Sparsh Kulshrestha

[Sparsh Kulshrestha @dotdotslash_]

We built The Firewall Appsec Platform because we saw a real gap: powerful application security shouldn't be a luxury.

Today, after relentless work and invaluable input from our early testers, we're incredibly proud to launch The Firewall v1.0.

[The Firewall Project @Tfirewall_]

Today marks a milestone in our mission to democratise application security. After months of development and invaluable feedback from our beta community, we're thrilled to announce the official launch of The Firewall v1.0!

[The Firewall Project @Tfirewall_]

The Firewall Project platform is now FREE on the AWS Marketplace, offering incredibly convenient integration with your AWS environment. Our mission is to make AppSec setup and use straightforward for everyone. Get protected effortlessly!

https://t.co/XBviCeKAHy

#appsec #foss

[The Firewall Project @Tfirewall_]

Join our brand new Discord server and become part of a vibrant community.

Come hang out, ask questions, contribute, and help us build The Firewall Project together. See you there!

🔗 Join The Firewall Project Discord: https://t.co/qI5QdVqdVb

#AppSec #OpenSource #CyberSecurity

[Sparsh Kulshrestha @dotdotslash_]

@Tfirewall_

[Sparsh Kulshrestha @dotdotslash_]

Can FOSS replace enterprise? We tried.

#opensource #cybersecurity #appsec

[The Firewall Project @Tfirewall_]

Can open source replace a billion dollar company? We tried.

Cyberattacks and data breaches are a common occurrence these days. Many businesses struggle to prioritize cybersecurity due to limited resources and budgets.

[The Firewall Project @Tfirewall_]

Can open source replace a billion dollar company? We tried.

Cyberattacks and data breaches are a common occurrence these days. Many businesses struggle to prioritize cybersecurity due to limited resources and budgets.

[The Firewall Project @Tfirewall_]

We think every business, no matter how big or small, should have access to top-notch security that's also easy to use and doesn't break the bank. Our big idea is simple: to create powerful, enterprise-grade security tools that anyone can easily get started with and understand.

[The Firewall Project @Tfirewall_]

Github: https://t.co/PzNQT6CVtI - Stars Appreciated ⭐️

[Matt Johansen @mattjay]

🧵 THREAD: A federal whistleblower just dropped one of the most disturbing cybersecurity disclosures I’ve ever read.

He's saying DOGE came in, data went out, and Russians started attempting logins with new valid DOGE passwords

Media's coverage wasn't detailed enough so I dug into his testimony:

[The Firewall Project @Tfirewall_]

We're live on Product Hunt! 🎉 We'd love your support for The Firewall, our free and community-powered application security platform. Please check it out and give us an upvote! 👇

https://t.co/6jenOyDYXH

#ProductHunt #AppSec #cybersecurity #devsecops

[The Firewall Project @Tfirewall_]

We're stoked to be crashing @bsidesahmedabad today!

Spot us rocking our tees with the coolest quote:
"Open source, open minds, secure future"

No fancy booth, just us soaking up knowledge and vibing with fellow security enthusiasts.

[Sparsh Kulshrestha @dotdotslash_]

@akashtesla @S1r1u5_ The leaked data is real and poses a serious risk to the 31 million individuals affected

[Sparsh Kulshrestha @dotdotslash_]

@deedydas Here are some details and history of this threat actor. Also we should not ignore the critical evidence mentioned in the report i.e. the credentials shared by the CISO in the email were available on dark web since 2023.

[Sparsh Kulshrestha @dotdotslash_]

the reality is that the threat actor had faked the email screenshot. The username and password allegedly shared by the CISO were actually part of a credential leak from a public darkweb incident. The threat actor fabricated the story to frame the CISO to defame him.

[Sparsh Kulshrestha @dotdotslash_]

@deedydas the reality is that the threat actor had faked the email screenshot. The username and password allegedly shared by the CISO were actually part of a credential leak from a public darkweb incident. The threat actor fabricated the story to frame the CISO to defame him.

[Sparsh Kulshrestha @dotdotslash_]

@ActusDei @Shiprasorout We have identified active exploitation of this feature by some cyber criminals. Once they are successful in tricking victims into installing their malware and they have a remote access to victim’s device, they go into apps like zomato and purchase gift cards without cvv

[Anirudh @th3eden]

If you are wondering why your UPI is not working or you faced issue while sending money through using IMPS, Aeps, NETC etc its because an organisation called CEDGE was ransomed on 27th July
Read the complete blog by @cloudsek
for complete info
Link - https://t.co/xWePgBVu0D

[Sparsh Kulshrestha @dotdotslash_]

@coffinxp7 @Hacker0x01 @ICICIBank @ICICIBank_Care This malware can steal sensitive information like credit card details, credentials, and even intercept SMS messages.

I've encountered similar misconfigurations in other fraudulent apps, and I can share some additional open Firebase instances if that would be helpful.

[Sparsh Kulshrestha @dotdotslash_]

@coffinxp7 @Hacker0x01 @ICICIBank @ICICIBank_Care There's a strong possibility this app isn't a legitimate banking application. It could be linked to a reward app scam. These scams often involve distributing malware disguised as real banking apps.