Michael Weinberg
Washington, District of Columbia, United States
606 followers
500+ connections
About
• Technology specialist with 20 years of professional experience in the electronics and…
Activity
606 followers
-
Michael Weinberg liked thisMichael Weinberg liked thisWe now know how the maintainer of axios was compromised. He was the target of a very sophisticated social engineering scam, perpetrated by a North Korean APT. They spun up a bunch of accounts that used the identity of a real company and real people. They reached out with an offer to collaborate - something OSS maintainers always need - and got him to join a Slack organization. The activity looked real, so he was convinced they were legit. The next phase was to invite him to a Team call, where he got a popup "from Teams" telling him something was outdated on his system. Except instead of updating teams, it installed a remote access trojan (RAT). Bye bye, credentials. You can feel the pain and frustration in his comments. He was sure these people were there to help, and instead they brought about one of the worst days of his life. The thing is: I don't think it's his responsibility alone to keep his project 100% secure. Axios. Chalk, debug. Is. Eslint-config-prettier. Event-stream. XZ Utils. All of these projects were compromised through social engineering. They were vulnerable because the maintainers have too much to do, and not enough support. I'm wrote about the various social engineering tactics used by threat actors here: https://lnkd.in/gAzDUSnD Popular open source projects should receive funding and resources (including security experts) from the community that uses them. Specifically, large companies that can afford to throw some time or money at this problem.
-
Michael Weinberg liked thisMichael Weinberg liked thisHow much does in-house CVE management cost your business? A LOT. 🤕 💰 We interviewed leading security teams to quantify the answer. 👇
Experience
-
-
-
-
-
-
-
-
-
-
-
-
-
Education
-
University of Delaware
-
-
Activities and Societies: Eta Kappa Nu – the Electrical & Computer Engineering Honor Society, Tau Beta Pi Engineering Honor Society, Phi Kappa Phi
Awarded the Peter J. Warter Scholarship – “in the opinion of the faculty, shows the most promise for a career in electrical and computer engineering.”
-
-
Licenses & Certifications
-
Registered Patent Agent
U.S. Patent and Trademark Office
IssuedCredential ID #63985 -
Passed Fundamentals of Engineering Exam
National Council of Examiners for Engineering and Surveying (NCEES)
Issued
Other similar profiles
Explore more posts
-
UNDERCODE TESTING
Agentic Remediation Exposed: Why Your AI-Generated Code Is a Security Time Bomb (And How to Defuse It) + Video Introduction: The rapid adoption of AI-assisted development is amplifying long-standing, fundamental security failures. While "agentic remediation" is touted as the new control layer for AI-generated code, it risks becoming another costly bandage applied to a gaping wound of missing governance, poor visibility, and a broken Secure Software Development Lifecycle (SSDLC). This article deconstructs the hype and provides actionable, technical steps to build the necessary foundation for secure innovation....
-
THREATINT
CISA Known Exploited Vulnerability: CVE-2025-24893: XWiki Platform Eval Injection Vulnerability XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch. https://lnkd.in/egP9sAAN #Cyber #Security #CyberSecurity #SoftwareSecurity #Vulnerability #CISA #CVE #KEV #CyberAwareness #InfoSec #CyberThreats #CyberResilience
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top contentOthers named Michael Weinberg
249 others named Michael Weinberg are on LinkedIn
See others named Michael Weinberg