Collaborate Disseminate
Protecting the Crown Jewels: Deconstructing Data Leakage in Exotic Environments (Inspiration from Signet — Kay/Jared Jewelers Breach)
Credits : Micheal Hill
Note : The following series of deconstruction/post-mortem… Continue reading Deconstructing Data Leak incident of Signet Jewelers (parent company of Kay and Jared jewelers)
Directory traversal (dubbed ZipSlip) vulnerability discovered in DeepLearning4j (ArchiveUtils) library
Recently, we’ve identified a number of our customers who are susceptible to a Directory traversal vulnerability. The exploit chain (circumstanc… Continue reading Directory traversal (dubbed ZipSlip) vulnerability discovered in DeepLearning4j (ArchiveUtils)…
Courtesy (http://gallerycartoon.blogspot.com)
Recently, we’ve identified a number of our customers who are susceptible to a deserialization-based remote control execution (RCE) vulnerability. In the majority of cases, a subset of the gadget chain… Continue reading Java Deserialization Vulnerability Found to be Widespread Across SaaS Vendor SDKs
Twitter’s password security breach raised panic among social media users when they announced that they had discovered a bug that “inadvertently stored passwords unmasked in an internal log”.
We recently found a bug that stored p… Continue reading Do not meme to shame Twitter’s password leak incident
Detecting and preventing data loss is one of the top security concerns today. It’s a concern that has significantly amplified as companies move to trust third parties with their data, especially with increased reliance on cloud computing. To prev… Continue reading Detecting and Preventing Data Loss Using Semantic Code Property Graphs and Security Profiles
You’re likely aware of the European Union (EU) General Data Protection Regulation (GDPR) that strengthen’s the rules regarding user data and privacy. This regulation applies not only to data processors operating in any EU member country, bu… Continue reading What GDPR Means for Application Teams