the entrepreneur track stole the show hands down the best talks I’ve seen on entrepreneurship. BSides 0x05 💜 @BSidesNYC Next stop, Austin back home, I'll be speaking at Lascon 2025: lnkd.in/g9FKKPKe #BSidesNYC

NAT, firewalls, MFA all in place. Yet, I got in and walked away with sensitive data. www.linkedin.com/posts/sandee...?

Recently, started focusing on selling before building. My notes from the #book "the mom test" by Rob Fitzpatrick

7 Vulnerabilities with high Severity that captured attention in 2024 from SecureLayer7 research. What are they? www.linkedin.com/posts/sandee...

On December 20th, I had one of the toughest day I’ve faced in a while, but I didn’t stop. Here’s why: www.linkedin.com/posts/sandee...

Hey security risk leaders: What if I told you there’s a way to make AI work for you without losing control? Here’s the breakdown: www.linkedin.com/posts/sandee...?

We fired a client. Not because we wanted to BUT www.linkedin.com/posts/sandee...

I was chatting with a security practitioner, and he mentioned that Red Teaming is not a glorified pentest. Here’s why a pentester from 2010 might disagree: www.linkedin.com/posts/sandee...

Vulnerabilities that aren’t really vulnerabilities. Are you still accepting these in your Pentest reports? More details here: www.linkedin.com/posts/sandee...

Web firewalls, SOCs, MFA, and fraud prevention are ready for Thanksgiving Friday. Here’s why it probably won’t save you: www.linkedin.com/posts/sandee...?

Submitted Critical vulnerability... Submitted High vulnerability... Customer reviews them... Customer says, "Not a real issue!!!" Pentester explains again... www.linkedin.com/posts/sandee...

Goa + Bugbounty Tips & Talk + Free Wireless Headphones at @seasides_conf youtube.com/shorts/QgVnW...

Is $5M ARR a success or just the start of something bigger? www.linkedin.com/posts/sandee...?

What do you think? imagine if product managers actually started including security controls while writing PRDs. www.linkedin.com/feed/update/...

PHP symlink exploit, anyone? 😅 Was checking PTaaS platform & saw one of our pentesters found an exploit allowing access to other tenants sensitive data on cloud hosting! Yep, this reminds old symlink trick for reading config.php! Shared hosting has come far. www.linkedin.com/feed/update/...

Detailed analysis of CVE-2024-39877: Apache Airflow Arbitrary Code Execution blog.securelayer7.net/arbitrary-co...

How much money were you making when you were age of 22? It'll be interesting to read the comments. If you ask me approx 2,000 Rs / Month by selling Games CDs, windows installations etc.

CVE-2024-39877: Apache Airflow Arbitrary Code Execution

[Friday CVE Analysis Drop] We tackled an interesting CVE, reverse engineering it to show how it works Despite many challenges including selfsigned certificates and brute-forcing with a Python script we completed a detailed analysis of PaperCut #cybersecurity blog.securelayer7.net/analysis-of-...

Releasing methodology followed by SecureLayer7 to bypass Appdome privacy security controls. Findings reveal positive impression has been confirmed against screen overlays, keyloggers, unauthorized copy/paste, and more. securelayer7.net/download/pdf...

Operators of Malware-as-a-Service needs to find innovative way to takeover accounts. Chromium introduces Device Bound Session Credentials (DBSC) and where stolen cookies are worthless to attackers and one more step for privacy. blog.chromium.org/2024/04/figh...

A thread 🧵 on a book, based on my personal experience. You will find learnings from this book.

When a man cries it’s not because they are weak, it's because they have been strong for too long - Uchiha

Happy New Year, Everyone!

The Photograph of 2023…. Running a cybersecurity is tough if a company not solving the cybersecurity problem. I was with SecureLayer7’s early-stage customer. And it was great meeting with them. www.linkedin.com/posts/sandee...

Today is the last day of the year. How you would like to make a memorial?

Looks like finally, icing started in Austin!