Himanshu's Home

Blogs Published on Current and Previous Employers' Websites

• Cisco client-side Magecart JavaScript attack

  A detailed analysis of the magecart type attack on Cisco's merchant website.

• Ticketmaster Data Breach Déjà Vu: What You Need to Know

  A detailed analysis of the repeated data breaches affecting Ticketmaster.

• Navigating the maze of Magecart: a cautionary tale of a Magecart impacted website

  Insights into the Magecart attack vector and how to mitigate it.

• How Cloudflare’s AI WAF proactively detected the Ivanti Connect Secure critical zero-day vulnerability

  Discussion on how AI-driven WAF identified and mitigated a critical vulnerability.

• All Cloudflare Customers Protected from Atlassian Confluence CVE-2023-22515

  Discussion on how AI-driven WAF identified and mitigated a critical vulnerability.

• Unmasking the top exploited vulnerabilities of 2022

  Discussion top exploits in 2022 from the eye of Cloudflare.

• Cloudflare observations of Confluence zero day (CVE-2022-26134)

  Cloudflare observation for CVE-2022-26134.

• WAF mitigations for Spring4Shell

  Spring4Shell attack mitigated by Cloudflare WAF.

• Vulnerable Joomla! Installation under active attack

  Joompla exploit targeting websites.

• One-click fraudsters extend reach by learning Chinese

  Once click fraud on chinese websites infecting users to ask for money.

• Facebook Scam Leads to Nuclear Exploit Kit

  Facebook scam websites leading victimes to nuclear exploit kit.