Discussions

HI, What’s UserID i need to give before starting the Quiz.? 

Ever been ghosted by a JOB? Check the resource below https://www.youtube.com/shorts/xDIf0YFC1UI

Give it a try. More to come  https://www.youtube.com/shorts/5Eay25HSuzw

A malicious file labeled “2026_Salary_Increase.pdf.exe” was opened by a large portion of employees — including the Incident Response team. Let that sink in. This isn’t about lack of intelligence. It’s about how easily human psychology can be exploited:Curiosity (salary increase)Urgency (what if I’m missing out?) Trust in familiar file naming patterns Key takeaways for teams: • File extensions still matter — .pdf.exe is a red flag• Security awareness training must be continuous, not one-off• Even security teams need realistic phishing simulations• Technology alone won’t save you — behavior will The real vulnerability isn’t the system. It’s the assumption that “this wouldn’t fool me.” When was the last time your organization tested this?#CyberSecurity #Phishing #SecurityAwareness #InfoSec #QA #RiskManagement 

A few years ago, I was proud of a UI automation suite I built.Hundreds of tests.Clean reports.Everything green.Until production started failing.Users reported errors we had never seen.But our UI tests were still passing.So I went deeper.Instead of clicking through the UI, I started testing the APIs directly.That’s when things became obvious:• The API returned inconsistent data• Some responses were missing critical fields• Error handling was completely broken• Edge cases were never validatedThe UI was masking all of it.It handled errors silently.It retried requests.It hid failures behind “friendly messages.”Our UI tests were verifying the illusion of stability.Not the system itself.That changed how I approach testing.Now I start with APIs:→ Validate contracts→ Break requests intentionally→ Test edge cases early→ Then verify UI behaviorBecause if the foundation is broken…Testing the surface won’t help.Do you start testing from the UI or the API?

Hi everyone, I’m James, a pentester focused on web application and API security. I spend most of my time exploring vulnerabilities and real attack paths. For the past few years, I’ve been building ZeroThreat AI, an automated pentesting tool with exploit validation and agentic AI testing capabilities. I joined the community to share ideas, learn from others, and discuss how security testing is evolving from manual to automated, and then with agentic AI tools. Ciao!!!!

Hi All,My name is Deepak Behera. I’m a Quality Engineering professional with around 19 years of experience in software testing, with a strong focus on test automation and AI‑driven QA practices. My background spans telecom and complex enterprise systems, where I’ve worked as a hands‑on QA engineer and quality leader, building robust automation suites and improving test strategies end‑to‑end. I hold a BE in Computer Science and an MBA in Information Systems, and I’m currently scaling my expertise towards QE Architect and managerial roles while also founding Vim‑Ana (www.vim-ana.org) , a startup in the UAV/drone space where disciplined testing and reliability are critical.In this community, I’m looking to both share and learn: sharing practical insights on test automation frameworks, API testing, AI‑assisted testing, and QA leadership, and learning from others on how they are evolving their quality strategies, tooling, and career paths.My LinkedIn: https://www.linkedin.com/in/hideepak/

🚨 Security warning: 840,000+ users affected by malicious browser extensionsPCWorld reports that dozens of popular browser extensions (Chrome, Firefox, Edge) were quietly infecting users with GhostPoster malware — some since 2020.These extensions can:❌ Track browsing behavior❌ Redirect traffic & hijack affiliate links❌ Download additional malwareThey’ve been removed from extension stores, but they’re still active if you installed them before.👉 Full article + list of extensions to uninstall ASAP:https://www.pcworld.com/article/3037666/840000-users-hit-by-malicious-browser-extensions-uninstall-these-asap.html🔐 Reminder:“Installed from an official store” ≠ “safe forever.”Audit your browser extensions regularly — personally and at work.

I recently completed my preparation for the ISTQB CTFL-Foundation exam, and one thing I noticed is that the topics that seem easy in theory can become confusing in actual exam questions.For example, concepts like:Test design techniques (e.g., equivalence partitioning, boundary value analysis) Test levels and types Psychology of testing Risk-based testingLook simple in the syllabus, but when presented in scenario-based questions, many candidates hesitate because the wording can be tricky.Initially, I focused mainly on reading the syllabus and memorizing definitions, but that wasn’t enough to confidently answer situational questions in the CTFL exam format. What helped most was practicing topic-wise questions and reviewing explanations of both correct and incorrect options.Another challenge many face is exam timing. If you’re not used to exam-style questions, you might spend too much time on some scenarios. My suggestion for CTFL aspirants:Try practicing questions from P2PExams in a time

Delegation of the tasks is important.This helps you to focus on important things for you in testing. Also, it helps others an opportunity to work on something different from their reglat tasks.Now, being a testers/lead/manager you might have delegated tasks to others.Which task(s) did you deleagte?And what worked well?

 September 9th is here, and that means it’s time to congratulate all QA professionals on their special day. Happy Testers’ Day! 💙Why today? On September 9, 1947, a dead moth was found stuck in a relay of the Mark II Aiken Relay Calculator. This caused a malfunction and went down in history as the very first “computer bug.” 🐛We, ​@Daria  ​@PolinaKr and ​@Mustafa (aka the ShiftSync team), want to celebrate all QA specialists and QA-to-be’s in our community and beyond.To help you grow, we’ve started building on-demand courses, like this one with Rahul Parwal  👉 Now we want to hear from you:👉 Which topics would you love us to create courses on?👉 What skills do you need to become an even better tester?Your input will directly shape the learning opportunities we build for you. 🚀Happy Testers’ Day once again. Let’s keep learning, testing, and growing together!

Traditional Intel core I5/I7 laptops are very slow when running LLM models locally. These laptops does not have GPU. hence slow performance is expected. Hence, planning to upgrade to a new Windows laptop where I could run LLM models with satisfactory performance. Again ultra high-end models would be very expensive.Can I please ask community members to share their experience and recommendations for Windows laptop  

Hello UK community!  I’m interested to know, as a community, where you go to consume your industry news and information.  Would you mind selecting one of the following options before Wednesday 26th November?  Thanks in advance!

They offer an AI-driven testing workflow that can cover the application, make test plans, and also heal the tests which are failed by themselves.I am questioning — what is their performance in real automation environments?Do they appear to be a major shift or just a more sophisticated trial at this moment? 🚀

I have completed the AS1 Course in the Tricentis Tosca Academy, by completing all the requirements and cleared the exam with 80%, but I did not got the certificate, I am waiting since 1 month, there is no support from the community.

Does Testim support BDD with Cucumber? I’ve heard mixed answers—some say yes, some say no. I’m from a non-coding background, and nowadays there are so many AI testing tools like Testim. From what I heard, AI tools can help write test cases, and in Testim you don’t need to do any coding. It’s mostly drag-and-drop, and since it’s a web-based application, you don’t have to worry about frameworks, element capturing, or XPath—AI and the tool handle all that.Also, does Testim support REST API?Between AccelQ and Testim, which one is easier to learn? How’s the job market for these tools? I’ve heard only a few companies use them because of the high cost.

A friend told me today that his teammates believe that AI is a solved problem and there is no risk to using AI to build their apps and indeed using AI in the app itself. And most people I know see many potential perils and pitfalls in GenAI/LLM tools and assistants. And, the teams I have been working with the last few years are not using any AI tools at all. I believe AI is here to stay and we all need to learn how to make it an effective part of our toolbox. But I’m concerned that there’s a perception out there that this is a done deal, we can safely use AI tools. What are other people seeing, thinking?

Task: Share on LinkedIn that you are doing this challenge, post a link to the challenge 10 Days of DevOps Challenge⚙️ | ShiftSync Community (tricentis.com) and hashtag #ShiftSync10DaysOfDevOps   Question: What are the key principles of DevOps, and why are they important?  Answer in the comments below. Next task will be live tomorrow on Oct.7. 

Howdy!  Anyone heading to Ascend this year?  Let’s connect:  Tricentis at Ascend 2025

This is a simple question where I am sure everyone will answer differently and will be amazed of the answers.So what is your answer to this? 

I had this question asked to me a couple of times and my answers have changed a lot in the past 10 years. How you would answer this? What test would you do? For inspiration have a look at  Write in the comments as much as possible so that we have it for the future.

We see a lot of news about issues that make it into production.What about the ones we find BEFORE they wreak havoc in the wild? Which bugs are you proudest of finding during testing? Put another way, which bug is your favorite to tell others about finding?What kind of software? How did you find it? Scripted test? Exploratory? Why is the bug your favorite one to talk about?

JIRA lags, JIRA lies,JIRA makes me want to cry.Click a button—wait and pray,Maybe it will load today.Sprint is stuck, workflow’s dead,Tickets haunt me in my head.Epics, subtasks—what a joke,Burn it all and watch the smoke.But don’t despair, there is a way,To make this pain just go away.I’ve got videos—watch and see,A better world, where JIRA’s free! 🎥🔥Tired of JIRA? Watch my YouTube videos and take back your sanity!https://lnkd.in/eMXVjyN  

🚨 The European Accessibility Act (EAA) 2025 deadline is coming fast! 🚨(June 28, 2025 – mark your calendar.)Non-compliance? That could mean serious trouble for your business.So… what is the EAA? Why does it matter? And how can you ensure your digital products meet accessibility standards?In this video, we break it all down:✅ What the EAA is and who it impacts✅ Steps to stay compliant before the deadline✅ How Cypress.io can streamline your testing & compliance processAccessibility isn’t just about avoiding penalties—it’s about creating a better experience for everyone.Stay ahead of the EAA 2025 requirements. Learn how to prepare now.📌 Watch the video & subscribe for more insights on digital accessibility!  P.S. Is your business ready for the EAA deadline? Let’s discuss in the comments! 👇

Ever been in a meeting where a bug was found, and all eyes turned to QA?Imagine a new feature goes live, but a critical bug slips through. Customers start complaining, and suddenly, QA is under fire. But when the team looks deeper, they realize the issue came from unclear requirements and a last-minute code change.QA isn’t the last line of defense—we’re part of the whole development process. If a bug makes it to production, it’s not just a QA failure; it’s a team failure. Instead of pointing fingers, let’s ask: How can we improve collaboration to catch issues early?Have you been in this situation?