Cybersecurity Speaking, London/Manchester and Vlog Series
Having produced several videos and been featured in multiple national TV series, live segments, documentaries, online vlogs, and live radio shows, I’m available to speak on cybersecurity topics at public speaking or online events. Preferred areas include open-source software security, ransomware, data breaches, AI, and privacy (e.g. legislation and its implications), and software supply chain attacks.
Channel 5 TV series on tech fraud (2023-24): Scams: Don’t Get Caught Out!
KTLA (Los Angeles) TV interview on AI apps and their pros and cons.
2022 – Infosecurity Europe, ExCeL London:
Help Net Security – videos explaining malicious incidents and threats to open source software
This Week in Malware video series (2022-)
https://www.facebook.com/watch/live/?ref=watch_permalink&v=1606232636421404
October 2020:
Featured speaker at NVTC’s Capital Cybersecurity Summit 2020.
Sonatype caught NodeJS malware exfiltrating IPs, username, and device information on GitHub
Ax Sharma as an expert researcher in BBC documentary, Victims of Ukraine War Scammers (2022) along with lead journalist Hannah Gelbart:
September 2020:
Nexus Intelligence Insights: “fallguys” npm package which is malware impersonating the popular Fall Guys game API
What’s inside the “fallguys” npm #malware that mimics the video game API to steal your browsing data/IMs? Take a deep dive with us.@sonatype customers are protected from such malicious npm components!https://t.co/jmUsCU8bBB #DevSecOps #infosec #securitynews #DevOps— Ax Sharma (@Ax_Sharma) September 2, 2020
August 2020:
Nexus Intelligence Insights – CVE-2020-7699: From Prototype Pollution to full-on remote code execution, how can adversaries exploit npm modules?
Nexus User Conference 2020 – FULL LIVE presentation
Ax Sharma’s overview of Sonatype Security Research: The Inside Scoop
Video:
CVE-2020-17479 – jpv
Fix Bypass discovered by Sonatype:
Co-authored with Sonatype Security Research Team:
https://blog.sonatype.com/cve-2020-17479
July 2020:
CVE-2020-13935 – Apache Tomcat Websocket – Denial of Service (DoS):
https://blog.sonatype.com/nexus-intelligence-insightscve-2020-13935-apache-tomcat
May 2020:
April 2020:
Protect Your Bitcoins from 700+ Malicious RubyGems with sonatype-2020-0196 #CyberSecurity #infosec #malware #vulnerability #rubygems #opensource #cryptocurrencyhttps://t.co/2kSNxr7VOg
— Ax Sharma (@Ax_Sharma) April 23, 2020
March 2020:
February 2020:
January 2020:
Hacker Noon stored XSS via SVGs:
September 2019:
June 2019:
April 2019:
Blog series:
https://blog.sonatype.com/author/akshay-ax-sharma