Critical vulnerability in GitLab product

GitLab has identified a critical vulnerability in its Community and Enterprise editions, allowing attackers to run pipeline jobs as any user. The flaw, tracked as CVE-2024-6385, affects versions 15.8 to 17.1.2. GitLab has released updates to address the issue and urges immediate installation. This is the latest in a series of vulnerabilities, with previous flaws enabling account takeover and zero-click attacks.

New ransomware group abuses Veeam bug

New ransomware group abuses Veeam bug

A new ransomware group called EstateRansomware is exploiting a Veeam vulnerability (CVE-2023-27532) that was patched over a year ago to deploy file-encrypting malware and extort payments. The gang gains initial access through brute force attacks on FortiGate firewall SSL VPN appliances. They then establish RDP connections and deploy a backdoor to ensure persistent access. The attackers exploit the Veeam vulnerability to steal user credentials and deploy the ransomware. Veeam had warned about this vulnerability and released a patch in March 2023. It's crucial for users to install software updates to avoid falling victim to malware.

[Shared Post] Building blocks

stanleyspearsblog (stanley.spears@gmail.com) shared a post from stanleyspearsblog's Blog

Post : Building blocks URL : https://stanleyspearsblog.wordpress.com/2015/05/13/building-blocks/ Posted : May 13, 2015 at 3:57 am Author : stanleyspearsblog Categories : Uncategorized

The last several weeks have been crazy busy leaving me little time to post on this blog but in the hopes of finding out a productive day here goes. Over there last couple of weeks there have been a few projects on my IT plate. One being my primary job which has me working on […]

Read more of this post ( https://stanleyspearsblog.wordpress.com/2015/05/13/building-blocks/ )

Add a comment to this post: https://stanleyspearsblog.wordpress.com/2015/05/13/building-blocks/#respond

-- WordPress.com | Thanks for flying with WordPress!

Manage Notifications https://subscribe.wordpress.com/?key=3dbb064238e7cb132ba711dcc80ac80b&email=pbm%2Bstanley-spears%2Bm07dsr%40squarespace.com

A productive day

 Today was a good day quite productive and thus satisfying. I'm wrapped up day three if training for my new jib as a Configuration Technician, learning . the new systems and processes are quite interesting. Then I was able to get quite a few chores done cleaning my house, updated my budget, paid bills and still made Time for my nephew's soccer game and nieces 17th birthday!! I'm very proud if her and all that she has accomplished and look forward to what exciting accomplishments yet to come. I wrapped up the evening with grocery shopping home cooked meal and done CSI !! 

Online Portfolio

I can't emphasize enough whether your a college student our simply trying to make the transition to IT, having an online portfolio of your work is vital. Having as strong resume and social media presence is important but without giving potential employers an example of the type of work your capable of leaves them guessing. A portfolio disposing a gallery of Web sites you've designed, snippets of code you have written (saved in a repository such as git hub, or other work such as projects you have worked on. When getting started in IT experience is a fluid and dynamic word and therefore confess in many shapes and sizes. For example volunteering to help create as website for a local nonprofit, church group, an app for a small business you created, despite not being an employee it is still experience. One suggestion I received lately was to establish an LLC, typically a $50 filling fee and if your not turning as profit you don't have to worry about races. But now your a business and thus can be added to your resume. As for the portfolio there are plenty of templates and hosts out there ranging from free to roughly a $150 depending on functionality, if you want your own domain name and other options. My blog for example is free and there are social media links to my sites including git hub and you can add pages on WordPress for hosting the gallery. So while your waiting for your big break with a company create projects of your own our volunteer to help . Others to boost your resume, think outside the box since much if the IT industry doesn't operate in the traditional sense good luck!

via PressSync

Hind Sight

It's funny how the most important and pertinent information somehow usually tends to come after you either learned a lesson the hard way or figured it out on your own. Case in point while receiving advice and career counseling on making the career change to IT that a person would be best served to first earn industry certificates such as the Comp Tia, Cisco, Microsoft or other vendor certifications which will get your foot in the door at most companies if not at least the interview. Then after working in the industry and gaining experience a few years down the road then you go back to school to get the degree in whichever IT related field you choose. Interestingly enough the college recruiter and academic counselors won't tell you this until you too far gone into the program and it's too late. If they had I would have saved my GI Bill and time and pursued the certifications a year or so ago, however there aren't too many people who are willing to pass along their lessons learned and help the next generation of IT professionals, perhaps this is due to job preservation fears! It is due to the frustration I have endured spending countless hours banging my head against the proverbial wall that I decided to write this blog, so that I can share my experiences and hopefully help someone else out there who is either like me transitioning from the military and starting that second career or a young person trying to figure out the front door to one of the most popular, lucrative and constantly growing career fields.

Breaking into the IT Sector

Me1 This last year has been a challenge to make the leap from primarily military jobs to the IT field, recently I have been offered one position and waiting to hear back from another. For the most part working with staffing companies has been a new experience especially since the majority of the jobs in IT are contract work versus being hired directly by a company and for a permanent position leaves a certain amount of anxiety and uncertainty to each time you are hired. This week I had a friend also make the leap and is working to get his first IT job outside of the military and I have been working to try and provide as much advice and guidance passing along the lessons I have learned so far in this journey.