Rust

The Rust Security Response WG was notified that the regex crate did not properly limit the complexity of the regular expressions (regex) it parses. An attacker could use this security issue to perform a denial of service, by sending a specially crafted regex to a service accepting untrusted regexes. No known vulnerability is present when parsing untrusted input with trusted regexes.This issue has been assigned CVE-2022-24713. The severity of this vulnerability is "high" when the regex crate is used to parse untrusted regexes. Other uses of the regex crate are not affected by this vulnerability.
Overview The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those (tunable) mitigations already provide sane defaults to prevent attacks. This guarantee is documented and it's considered part of the crate's API.Unfortunately a bug was discovered in the mitigations designed to prevent untrusted regexes to take an arbitrary amount of time during parsing, and it's possible to craft regexes that bypass such mitigations. This makes it possible to perform denial of service attacks by sending specially crafted regexes to services accepting user-controlled, untrusted regexes.Affected versionsAll versions of the regex crate before or equal to 1.5.4 are affected by this issue. 
The fix is included starting from regex 1.5.5.MitigationsWe recommend everyone accepting user-controlled regexes to upgrade immediately to the latest version of the regex crate.Unfortunately there is no fixed set of problematic regexes, as there are practically infinite regexes that could be crafted to exploit this vulnerability. Because of this, we do not recommend denying known problematic regexes.AcknowledgementsWe want to thank Addison Crump for responsibly disclosing this to us according to the Rust security policy, and for helping review the fix.We also want to thank Andrew Gallant for developing the fix, and Pietro Albini for coordinating the disclosure and writing this advisory.

Programming Languages of the Future Software developers and other computer-related professionals need to be aware of the current top programming languages. Programming is what runs all of society’s machines; everything from smartphones to traffic lights to heart monitors are programmed with computer languages. Learning and using programming languages is an essential part of a software developer’s job.The programming languages of the future are Go, Kotlin, Python, TypeScript, R, Scala, Swift, Rust, Ruby, and Haskell,as reported by TechRepublic. Proficiency or advanced skills in these programming languages would elevate a professional’s technical abilities and potentially open up more opportunities when looking for jobs.While highly sought after by employers, some of the programming languages are actually pretty obscure. For example,  Go and Scala are among the highest-paying programming languages due to the small number of qualified professionals specializing in each language. Go is defined in a Forbes article as an “open-source compiled, statically typed language in the tradition of C” while Scala is a “general-purpose, functional, and object-oriented language compatible with Java.” Go was designed at Google and is used not only there, but also at Adobe and Facebook. Meanwhile, Netflix, LinkedIn, and Twitter use Scala.

Cross-Platform Development As technology has progressed, so have the devices people use to connect to the world, like smartphones, tablets, laptops, and even smartwatches. Each of those products has software developed for it. Companies want to place their apps on as many platforms and devices as possible, and thus programmers need to choose the right language for developing across multiple platforms.The demand for cross-platform development is high and getting higher. Forrester reports that over 60 percent of companies already use cross-platform development, and that number is expected to increase due to device proliferation. According to TechBeacon.com, programmers need to become well-versed in cross-development applications: Adobe, Xamarin, Appcelerator, iFactr, Kony, SAP, Alpha, 5app, FeedHenry, and Sencha.

Artificial Intelligence (AI) The future of programming also includes artificial intelligence (AI). Enterprise Strategy Group (ESG) research reveals that 12 percent of companies use AI-based security analytics extensively while 27 percent use AI-based security analytics on a limited basis. AI integration is poised to completely change the IT and computer industries, as AI becomes increasingly capable of dealing with incident detection, prioritizations, remediations, software vulnerabilities, threat intelligence, and risk assessment.Programmers can use AI techniques, such as machine learning and deep learning, to develop software for network security. As time goes on and technology evolves to such an advanced degree, AI may be the only realistic way to deal with the consequent cybersecurity threats. These concerns are why the tech industry is hiring professionals with advanced AI technology knowledge to protect its company assets.According to an ESG article, machine learning technologies can be either “applied to existing security defenses as helper apps” or “work on a stand-alone basis coupled with other security and analytics technologies.” To stay ahead of the big changes AI will bring, programmers and developers need to ensure that they have the skills necessary for success, such as knowledge of AI, machine learning, and cybersecurity analytics.

Window 365

Microsoft 365, formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line. The brand was launched on July 10, 2017, for a superset of Office 365 with Windows 10 Enterprise licenses and other cloud-based security and device management products.

On April 21, 2020, the consumer and small business plans of Office 365 were renamed Microsoft 365 to emphasize their current inclusion of products and services beyond the core Microsoft Office software family (including cloud-based productivity tools and artificial intelligence features). Most products that were called Office 365 were renamed as Microsoft 365 on the same day.

Microsoft 365 encompasses subscription plans that allow use of the Microsoft Office software suite over the life of the subscription, as well as cloud-based software-as-a-service products for business environments, such as hosted Exchange Server, Skype for Business Server, and SharePoint, among others. All Microsoft 365 plans include automatic updates to their respective software at no additional charge, as opposed to conventional licenses for these programs—where new versions require purchase of a new license.

Pegasus is spyware developed by the Israeli cyber-arms company NSO Group that can be covertly installed on mobile phones (and other devices) running most versions of iOS and Android. Pegasus is able to exploit iOS versions up to 14.6, through a zero-click exploit. As of 2022, Pegasus was capable of reading text messages, tracking calls, collecting passwords, location tracking, accessing the target device's microphone and camera, and harvesting information from apps. The spyware is named after Pegasus, the winged horse of Greek mythology. It is a Trojan horse computer virus that can be sent "flying through the air" to infect cell phones.

Pegasus was discovered in August 2016 after a failed installation attempt on the iPhone of a human rights activist led to an investigation revealing details about the spyware, its abilities, and the security vulnerabilities it exploited. News of the spyware caused significant media coverage. It was called the "most sophisticated" smartphone attack ever, and was the first time that a malicious remote exploit used jailbreaking to gain unrestricted access to an iPhone.

The spyware has been used for surveillance of anti-regime activists, journalists, and political leaders from several nations around the world.In July 2021, the investigation initiative Pegasus Project, along with an in-depth analysis by human rights group Amnesty International, reported that Pegasus was still being widely used against high-profile targets.

Highlights from TensorFlow’s 2021 exploreCSR awards

 Increasing the number of students pursuing computer science research is a priority at Google, especially for students from historically marginalized groups in the field. Since 2018, Google’s exploreCSR awards have aided higher education efforts that support students interested in pursuing graduate studies and research careers in computing.The TensorFlow team is proud to provide additional funding to support this important program. To date, we have awarded more than 20 professors with funding to support their education and outreach work in machine learning.We’d like to highlight examples of the many (and often, unique) outreach programs the 2021 award recipients have created so far. These range from research experiences with robotics, aquatic vehicles, federated learning, and offline digital libraries to mentored small group workshops on data science and programming skills. They’re sorted alphabetically by university below.If you’re interested in creating your own programs like these with support from Google, keep an eye on the exploreCSR website for the next round of applications opening in June 2022.Laura Hosman and Courtney Finkbeiner, Arizona State UniversityThe SolarSPELL initiative at Arizona State University will host a workshop series thanks to support from exploreCSR to encourage students underrepresented in computer science research in their academic journey. The SolarSPELL initiative produces an offline, solar-powered digital library designed to bring educational content to resource-constrained locations that may lack electricity, internet connectivity, and/or traditional libraries.The exploreCSR workshop series, titled “SolarSPELL exploreCSR: Computing for Good”, involves 6 weeks of sessions using SolarSPELL as a case study for how students can apply machine learning to tackle real-world problems and develop solutions for social good. Students will meet SolarSPELL’s co-director and learn about the history of the SolarSPELL initiative; learn about graduate programs available at ASU; and hear from guest panelists from industry.

6 tech recruiting trends for 2022Recruiters, we’ve got you covered. Here are the tech recruiting trends that will change the way you build tech teams in 2022.
Data-driven recruiting
Data-driven recruiting strategies are the answer to effective talent sourcing and a streamlined hiring process.Talent acquisition leaders need to use real-time analytics like pipeline growth metrics, offer acceptance rates (by team, department, and location), quality and cost of new hires, and candidate feedback scores—to help them reduce/eliminate manual work, improve in critical areas and hire the best talent.The key to capitalizing on talent market trends in 2022 is data. It will help you to analyze what’s working and what needs to be tweaked leaving you room for experimentation.Employer branding and EVP
98% of recruiters believe promoting company culture helps sourcing efforts as seen in our 2021 State Of Developer Recruitment report. Having a strong employer brand that supports an equally strong Employer Value Proposition (EVP) is crucial to swaying candidates’ decision to work at your company.As recruiters, you have to evaluate what your culture stands for and how candidates can be successful at the workplace. You have to be specific about what EVPs you are offering. Perks like upskilling opportunities, remote work processes, flexible working hours are some of the top EVPs that attract qualified candidates.A clear, well-outlined EVP builds a healthier company culture, which includes better work-life balance, prioritizes mental health, and encourages remote/hybrid work. This in turn strengthens your employer brand as these policies are candidate-friendly and put them first.Candidate driven market
Katrina Collier, HR and Recruitment facilitator, said in her newsletter that 2021 was the most candidate-driven market she had ever seen in her 18+ years of career. And she’s got it right.The pandemic drastically increased the skills gap and recruiting tech talent has become an uphill struggle With the severe shortage of tech talent, candidates hold more power in choosing whom to work with—they can afford to be picky.Simply dangling a competitive pay package will not cut it anymore. Utilize data-driven recruiting to find out what candidates look for in an ideal job role. Is it work-life balance, a healthy company culture, remote work options, or investment in learning and development?Recruiters and hiring managers need to get creative to stand out from the crowd and attract the cream of the crop.Recommended read: What NOT To Do When Recruiting Fresh TalentDiversity, equity, and inclusion
Fairer representation and inclusion in the tech industry throughout the world have come to the forefront in the last few years. It has become a key focus of modern recruitment.While our survey shows us that D&I may have to take a backseat at times to quickly fill open positions—25.6% of our HR respondents believe having a diverse executive team, and improving connections with grassroots student communities can improve their diversity pipeline and fend off biases.This is further supported by the fact that above-average profitability is 25% higher for companies in the top-quartile for gender diversity in leadership and 36% higher for those with ethnic diversity as seen in McKinsey’s Diversity Wins report.Recruiters have also experienced candidates turn down job roles due to a lack of DEI representation at the workplace. This is the time to be more intentional about building a diverse tech team to stay relevant and reap the full advantages of D&I in 2022.Recommended read: Diversity And Inclusion in 2022 – 5 Essential Rules To FollowAutomation and AI
Recruiters ghosting candidates is a major pet peeve among the developer community. They don’t receive proper communication or extremely delayed updates, they don’t know how they’re progressing in different stages of the hiring process, and they don’t get much feedback on how they performed in the interviews.Looking at it from a recruiter’s perspective, regular communication with the candidates is one of the most difficult parts of their job. Manually emailing prospects to nurture them or keeping a large number of candidates in the loop is time-consuming, labor-intensive, and not sustainable.In 2022 and beyond, recruitment automation trends like automated nurturing and AI for recruiting platforms are what will both eliminate the needless complexity and inefficiency of manual communications and ensure you personalize your team’s candidate outreach. This serves to provide a positive candidate-first experience as well.Remote recruiting and hiring
The future of work is mostly remote/hybrid. Remote work has mandated that tech hiring become a more collaborative process, and accelerated the adoption of tech recruiting platforms. What was a forced necessity last year, is here to stay.32.5% of companies say that they plan to be completely remote this year. And that should translate into remote hiring practices. More and more candidates are expecting remote work and remote hiring processes.Remote recruitment saves time, expenses and increases efficiency while also opening the doors to a larger talent pool not limited by geography.Recruiting Tech Talent Just Got Easier With HackerEarth Recruiting tech talent that is qualified is complicated. It is also competitive, difficult, and long. We, at HackerEarth, aim to make it simple. HackerEarth for Enterprises presents a complete suite of products that unites every step of the employee lifecycle, right from attracting, sourcing to interviewing—making the lives of both developers and recruiters easy!Effortlessly hire the best developers with our tech recruiting platform that offer features like:With our 6 million strong developer community, we connect organizations with one of the largest talented candidate pools out there.
Our customized virtual hackathons are well-suited to engaging the developer community and strengthening your employer brand.
We enable you to create online assessments capable of testing 80+ skills, including full-stack assessments, with minimal technical knowledge.
Our AI-powered assessment platform comes with dev-friendly IDEs, practice rounds, and support for multiple languages.
Our reports and transcripts benchmark the candidate against the entire community or candidate pool.
FaceCode, our intelligent remote coding interview tool, allows you to smoothly invite candidates and conduct technical coding interviews, using a real-time, collaborative code editor with a built-in compiler. Bid adieu to whiteboards!
HackerEarth’s L&D platform helps employees to evaluate themselves and identify skill gaps. Once these are specified, you can then curate individual learning pathways that will help your team upskill, grow and be ready for future challenges in the ‘present’.
Our platform seamlessly integrates with every major ATS provider including Lever, JazzHR, Workable, and Naukri RMS.
We offer quick turnaround times and round-the-clock support throughout the process. Our support system has a 95% B2B Customer Satisfaction rating.
Recommended read: The A-Zs Of Tech Recruiting – A GuideStaying abreast of tech recruiting trends, improving your hiring processes, and adapting to change is the way forward in 2022. Take note of the technical recruiting tips and patterns in this article to inform your hiring strategy for the better.Are you ready to begin streamlining your tech recruiting process? Go on then, take HackerEarth for Enterprises for a quick spin to know more.