Chief Information Security Officer | Health Care | Startup Advisor | Venture Partner. Advocate for online data privacy rights.https://bsky.app/profile/puneetx.bsky.socialhttps://bsky.app/profile/puneetx.bsky.social/post/3litdfpgoak2ehttps://blog.trailofbits.com/2025/02/21/the-1.5b-bybit-hack-the-era-of-operational-security-failures-has-arrived/23 Feb 2025 07:40 +0000at://did:plc:mloe5hzruvx5o5ghkixsjtty/app.bsky.feed.post/3litdfpgoak2ehttps://bsky.app/profile/puneetx.bsky.social/post/3lheoxhbgdk2cWhile ORMs help in preventing SQL Injections , beware of the Mass Assignment security vulnerabilities in ORMs https://www.nodejs-security.com/blog/raw-sql-queries-better-for-security-than-orms04 Feb 2025 18:32 +0000at://did:plc:mloe5hzruvx5o5ghkixsjtty/app.bsky.feed.post/3lheoxhbgdk2chttps://bsky.app/profile/puneetx.bsky.social/post/3lhc5zdraes2pBackdoor in Chinese-made healthcare monitoring device leaks patient data (Contec CMS8000 and the Epsimed MN-120) https://www.csoonline.com/article/3814810/backdoor-in-chinese-made-healthcare-monitoring-device-leaks-patient-data.html03 Feb 2025 18:23 +0000at://did:plc:mloe5hzruvx5o5ghkixsjtty/app.bsky.feed.post/3lhc5zdraes2phttps://bsky.app/profile/puneetx.bsky.social/post/3lezu4w22oc2qWorld’s First MIDI Shellcode psi3.ru/blog/swl01u/ https://psi3.ru/blog/swl01u/06 Jan 2025 00:15 +0000at://did:plc:mloe5hzruvx5o5ghkixsjtty/app.bsky.feed.post/3lezu4w22oc2qhttps://bsky.app/profile/puneetx.bsky.social/post/3lelop3qppk2mU.S. Army Soldier Arrested in AT&T, Verizon Extortions https://krebsonsecurity.com/2024/12/u-s-army-soldier-arrested-in-att-verizon-extortions/31 Dec 2024 09:00 +0000at://did:plc:mloe5hzruvx5o5ghkixsjtty/app.bsky.feed.post/3lelop3qppk2mhttps://bsky.app/profile/puneetx.bsky.social/post/3lekrsz6srs2qChina-backed hackers breached US Treasury workstations by compromising a key from BeyondTrust PAM solution. The cybersecurity tools themselves are leading to major hacks. https://www.cnn.com/2024/12/30/investing/china-hackers-treasury-workstations31 Dec 2024 00:23 +0000at://did:plc:mloe5hzruvx5o5ghkixsjtty/app.bsky.feed.post/3lekrsz6srs2qhttps://bsky.app/profile/puneetx.bsky.social/post/3lecxpr4qbs2eCybersecurity firm Cyberhaven's Chrome extension hijacked to steal users' data.. smh https://www.bleepingcomputer.com/news/security/cybersecurity-firms-chrome-extension-hijacked-to-steal-users-data/27 Dec 2024 21:48 +0000at://did:plc:mloe5hzruvx5o5ghkixsjtty/app.bsky.feed.post/3lecxpr4qbs2ehttps://bsky.app/profile/puneetx.bsky.social/post/3ldeogiowtc2lhttps://infosecwriteups.com/from-file-upload-to-lfi-a-journey-to-exploitation-02ab5e1a7d0a15 Dec 2024 20:42 +0000at://did:plc:mloe5hzruvx5o5ghkixsjtty/app.bsky.feed.post/3ldeogiowtc2lhttps://bsky.app/profile/puneetx.bsky.social/post/3lbulbuim3c24go.bsky.app/53iqbXu [contains quote post or other embedded content]26 Nov 2024 17:38 +0000at://did:plc:mloe5hzruvx5o5ghkixsjtty/app.bsky.feed.post/3lbulbuim3c24https://bsky.app/profile/puneetx.bsky.social/post/3lbfoyemfik2bUnderstanding the Efficacy of Phishing Training in Practice https://www.computer.org/csdl/proceedings-article/sp/2025/223600a076/21B7RjYyG9q20 Nov 2024 19:34 +0000at://did:plc:mloe5hzruvx5o5ghkixsjtty/app.bsky.feed.post/3lbfoyemfik2bhttps://bsky.app/profile/puneetx.bsky.social/post/3lazqm5vrc62cTIL: Google has a special tool to help you monitor and remove your personal information (name, address, email address, phone) should it appear in Google search results. https://myactivity.google.com/results-about-you https://myactivity.google.com/results-about-you?pli=116 Nov 2024 01:31 +0000at://did:plc:mloe5hzruvx5o5ghkixsjtty/app.bsky.feed.post/3lazqm5vrc62c