Suggestions
Ankita Gupta
Chief Of Staff at CleverTap - B2B SaaS
Ankita Gupta is a seasoned professional with a diverse background in technology, business, and leadership roles.
She currently serves as the Chief of Staff at CleverTap, a prominent B2B SaaS company.
Ankita's previous experiences include notable positions at LinkedIn, VMware, JP Morgan, and other reputable organizations.
She holds a Bachelor's degree in Chemical Engineering from the prestigious Indian Institute of Technology, Roorkee.
Ankita further pursued her education by completing a Master of Business Administration (MBA) from The Tuck School of Business at Dartmouth College, located in the United States.
Her journey includes roles ranging from Software Engineer at Snapdeal to Investment Banking Analyst at J.P. Morgan, showcasing her adaptability and expertise across various domains.
Ankita's versatile background also encompasses Strategy Planning Manager and MBA Intern roles at VMware, highlighting her strategic acumen and business operations proficiency.
During her tenure at LinkedIn, Ankita excelled as a Pre-MBA Intern focusing on Business Operations and Strategy.
Additionally, she contributed as a Due Diligence and Research Analyst with a focus on Impact Investing at Dasra, underscoring her commitment to social impact and responsible investing.
Ankita's professional journey is characterized by a strong academic foundation from IIT Roorkee combined with hands-on experience at renowned global corporations, culminating in her current key position at CleverTap.
Highlights
[2/10] GraphQL query depth security issue
What is it? GraphQL allows for nested queries, where one field can contain other fields, which can contain more fields. If a query is too deeply nested, it can consume a lot of processing power and memory on the server.
Impact:
-
Possible DoS: Uncontrolled query depth can be exploited for DoS attacks, making the API vulnerable to being taken offline or performing poorly under load.
-
Performance Degradation: Deeply nested queries can take a long time to execute, slowing down the API's response time for all users.
-
Increased Resource Usage: The server might need more memory and CPU resources to handle these queries, potentially leading to crashes or degraded performance.
Check: Prevent deep queries that can potentially lead to performance issues, such as Denial of Service (DoS) attacks.
Top Cyber Predictions 2024-2028 by Gartner I thought were interesting to share:
-
CISO Legal Exposure: By 2027, 2/3rds of global 100 organizations will extend Directors and Officers (D&O) insurance to cybersecurity leaders due to increased personal legal exposure.
-
Battling Malinformation: By 2028, enterprise spending to combat malinformation will surpass $500 billion, consuming 50% of marketing and cybersecurity budgets.
-
GenAI and Skills Gap: By 2028, the adoption of Generative AI (GenAI) will eliminate the need for specialized education in 50% of entry-level cybersecurity positions.
-
Zero Trust Exclusion: Through 2026, 75% of organizations will exclude unmanaged, legacy, and cyber-physical systems from their Zero Trust models.
-
IAM Breach Response: By 2026, 40% IAM leaders will take primary responsibility for detecting and responding to IAM-related breaches.
-
Data Loss Prevention: By 2027, 70% of organizations will integrate Data Loss Prevention (DLP) with insider risk management disciplines, leveraging IAM context to more effectively identify suspicious behavior.
-
Application Security: By 2027, 30% of cybersecurity functions will redesign application security to be consumed by non-cyber experts and owned by application owners.
Modern Appsec trend is the most interesting to me as it talks about creating a new high-value role called "Application security product manager".
