Speaking & Video

Cybersecurity Speaking, London and Vlog Series

I currently cover Sonatype’s Nexus Intelligence Insights Vulnerability of the Month video series, with our product and corporate marketing teams.

I’m available to speak on diverse Cybersecurity topics on vlogs and at public speaking events.

Nexus Intelligence Insights Video & Blog Series:

October 2020:

Featured speaker on NVTC’s Capital Cybersecurity Summit 2020.

[Recording available shortly]

https://blog.sonatype.com/discord-squashes-critical-electron-bugs-open-source-attacks-continue-to-grow

Sonatype caught NodeJS malware exfiltrating IPs, username, and device information on GitHub

See more

These newly discovered malicious typosquatting npm packages broadcast your IP, username, and device fingerprinting info on the web!https://t.co/KBhHfqOkuI

Discovered by @Sonatype automated #malware detection.#infosec #securitynews #devsecops #devops #opensource

— Ax Sharma (@Ax_Sharma) September 30, 2020

September 2020:

Nexus Intelligence Insights: “fallguys” npm package which is malware impersonating the popular Fall Guys game API

See more

What’s inside the “fallguys” npm #malware that mimics the video game API to steal your browsing data/IMs? Take a deep dive with us.@sonatype customers are protected from such malicious npm components!https://t.co/jmUsCU8bBB #DevSecOps #infosec #securitynews #DevOps— Ax Sharma (@Ax_Sharma) September 2, 2020

August 2020:

Nexus Intelligence Insights – CVE-2020-7699: From Prototype Pollution to full-on remote code execution, how can adversaries exploit npm modules?

Nexus User Conference 2020 – FULL LIVE presentation
Ax Sharma’s overview of Sonatype Security Research: The Inside Scoop
Video:

 

CVE-2020-17479 – jpv Fix Bypass discovered by Sonatype:
Co-authored with Sonatype Security Research Team:
https://blog.sonatype.com/cve-2020-17479

July 2020:

CVE-2020-13935 – Apache Tomcat Websocket – Denial of Service (DoS):
https://blog.sonatype.com/nexus-intelligence-insightscve-2020-13935-apache-tomcat 

May 2020:

See more

The pace and professionalism demonstrated by @SheetJS folks during the disclosure process is commendable. Learn about this ReDoS #vulnerability discovered by @acazzolla of @sonatype and how to protect #JS spreadsheets.https://t.co/8JVPHDizPj#infosec #security #CyberSecurity

— Ax Sharma (@Ax_Sharma) May 7, 2020

April 2020:

See more

Protect Your Bitcoins from 700+ Malicious RubyGems with sonatype-2020-0196 #CyberSecurity #infosec #malware #vulnerability #rubygems #opensource #cryptocurrencyhttps://t.co/2kSNxr7VOg

— Ax Sharma (@Ax_Sharma) April 23, 2020

March 2020:

February 2020:

https://blog.sonatype.com/cve-2020-2100-jenkins-udp-amplification-reflection-attack-distributed-denial-of-service

January 2020:

Hacker Noon stored XSS via SVGs:

https://blog.sonatype.com/sonatype-2020-0003-npm-malicious-package-1337qq-js

September 2019:

https://blog.sonatype.com/nexus-intelligence-insights-cve-2019-15753

June 2019:

https://blog.sonatype.com/nexus-intelligence-insights-cve-2018-1109-braces-regular-expression-denial-of-service-redos-attack-0

April 2019:

https://blog.sonatype.com/nexus-intelligence-insights-cve-2019-0232-apache-tomcat-cgi-servlet-remote-code-execution

Blog series:
https://blog.sonatype.com/author/akshay-ax-sharma