It has been a while since I wrote, as I was totally tied up with catching up with various facets of Application Security. My work is continuing, and you might see gaps in my blog-writing, but I will try my best to keep you posted on the trends. Something interesting came up recently, which is […]
Tackling AI Security Read More »
The latest survey by Weber Shandwick shows that Generative AI is a top priority for CEOs, with 51% marking it as a top priority above the other options of inflation, ESG, and geo-political conflicts. But most of the CEOs are not sure about how to bell the generative AI cat! Let’s look at this in
To Bell the Generative AI Cat Read More »
If I say I am going to ask my developers not to use GPT for their work, think about what would happen. The practical way to approach GPT usage for programming is to see how we can embrace it and address the concerns. In this article, let us look at the things that we need
Security Testing Tips For GPT Usage For Programming Read More »
Sometime back, I wrote about how MFAs are not foolproof, and how social engineering attacks can happen when the client device or application is compromised. You would be surprised (or may not be!) to know that it’s possible for social engineering attacks on server side to happen! Let’s look at how this happens, and how
Social Engineering Attacks On Server Side Read More »
I am one of the tens of Venkat Ramakrishnans out there in the web. Like everyone else, my social profiles are special to me. I, like everyone else, pay attention to SEO, and would like to have my professional links like LinkedIn to be displayed among the top ones. People trust Google search. They first
Google Search Is Broken And Needs Be Fixed Read More »
The past week had been loaded with articles and surveys about cloud security. There has been a great interest in talking about whether having the applications and data in the cloud fully or having an hybrid approach is the right way to go. In addition, there were discussions about encryption of data and when to
Cloud Security Considerations Read More »
An important aspect about building careers, getting visibility, and gaining recognition is the name of the role in which you function. I see profession as something that I practice, and I would like to call it as I would like people to see me in it. Realistically, many don’t have a choice on that as
CISA recently released the top 10 reasons for security lapses in well-established enterprises that have strong security posturing. It is interesting to see that the top lapses are because of not following the basics of security. In this article, we will take a look at how to align security testing for software quality. Here are
Security Testing for Software Quality Read More »
Yesterday, I wrote about security psychology and social engineering. Today morning, I got a cryptic error from my email service provider when I was trying to load my inbox. The error message was something that I could not understand; it was totally technical something related to some kind of reset; the end result is that
MFA ain’t fool-proof ! Read More »
In the quest towards Software Quality, Software Security is an important pillar. I have been writing regularly of late on security. There had been an interesting perspective recently when someone said handling security is akin to playing a chess game. And there is this impact of so called “AI” recently (read ‘LLMs’) that could throw
The Security Psychology Read More »
