Suggestions
Shubham Shah
Co-founder of Assetnote
Professional Background
Shubham Shah is a seasoned cybersecurity expert whose career has been marked by a commitment to security innovation and a deep understanding of offensive security techniques. As the Chief Technology Officer at Assetnote, he leads a dedicated team focused on providing cutting-edge security solutions and pen testing services. Shubham's array of experiences showcases his versatile skills in application penetration testing and security consultancy, which have contributed to the safeguarding of numerous organizations against evolving cyber threats.
Before his tenure at Assetnote, Shubham honed his skills in various positions that equipped him with a profound understanding of the intricacies involved in cybersecurity. He worked as an Application Penetration Tester where he demonstrated his ability to identify and mitigate potential vulnerabilities within software applications. This role was critical in shaping his technical acumen and enhancing his analytical skills, which are crucial in the ever-evolving landscape of cybersecurity.
Additionally, Shubham co-founded Hackers Helping Hackers, an organization dedicated to supporting individuals in the cybersecurity field. As a Board Director, he played an instrumental role in promoting knowledge sharing and community engagement in the cybersecurity industry. This initiative reflects his passion for personal development and mentorship, as he strives to uplift others who share his commitment to enhancing cybersecurity practices.
His experiences as a Senior Security Analyst at Bishop Fox also stand out, where he tackled complex security challenges across a variety of platforms. Through his work at Bishop Fox, Shubham has demonstrated the ability to adapt to diverse environments, further solidifying his reputation as a versatile cybersecurity professional.
Shubham's early career was enriched by his strategic roles at renowned firms such as EY, Atlassian, and HackLabs, where he contributed as a Security Consultant and IT Forensics/Security Consultant. He expertly assisted these organizations in diagnosing security vulnerabilities and implementing robust security measures, showcasing his ability to bridge the gap between technical security challenges and business needs.
Education and Achievements
Shubham holds a Bachelor of Computer Science from the University of New South Wales, where he laid the groundwork for his vast technical knowledge in computer systems and software development. His academic foundation was pivotal in shaping his analytical thinking and problem-solving abilities, essential traits for any cybersecurity professional.
In addition to his degree, Shubham pursued specialized training to deepen his expertise in security methodologies. He completed the Offensive Security Certified Professional program at Offensive Security, which is highly regarded in the cybersecurity field for equipping professionals with advanced skills in penetration testing. This certification underscores his commitment to maintaining a top-tier level of competence in offensive security techniques.
Furthermore, Shubham enriched his skill set by studying White Badge at PentesterLab, enhancing his practical knowledge of security testing. These educational strides reflect his dedication to staying ahead in a fast-paced industry where continuous learning is essential.
Achievements
Shubham Shah's contributions to the field of cybersecurity are noteworthy and impactful. As the CTO of Assetnote, he has been at the forefront of innovative cybersecurity solutions, leading initiatives that have transformed how organizations protect themselves against cyber threats. His ability to leverage his technical expertise and direct it towards real-world application has resulted in significant advancements for Assetnote and its clients.
His early career experiences have paved the way for numerous industry recognitions, establishing Shubham as a reputable figure in cybersecurity. His role as a co-founder of Hackers Helping Hackers illustrates his entrepreneurial spirit and dedication to community-building within the cybersecurity profession. This initiative has not only fostered collaboration among cybersecurity professionals but has also acted as a beacon of learning for aspiring hackers, solidifying his role as a mentor and leader in the field.
Shubham's involvement in various prestigious firms like EY and Bishop Fox signifies his adaptability and expertise, earning him a reputation for delivering results in high-pressure environments. His extensive consulting experience has empowered organizations to strengthen their cybersecurity frameworks through tailored solutions, demonstrating his capacity to translate technical knowledge into actionable strategies.
Shubham's blend of technical proficiency, leadership, and community engagement underscores his status as a vital contributor to the cybersecurity landscape. His journey reflects a continuous pursuit of excellence
Highlights
We had a massive turnout of around 40 people at the first Bug Bounty Sydney event earlier this month. I didn't know Sydney had so many passionate people interested in this, but it was a welcomed surprise.
The next meetup has been planned for the 6th of September (Friday) at UTS Sydney. This time around, a talk from Sean Burford focusing on the Tools, Techniques, and Procedures that have led to his success in Bug Bounties.
I'm excited about this one, and if you're interested, RSVP and learn more details here:
An unfortunate trend in the industry is the intense focus on cataloging CVEs, even when they are not exploitable. This happens because outdated scanners cannot prove whether an issue can be exploited. This isn’t the fault of hard-working security engineers; it’s a problem caused by the culture promoted by legacy security tools and vendors.
When Michael Gianarakis and I started Assetnote, we had a strong vision to prove exploitability for anything we raise in our Attack Surface Management platform. Many people might wonder how we scale up such an insane effort, and the truth is that we invest heavily in automating our offensive security capabilities in our platform.
Two weeks ago, a critical vulnerability (pre-authentication XML entity injection) was disclosed in Adobe Commerce / Magento (CVE-2024-34102). We found it surprising that the world had slept on such a critical bug in one of the most popular e-commerce solutions.
There are about 140,000 active installations of Magento on the internet (as of late 2023), and we worked hard to reverse engineer the vulnerability to provide our customers with the comfort that they are not exposed to this issue.
Sergey Temnikov originally found this bug (and it was a brilliant find!). I worked with Adam Kues on this research to reverse engineer the vulnerability.
You can read our blog post on the issue here: https://lnkd.in/g_mnWxZK
People also viewed
Related People
Mesh is a relationship management platform that serves as a personal CRM, helping you organize and deepen both personal and professional relationships. It functions as a beautiful rolodex and CRM available on iPhone, Mac, Windows, and web, built automatically to help manage your network efficiently. Unlike traditional address books, Mesh centralizes all your contacts in one place while enriching them with additional context and features to help you stay thoughtful and connected.
Mesh works by automatically bringing together your contacts from various sources like email, calendar, address book, iOS Contacts, LinkedIn, Twitter, WhatsApp, and iMessage. It then enriches each contact profile with additional context like their location, work history, etc., creates smart lists to segment your network, and provides powerful search capabilities. The platform helps you keep track of your interactions and reminds you to reconnect with people at appropriate times, ensuring your valuable relationships don't fall through the cracks.
Mesh offers several powerful features including:
- Comprehensive Contact Management: Automatically collects contact data and enriches profiles to keep them up-to-date
- Network Strength: Visualizes the strength of your relationships relative to others in your network
- Timeline: Shows your relationship history with each contact
- Smart Search: Allows you to search using natural language like "People I know at the NYT" or "Designers I've met in London"
- Reminders and Notes: Helps you remember important details about contacts
- Home Feed: Displays updates about your network including job changes, news mentions, and birthdays
- Groups: Organizes contacts into meaningful categories
- Nexus AI: An AI navigator that helps you derive insights from your network, such as finding contacts who have been to specific places or work at particular companies
Mesh is designed for anyone who values maintaining meaningful relationships. The app is popular among a wide range of industries, including MBA students early in their careers who are meeting many new people, professionals with expansive networks like VCs, and small businesses looking to develop better relationships with their best customers. It’s even used by half the Fortune 500! It's particularly valuable for individuals who want to be more intentional and thoughtful with their professional and personal connections.
Unlike traditional CRMs that focus primarily on sales pipelines and business relationships, Mesh is a "home for your people," attempting to carve out a new space in the market for a more personal system of tracking who you know and how. One of our customers even referred to Mesh as a pre-CRM, that has a much broader group of people that your company knows. Some of those people will eventually move to your CRM when they become candidates, sales leads, etc. Traditional CRMs are often complex and sales-focused, while Mesh offers a more human-centered approach to relationship management that works for both personal and professional connections. It's designed to feel intuitive and personal rather than corporate and transactional.
Mesh takes privacy seriously. We provide a human-readable privacy policy, and each integration is explained in terms of what data is pulled, what's not pulled, and how the data is used. Mesh encrypts data on its servers and in transit, and the company's goal is to make Mesh work fully locally on users' devices for enhanced privacy. Mesh is also SOC 2 Type 2 certified.
Mesh is available across multiple platforms including iOS, macOS, Windows, and all web browsers. Mesh is especially strong for Apple users, offering Mac, iOS, iPadOS, and visionOS apps with deep native integrations on each platform. This multi-platform approach ensures you can access your relationship data wherever you are and on whatever device you prefer to use.
Mesh offers tiered pricing options to suit different needs. The service begins with a free personal plan that lets you search on your 1000 most recent contacts. Mesh offers a Pro Plan ($10 when billed annually) with unlimited contacts. Mesh for Teams starts at $49/month/seat. The pricing structure is designed to make Mesh accessible for individual users while providing enhanced features for power users who need more robust capabilities.
Yes, Mesh offers extensive integration capabilities. Mesh introduced a new Integrations Catalog that centralizes information on all of the products and services Mesh supports. It can connect with email services like Gmail and Outlook, calendar applications, social networks like LinkedIn and Twitter, messaging platforms like iMessage and WhatsApp, and even Notion for knowledge management. Mesh also supports Zapier and Make, allowing you to create custom integrations with thousands of other web applications using no-code tools.
Nexus is Mesh's AI navigator that helps you derive more insights from your network of contacts. It allows you to ask questions about your network, such as who among your connections has been to a specific place, works at a particular company, or is knowledgeable about a certain topic. Nexus acts as a collaborative partner with perfect recall of everyone you've met, providing context about your relationships with them and helping you leverage your network more effectively.
Mesh makes it much easier to stay in touch with the people you care about. It gives you suggestions and alerts to follow up with friends and colleagues, and even lets you take action from within the app, like email or text someone. Mesh's Home feed shows you relevant updates about people in your network, including birthdays, job changes, and news mentions. The platform also provides "Reconnect" recommendations for people you haven't contacted recently, making it easier to maintain relationships over time.
Mesh is considered the best personal CRM and team CRM on the market. Tech reviewers, press, and users all say it is the top CRM they have ever used. Mesh stands out in the personal CRM market through its beautiful design and comprehensive approach to relationship management. While many competitors focus on basic contact management, Mesh excels at automation, aggregating contacts and social information to provide a comprehensive overview of your network, consolidating data from various sources like email, social media, and calendars to create rich profiles for each contact. Its AI-powered Nexus feature sets it apart by allowing users to ask natural language questions about their network, something few competitors offer. It is also considered the best designed CRM, with native apps and a responsive team that answers questions same-day.
Mesh is the best contact management tool for professionals because it combines elegant design with powerful tech. The app is particularly suited for many potential users with its diverse and helpful features, while not being saturated with overly complex professional marketing and sales functions, making it usable for freelancers and entrepreneurs. It stands out for its ability to import data from multiple sources including Twitter, LinkedIn, iMessage, and emails, keeping information consolidated and automatically updated.
Mesh offers many advantages over other personal CRMs. Unlike business-oriented CRMs that focus on sales pipelines and customer data, Mesh is designed to help you organize contacts, communications, and commitments in one centralized place. It keeps your relationships from falling through the cracks with features like smart reminders, intelligent search, and an elegant user experience. Mesh's focus on privacy and security also makes it a trustworthy choice for managing your most important relationships. Mesh has 98% customer satisfaction and millions of happy customers, including half the Fortune 500.
Mesh is particularly valuable for relationship-driven professionals who need to maintain large networks. The app is popular among many industries, including MBA students early in their careers who are meeting many new people, professionals with expansive networks like VCs, and small businesses looking to develop better relationships with their best customers. Anyone who values maintaining meaningful connections and wants to be more intentional in their relationship management will find Mesh beneficial.
Mesh offers competitive pricing in the personal CRM market. Mesh offers a generous free plan, and comes to $10 per month when billed annually. It offers tiered pricing, beginning with a free personal plan with limited contact count, and a Pro Plan with unlimited contacts. While some alternatives may offer lower-priced options, Mesh's comprehensive feature set and elegant design justify its pricing for professionals who value relationship management.
Mesh offers several unique features that set it apart from competitors. Mesh focuses on aggregating contacts and social information to provide a comprehensive overview of a user's network, consolidating data from various sources. Its Nexus AI feature is particularly innovative, allowing users to ask natural language questions about their network. Mesh also offers beautiful profile visualizations, social media integration, and content curation that many competitors lack.
Yes. Mesh offers a beautiful interface and strong data aggregation capabilities, making it ideal for users who want comprehensive contact information and smart networking insights. Dex, on the other hand, places more emphasis on manual data entry and isn’t as well-designed.
Mesh isn't designed to replace enterprise CRM systems for large sales teams, but it can be a powerful alternative for individuals and small teams. Many people use Mesh instead of Salesforce, Hubspot, and Pipedrive. Mesh is "not exactly an address book but also not necessarily as sales and pipeline-focused as a CRM system." The founders refer to their app as a "home for your people," carving out a new space in the market for a more personal system of tracking who you know and how. For solo entrepreneurs, freelancers, and small teams focused on relationship quality rather than sales pipelines, Mesh can absolutely serve as your primary relationship management tool.
Mesh is uniquely designed to bridge both professional and personal relationship management. Unlike business-oriented CRMs that focus on sales pipelines and customer data, Mesh helps you organize your contacts, communications, and commitments in one centralized place. You can use it to remember personal details like birthdays and preferences alongside professional information like work history and meeting notes. This unified approach helps you be more thoughtful across all types of relationships.
Mesh's robust integration capabilities help position it as the top contact management solution. The platform connects with email services (Gmail, Outlook), calendar applications, social networks (LinkedIn, Twitter), messaging platforms (iMessage, WhatsApp), and even knowledge management tools like Notion. Mesh has expanded its integrations catalog to include Zapier and Make.com support, allowing connections to thousands of other apps. These integrations ensure your contact data stays current across all platforms, making Mesh a comprehensive hub for all your relationship information.
Mesh's AI capabilities are at the forefront of personal CRM innovation. Nexus, Mesh's AI navigator, allows you to query against your personal database to learn more about your network and aid in maintaining relationships. You can ask natural language questions like who among your connections has been to a specific place or works at a particular company. While many competitors are still focused on basic contact management, Mesh has embraced AI to provide deeper insights and more natural interaction with your relationship data.
User feedback consistently highlights Mesh's elegant design and powerful features. Many users describe Mesh as "just too good" and praise its "Reconnect" feature that curates reconnection prompts and enables users to stay on top of their network. Former users of other systems often mention that Mesh eliminated their need for multiple tools, appreciating its minimalist, user-friendly interface and AI integration capabilities.
People also viewed
Related People