Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Jayant Shukla
Automated Testing Archives
AttackIQ's new architecture upgrade makes it possible for customers to emulate comprehensive, multi-stage adversary cyberattack campaigns with realism and specificity, at every step in the kill chain. Check it out. The post ...
Made to Protect Against LOG4J2 Attacks
A recently discovered vulnerability in LOG4J2 (also referred to as LOG4SHELL) is being widely reported as one of the most dangerous vulnerabilities in application software to date. There is already news that it is being exploited in the wild, putting widely used applications and cloud services at risk. LOG4J2 is a popular Java logging framework developed by the Apache Software Foundation.
Security Expert Re: New OWASP Top 10 List for Application Security Risks
The Open Web Application Security Project (OWASP) has released its draft Top 10 Web Application Security Risks 2021 list with a number of changes from the 2017 list (the last time the list was updated). Once again, instead of old risks going away, OWASP has consolidated existing risks into several categories and new risks have been added, reflecting the increased threats facing web applications. For the 2021 list, OWASP added three new categories: ‘Insecure Design’, ‘Software and Data .....
Identify Critical Security Vulnerabilities With IAST
Identify Critical Security Vulnerabilities With IAST Vulnerabilities in production code continue to increase, including vulnerabilities in open source codebases. According to a recent report from Synopsys, the number of open source vulnerabilities increased over the past year to a record 84%. Part of this increase may be attributed to the need for organizations to get their applications to production quickly to meet the demands of a remote workforce.
Security Boulevard
As we head into the last month of 2020, we’re taking a quick break this week and reprinting one of K2’s original posts that we released back in January of 2020. This blog post was originally published here. On July 19, 2019, an attacker gained unauthorized access to hosted Capital One servers in Amazon Web Services (AWS) and stole personal information about individuals who had applied for Capital One credit cards.
Security Boulevard
This article originally appeared in Cyber Defense Magazine, October 2020 edition. Over the past several years, two industry buzz terms have really started to gain traction. SASE (Secure Access Service Edge) was a hot topic at this year’s RSA in San Francisco and Zero Trust has been around a bit longer.
The Limitations of SASE and Zero Trust
By Jayant Shukla, CTO, and Co-Founder, K2 Cyber Security Over the past several years, two industry buzz terms have really started to gain traction. SASE (Secure Access Service Edge) was a hot topic at this year’s RSA in San Francisco and Zero Trust has been around a bit longer. As cyber-attacks continue to increase and organizations continue to move to the cloud, both SASE and Zero Trust frameworks offer a way to give organizations additional security to their applications and data.
Security Boulevard
A recent article published on the G2 Learning Hub was titled “The Top 5 Vulnerability Scanners You Need to Patrol Security Grids,” and while it covered the list of what the author considered to be the top 5, what really caught my attention about the article was the introduction to vulnerability scanning included before the list.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Jayant
Contact Jayant, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack