Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Mitch Mayne
Detecting and Mitigating the Apache Camel Vulnerability CVE-2025-27636
The vulnerability is trivial to exploit and could lead to devastating results, including remote code execution. On March 9, 2025, Apache Camel disclosed CVE-2025–27636, a vulnerability that stems from incorrect filtering of request headers that can lead to remote code execution. This vulnerability lies in a library, creating both direct and indirect dependency and complicating detection and mitigation.
Abusing VBS Enclaves to Create Evasive Malware
Virtualization-based security (VBS) is one of the most fascinating recent security advancements. The ability to isolate critical components of the OS has enabled Microsoft to achieve substantial security improvements with features like Credential Guard and Hypervisor-Protected Code Integrity (HVCI).
Exploring a VPN Appliance: A Researcher’s Journey
At this point, we have a working debugging environment. We began researching the management web server and found some vulnerabilities that we’ll describe later in this post. While finding these vulnerabilities, we noticed that Fortinet released FortiOS version 7.4.4. We wanted to see if the vulnerabilities still exist in the new release, but after failing to decrypt the updated VM’s rootfs, we encountered a completely different encryption that is even more difficult to crack.
Teaching an Old Framework New Tricks: The Dangers of Windows UI Automation
Those of us who write for a living love dictation and grammar-checking software. Those of us who do security research for a living like to break stuff and write about it. So, after months of seeing ads for these writing assistants, we decided to tinker around and see what we could find. Specifically, we wanted to understand how an application can manipulate another application’s user interface (UI) remotely.
What You Should Know About BreakingWAF
Customers are advised to enable these capabilities and mitigate the risks highlighted by the research. A third-party research team published a blog post about a technique to bypass web application firewall (WAF) solutions that they call BreakingWAF. The research highlights a condition that is inherent in the way HTTP proxy technologies work.
Akamai’s Perspective on October’s Patch Tuesday 2024
This month, there are 117 total CVEs across 60 different components. Of those, three are critical. Spooky scary vulnerabilities, send shivers down your (server) stack 𝅘𝅥𝅮 Shrieking CVEs will shock your corp, seal your nets tonight 🎵 It’s a new month and we’ve got a big bowlful of CVEs — but, unlike candy, we can’t hand them out to costumed kids. This month, there are 117 total CVEs across 60 different components. Of those, three are critical, two were seen in the wild, and one was found by us.
When CUPS Runneth Over: The Threat of DDoS
Amplification rates can vary significantly so we have covered both an average scenario and a worst-case scenario to help readers assess the potential threat. Ultimately, the targeting directive dictates the size of this payload, but for baseline calculations we’ll use a minimum viable UDP packet size of 30 bytes and a maximally padded 1028-byte UDP packet for the worst case.
Akamai Blocked 419 TB of Malicious Traffic in a 24-Hour DDoS Attack
Assess risk, including the existing DDoS mitigation services: Conduct a thorough and proactive risk assessment that involves your DDoS defense provider — specifically in terms of extremely forceful sustained attacks like the one described in this post, and whether your existing defenses are sufficient. Review critical subnets and IP spaces, and ensure that they have mitigation controls in place.
It’s a New World: APIs Protected by the Power of N
This campaign conveys to our worldwide customers, partners, and prospects why and how our Akamai API Security product has changed. In June 2024, Akamai officially acquired Noname Security, and we are pleased to unveil a global campaign that describes the outcome. Dubbed the “Power of N,” this campaign conveys to our worldwide customers, partners, and prospects why and how our Akamai API Security product has changed.
Akamai’s Strategic and Transparent Implementation of AI
AI implementations are based on real capabilities that have been part of our innovation journey. Some companies are inventors (i.e., they create brand-new technologies), some are innovators (they change the direction of existing markets with new innovations), and some are adopters (they implement other companies’ inventions). Although artificial intelligence (AI) had been a topic of academic discussions for a long time, ChatGPT made AI available to the masses in an instant.
CVE-2024-4577 Exploits in the Wild One Day After Disclosure
Introduction The time from disclosure to exploitation has significantly shortened in recent years — in fact, most malicious activity takes place in the first month following the patch. As of May 2024, the average time for exploitation to begin is approximately 4 days after a vulnerability is made public, which leaves hardly any time at all for defenders to prepare.
Guidance on the Critical OpenSSH Vulnerability regreSSHion
From our observations, 75% of networks had some machines with a vulnerable version of OpenSSH. CVE-2024-6387 is a critical remote code execution (RCE) vulnerability in OpenSSH that stems from a regression of a CVE from 2006. Exploitation requires winning a race condition, and could take hours or even weeks to successfully exploit. The recommended course of action is patching to an unaffected version of the OpenSSH server on glibc-based Linux systems.
Poor Communication During a Data Breach Can Cost You - Here’s How to Avoid It
No one needs to tell you that data breaches are costly. That data has been quantified and the numbers are staggering. In fact, the IBM Security Cost of a Data Breach estimates that the average cost of a data breach in 2022 was $4.35 million, with 83% of organizations experiencing one or more security incidents. But what’s talked about less often (and we think should be talked about more) is how communication — both good and bad — factors into that cost.
Ransomware Renaissance 2023: The Definitive Guide to Stay Safer
Ransomware is experiencing a renaissance in 2023, with some cybersecurity firms reporting over 400 attacks in the month of March alone. And it shouldn’t be a surprise: the 2023 X-Force Threat Intelligence Index found backdoor deployments — malware providing remote access — as the top attacker action in 2022, and aptly predicted 2022’s backdoor failures would become 2023’s ransomware crisis.
Backdoor Deployment and Ransomware: Top Threats Identified in X-Force Threat Intelligence Index 2023
Deployment of backdoors was the number one action on objective taken by threat actors last year, according to the 2023 IBM Security X-Force Threat Intelligence Index — a comprehensive analysis of our research data collected throughout the year. Backdoor access is now among the hottest commodities on the dark web and can sell for thousands of dollars, compared to credit card data — which can go for as low as $10.
End-to-End Security for APIs: From Development Through Retirement
API security must be active at the development stage of an application’s life, at runtime, and beyond – through the entire software development lifecycle (SDLC). Starting with development, developers may instruct applications to invoke API functionality through API calls or create APIs that expose the app’s functionality and data to other software applications. Both modes of API operation create risk exposure.
Ransomware Response: Time is More Than Just Money
The initial actions an organization takes in the moments after discovering a ransomware attack can have profound implications on how the attack ends. Virtually every security professional will tell you ransomware-based attacks are rapidly becoming the bane of the digital age, but that may not translate into chief information security officers (CISOs) being certain employees understand how to spot ransomware activity and where to report it if they do.
Welcome to the Matrix: How Stakeholder Analysis Improves Communication During a Cybersecurity Incident
Listen to this podcast on iTunes, Soundcloud or wherever you find your favorite content. This week, Loren Dealy Mahler, president and founder of Dealy Mahler Strategies, returns to the podcast to share more of her cybersecurity incident response expertise. Following previous conversations about improving disaster response and the types of data to consider in a risk assessment, this installment explores the critical role of stakeholder analysis in crisis communication.
The LDS Church’s Policy on Gay Parents and their Children as Seen through the Lens of Love
A guest post by my friend Bob Rees, who shares his views on recent Latter-day Saint policy changes that affect LGBT members and their children. Bob served as a bishop, stake high councilor, Institute teacher and a member of the Baltic States Mission Presidency, currently teaches Mormon Studies at Graduate Theological Union in Berkeley. Previously he taught at UCLA and UC Santa Cruz and was a Fulbright Professor in American Studies at Vytautas Magnus University in Kaunas, Lithuania.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Mitch
Contact Mitch, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack