Skip to content

Details

Luke Marshall - BugCrowd - Security Engineer

For our October Meetup, Luke will be presenting his talk from BSides Canberra. The synopsis is below, looking forward to seeing you there!

"Despite the widespread availability of secret scanning tools, thousands of sensitive credentials continue to be exposed in popular open source ecosystems, a security blind spot that sparked my curiosity and one that led me to hunt for secrets in both commonly understood risk areas and find some new attack surface with some surprising results.
By looking into ecosystems that are hard to navigate I have helped secure over 40+ organisations including Microsoft, Adobe, Anthropic, MongoDB, Electronic Arts and more.

This talk will cover my process for investigating these ecosystems, results found and why this attack surface remains a risk for organisations and how you can find and remediate these yourself."

Event details:

Venue: NUSpace, Newcastle (The University of Newcastle) - Eighth floor, Room 3.

Food: PIZZAS Provided, please inform us of dietary requirements when RSVPing

Drink: Non-alcoholic provided

Getting there/parking/public transport:

  • Please try and get in the door before 6:10pm. We check occasionally but you might get stuck outside in the cold for a while.
  • Nearby car parks are free after 5PM, and generally has plenty of room.
  • The closest public transport point is Honeysuckle Light Rail Station, which will take you to Newcastle Interchange and beyond every ~7min or so. Walk along Honeysuckle Drive for a better-lit pathway.

The rest:

If you’re experiencing any symptoms representative of COVID-19, please don’t attend. We’ll miss you, but the health/safety of attendees is paramount.

NCSG is a community group determined to improve and uplift the Newcastle cybersecurity community. We meet monthly (on the last Wednesday of each month) and have a bunch of interesting speakers, from local legends to heavy hitters in the enterprise world.

Want to learn more? Be sure to follow us on LinkedIn or visit newwwie.com, join the community and come and chat in the #security channel.

Keen on speaking? Reach out at the event, or message us here.

Members are also interested in