The IT Hour | 20 Sept 2024 | API Key Expiration and TTL Features

[BScott]

Derek Johnson was our guest to share re: JumpCloud API Key Expiration and TTL Features

Community Update

• JumpCloud SSO x CloudFlare Access Policies (Zero Trust) | best practices
• Automate onboarding process from Jira ticket | software & hardware
• SME IT Trends report: https://bit.ly/3yqYOzX
• Link to the IT Hour Transcripts: https://bit.ly/ITHrKB
• Link to community: https://bit.ly/jcitcmty
• Link to slack lounge: https://bit.ly/3BBKow4
• Make Work Happen podcast: https://bit.ly/3TTxVMs
• Feature requests: https://bit.ly/cmtyFR

Main Topic: API Lifecycle Context Slides & Phase 1 Demo

IT News

• LinkedIn has” train AI using your data” turned on by default. If you haven’t already changed this, go do it now.
  Settings & Privacy > Data Privacy > Data for Generative AI Improvement; Toggle to OFF; Depending on how you feel, you may want to turn off ‘Social, economic, and workplace’ research right above it.
  
  
• CISA Adds Five Known Exploited Vulnerabilities to Catalog
  CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
  • CVE-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability
  • CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
  • CVE-2019-1069 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
  • CVE-2022-21445 Oracle JDeveloper Remote Code Execution Vulnerability
  • CVE-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability

• Microsoft releases a new Windows app called Windows App for running Windows apps (ars technica)
• Agatha All Along Kicks Off With Mysteries to Solve and a Team to Build (gizmodo)
• Chipmaker Qualcomm lays off hundreds of workers in San Diego (tech crunch)