About
I have worked in IT since 2010. My role at Veridos is as a Software Developer. Some of my…
Activity
-
Standing in front of the old White House—the historic headquarters of the 1st Marine Division—I found myself reflecting less on the building and more…
Standing in front of the old White House—the historic headquarters of the 1st Marine Division—I found myself reflecting less on the building and more…
Liked by Michael H.
-
Tremendous recognition for a real hero. Oregon State University was fortunate to have had then Major Ripley as the Marine Officer Instructor at…
Tremendous recognition for a real hero. Oregon State University was fortunate to have had then Major Ripley as the Marine Officer Instructor at…
Liked by Michael H.
-
Exciting news!!! I have officially launched Motivera Search Group in Sacramento! 🚀 Years ago, I stepped into my first IT recruiter role knowing…
Exciting news!!! I have officially launched Motivera Search Group in Sacramento! 🚀 Years ago, I stepped into my first IT recruiter role knowing…
Liked by Michael H.
Experience
-
-
-
-
-
Education
-
HackTheBox
-
Online classes regarding Information Security (Penetration Testing, Bug Hunting, etc.)
-
-
-
-
-
-
- Present
Licenses & Certifications
More activity by Michael
-
The CTO wanted to downplay a critical finding. Unauthorized access to thousands of records. We documented it as critical. The CTO said we only…
The CTO wanted to downplay a critical finding. Unauthorized access to thousands of records. We documented it as critical. The CTO said we only…
Liked by Michael H.
Other similar profiles
Explore more posts
-
Code Defence
A critical access and configuration validation vulnerability present within a primary edge routing orchestration platform has been officially added to the federal inventory of actively targeted threats. The flaw permits remote unauthenticated threat networks to execute malicious command parameters to bypass security rules and claim administrative control. Tracked as CVE-2026-20245, the vulnerability impacts Cisco Catalyst SD-WAN Manager environments. The defect stems from an improper encoding or output escaping logic failure inside core orchestration routines. Following its formal inclusion into the Known Exploited Vulnerabilities catalog by CISA, automated script arrays have been logged launching targeted mass sweeps to locate exposed public-facing management interfaces. The compromise of a centralized software-defined routing controller represents an extreme risk to enterprise communication boundaries. By gaining localized administrative authority over the orchestration hub, an adversary can manipulate global traffic metrics, instantiate unauthorized network connections, intercept raw information streams, and bypass perimeter firewall logging controls. - Isolate all Catalyst SD-WAN Manager administrative dashboards from direct public internet exposure immediately. - Apply the current software modifications and firmware patch packages supplied by the vendor to neutralize the encoding omission. - Scan orchestration logs for anomalous character sequences or unexpected administrative command invocations matching injection patterns. - Enforce rigid identity controls, gating device configuration channels exclusively behind isolated internal subnets or zero trust filters. Perimeter asset safety relies on keeping central management systems patched to ensure localized privilege validation weaknesses cannot facilitate wide-scale network takeovers. #CodeDefence #Cisco #SDWAN #CISA #KEV #PrivilegeEscalation
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content