February 2024

New

T-SQL is now available!

It is now possible for learners to play activities in T-SQL, in Training, Courses, Assessments, and Tournaments. There are 9 guidelines and 25 challenges to choose from.

New Coding Labs

Coding Labs are now available in C++ and Java Spring API.

The following topics are covered in C++

• Memory Corruption - Buffer Overflow
• Memory Corruption - Integer Overflow
• Memory Corruption - Type Confusion
• Injection Flaws - SQL Injection
• XML External Entities (XXE)
• Memory Corruption - Format String Vulnerabilities
• Insecure Cryptography - Weak Algorithm Use
• Insufficient Transport Layer Protection - Weak Algorithm Use
• Sensitive Data Storage - Plaintext Storage of Passwords
• Vulnerable Components - Using Components from Untrusted Sources

And you can play Java Spring API Coding Labs for the following topics

• Mass Assignment - Auto-binding in Java Spring API
• Missing Object Level Access Control - Protect against Broken Object Level Authorization vulnerabilities

Keep your eyes peeled for more of these as they appear on your new Explore page!

Refresh of Vue.js

We've taken a run through of our Vue.js content and given it a good spring clean. There are now 32 brand new Vue.js challenges, and 5 new Guidelines, including:

• Cross-Site Scripting (XSS) - DOM-Based Cross-Site Scripting
• Vulnerable Components - Using Components From Untrusted Source
• Security Misconfiguration - Clickjacking
• Injection Flaws - CSS Injection
• Unvalidated Redirects and Forwards - Unvalidated Redirects and Forwards

We are also in the process of improving the focus of our Vue.js content, targeting it to frontend development. As a result, we are in the process of deprecating content which sits outside of this area. If you have questions or concerns, please contact support or your CSM.

In Preview

Tournaments Report

This new report provides an overview of how learners are performing in Tournaments, allowing self-service review of progress. The vulnerabilities and leaderboard tables have export capability. The leaderboard also has many more columns available if required.