The CiviCRM development team has announced the availability of version 3.3.5 which includes two critical security updates as well as fixing a few bugs. The security updates include a fix for a cross-site scripting problem whereby the site could be exploited to execute arbitrary JavaScript code. The other issue is a permissioning vulnerability, which allowed anonymous users to potentially change information for another contact.

There are a bunch of great CiviCRM events in the US coming up in early March to be aware of. If you feel like taking a break from your daily routine and taking a short trip, what better way to get away and improve your CiviCRM skills than by attending a training in Chicago or Washington D.C.? Note also that the CiviCRM community convention, CiviCON is happening in Chicago as well as DrupalCon, immediately on the heels of the CiviCRM trainings.

On November 17th, 2010, we gave a presentation on how streamlining your fundraising using Internet tools can help you save time and money. It was pretty enlightening to find out how many nonprofit organizations in the area are still using outdated methods like Microsoft® Excel® spreadsheets to manage their list of donors, snail mail for solicitations, and physical checks for contributions or registration payments.

Lexington, MA — HeronGrace principals Linda Mack and Kimo Lee attended a recent presentation held on risk management given by Jeffrey J. Fox of TDBank on behalf of Nonprofit.Net of Lexington, MA.

Beginning with the basic liability coverage that all nonprofits should have to protect their board members and the entity itself from legal actions — including "D & O", or Directors & Officers coverage — Mr. Fox covered a massive amount of information about types of coverage available and situations in which that coverage would be important.

Framingham, MA — HeronGrace Nonprofit Solutions was an exhibitor at Massachusetts Nonprofit Network's recent fall conference and expo held at the Framingham, MA Sheraton on September 27th.