Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Gupta Bless
Learning more about Github Merging Queue
Gupta Bless · Follow 4 min read · -- Source The primary function of the Github merging queue is to streamline and automate the process of merging pull requests (PRs) in large-scale projects with numerous contributors. Merge conflicts, unstale code bases, and development process snags are just some of the problems that can arise when projects involving merges are handled manually. To eliminate these issues, integrating queue features is a good choice.
Learning about Critical AWS flaws: Bucket monopoly
Critical vulnerabilities in two AWS services have been discovered by a security researcher. Assuming they were successful, the attackers may have progressed to RCE, or account takeover. The Black Hat conference was the setting for the revelation of this vulnerability. The AWS cloud creation had an impact on the following services: code star, EMR, glue, sagemaker, and service catalog.
Learning more about "SSH Regression vulnerability"
By utilizing the SecureShell protocol, OpenSSH enables encrypted communication across a network of computers. For that reason, OpenSSH is a variant of the Secure Sockets Layer protocol. The OpenSSH security hole will be covered in today's blog post. Be aware that unauthenticated RCE can result from this vulnerability. We should talk about this thoroughly. What is CVE-2024-6387? It has been linked to the OpenSSH vulnerability (CVE-2024-6387).
A deep drive into the AMI and its security
By Gupta Bless Photo by Ed Hardie on Unsplash The significance of the cloud and AWS's position at the top are well-known. Amazon Machine Images (AMIs) play an essential role in the AWS ecosystem because they can serve as the basis for creating Elastic Compute Cloud (EC2) instances, which are virtual servers that customers can utilize to execute applications on the AWS cloud. Here in the blog, we'll go over some...
Learning More about Security of Github Actions Part 2
By Gupta Bless Photo by Richy Great on Unsplash We covered the value of Github actions and various methods to make it more secure in my earlier blog post. There are further ways, nevertheless, that we can make it safer. We can go over them individually. Don't reference directly values that we can not control
SBOM Essentials: Managing Risk Made Simple
SBOM Essentials: Managing Risk Made Simple Photo by Zan Lazarevic on Unsplash Introduction Regardless of the size of the organization, the software and its contents are always valuable. Those things are all part of the SBOM. Everyone knows that in order to build a project, you need a few dependencies, which can either be built in-house or sourced from other sources. Recalling all of the dependencies by heart would be an impossible task. So that’s how the…
Exploiting LLM API’s to delete a file
Large language models (LLMs) are utilized for training on vast amounts of unlabeled and self-supervised data. These models earn their designation as “large” due to the immense scale of data they handle. To know more about the LLM’s please check my previous blog on LLM.
LandScape of GitHub Copilot
Working with OpenAI, Github created Github Copilot, an AI-powered tool for code completion. For the reason that the code completion and suggestion are provided by a machine learning model. It checks your text for errors before generating code based on comments. On occasion, it will even offer feedback. By automating repetitive operations, it greatly enhances developers’ productivity and allows them to learn new things.
Securing API Gateways with Authentication and Authorization
We rely too heavily on APIs in modern software development since they allow for the easy transfer of data and requests. The role of API gateways, which mediate between several apps, is crucial.It allows for effective data interchange and smooth integration. One approach to make managing or directing API traffic easier is to use API gateways, which act as central access points. Furthermore, they aid in shielding customers from the complexities of API infrastructure.
A deep dive into Github Runner
Runner plays a significant function in software development since they are helpful in automation. It can perform the task scripts, commands as a part of a bigger workflow. They serve automation whether in development, testing or deploying the code. We can also see their role in CI/CD pipeline, to guarantee the code changes are tested, built and deployed efficiently.
A deep dive into DevSecOps
DevSecoOps helps us protect our software development processes by bridging the gap between development and security. Working together, we must ensure that security best practices are incorporated into the entire software development life cycle, from initial design and coding through deployment and continuous operations. While past methodologies delivered security as an afterthought, DevSecOps takes a proactive approach to securing our development.
A deep dive into : Mutual TLS
Mutual Transport Layer Security (TLS) allows for two-way authentication and encryption of data transmitted across a network. Client and server must both use digital certificates for mutual authentication if the connection is 2-way. In comparison to conventional or one-way TLS, this method can establish a more secure and reliable connection. The use of two-way authentication in Mutual TLS improves data integrity and confidentiality while decreasing the likelihood of impersonation.
Understanding Common network vulnerabilities
A network consists of interconnected devices, such as computers, servers, printers, and Internet of Things (IoT) devices, that are linked together for various purposes, such as sharing data or resources. Your home, your workplace, or even the entire world can serve as a network node. Vulnerabilities in a network are any openings that an attacker could use to gain unauthorized access.
Learning More about Web Based LLM Injections
Large language models, or LLMs, are a subset of foundation models used as a framework for LLM-integrated apps like AI-powered search. Large volumes of unlabeled and self-supervised data can be used to train these foundational models. To put it simply, these models are able to provide flexible output by learning from data patterns. Consequently, our LLM scrapped these foundational models for text or text-like elements. Why are they so massive if they can handle gigabytes of data?
Deep dive into threats within the cloud infrastructure Threats
Organizations are increasingly embracing the cloud because of its significant impact on business transformation, innovation, and value delivery, which is something that everyone can agree on. For example, it can process and store data even in the absence of local servers, which is only one of many advantages.
Common Misconceptions About MFA
Today, in the age of microservices and the digital world, every user relies on digital identification verification. An attacker can mimic you once authentication has been circumvented. Multi-factor authentication (MFA) is useful because it adds another level of security, making it more difficult for an attacker to get access to the target. Setting up strong security measures is a great aid.
Github Actions its and their security
Github actions is a CI/CD platform that facilitates automation and is exclusive to Github. CI/CD pipeline practices are primarily intended to enhance the quality, dependability, and productivity of development. Github actions are of considerable importance in the execution of CI/CD pipelines within Github repositories. It facilitates the automation of software development workflows directly within your repositories on Github, allowing us to create, test, and deploy code without interruption.
Securing a repo against Unauthorized Access
We’ve already discussed the basics of repo and why we need it. In this blog, we will go over the security best practices that are essential to improve and maintain the robust security of a repository. It is possible to implement it in a variety of ways. Let us go over them one by one. Different ways to secure the repo access? The purpose of implementing access control on a repository is to control who can do what there, such as read and write information or function as the administrator.
Learning more about Github Repo’s and their Security
In the world of software development, repositories are very common. Project collaborations and managing version control are essential requirements in today’s fast-paced software development industry. Therefore, repositories are places to keep track of software projects, their versions, revision history, and any changes made by users or developers. Github is a top platform for all of this. For developers, Github repositories are like a blank slate on which to build their projects.
Mastering the Art of Keeping Up: A Guide to Staying Updated in the Penetration Testing World
Penetration testing is no longer a luxury but an absolute need in today’s hyper-secure digital environment. Having a comprehensive guide on penetration testing would be incredibly beneficial. It would act as a compass in unfamiliar territory, offering vital insights and tips on how to protect resources from potential threats. Adapting to the needs of the market necessitates a proactive strategy for talent acquisition and the maintenance of organizational security.
Traditional V/S Password Less Authentication
Users or organizations must constantly work to improve digital assets and their infrastructure, but they must also secure access to these assets and the data linked with them. We are utilizing authentication for this purpose, which ensures that you are a legitimate user with permission to access certain resources, data, etc. A user’s permissions are granted according to their function after authentication, which verifies their identity.
Best Practices for Securing MongoDB
MongoDB is a popular open-source NoSQL database that is used to store the data. It is famous because of its flexible and scheme-free format, in which data is stored in BSON(binary json) format documents. These databases are dynamic in nature and contain a variable number of fields. Since this is a database that stores sensitive information, it is the organization's top priority to ensure that it remains secure and accessible at all times.
Learning more about Metabase Pre-auth RCE (CVE-2023-38646)
In the realm of cybersecurity, Common Vulnerabilities and Exposures (CVE) play a pivotal role in identifying and addressing potential threats. The practice of publicly disclosing vulnerabilities has become a standard procedure, regardless of whether they pertain to hardware or software. The severity of each CVE is gauged by the Common Vulnerability Scoring System (CVSS) score, providing a standardized way to assess and prioritize security weaknesses.
Understanding Prototype Pollution
JavaScript is widely used for client side validation but nowadays also used to build servers or some backend applications. Due to which there is more probability of execution of server side pollution and enables more threats surfaces to exploit the JavaScript at runtime. Prototype pollution is basically an injection attack that targets the runtime JavaScript. As we all know JavaScript is one of the object-oriented programming languages that support the inheritance functionality.
A deep dive ofNOSQLi
Like an SQL injection attacker able to inject code into commands for databases but here we do not use SQL queries such as MongoDB. As the name indicates "NO SQLI", means non only SQL, databases that do not use SQL query language. Nowadays non-relational databases are growing to much popularity in case of cloud applications or web applications. These databases do not store data in tables but are very helpful in documents, graphs, objects etc.
A guide to launch Bug Bounty program
Several companies employ bug bounty programs today, presumably because it allows them to entice "excellent hackers" and "security researchers" to try their hand at hacking them. Researchers from any country can initiate this task, but they must adhere to the program's standards if they want it to be successful. The elimination of the need for costly, full-time security staff and ongoing pentesting is a win-win for businesses of all sizes.
Best practice to implement Patch Management
Regular implementation of patch management is a necessary activity. The goal of this practice is to keep an organization's software and operating system versions up-to-date and secure against known vulnerabilities. We learned that the vendor had issued a new version of their product, with the stated goal of fixing any bugs that had been discovered (no matter how big or minor) and, in some cases, adding new features.
Deep dive into DNS Tunneling
Cybercriminals employ this method to circumvent security measures. With the help of the DNS protocol, the attacker in this case was able to send data that has nothing to do with DNS queries or responses. Attackers are able to exfiltrate sensitive data from the server after they have bypassed security safeguards. It's perfectly acceptable to say something like "my friend saw you at the park" in everyday conversation.
Securing Active Directory
It is necessary to implement the AD with security best practices, and doing so is beneficial in controlling the integrity, confidentiality, and availability of the organization's assets, which include data.
Learning the Basics of Active Directory
Microsoft's directory service, Active Directory, is among the best in the industry. The vast majority of businesses rely on it as a single location from which to access and update data on networked things. Active Directory (AD) is in charge of, or is primarily used for, user and computer authentication and authorization in Windows domain-based systems. It offers a wide range of services and capabilities for managing identities in today's networks.
Supply Chain attack- protecting application form third party vulnerabilities
As a result, an attack group comprises a service or trusted entity in order to breach an organization's security and access its internal systems. Consider a company that relies heavily on internal development and uses a GIthub repo. When creating websites, most programmers use this framework. Each repository contains its own unique set of dependencies, libraries, and other components. The developer's goal now is to provide encryption support to this repository.
The Modern Approach to AWS Resources Part 2
In my last blog (https://gupta-bless.medium.com/cdk-the-modern-approach-to-aws-resources-6facbfdcc37e), we explored the fundamentals of CDK; in this blog, we will describe CDK integration with the CD/CD pipeline. In my earlier blog, I also addressed how integrating your CDK with CD/Cd will assist your organization. There are various types of CD/CD pipelines accessible, such as Jenkins, Gitlab, AWS code pipeline, and so on, but which one we want to use depends on the organizational structure.
The Modern Approach to AWS Resources
CDK was developed to define how AWS cloud resources are created, provisioned, and managed. The AWS CloudFormation framework is an open-source development environment that enables the definition of cloud infrastructure in a wide variety of programming languages. In AWS, we used cloud formation templates for this at first, but developers have since found them to be too limiting due to their use of a domain-specific language.
Learning and Testing for GraphQL Vulnerabilities : Part 3
Let's continue our discussion of GraphQL API exploitation by looking at some other GraphQl security risks. Some of the foundations and security concerns of GraphQL have already been covered in the first two GraphQL blogs. Please check these out if you want to learn the fundamentals of GraphQL. This time, we dug further deeper, reaching what appears to be an advanced level but which might be misused by them within an organization. Let's break it down and talk about it.
Learning and Testing for GraphQL Vulnerabilities
In previous articles, we have discussed the significance of GraphQL in contemporary architecture. Therefore, we cannot deny that attackers are targeted it excessively to obtain the information. Consequently, I will discuss a few potential GraphQL hazards in this article. If you have not read my previous blog post on GraphQL, kindly click on the link provided and read the information there.
Learning and Testing for GraphQL Vulnerabilities
Graph Ql is a server-side query language that is implemented as an application programming interface. GraphQL is popular among developers because it provides features that make restAPi, another API option, unnecessary. Initially intended for Facebook's internal use, the platform became open source in 2015. When the user knows exactly what they need, they can efficiently retrieve it, saving time and money. Because less data is being sent across the network, performance is enhanced.
Unleashing the potential while safeguarding Against New Threats (2)
In our previous article, I laid out the fundamentals of 5G, including what it is and how it can impact our daily lives and the infrastructure we rely on. If you haven't already, I highly recommend reading my earlier blog post (https://gupta-bless.medium.com/5g-security-unleashing-the-potential-while-protecting-against-new-threats-845b64156809) on this topic. I've written about some of these potential risks in the aforementioned blog post, but there are still a handful more we should talk about.
Unleashing the potential while safeguarding Against New Threats
The term "5G" refers to the fifth generation of wireless communication technology, and its primary function is to make connecting to other devices less of a hassle. Its rise to prominence has been lightning swift in comparison to those of its forebears. Increased throughput, decreased latency when using the internet, and better connectivity not only effect the enterprise, but also the lives of ordinary people. Additionally, it's compatible with AR/VR applications.
AI driven threats and protection from them
Artificial intelligence, or AI, is a subfield of computer science that aims for imitating human intelligence in a digital environment. Artificial intelligence (AI) is a subfield of computer science that is finding widespread use as a means to cut costs associated with human labor. It improves performance and decreases response time, so it's a win-win.
Understanding shared responsibility model in cloud security
Security is a major issue nowadays, and as most businesses use cloud infrastructure, those businesses need to know what their duties are when employing IaaS or public clouds. Some cloud service providers employ a consumption-based pricing model in which the end user can make use of their services and only pay for what they really utilize.
What risk they possess
By Gupta Bless Source Zero-day vulnerabilities are those that have not been addressed by developers whose patches have not been installed. As they are not fixed, if an adversary discovers them, he or she can exploit them and obtain sensitive information. These types of vulnerabilities can exist anywhere in an organization, including in software, systems, and networks, etc. The severity of...
Bypassing Firusing NMAP
Nmap, which stands for network mapper, is an open-source, powerful utility used by security professionals to identify valuable information or infrastructure weaknesses. Its primary function is to perform host and service discovery on a computer network. Nmap operates on the majority of operating systems and transmits the crafted packet to the target; after receiving a response, it begins its analysis and determines which ports are open or closed.
Cyber Threat Intelligence and best practices
By Gupta Bless Source A threat is an action, either recently found or resurfacing as a result of an old misconfiguration, that has the potential to cause significant damage to the system. The severity of that depends on the amount of resources lost, but these risks can steal confidential information and compromise data integrity.
Most common mobile application vulnerabilities and their mitigations part 2
By Gupta Bless In a previous blog post, we talked about mobile applications, their significance, and the reasons why we use mobile applications so frequently. Because more people are using mobile applications, there is now a larger attack surface to break into the mobile application and take control of the phone. If a malicious user gains access to a legitimate user's phone...
Most common mobile application vulnerabilities and their mitigations
By Gupta Bless Source It's undeniable that mobile phones have become indispensable in modern society, with their users relying on them for virtually all of their computing needs. The ease, convenience, and power of using a mobile phone are unmatched. That's why everybody wants to go there and use it to get their two-day job done. As mobile usage...
How to Prevent and Respond to this Growing Threat
By Gupta Bless Source Ransomware attacks are ones in which an attacker encrypts or locks the data of an organization, rendering it inaccessible to the victim. If a company wants their data returned, they either pay the price or satisfy the attacker's conditions. For example, if an organization is dealing with sensitive data, such as government...
How to respond to a cybersecurity breach in your organization
By Gupta Bless Source Unauthorized access to resources, assets, or confidential information is referred to as a cybersecurity breach. These breaches might occur as a result of a combination of situations or as a result of a single factor. As a result of this breach, an attacker with access to sensitive information may interrupt services or harm the...
How to train your employees on cybersecurity best practices
By Gupta Bless Source As organizations increasingly invest in mission-critical infrastructure, they must protect themselves against a wide variety of threats that could compromise their most private data. Humans, regardless of role or profile, are always the organization's weakest link. They either don't realize that anything is broken or they forget to fix it...
Detecting and Mitigating Container Runtime Attacks
By Gupta Bless Source As the name implies runtime, those attacks or threats come after the container has been deployed or is in operation. Containers are increasingly significant in modern development because they give portability, efficiency, consistency, flexibility, and other benefits. Organizations can deploy applications or software in a more efficient and consistent manner...
Understanding WebSocket Hijacking
By Gupta Bless We should define websocket first before exploring websocket hijacking. While similar to HTTP in concept, applications using websocket necessitate a two-way, persistent connection between their endpoints. During that time, the connection between the client and server remains stable, allowing data to be passed back and forth between them without the need for continuous polling.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Gupta
Contact Gupta, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack