Working the labs for @Microsoft at Ignite. Proctoring is fun when the labs are very well done and have great support. Thanks @skillable!
November 20, 2024 at 7:33 PM
Working the labs for @Microsoft at Ignite. Proctoring is fun when the labs are very well done and have great support. Thanks @skillable!
At Skillable, we say "Doing is Different"
Feeling like you have stuck in the tutorial loops? Yes, Its normal.
But there’s a way out. When you stop following and start building.
Here's a gentle nudge to help you take that next step:-
But there’s a way out. When you stop following and start building.
Here's a gentle nudge to help you take that next step:-
May 8, 2025 at 1:34 PM
At Skillable, we say "Doing is Different"
Just caught up on your alternate threads. Cloning specialized images to create VMs doesn’t seem like a good recommendation. I suspect generalization is breaking skillable services and so they are asking for specialized images.
May 14, 2025 at 3:32 AM
Just caught up on your alternate threads. Cloning specialized images to create VMs doesn’t seem like a good recommendation. I suspect generalization is breaking skillable services and so they are asking for specialized images.
I'd bring it up with your Skillable contact. There is some mucking around you can do (as you have done) - but it's not the default
May 3, 2025 at 11:19 PM
I'd bring it up with your Skillable contact. There is some mucking around you can do (as you have done) - but it's not the default
(Skillable wants me to talk to an account rep, so I can't pay-go this & stand up a lab overnight)
I'm so angry tonight I could scream. My attendees deserve what was promised.
I'm so angry tonight I could scream. My attendees deserve what was promised.
October 5, 2025 at 5:39 PM
(Skillable wants me to talk to an account rep, so I can't pay-go this & stand up a lab overnight)
I'm so angry tonight I could scream. My attendees deserve what was promised.
I'm so angry tonight I could scream. My attendees deserve what was promised.
I'm particularly interested in training material using self-contained lab environments, like the ones for the training sessions at Microsoft Ignite. We'll soon be developing labs for our own products using the same platform (Skillable) and I'd like using your AD labs as a starting point
April 29, 2025 at 8:25 PM
I'm particularly interested in training material using self-contained lab environments, like the ones for the training sessions at Microsoft Ignite. We'll soon be developing labs for our own products using the same platform (Skillable) and I'd like using your AD labs as a starting point
So Microsoft promised me labs for a course I am holding tomorrow but hasn't delivered. I now need to write a 2hr lab with instructs, which I can do before the course (I hope) but that doesn't give me any time to research a lab hosting environment. We would have used Skillable. Any suggestions??
October 5, 2025 at 5:15 PM
So Microsoft promised me labs for a course I am holding tomorrow but hasn't delivered. I now need to write a 2hr lab with instructs, which I can do before the course (I hope) but that doesn't give me any time to research a lab hosting environment. We would have used Skillable. Any suggestions??
If I have a genuine "I just don't get it" it's why did/do 🇪🇺 manufacturing companies (particularly microelectronics/semiconductors) not massively invest in Africa from mid-90s?
Why get pulled between 🇨🇳 & 🇺🇸 when you have a resource-rich, easily skillable, low-Regulation continent on your doorstep?
Why get pulled between 🇨🇳 & 🇺🇸 when you have a resource-rich, easily skillable, low-Regulation continent on your doorstep?
November 16, 2024 at 10:06 PM
If I have a genuine "I just don't get it" it's why did/do 🇪🇺 manufacturing companies (particularly microelectronics/semiconductors) not massively invest in Africa from mid-90s?
Why get pulled between 🇨🇳 & 🇺🇸 when you have a resource-rich, easily skillable, low-Regulation continent on your doorstep?
Why get pulled between 🇨🇳 & 🇺🇸 when you have a resource-rich, easily skillable, low-Regulation continent on your doorstep?
Turn training into real-world capability with hands-on learning. SimpliTrain and Skillable combine centralized training management with immersive practice, helping organizations build skills.
simplitrain.com/news/skillab...
#SAAS #AI #eLearning #Education #Business #Technology #News #Software
simplitrain.com/news/skillab...
#SAAS #AI #eLearning #Education #Business #Technology #News #Software
September 2, 2026 at 2:03 PM
Turn training into real-world capability with hands-on learning. SimpliTrain and Skillable combine centralized training management with immersive practice, helping organizations build skills.
simplitrain.com/news/skillab...
#SAAS #AI #eLearning #Education #Business #Technology #News #Software
simplitrain.com/news/skillab...
#SAAS #AI #eLearning #Education #Business #Technology #News #Software
CVE-2026-56877 - Skillable SCORM userId authorisation bypass
arc-codex.com
July 19, 2026 at 6:40 PM
CVE-2026-56877 - Skillable SCORM userId authorisation bypass
Skillable SCORM userId Authorization Bypass https://packetstorm.news/files/226162 #exploit
July 16, 2026 at 10:25 PM
Skillable SCORM userId Authorization Bypass https://packetstorm.news/files/226162 #exploit
CVE-2026-56877 - Skillable SCORM userId authorisation bypass
Posted by Greg via Fulldisclosure on Jul 15Skillable's SCORM lab launch endpoint validates a launch token but
enforces per-user allocation limits using a browser-supplied userId
that is not bound to the validated toke…
#hackernews #news
Posted by Greg via Fulldisclosure on Jul 15Skillable's SCORM lab launch endpoint validates a launch token but
enforces per-user allocation limits using a browser-supplied userId
that is not bound to the validated toke…
#hackernews #news
CVE-2026-56877 - Skillable SCORM userId authorisation bypass
Posted by Greg via Fulldisclosure on Jul 15Skillable's SCORM lab launch endpoint validates a launch token but
enforces per-user allocation limits using a browser-supplied userId
that is not bound to the validated token. An authenticated learner
can modify this identifier to bypass configured limits, launch
concurrent lab instances, and consume another learner's allocation.
Skillable states that no fix is planned for the legacy SCORM launch
path. CVE-2026-56877 was assigned by...
seclists.org
July 16, 2026 at 10:13 PM
CVE-2026-56877 - Skillable SCORM userId authorisation bypass
Posted by Greg via Fulldisclosure on Jul 15Skillable's SCORM lab launch endpoint validates a launch token but
enforces per-user allocation limits using a browser-supplied userId
that is not bound to the validated toke…
#hackernews #news
Posted by Greg via Fulldisclosure on Jul 15Skillable's SCORM lab launch endpoint validates a launch token but
enforces per-user allocation limits using a browser-supplied userId
that is not bound to the validated toke…
#hackernews #news
CVE-2026-56877: Skillable's Inaction Leaves Users Exposed to Bypass Risks #CyberSecurity #Vulnerability #AuthorizationBypass
CVE-2026-56877: Skillable's Inaction Leaves Users Exposed to Bypass Risks
CVE-2026-56877 exposes Skillable users to authorization bypass risks. Skillable has no plans for remediation, leaving significant vulnerabilities unaddressed.
cybernewsroom.xyz
July 16, 2026 at 5:32 AM
CVE-2026-56877: Skillable's Inaction Leaves Users Exposed to Bypass Risks #CyberSecurity #Vulnerability #AuthorizationBypass
CVE-2026-56877: Skillable's Broken Authorization Leaves Users Vulnerable #CVE2026 #Skillable #AuthorizationBypass
CVE-2026-56877: Skillable's Broken Authorization Leaves Users Vulnerable
CVE-2026-56877 exposes serious authorization bypass risks in Skillable's SCORM labs. The solution? Migrate, and hope for better security.
cybernewsroom.xyz
July 16, 2026 at 5:32 AM
CVE-2026-56877: Skillable's Broken Authorization Leaves Users Vulnerable #CVE2026 #Skillable #AuthorizationBypass
CVE-2026-56877: Skillable's Authorization Bypass Exposes Significant Risks #CVE2026 #CyberSecurity #Vulnerability
CVE-2026-56877: Skillable's Authorization Bypass Exposes Significant Risks
CVE-2026-56877 reveals an authorization bypass vulnerability that compromises Skillable users. Here's how defenders can mitigate this risk.
cybernewsroom.xyz
July 16, 2026 at 5:32 AM
CVE-2026-56877: Skillable's Authorization Bypass Exposes Significant Risks #CVE2026 #CyberSecurity #Vulnerability
From RTO lab abuse to CVE-2026-56877, the Skillable SCORM bug they won't fix
From RTO lab abuse to CVE-2026-56877, the Skillable SCORM bug they won't fix
payloadforge.io
July 14, 2026 at 4:39 AM
From RTO lab abuse to CVE-2026-56877, the Skillable SCORM bug they won't fix
🚨 EUVD-2026-43551
📊 6.3/10
🏢 Skillable
📝 The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter against the a...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43551
#cybersecurity #infosec #cve #euvd
📊 6.3/10
🏢 Skillable
📝 The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter against the a...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43551
#cybersecurity #infosec #cve #euvd
July 13, 2026 at 11:00 PM
🚨 EUVD-2026-43551
📊 6.3/10
🏢 Skillable
📝 The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter against the a...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43551
#cybersecurity #infosec #cve #euvd
📊 6.3/10
🏢 Skillable
📝 The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter against the a...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43551
#cybersecurity #infosec #cve #euvd
I wrote up CVE-2026-56877. Skillable treated the SCORM launch issue as a standard limitation and told customers to migrate, with no SCORM path fix planned. That makes the public record the useful bit.
payloadforge.io/beyond-crto...
payloadforge.io/beyond-crto...
Beyond CRTO: Skillable
TL;DR
While working on the RTO course tooling, I found Skillable’s SCORM lab launch path trusted a userId the browser supplies for allocation, while validating only the SCORM token. Changing that value spun up fresh lab instances and, with a colleague’s permission, used up their allocation. This
payloadforge.io
July 13, 2026 at 10:58 AM
I wrote up CVE-2026-56877. Skillable treated the SCORM launch issue as a standard limitation and told customers to migrate, with no SCORM path fix planned. That makes the public record the useful bit.
payloadforge.io/beyond-crto...
payloadforge.io/beyond-crto...
Skillable SCORM launch: userId parameter not validated against session token allows allocation bypass and cross-user DoS
oss-sec: Skillable SCORM launch: userId parameter not validated against session token allows allocation bypass and cross-user DoS
Posted by gregdurys . security on Jul 12 Skillable (formerly Learn on Demand Systems) is a hosted lab-
provisioning service integrated into learning management systems over
SCORM. The SCORM lab launch endpoint at scorm.skillable.com validates
a SCORM launch token sufficiently to authorise the launch, but enforces its per-user
launch limit against a userId query parameter that the browser
supplies and that is never cross-validated against the token (CWE-639,
authorisation bypass through...
seclists.org
July 12, 2026 at 4:15 PM
Skillable SCORM launch: userId parameter not validated against session token allows allocation bypass and cross-user DoS
Re: Skillable SCORM launch: userId parameter not validated against session token allows allocation bypass and cross-user DoS
oss-sec: Re: Skillable SCORM launch: userId parameter not validated against session token allows allocation bypass and cross-user DoS
Posted by Solar Designer on Jul 12 Hi,
I'm sorry I let this message through (as a moderator). It shouldn't be
in here since it's about a hosted service and lacks open source focus.
We generally don't let this sort of disclosures through to oss-security,
and upon a closer look I see no reason to have made an exception this
time. Well, let this serve as an example of what kind of off-topic
messages are occasionally being sent in here. I'd normally...
seclists.org
July 12, 2026 at 5:25 PM
Re: Skillable SCORM launch: userId parameter not validated against session token allows allocation bypass and cross-user DoS
Intellum and Skillable partner to transform enterprise learning, offering hands-on skill validation across cloud, cybersecurity, and AI domains. Bridging knowledge gaps with practical, performance-based training experiences. #LearningInnovation #SkillDevelopment
July 30, 2025 at 2:02 PM
Intellum and Skillable partner to transform enterprise learning, offering hands-on skill validation across cloud, cybersecurity, and AI domains. Bridging knowledge gaps with practical, performance-based training experiences. #LearningInnovation #SkillDevelopment
Hiring in today’s market = a whole different playbook. 📋
@tdesseyn.bsky.social & @taylonr.bsky.social (Eng. Manager @ Skillable) unpack how companies should hire in 2025.
🎥 Catch the replay:
@tdesseyn.bsky.social & @taylonr.bsky.social (Eng. Manager @ Skillable) unpack how companies should hire in 2025.
🎥 Catch the replay:
How You Should Hire in Today's Market w/Engineering Manager Nate Taylor
Hangng on how you should hire correctly right now!
www.youtube.com
August 29, 2025 at 1:49 PM
Hiring in today’s market = a whole different playbook. 📋
@tdesseyn.bsky.social & @taylonr.bsky.social (Eng. Manager @ Skillable) unpack how companies should hire in 2025.
🎥 Catch the replay:
@tdesseyn.bsky.social & @taylonr.bsky.social (Eng. Manager @ Skillable) unpack how companies should hire in 2025.
🎥 Catch the replay:
Skillable’s 18-time Virtual IT Labs Leader ranking reflects hands-on labs’ impact on customer education and enablement
rcnamericaflorida.blogspot.com/2025/12/skil...
rcnamericaflorida.blogspot.com/2025/12/skil...
Skillable’s 18-time Virtual IT Labs Leader ranking reflects hands-on labs’ impact on customer education and enablement
With Skillable, I was able to set up a virtual lab where each learner could experiment independently. They made mistakes, learned from them ...
rcnamericaflorida.blogspot.com
December 10, 2025 at 9:38 PM
Skillable’s 18-time Virtual IT Labs Leader ranking reflects hands-on labs’ impact on customer education and enablement
rcnamericaflorida.blogspot.com/2025/12/skil...
rcnamericaflorida.blogspot.com/2025/12/skil...
Skillable recognized by Training Industry as a 2025 Top IT and Technical Training Company
rcnamericaflorida.blogspot.com/2025/11/skil...
rcnamericaflorida.blogspot.com/2025/11/skil...
Skillable recognized by Training Industry as a 2025 Top IT and Technical Training Company
This is the 6th consecutive time that Skillable has made the list, which celebrates innovative and impactful training. Skillable remains com...
rcnamericaflorida.blogspot.com
November 8, 2025 at 8:47 PM
Skillable recognized by Training Industry as a 2025 Top IT and Technical Training Company
rcnamericaflorida.blogspot.com/2025/11/skil...
rcnamericaflorida.blogspot.com/2025/11/skil...