News

Announcements, updates, and items of interest

AITP-NCFL News, February 4, 2022

Security Productivity Skill Sets

AITP-NCFL News, February 2, 2022

Security
  • BleepingComputer:  SEO poisoning pushes malware-laced Zoom, TeamViewer, Visual Studio installers
  • TechRepublic:  Kaspersky stopped more than 30,000 attempts to use the Log4Shell exploit in January
  • BleepingComputer:  Microsoft Defender now detects Android and iOS vulnerabilities
Productivity

AITP-NCFL News, January 31, 2022

Security Productivity
  • DZone:  Nemo - The Ubuntu File Manager You Didn’t Know You Needed
  • Robert Half:  Strengthening Corporate Culture in the Age of Remote Work
  • Information/Age:  Extracting value from unstructured data with intelligent data management
Skill Sets

AITP-NCFL News, January 28, 2022

Security
  • BleepingComputer:  Hackers are taking over CEO accounts with rogue OAuth apps
  • ZDNet: BlackCat ransomware targeting US, European retail, construction and transportation orgs
  • Krebs On Security:  Who Wrote the ALPHV/BlackCat Ransomware Strain?
  • TechRepublic:  Data Privacy Day: Security experts' tips for 2022
Productivity
  • InfoWorld:  Slashing time to insight with unified data analytics
Skill Sets
  • ZDNet:  Employers are desperate for data scientists as demand booms
  • DZone:  ER Diagrams vs. ER Models vs ...
    Read More

AITP-NCFL News, January 26, 2022

Security
  • Bleeping Computer:  Let's Encrypt is revoking lots of SSL certificates in two days
  • Bleeping Computer:  Linux system service bug gives root on all major distros, exploit released
Productivity
  • CIO:  MassMutual’s Gareth Ross: The hardest work of analytics “sits around the edges”
  • JavaScript In Plain English:  What Do Highly Effective Programmers Look Like?
Skill Sets

AITP-NCFL News, January 24, 2022

Security
  • Bleeping Computer: Over 90 WordPress themes, plugins backdoored in supply chain attack
  • betanews:   Governing the ungovernable: Why cybersecurity must adapt to identity sprawl
Productivity Skill Sets

AITP-NCFL News, January 20, 2022

Security
  • BleepingComputer:  Red Cross cyberattack exposes data of 515,000 people seeking missing family
  • 9to5linux:  New Linux Kernel Vulnerability Patched in All Supported Ubuntu Systems, Update Now
  • BleepingComputer:  CISA urges US orgs to prepare for data-wiping cyberattacks
  • BleepingComputer:  Office 365 phishing attack impersonates the US Department of Labor
Productivity

AITP-NCFL News, January 18, 2022

Security
  • BleepingComputer:  Microsoft releases emergency fixes for Windows Server, VPN bugs
Productivity
  • CIO:  8 top priorities for CIOs in 2022
  • DZone:  Top 5 Python Frameworks, Libraries, and Packages for Web Development
  • Robert Half:  5 Key Benefits of Hiring Remote Workers
  • InfoWorld:  A new kind of old-school testing
Skill Sets

AITP-NCFL News, January 14, 2022

Security
  • BleepingComputer:  Microsoft pulls new Windows Server updates due to critical bugs
Productivity
  • BleepingComputer:  Android users can now disable 2G to block Stingray attacks
  • DZone:  8 Top Metrics for Measuring Your Technical Debt in 2022
  • CIO:  The savvy CIO’s secret weapon: Your IT team
  • CIO:  7 ways to breathe new life into your IT leadership career
Skill Sets
  • DZone:  Testing in DevOps – The Basic and Critical Things You Need ...
    Read More

AITP-NCFL News, January 10, 2022

Security
  • BleepingComputer:  SonicWall: Y2K22 bug hits Email Security, firewall products
  • TechRepublic:  URL parsing: A ticking time bomb of security exploits
Productivity
  • ZDNet:  The IT skills gap is getting worse. Here are 10 ways you can avoid a crisis
  • Javascript In Plain English:  7 Things Developers Can do When They Feel Stuck
Skill Sets
  • CIO:  CIO as business partner: 4 prerequisites IT leaders must master
  • Robert Half:  20 UX Designer Interview ...
    Read More

AITP-NCFL News, January 7, 2022

Security
  • BleepingComputer:  NHS warns of hackers exploiting Log4Shell in VMware Horizon
  • Information/Age:  It’s time we changed how we approached data loss protection
Productivity
  • TechRepublic:  In the new year, resolve to use less jargon and bring clarity to business conversations
  • Information/Age:  How is the role of the CTO evolving?
  • TechRepublic:  How to use keyboard shortcuts to make a split screen on macOS, iPadOS, Windows and Chrome OS
  • betanews:  5 data warehouse myths that ...
    Read More

AITP-NCFL News, January 5, 2022

Security
  • BleepingComputer:  First Microsoft Pluton-powered Windows 11 PCs unveiled at CES
  • betanews:   Microsoft releases emergency KB5010196 and KB5010215 updates to fix serious remote desktop problems in Windows Server
Productivity
  • DZone:  Death to Tribal Knowledge
  • DEV:  Flask Internals
Skill Sets
  • InformationWeek:  IT Job Skills 2022: What’s Hot, What’s Not?
  • DZone:  7 Formats for Great Team Retrospectives
  • Information/Age:  Leading through uncertainty: seven characteristics of highly successful digital leaders
Stranger than Fiction ...
Read More

AITP-NCFL News, January 4, 2022

Security
  • InformationWeek:  5 Cyber Resilience Lessons We Re-Learned in 2021 (But Will Probably Forget)
  • DZone:  Why Assessing Security Risk in Compute Lifecycle Development Should Be a Community Effort
Productivity
  • ars technica:  Microsoft fixes harebrained Y2K22 Exchange bug that disrupted email worldwide
  • ComputerWorld:  How to bookmark Safari Tab groups (and other bookmark tips)
  • TechRepublic:  A new release of Rescuezilla is here to help you recover your backed-up da
Skill Sets

AITP-NCFL News, January 3, 2022

Security
  • Bleeping Computer: Don't copy-paste commands from webpages — you can get hacked
  • Bleeping Computer:  Microsoft releases emergency fix for Exchange year 2022 bug
  • Computerworld:  When biometrics can be outsmarted this way, we need to talk
Productivity
  • phoronix:  Massive ~2.3k Patch Series Would Improve Linux Build Times 50~80% & Fix "Dependency Hell"
Skill Sets
  • DZone:  25 Most Commonly Used Blockchain Terms Explained
  • Red Hat:  10 tutorials to sharpen your command-line ...
    Read More

Happy 2022!

Happy New Year from your friends at AITP-NCFL! ...
Read More

AITP-NCFL News, December 30 , 2021

Happy New Year from your friends at AITP-NCFL! Security
  • BleepingComputer:  Silent danger: One in five aged domains is malicious, risky, or unsafe
  • BleepingComputer:  T-Mobile says new data breach caused by SIM swap attacks
  • BleepingComputer:  Log4j 2.17.1 out now, fixes new remote code execution bug
Productivity

AITP-NCFL News, December 24, 2021

Happy Holidays from your friends at AITP-NCFL! Security
  • DZone:  Privacy and Confidentiality in Security Testing
Productivity
  • phoronix:  macOS 12.1 vs. Ubuntu vs. Clear Linux vs. Windows Benchmarks
  • TechRepublic:  10 big data and analytics resolutions for 2022
  • DEV:  10 things every software developer should know to stay productive
Skill Sets

AITP-NCFL News, December 23, 2021

Security
  • BleepingComputer:  Honeypot experiment reveals what hackers want from IoT devices
  • DZone:  Security Issues With WordPress
  • BleepingComputer:  Microsoft Azure App Service flaw exposed customer source code
  • BleepingComputer:  CISA releases Apache Log4j scanner to find vulnerable apps
Productivity
  • c|net:  Yes, you can use Windows software on a Chromebook
  • DZone:  Are You Contributing to a Toxic Work Environment Without Realizing It?
  • Robert Half:  7 Ways to Support Employee Career Advancement
Skill Sets

AITP-NCFL News, December 22, 2021

Security
  • betanews:  Cybercriminals can penetrate 93 percent of company networks
  • BleepingComputer:  New stealthy DarkWatchman malware hides in the Windows Registry
  • BleepingComputer:  Microsoft warns of easy Windows domain takeover via Active Directory bugs
  • Information/Age:  What can bank robberies teach us about the need for physical cyber security?
  • betanews:   Businesses would be less likely to pay ransoms if payments had to be reported
Productivity

AITP-NCFL News, December 17, 2021

Security
  • BleepingComputer:  Conti ransomware uses Log4j bug to hack VMware vCenter servers
  • betanews:  Nearly a quarter of employees are likely to fall for phishing attacks
  • BleepingComputer:  All Log4j, logback bugs we know so far and why you MUST ditch 2.15
  • SecurityWeek:  Google Says NSO Pegasus Zero-Click 'Most Technically Sophisticated Exploit Ever Seen'
  • DEV:  Cloud App Security: Top 10 Preventions Developers Must Know
Productivity

AITP-NCFL News, December 15, 2021

Security
  • ZDNet:  Second Log4j vulnerability discovered, patch already released
  • ComputerWorld:  Android security checkup: 16 steps to a safer phone
Productivity
  • Robert Half:  14 Effective Employee Retention Strategies
  • CIODive:  Is the security of legacy IT providers prompting a confidence crisis?
Skill Sets
  • ZDNet:  Python, Java, Linux and SQL: These are the hot tech skills employers are looking for
  • DZone:  How To Write Meaningful Retrospectives
  • Red Hat:  How to build a container ...
    Read More

AITP-NCFL News, , 2021

Security
  • BleepingComputer:  Log4j: List of vulnerable products and vendor advisories
  • BleepingComputer:  Attackers can get root by crashing Ubuntu’s AccountsService
  • DZone:  XSS Attacks: Best Prevention
Productivity
  • CIO:  What is a digital twin? A real-time, virtual representation
  • Robert Half:  Why Recruiting Metrics and KPIs Matter More Than Ever
  • JavaScript In Plain English:  8 Signs That You Are a Fantastic Programmer
  • DEV:  Why TODOs and Jira tickets are not working anymore
Skill Sets

AITP-NCFL News, , 2021

Security
  • ZDNet:  Log4j zero-day flaw: What you need to know and how to protect yourself
  • BleepingComputer:  Ukraine arrests 51 for selling data of 300 million people in US, EU
  • BleepingComputer:  Police arrests ransomware affiliate behind high-profile attacks
  • BleepingComputer:  Phishing attacks use QR codes to steal banking credentials
Productivity
  • CIO:  8 myths about IT veterans looking for new work
  • DZone:  Great Engineering Teams Focus On Milestones Instead of Projects
  • DZone:  8 Misconceptions About ...
    Read More

AITP-NCFL News, December 10, 2021

Security
  • BleepingComputer:  Massive attack against 1.6 million WordPress sites underway
  • LunaSec:  Log4Shell: RCE 0-day exploit found in log4j, a popular Java logging package
  • BleepingComputer:  Kali Linux 2021.4 released with 9 new tools, further Apple M1 support
  • CIO: 3 steps to better data center risk management
Productivity
  • ZDNet:  Developers are ready to quit their jobs. Here's what might convince them to stay
  • ComputerWorld:  The way to better collaboration: define the problem, craft a ...
    Read More

AITP-NCFL News, December 8, 2021

Security
  • BleepingComputer:  Hackers infect random WordPress plugins to steal credit cards
Productivity
  • linuxlinks:  Best Free and Open Source Alternatives to Autodesk EAGLE
  • TechRepublic: TechRepublic's top checklist roundup
  • phoronix:  Microsoft Releases Performance Tools For Linux/Android
Skill Sets
  • DZone:  Federated Learning: Collaborative Machine Learning With a Tutorial
  • Robert Half:  Job Skills to Include on Your Resume (With Examples!)
  • DEV:  How I self-hosted my own website analytics with Umami
Industry News

AITP-NCFL News, December 7, 2021

Security
  • ZDNet:  Security: This new Firefox feature could stop zero-day flaws in their tracks
  • betanews:  Employee burnout puts business security at risk
Productivity
  • ZDNet: MuleSoft rolls out universal API management capabilities
Skill Sets
  • maketecheasier:  How to Make an Image Transparent without Photoshop
  • ByteXD:  Find Large Files and Directories in Linux
Stranger than Fiction
  • LiveScience:  DeepMind cracks 'knot' conjecture that bedeviled mathematicians for decades
  • ZDNet:  'The Beatles: Get Back' ...
    Read More

AITP-NCFL News, December 6, 2021

Security
  • BleepingComputer:  Malicious Excel XLL add-ins push RedLine password-stealing malware
Productivity
  • DZone:  Role of TechOps, DevOps, and NoOps in the SDLC
  • TechRepublic:  Do computer users really need blue light-filtering glasses?
  • betanews:   Meet the three amigos of data: Governance, privacy and security
Skill Sets
  • Red Hat:  Try 'labs as a service' to learn Linux in the cloud
  • TechRepublic:  Make your system admin job a lot easier: Learn automation with Microsoft PowerShell
  • ...
    Read More

AITP-NCFL News, December 3, 2021

Chapter News
  • Two new presentations available on our YouTube site
  • Chapter and Board meeting at 6:00 PM Tuesday, December 6, at Peppers (7750 Newberry Rd).  Reserve now!
Security
  • Krebs On Security:  Ubiquiti Developer Charged With Extortion, Causing 2020 “Breach”
  • betanews:   No time like the present for running an ethical and effective phishing simulation
Productivity
  • CIO:  No, you cannot get rid of your IT department
  • DEV:  Mistakes I made while learning ...
    Read More

AITP-NCFL News, December 2, 2021

Security Productivity
  • DZone:  8 Misconceptions About Software Development
  • DZone:  Five Data Quality Tools You Should Know
Skill Sets
  • The Register:  On the first day of Christmas, my true love gave to me... a coding puzzle and it's a doozy
  • DEV:  What are database indexes?
  • InfoWorld:  “Do More with R” video tutorials
  • ...
    Read More

AITP-NCFL News, December 1, 2021

Security
  • BleepingComputer:  State-backed hackers increasingly use RTF injection for phishing
  • ars technica:  Thousands of AT&T customers in the US infected by new data-stealing malware
Productivity
  • TechRepublic:  What is a scrum, and why should your teams use it?
  • DEV:  How to remember everything you learn in code
Skill Sets
  • DZone:  Database Sizing and Capacity Planning: A Step-by-Step Example
  • Red Hat:  Writing and unit testing a Python application to query the RPM ...
    Read More

AITP-NCFL News, November 30, 2021

Security
  • DZone:  What Are the Five Steps of Ethical Hacking?
Productivity
  • DZone:  When Big Data Goes Bad: Rehabilitating Data Quality
  • TechRepublic:  Whether you're writing COBOL or Go, this is how unit tests make your software better
Skill Sets
  • DZone:  Improving Your Communication Skills as a Developer
  • maketecheasier:  Differences Between UEFI and BIOS, and Which One You Should Use?
  • DZone:  Debugging the Technical Interview - Methods and Cheating
Stranger than ...
Read More

AITP-NCFL News, November 29, 2021

Security Productivity
  • DZone:  10 Ways to Improve Code Reviews
  • DZone:  The 10 Commandments for Performing a Data Science Project
  • Robert Half:  6 Tips to Help Small Businesses Boost Employee Morale
  • CIODive:  What high turnover means for software development
  • ...
    Read More

AITP-NCFL News, November 24, 2021

Happy Thanksgiving! Security
  • BleepingComputer:  Threat actors find and compromise exposed services in 24 hours
  • ComputerWorld:  Apple pulls no punches in lawsuit against 'amoral' NSO Group
  • BleepingComputer:  FBI warns of phishing targeting high-profile brands' customers
Productivity
  • CIO:  Three concepts to embrace for effective digitally driven innovation
  • InformationWeek:  How to Maintain Team Productivity Without Being Viewed as a Scrooge
  • DZone:  How Technical Operations Can Build on the Success of Data Science Notebooks
Skill ...
Read More

AITP-NCFL News, November 23, 2021

Security
  • TechRepublic:  Smishing kicks into high gear as scammers use package delivery texts as clickbait
  • BleepingComputer:  New Windows zero-day with public exploit lets you become an admin
  • Krebs On Security:  Arrest in ‘Ransom Your Employer’ Email Scheme
  • The Record:  Attackers don’t bother brute-forcing long passwords, Microsoft engineer says
  • BleepingComputer:  Exploit released for Microsoft Exchange RCE bug, patch now
Productivity

AITP-NCFL News, November 22, 2021

Security
  • BleepingComputer:  US SEC warns investors of ongoing govt impersonation attacks
  • Krebs On Security:  The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back
  • TechRepublic:  8 advanced threats Kaspersky predicts for 2022
Productivity
  • Robert Half:  4 Tips for Hiring in a Tight Labor Market
  • CIODive: Most employees waste 8 hours a week finding data, survey said
Skill Sets
  • DZone:  Data Visualization With Charts in 7.0.2 Couchbase
  • DEV:  The JavaScript ...
    Read More

AITP-NCFL News, November 19, 2021

Security
  • BleepingComputer:   US regulators order banks to report cyberattacks within 36 hours
  • InformationWeek:  8 Tips for Creating a Cybersecurity Culture
  • InfoWorld:  Security is the Achilles’ heel of multicloud
Productivity
  • ZDNet:  Answer These Questions Before You Upgrade
  • TechRepublic: Top 5 things to know about data intelligence
  • DEV:  Why we migrated to TypeScript after all
  • CIODive:  5 questions to ask before buying AI products
Skill Sets

AITP-NCFL News, November 18, 2021

Security
  • ZDNet:  This mysterious malware could threaten millions of routers and IoT devices
  • Krebs On Security:  Tech CEO Pleads to Wire Fraud in IP Address Scheme
  • DZone:  Top 5 Recent Data Breaches: Causes and Lessons
Productivity
  • DZone:  15 Places to Find Free Datasets for Your Data Science Projects
  • Red Hat: 3 types of monitoring and some open source tools to get started
  • TechRepublic:  Latest Github survey finds developers like automation, reusing code ...
    Read More

AITP-NCFL News, November 17, 2021

Security
  • BleepingComputer:  CISA releases cybersecurity response plans for federal agencies
  • ZDNet:  Ransomware gangs are now rich enough to buy zero-day flaws, say researchers
  • ComputerWorld:  A 20-second tweak for smarter, simpler Android security
  • TechRepublic:  Your weak passwords can be cracked in less than a second
Productivity
  • DZone:  Tricky Task: How to Measure DevOps ROI
  • Red Hat:  20 one-line Linux commands to add to your toolbox
  • CIODive:  Certified IT employees deliver $10K more in ...
    Read More

AITP-NCFL News, November 16, 2021

Security
  • BleepingComputer:  New Microsoft emergency updates fix Windows Server auth issues
  • ZDNet:  Emotet, once the world's most dangerous malware, is back
  • TechRepublic:  Malicious shopping websites surge in number in advance of Black Friday
Productivity

AITP-NCFL News, November 15, 2021

Security
  • BleepingComputer:  Microsoft warns of surge in HTML smuggling phishing attacks
  • ars technica:  DDR4 memory protections are broken wide open by new Rowhammer technique
  • Krebs On Security:  Hoax Email Blast Abused Poor Coding in FBI Website
Productivity
  • The Verge:  Microsoft blocks EdgeDeflector to force Windows 11 users into Edge
  • betanews:   How old, incomplete, and inaccurate data can hurt businesses
Skill Sets
  • DZone:  Understanding the relationships between SLO, SLI, and SRE
  • ...
    Read More

AITP-NCFL News, Novermber 12, 2021

Security
  • BleepingComputer:  Zero-day bug in all Windows versions gets free unofficial patch
  • ZDNet: Google warns hackers used macOS zero-day flaw, could capture keystrokes, screengrabs
  • Krebs On Security: SMS About Bank Fraud as a Pretext for Voice Phishing
  • Information/Age:  Data immutability: the forgotten component of defence in depth
Productivity
  • ZDNet:  Managers aren't worried about keeping their IT workers happy. That's bad for everyone
  • LinuxLinks:  Best Free and Open Source Alternatives to Microsoft Publisher
  • ...
    Read More

AITP-NCFL News, November 10, 2021

Security
  • BleepingComputer:  These invisible characters could be hidden backdoors in your JS code
  • ZDNet:  Exchange Server bug: Patch now, but multi-factor authentication might not stop these attacks, warns Microsoft
Productivity
  • Robert Half:  Rethinking the 9-to-5 (infographic)
  • InfoWorld:  How to automate QA testing of SaaS and low-code applications
Skill Sets
  • DZone:  Building High-Quality Software
  • Red Hat:  What sysadmins need to know about Linux permissions
  • DEV:  Lets create a Drawing APP with ...
    Read More

AITP-NCFL News, November 9, 2021

Security
  • BleepingComputer:  REvil ransomware affiliates arrested in Romania and Kuwait
Productivity
  • NN/g:  Campbell’s Law: The Dark Side of Metric Fixation
  • linuxiac:  PHPStan Reached Version 1.0 After 6 Years of Development
Skill Sets
  • Dzone:  Smart Leaders are Good Listeners Who act Wisely
  • Dzone:  SQL JOINs Tutorial With Examples
Stranger than Fiction
  • The Register:  Why machine-learning chatbots find it difficult to respond to idioms, metaphors, rhetorical questions, sarcasm
Industry ...
Read More

AITP-NCFL News, November 8, 2021

Security
  • BleepingComputer:  State hackers breach defense, energy, healthcare orgs worldwide
  • TechRepublic:  Cybersecurity: Track data activity before "unusual" becomes dangerous
Productivity Skill Sets
  • DZone:  Using the Notion API to Build a Content Management System
  • InformationWeek:  10 Top Skills for Cloud Computing
  • SecurityWeek:  How to Spot an Effective Security Practitioner
Stranger ...
Read More

AITP-NCFL News, November 5, 2021

Security
  • SecurityWeek:  US Offers $10 Million Bounty in Hunt for DarkSide Ransomware Operators
  • Krebs On Security:  ‘Tis the Season for the Wayward Package Phish
Productivity Skill Sets
  • ZDNet:  Top programming languages: Most popular and fastest growing choices for developers
  • Red Hat:  4 soft skills for successful sysadmins
  • DEV: SQL Basics for Beginners
Industry News

AITP-NCFL News, November 4, 2021

Security
  • TechRepublic:  Data and the policies that protect it: 4 essential plans to have in place
Productivity Skill Sets
  • Red Hat:  Tips for packaging your Linux software with RPM
  • DEV:  Beginner’s guide to JavaScript’s map()
Industry News and Opinion
  • CIO:  Kyndryl eyes new markets in spin-off from IBM
  • The Register:  Waterfox: A Firefox fork that could teach Mozilla a lesson
  • ...
    Read More

AITP-NCFL News, November 3, 2021

Security
  • Motherboard:  The Booming Underground Market for Bots That Steal Your 2FA Codes
  • Krebs On Security: The ‘Groove’ Ransomware Gang Was a Hoax
Productivity
  • TechRepublic: 5 open-source kanban boards to help you get and stay on task
  • InfoWorld:  Cloud costs a lot of money
  • Information/Age:  Bridging the ‘IT, security and developer’ divide to deliver innovation at speed
Skill Sets
  • CIO:  What is a data architect? IT’s data framework visionary
  • Dzone:  ...
    Read More

AITP-NCFL News, November 2, 2021

Security Productivity
  • ZDNet:  The secret to being more creative at work? Why timing could be the key
  • CIO:  9 tips for selecting and implementing an ERP system
  • maketecheasier:  How to Find the Maximum RAM Capacity of Your Computer
  • TechRepublic:  3 ways to quickly deal with blank cells in an Excel sheet
...
Read More

AITP-NCFL News, November 1, 2021

Security
  • Bleeping Computer:  Microsoft warns of rise in password sprays targeting cloud accounts
  • Krebs On Security:  ‘Trojan Source’ Bug Threatens the Security of All Code
  • Bleeping Computer:  The Week in Ransomware - October 29th 2021 - Making arrests
  • betanews:   How rampant robotic process automation (RPA) adoption is introducing new threat vectors
Productivity

AITP-NCFL News, October 29, 2021

Security
  • BleepingComputer:  Emergency Google Chrome update fixes zero-days used in attacks
  • BleepingComputer:  All Windows versions impacted by new LPE zero-day vulnerability
  • KrebsOnSecurity:  Zales.com Leaked Customer Data, Just Like Sister Firms Jared, Kay Jewelers Did in 2018
Productivity
  • CIO:  How to make performance reviews meaningful
  • DZone:  The 3 "Best" Config File Formats
  • Robert Half:  6 Basic SDLC Methodologies: Which One is Best?
Skill Sets

 4,197