.

Authentication 99

Authentication Software Review Systems Review Research 99

Tenable

DECEMBER 8, 2020

The final Patch Tuesday of 2020 includes fixes for 58 CVEs, including workaround details for a severe vulnerability in Windows DNS Resolver called SAD DNS. Microsoft patched 58 CVEs in the December 2020 Patch Tuesday release, including 9 CVEs rated as critical. CVE-2020-25705 | Windows DNS Resolver Spoofing Vulnerability.

Software Review 106

Software Review Windows Systems Review Azure 106

Tenable

APRIL 14, 2020

Microsoft's April 2020 Patch Tuesday includes 113 CVEs, including a patch for two zero-day flaws (CVE-2020-0938 and CVE-2020-1020) in Adobe Type Manager Library disclosed on March 23. CVE-2020-1020 and CVE-2020-0938 | Adobe Type Manager Library Remote Code Execution Vulnerabilities.

Software Review 104

Software Review Systems Review Windows Operating System 104

Hacker Earth Developers Blog

DECEMBER 28, 2020

I’m writing this from a newly locked-down chilly California; reflecting on 2020 and all that it has taught us. For businesses, 2020’s learnings have mostly centered around ‘ our people ’. I think they’d do well for an abridged guide to 2020, and what they’ve taught me about tech hiring. We’ve cared more than we ever did in 2020.

Technical Review 130

Technical Review Software Review Recruiting Virtualization 130

Tenable

OCTOBER 2, 2023

Progress Software patches multiple flaws in its WS_FTP Server product, including a pair of critical flaws, one with a maximum CVSS rating of 10 Background On September 27, Progress Software published an advisory for WinSock File Transfer Protocol or WS_FTP Server , a secure file transfer solution, addressing eight vulnerabilities.

Software Review 121

Software Review Software Systems Review Authentication 121

Tenable

OCTOBER 13, 2020

Microsoft patched 87 CVEs in the October 2020 Patch Tuesday release, including 11 CVEs rated critical. CVE-2020-16898 | Windows TCP/IP Remote Code Execution Vulnerability. CVE-2020-16898 , dubbed “Bad Neighbor,” is a critical remote code execution (RCE) vulnerability within the Windows TCP/IP stack.

Windows 104

Windows Software Review Systems Review Advertising 104

Tenable

JULY 15, 2020

Following the disclosure of these vulnerabilities, Citrix published a blog post noting that there were some barriers to exploitation, but encouraged customers to apply the security fixes as soon as possible. CVE-2020-8187. CVE-2020-8190. CVE-2020-8191. CVE-2020-8193. CVE-2020-8194. Code Injection.

WAN 106

WAN Technical Review Software Review Groups 106

Netlify

JULY 14, 2020

A blog is a great place to share the inside scoop on your new features with your users or bring new eyes to your site with interesting content. Scully , the Angular Static Site Generator, makes it easier to create a blog using Markdown and the Angular framework we’re familiar with. generate a blog skeleton. Build a Blog.

Software Review 119

Software Review Technical Review Testing Cloud 119

TechCrunch

JANUARY 22, 2021

She told TechCrunch that last year’s run of 23 pre-seed rounds (10 of which were $150,000+ deals) per Briter Bridges data , was due to the confidence investors had in the market, especially fintech. By the time it exited in October 2020, some angel investors had an ROI of more than 1,400% according to Jason Njoku in his blog post.

Fintech 344

Fintech Technical Review Banking Fractional CTO 344

Tenable

NOVEMBER 4, 2020

CVE-2020-16846 is a critical shell injection vulnerability in the netapi Salt SSH client. According to the advisory, an unauthenticated attacker could use shell injection to execute arbitrary code on the Salt-API via the Salt SSH client. CVE-2020-25592 is an improper authentication vulnerability affecting users running the Salt API.

Authentication 105

Authentication Software Review Systems Review Analysis 105

Tenable

APRIL 3, 2020

On April 3, Mozilla Foundation published advisory 2020-11 for Mozilla Firefox and Mozilla Firefox Extended Support Release (ESR). Francisco Alonso (@revskills) April 3, 2020. These latest vulnerabilities follow on the heels of another zero-day vulnerability in Mozilla Firefox exploited in the wild in January 2020. Background.

Software Review 106

Software Review Systems Review Research Analysis 106

Tenable

NOVEMBER 10, 2020

Microsoft patched 112 CVEs in the November 2020 Patch Tuesday release, including 17 CVEs rated as critical. CVE-2020-17087 | Windows Kernel Local Elevation of Privilege Vulnerability. CVE-2020-17087 was used to escape Google Chrome’s sandbox in order to elevate privileges on the exploited system.

Windows 105

Windows Software Review Azure Systems Review 105

Tenable

MAY 3, 2020

CVE-2020-11651 is an authentication bypass in two methods of the ClearFuncs class. The first method, _send_pub(), is unintentionally exposed, allowing an attacker to queue messages on the master server that can be used to cause minion agents to execute arbitrary code. Source code is unaffected. . Source code is unaffected.

Technical Advisors 104

Technical Advisors Open Source Software Review Systems Review 104

Tenable

SEPTEMBER 1, 2020

Tenable Research discovers multiple vulnerabilities in the MAGMI Magento plugin that could lead to remote code execution on a vulnerable Magento site. On September 1, we published TRA-2020-51 , a Tenable Research Advisory for two vulnerabilities in the Magento Mass Import (MAGMI) plugin. Background. on August 30.

PHP 109

PHP Authentication Software Review Systems Review 109

Tenable

MARCH 17, 2020

CVE-2020-8467 is a vulnerability in Apex One and OfficeScan in a component of a migration tool. A remote, authenticated attacker could exploit this vulnerability and gain arbitrary code execution on affected Apex One and OfficeScan installations. March 16, 2020: Trend Micro Security Bulletin for Apex One and OfficeScan.

Trends 104

Trends Software Review Systems Review Authentication 104

Tenable

MARCH 6, 2020

CVE-2020-8597 is a buffer overflow vulnerability in pppd due to a logic flaw in the packet processor of the Extensible Authentication Protocol (EAP). As pppd works in conjunction with kernel drivers and often runs with high privileges such as system or even root, any code execution could also be run with these same privileges.

Software Review 102

Software Review Systems Review Linux Authentication 102

TechCrunch

JUNE 2, 2022

“Our vision for a product success platform is to connect the core parts of the development cycle — such as comms, feedback and planning — into one platform,” the company wrote in a blog post announcing the launch of the platform today. They produced version 1 of the product in May 2020. The approach seems to be working.

Software Review 191

Software Review Software Tools Culture 191

Tenable

OCTOBER 27, 2023

View Change Log Background On October 25, Praetorian published a blog post warning of a newly discovered vulnerability in F5 BIG-IP that could allow an unauthenticated attacker to execute code on affected devices. Update October 27: The Analysis section has been updated to include an additional CVE patched by F5.

Authentication 73

Authentication Software Review Technical Review Systems Review 73

Tenable

NOVEMBER 2, 2020

A pair of zero-day vulnerabilities in Google Chrome (CVE-2020-15999) and Microsoft Windows (CVE-2020-17087) were chained together and exploited in the wild in targeted attacks. A separate Chrome vulnerability (CVE-2020-16009) has also been exploited in the wild. Ben Hawkes (@benhawkes) October 20, 2020. Background.

Windows 102

Windows Technical Review Software Review Systems Review 102

Tenable

APRIL 12, 2024

An unauthenticated, remote attacker could exploit this vulnerability to execute code on an affected firewall with root privileges. While no specific details about these attacks were available at the time this blog was published, researchers at Volexity are credited with discovering the flaw. prior to 10.2.9-h1 h1 PAN-OS 10.2.9-h1

Network 118

Network Firewall Software Review Systems Review 118

Tenable

JUNE 23, 2021

SonicWall issues a new advisory and CVE identifier to address an incomplete fix for CVE-2020-5135. This advisory contains a newly assigned CVE identifier; the original vulnerability was CVE-2020-5135. This advisory contains a newly assigned CVE identifier; the original vulnerability was CVE-2020-5135. Background. Description.

Technical Review 96

Technical Review Systems Review Firewall Software Review 96

Tenable

JULY 14, 2020

SAP NetWeaver is considered the “central foundation for the entire SAP software stack” and allows access to SAP data over Hypertext Transfer Protocol (HTTP). CVE-2020-6287 is caused by a complete lack of authentication in the SAP NetWeaver AS Java’s LM Configuration Wizard. the highest possible CVSS score. Proof of concept.

Applications 99

Applications Software Review Systems Review Authentication 99

Tenable

SEPTEMBER 10, 2020

CVE-2020-2040 is a critical buffer overflow vulnerability in PAN-OS when either the Captive Portal or Multi-Factor Authentication (MFA) feature has been enabled. PAN explicitly states that GlobalProtect VPN and the PAN-OS management web interfaces are not affected by CVE-2020-2040. CVE-2020-2036. CVE-2020-2041.

Software Review 109

Software Review Systems Review Authentication Firewall 109

The Hustle

DECEMBER 18, 2023

Dewey noticed that smaller blogs are frequently rated and, thus, often outrank media outlets with whole recipe teams, like New York Times Cooking ; she suspects that bloggers are gaming rankings by deleting bad reviews. Although, I do use one blog Dewey mentioned, Sally’s Baking Addiction, religiously.

Software Review 82

Software Review Metrics Games Internet 82

Hacker Earth Developers Blog

OCTOBER 7, 2020

HackerEarth has just announced the addition of full-stack assessments to help recruiters efficiently evaluate the coding skills of full-stack developers. According to the 2020 HackerEarth Developer Survey , more developers — over 35% — have expertise in full-stack development than in any other category. Auto-evaluation for frontend .

Conference 246

Conference Technical Review Recruiting Software Review 246

Coding Dojo

JUNE 21, 2022

After a slight slowdown in 2020 due to the COVID-19 pandemic, companies are hiring for tech-based … Read more >>. The post The Most In-Demand Tech Jobs in 2022 appeared first on Coding Dojo Blog. Tech jobs are booming.

Technical Review 98

Technical Review Software Review Company Trends 98

Tenable

JULY 6, 2020

Three days after an advisory was disclosed for a critical remote code execution vulnerability in F5’s BIG-IP, active attempts to exploit vulnerable hosts have been observed in the wild. CVE-2020-5902 is a critical vulnerability in the BIG-IP Traffic Management User Interface (TMUI) also known as the Configuration Utility. Background.

Software Review 98

Software Review Technical Review Systems Review Research 98

Kaseya

FEBRUARY 4, 2020

Better late than never, we take a look back at the most read Kaseya blogs for 2019 for a glimpse into the topics that were at the forefront for internal IT teams and Managed Service Providers (MSPs). A big concern for all parties was Windows 7 end of life (EOL), which occurred on January 14, 2020. What makes this blog worth reading?

Disaster Recovery 78

Disaster Recovery Healthcare Windows Metrics 78

Gorilla Logic

MARCH 17, 2023

BDD emphasizes collaboration between developers, testers, and stakeholders to define and deliver software that meets business requirements. It enhances your existing Agile approach , synthesizing Test-Driven Development (TDD) and Acceptance Test-Driven Development (ATDD). For each team member, ask: Are they familiar with BDD or TDD?

Weak Development Team 95

Weak Development Team Technical Review Software Review Systems Review 95

TechCrunch

APRIL 12, 2022

Five had raised around $78 million in funding, and according to PitchBook data was last valued at $216 million in its last round, a $41 million investment in March 2020 that coincided with the company’s B2B pivot. From what we understand, if required due to sanctions, Bosch would put funds into a holding account if needed.

B2B 246

B2B Technical Review Automotive Software Review 246

Github

MARCH 11, 2020

Even if you’ve never heard the term “innersource” to describe how teams build their software, you’ll probably still recognize some of the principles behind it. They’re powering code at the world’s most influential companies, and they might even be important practices on your team. Innersource isn’t a novel concept.

Organization 71

Organization Software Review Open Source Part-Time VPE 71

Tenable

OCTOBER 22, 2020

On October 21, the developers of Loginizer , a popular WordPress plugin that offers protection against brute force attacks, published a blog post about a recent update to their plugin that addresses a severe vulnerability. Successful exploitation could lead to remote code execution. Security Fix Blog Post. Proof of concept.

Software Review 89

Software Review Systems Review Research Analysis 89

BrainStation Technology

JANUARY 26, 2022

We are excited to announce that CourseCompare has named BrainStation the Best Coding Bootcamp for 2022. In 2020, we met a surge in demand for online training by introducing over 350 new online live courses in multiple time zones. I took BrainStation’s 10-week Web Development (virtual) course in August 2020-October 2020.

Software Review 52

Software Review Web Development Technical Review Metrics 52