Sharon Goldberg

ceo @getBastionZero.
infosec researcher and professor @BUCompSci

@[email protected]

[Sharon Goldberg @goldbe]

@RSAConference @getBastionZero This was such a great moment for our team @getBastionZero!

Here's the video of my 3-min pitch about BastionZero, which placed 2nd amongst hundreds of startups at the #RSAC 2022 innovation sandbox.

https://t.co/nOKg5soE58

[Sharon Goldberg @goldbe]

New blog post from me!

[Cloudflare @Cloudflare]

We read NIST’s new guidance on “Implementing a Zero-Trust Architecture” so that you don’t have to. Read this to get the key points on the newly-released NIST Special Publication 1800-35. https://t.co/cjdFeFzI7M

[NBC Olympics & Paralympics @NBCOlympics]

This reaction. 💙

Alisa Efimova & Misha Mitrofanov end their free skate and receive a standing ovation from the Boston crowd. #WorldFigure

📺 USA Network

[Sharon Goldberg @goldbe]

They are missed 🕊️

[Jackie Wong @rockerskating]

One of my favorite pairs programs in my early days of figure skating fandom - Evgenia Shishkova/Vadim Naumov were playful in their musicality, original in their lifts, and phenomenal in their line. They won 1994 Worlds with this fun free skate

[Sharon Goldberg @goldbe]

It's live! 🎉

[Cloudflare @Cloudflare]

Access for Infrastructure, will enable organizations to apply #ZeroTrust controls to their servers, databases, Kubernetes clusters, and more. Today we’re announcing short-lived SSH access as the first available feature of this integration. https://t.co/O8T3d3ka6E

[Sharon Goldberg @goldbe]

SQL injection, sadly still relevant in 2024. It's the topic of "Lecture 2" of my "Intro to Infosec" course at @BUCompSci today (and has been for the last 10 years).

[Ian Carroll @iangcarroll]

In April, @samwcyo and I discovered a way to bypass airport security via SQL injection in a database of crewmembers. Unfortunately, DHS ghosted us after we disclosed the issue, and the TSA attempted to cover up what we found.

Here is our writeup:
https://t.co/g9orwwgoxt

[Sharon Goldberg @goldbe]

@davidu @chefanienass Mazal tov!

[Sharon Goldberg @goldbe]

@ratulm There's no free time, what are you talking about?

[Sharon Goldberg @goldbe]

With immense gratitude and excitement, I’m thrilled to announce that BastionZero is now part of Cloudflare!

This is an incredible opportunity to take our tech to the the next level as we deeply integrate into the world’s largest SASE network. Watch this space!

[Sharon Goldberg @goldbe]

@WeldPond It is! Thanks Chris!

[Sharon Goldberg @goldbe]

@jrexnet YESSSS! Thank you!

[Jennifer Rexford @jrexnet]

Congratulations to @goldbe and the BastionZero team!

[Sharon Goldberg @goldbe]

@AlbertoDainotti It is indeed! Nice to hear from you Alberto.

[Michelle Zatlyn @zatlyn]

Excited to share that @Cloudflare has acquired @getBastionZero, expanding the scope of Cloudflare’s VPN replacement solution beyond apps and networks to infrastructure. Welcome to the team! https://t.co/wZyqgeXm6d

[Sharon Goldberg @goldbe]

@UnderscoreVC @getBastionZero @Cloudflare @Ethan_Heilman Huge thank you to the Underscore team for believing in us from the very earliest days. It's been quite a journey. I'm proud we got here.

[Underscore VC @UnderscoreVC]

Congratulations to @getBastionZero and @Cloudflare, as they join forces to help more IT and security teams provide zero-trust access to their servers and other infrastructure! We tip our hats to @goldbe and @Ethan_Heilman, the incredible co-founders of BastionZero. 👏

[Dell Technologies Capital @DellTechCapital]

.@getBastionZero CEO @goldbe is teaming up with Cisco's @rlbarnes to solve a problem relevant to the #OpenPubkey community. Check out the blog below to learn more about their vision for Proof of Issuer Key Authority (PIKA). https://t.co/7ZFBUq8pyX

[BastionZero @getBastionZero]

Our CEO @goldbe and @rlbarnes from Cisco are excited to introduce PIKA: Proof of Issuer Key Authority to solve a problem relevant to #OpenPubkey #oidc and JWT (JSON Web Tokens).

Learn more in our latest blog:

https://t.co/uvFKJFda15

[Sharon Goldberg @goldbe]

I really like this new blog explaining how to generalize #openpubkey to any Identity Provider.

[Ethan ✨ is on BlueSky✨ Heilman 🐱 @Ethan_Heilman]

Post explaining how we used Guillou-Quisquater (GQ) signatures add @gitlab CI/CD support to OpenPubkey
This cryptographic combability trick allows #OpenPubkey to support all sorts of identity providers we never thought we could support.

https://t.co/XZ4gW8sE1D

[Sharon Goldberg @goldbe]

"Tracked as CVE-2024-3400, the issue has a CVSS score of 10.0, indicating maximum severity. " https://t.co/LyJhDzTATZ

[Sharon Goldberg @goldbe]

Monster release from our #OpenPubkey team!

[BastionZero @getBastionZero]

BastionZero is proud to announce a new release of #OpenPubkey (Release v0.3.0), probably the biggest release we've ever done. The release is packed with 44 PRs from 10 different contributors at @getBastionZero, @Docker, and others. Read more. https://t.co/mbN4Q3HEnQ