Simran Khalsa

Security Researcher

[vx-underground @vxunderground]

We found NATO's Jira access portal online. It said you can request access via the form URL. We have requested access to NATO.

[sshell @sshell_]

Ah yes, another day of completely normal patch notes from Adobe Experience Manager

[Thomas Roccia 🤘 @fr0gger_]

That's it! If you like this thread, you can share it, like it and get the list here👇

https://t.co/TvuD91LZRO

[PortSwigger Research @PortSwiggerRes]

Safari is hot-linking images to semi-random websites! Our researcher @garethheyes explores this crazy behaviour.

https://t.co/FvAgBIrsfe

[Simran Khalsa @simran_khalsa]

Verifying myself: I am simransk on https://t.co/0uIyjfSI53. LEeB18j4MHrIigndRw-JogOJyy7ho5juceeK / https://t.co/7FIhEMeAmy

[James Kettle @albinowax]

The good old "[email protected],[email protected]" strikes again
https://t.co/seNwYv27V2

[Simran Khalsa @simran_khalsa]

Who’s coming to ShmooCon? I’m here, hmu!

[Simran Khalsa @simran_khalsa]

Go fuzz yourself 😉 https://t.co/fdpPHTY7M7

[Simran Khalsa @simran_khalsa]

If you're having trouble coming up with a tagline for your security startup, look no further 😝https://t.co/nbsKDL6S2T. shout out to @swagitda_

[Simran Khalsa @simran_khalsa]

Are you thinking of GraphQL? Let's talk security
https://t.co/YjSu2JCLM4

[ProjectDiscovery @pdiscoveryio]

The WAF efficacy framework: measuring the effectiveness of your WAF using @pdnuclei by @fastly team.

GitHub Project - https://t.co/CeLVFN03dx

Blog - https://t.co/N3nbVPm8yF

#hackwithautomation #security #waf

[Kelly Shortridge @swagitda_]

Our security research team wrote an explainer about the Log4Shell vuln, including the attacker activity we’ve observed since the POC became public yesterday.

tl;dr attackers rapidly performed R&D, scalable campaigns are very likely to emerge, plz patch

https://t.co/8hDB4H2o0z

[Simran Khalsa @simran_khalsa]

Check out some neat tooling our team put together with C@E to defend against subresource modification
https://t.co/db22OpF6FV

[Fastly @fastly]

📣 We’ve released a WAF rule that protects customers from the Atlassian Confluence vulnerability; we recommend our customers enable it immediately.

Learn more about the patch and what else you can do to protect yourself from our Security Research Team: https://t.co/WLttZ3PQzk

[The Daily Swig @DailySwig]

Overlooked vulnerabilities in GraphQL open the door to cross-site request forgery attacks, reveal @Doyensec researchers

https://t.co/uwKkK4k3AV

[Simran Khalsa @simran_khalsa]

Join me in this webinar as I copresent scaling DevSevOps with Terraform

[Signal Sciences @signalsciences]

Learn how #DevOps teams embrace infrastructure-as-code to manage cloud application security. Join the webinar (Jan. 27) with @HashiCorp #Terraform & @Splunk: https://t.co/JXkmjSQiSJ

[Simran Khalsa @simran_khalsa]

well...😱
https://t.co/Kn4WRoDJQf