Chetan Conikee

ShiftLeft Blog - Medium

Patch your Tomcat and JBoss instances to protect from GhostCat vulnerability (CVE-2020–1938 and CNVD-2020–10487)Credits : https://www.chaitin.cn/Identified as “GhostCat” and tracked as CVE-2020–1938 / CNVD-2020–10487, the flaw could let remote attackers (without authentication) read the content of any file on a vulnerable web server (or servlet container) and obtain sensitive configuration ... Read More

Evolving Threat series — Mining patterns to assess Insider Attacks (Part 3)In the previous post we examined few of the published insider attacks over the current decade. In this post we attempt to mine, extract and classify patterns associated with these threats with intent to automate insider misuse detection methods.The article considers ... Read More

Evolving Threat series — Insider Attacks case studies (Part 2)In the last post we touched on formal definition and risks associated with Insider Threats.In this post we will examine the top X insider threats that were reported over the last decade (in no particular order)Siemens Contractor Sentenced for Writing ‘Logic Bombs’Siemens Contractor ... Read More

Majority of security solutions focus on externally triggered unauthorized and illegitimate access to systems and information. Unfortunately, the most damaging malicious activity is the result of internal misuse within an organization, perhaps since far less attention has been focused inward.Insider threats are one of today’s most challenging cybersecurity issues that ... Read More

Evolving Threat series — Bug bounties and the Cobra EffectHave you ever tried to fix your cybersecurity posture, only to make things worse?That’s called the Cobra Effect — when an well intentioned solution results in unintended consequences.In a real-world system, there will be multiple reinforcing connections between events, resulting in often unpredictable feedback loops.In ... Read More

Evolving Threat series — Infiltrating Python’s Software Supply ChainZDNet published this interesting post 2 days ago titled “Two malicious Python libraries caught stealing SSH and GPG keys” which sets stage to what is coming in 2020 and onward.And if you think your are safe (as you recently procured a well marketed commercial ... Read More

Credit: AmatechincMany developers dread code reviews, and one reason for this is probably that most reviewers only offer criticism rather than encouragement. Remember as a peer reviewer, you can also reinforce things you see that are done well, which can be every bit as important and effective as nitpicking every ... Read More

The average multinational spends several million dollars a year on compliance, while in highly regulated industries — like financial services and defense — the costs can be in the tens or even hundreds of millions. Despite conducting these rigorous assessments yet we wake up to data breach announcements on an hourly basis.World's Biggest Data ... Read More

In my previous post, we witnessed a vendor partnership flaw that was exploited. Let us now situate ourselves in an online auction event.Online auctions offer buyers and sellers of a wide variety of goods an enormous platform for trade. Just like local auctions, there are sellers and bidders and winners ... Read More

Fast forward 2012, from my last post that enacted Citibank’s exploit from 1999.The actors in this story are Andrew and Allen Chiu and their plot to defraud Nordstorm via a channel partner FatWallet.com.FatWallet Inc. used to be a membership-based shopping community website that used to promote various online retailers by ... Read More