Skip To Main Content
Ax Sharma on Muck Rack

Ax Sharma

Verified
(He/Him)
Canada, India, United Kingdom
As seen in: Bleeping Computer, Security Boulevard, Medium, Yahoo Canada, Yahoo News, Yahoo News Australia, Yahoo News Philippines, Yahoo Singapore, TechCrunch, WIRED en Español, WIRED Magazine, Ars Technica and
Covers:  Technology, cybersecurity, malware, cybercrime, government surveillance, cyber scams, digital privacy
Security Researcher | Tech Journalist | 📰 Bylines + seen on: BBC, BleepingComputer, Channel 5, TechCrunch | ✉️ ax@hey.ax

Get in touch with Ax

Contact Ax, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Ax Sharma’s Biography

Read Full Bio →

Ax Sharma is a British security researcher, journalist and TV subject matter expert with a focus on malware analysis, open source software security, and cybercrime investigations. His works and expert analyses have frequently been featured on leading media outlets like the BBC, Channel 5, Fortune, The Register, TheHackerNews, BleepingComputer, among others. He's an active community member of the OWASP Foundation and the British Association of Journalists (BAJ).

Send any tips via email or Twitte…

Ax Sharma’s Journalist Portfolio

See all →
35,000 code repos not hacked-but clones flood GitHub to serve malware

35,000 code repos not hacked-but clones flood GitHub to serve malware

Thousands of GitHub repositories were forked (copied) with their clones altered to include malware, a softwar…

View article →
Fedora ditches 'No Rights Reserved' software over patent concerns

Fedora ditches 'No Rights Reserved' software over patent concerns

The Fedora Project has announced that it will no longer permit Creative Commons 'No Rights Reserved' aka CC0-…

View article →
Google blocks site of largest computing society for being 'harmful'

Google blocks site of largest computing society for being 'harmful'

Google Search and Drive are erroneously flagging links to Association for Computing Machinery (ACM) research …

View article →
Security advisory accidentally exposes vulnerable systems

Security advisory accidentally exposes vulnerable systems

A security advisory for a vulnerability (CVE) published by MITRE has accidentally been exposing links to remo…

View article →
Django fixes SQL Injection vulnerability in new releases

Django fixes SQL Injection vulnerability in new releases

Django, an open source Python-based web framework has patched a high severity vulnerability in its latest rel…

View article →
PyPI package 'keep' mistakenly included a password stealer

PyPI package 'keep' mistakenly included a password stealer

PyPI packages 'keep,' 'pyanxdns,' 'api-res-py' were found to be containing a backdoor due to the presence of …

View article →

Articles

SickKids data breach exposes employee and job applicant info

|
By Ax Sharma Verified
| Bleeping Computer Verified
The Hospital for Sick Children (SickKids) has disclosed that the personal information of some current and former employees, as well as job applicants, was exposed in a "cybersecurity incident." The hospital says the breach stemmed from a flaw in third-party software. Clinical systems and patient records were untouched, according to the Toronto pediatric hospital, but its public-facing Careers website was temporarily pulled offline.
Open in Who Shared Issue with article?

AI 'watermark removers' flood the web. Almost none can prove they work.

|
By Ax Sharma Verified
| Bleeping Computer Verified
A market for removing AI watermarks has sprung up days after Anthropic disclosed switching on invisible marks in everything Claude writes, spanning a GitHub project with over 4,500 stars, a cluster of newly registered web tools, and at least one established AI detection evasion service.
Open in Who Shared Issue with article?

Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests

|
By Ax Sharma Verified
| Bleeping Computer Verified
Anthropic said today that during internal security testing, one of its Claude models built a malicious Python package and uploaded it to PyPI, where it ran on 15 real systems before the registry's automated defenses pulled it. The company disclosed it as one of three incidents where Claude models reached the open internet from evaluation environments meant to be sealed, then compromised production infrastructure at three organizations.
Open in Who Shared View Duplicates (2) Issue with article?
See all 927 licensed articles (996 Total)

Interview

See all →

What was your first job as a journalist?

Contributing Columnist on CIO Magazine

Have you ever used a typewriter?

No.

How is social media changing news?

There seems to be a disconnect between Twitter vs. reality at times. Too much needs fact-checking.