Maxm Masiutin

We provide consulting services to develop secure software & firmware, design & maintain networks, devices, software, and hardware.

[Maxm Masiutin @MaximMasiutin]

My post was about a specific flaw in a published SAML signature-verification library, reported through coordinated disclosure. It is a signature-check logic defect, not an enumeration or brute-force issue. It is not a report about the data-extraction incident AGE disclosed on 27 October; STISC has attributed that incident to services reachable without authentication, which is a different problem from a defect in an authenticated login library. Beyond those public statements I have no information about the incident, I have asserted no link between it and the library flaw, and nothing public establishes one.

[Maxm Masiutin @MaximMasiutin]

Moldova's MPass SAML library Egov.Integrations.MPass.Saml before 10.0.4 had an XML Signature Wrapping auth bypass (CWE-347). Upgrade to 10.0.4+. CVE requested from MITRE: CAN-2026-2041077 so far, no CVE yet. https://t.co/b9MaUtf3Fc

[Maxm Masiutin @MaximMasiutin]

A security setting is only as strong as the features around it. Check Point Research bypassed ChatGPT Lockdown Mode, built to stop prompt-injection data leaks, with popups that escaped its HTML preview sandbox. OpenAI fixed it in September. https://t.co/d7F25NnnZR

[Maxm Masiutin @MaximMasiutin]

Excited to share that ISC2 has decided to invite me to participate in their Certified Cloud Security Professional (CCCP) group review workshop that took place on October 28-30, 2024! Having participated in this workshop for the first time, I've gained valuable insights into crafting effective exam questions related to cloud security!

I have to admit that the CCCP exam that I passed last year was the toughest for me among all ISC2 exams I’ve ever taken, even harder for me than CISSP!

The CCCP exam was likely the toughest for me because cloud environments impose some of the strictest requirements on cybersecurity: ensuring robust security in the cloud demands a deep understanding of both complex technologies and sophisticated threat landscapes – it’s a realm where precision and expertise are paramount! It reinforces my belief that experience, not just study materials, plays a crucial role in exam taker preparation. As both an exam taker and exam development contributor, I truly understand the significance of real-world knowledge in the cybersecurity field. Therefore, believe me when I say that no course or manual can help you fully prepare for the exam to take, but your work experience and knowledge obtained by it. There is no single exam prep book that a novice can take, learn and pass the CCCP exam.

Grateful to ISC2 for this recognition!

#ISC2 #CCCP #CISSP #Cybersecurity #ExamDevelopment

[Maxm Masiutin @MaximMasiutin]

We provide consulting services to develop secure software & firmware, design and manufacture hardware devices and provide consulting services in developing secure software. We also offer hardware for secure data exchange. Trust us to keep data safe! #DataSecurity #CyberSecurity

[Maxm Masiutin @MaximMasiutin]

@maxedapps @academind_real Ewwzzwzwzwzwwzwzwzwzwwwzwwzw zwzwwwwzwzwszwwwwwwzwwwzwzwwzwwwwwzwwwwzqqx7ssxeexxso zssszzsszsxssszsszzsxs xxx s SS xzzz xxx s SS s SS s SS s SS xzzz z xxx xxx sssfqa zssssszssssxszzsssxq

[Maxm Masiutin @MaximMasiutin]

https://t.co/2qv00UtRN1

[Maxm Masiutin @MaximMasiutin]

Relative steroid levels in CP/CPPS have suggested that CYP21A2 deficiency may play a role, and that non-classical CAH may be a comorbidity. PMID: 35987379; DOI: 10.1016/j.urology.2022.07.051
https://t.co/8XflfbllmQ

[Maxm Masiutin @MaximMasiutin]

The Stavros Niarchos Foundation Library is amazing at any time of the day or night.

[Ritlabs, SRL @Ritlabs]

We wish you a Merry Christmas and a Happy New Year! Get the latest The Bat! v8.0.18 Christmas Edition at https://t.co/bdXVf4EKKO