Working on making our #security #bugbountry program public on the Intigriti platform for #Liferay. Right now we have a private program which was an initial success, I really look forward for opening it up for all researchers! What are the key points we would need to focus on?

Yesterday, I had the honor of receiving the Information Security Leader of the Year award from mVISZ.

Although my name is engraved on the plaque, this award is really the achievement of the fantastic Liferay InfoSec team. I’m proud and grateful to be on this journey with such a great team. 💙

I had applied for the InfoSec Leader of the year (Hungary), showcasing how our team has transformed #Liferay to become more secure in the past years and how we have introduced a new Premium Security package to connect more to business. Results will be announced tomorrow!

There are big investments which are hard at first, and turn out to be awesome. This was the case with my Concept2 ERG and now with Thermomix. I always find a way to calculate the ROI, while both are expensive, they are "making money" by now. Thermomix turned "black" today. 🎉 What are similar tools?

After the log4j incident, everyone switched to mandatory library upgrades instead of accepting patches. Now people are cross-referencing non-related product CVEs, just in case. False positives are the biggest challenge for Information Security groups and they are spreading exponentially.

Why aren't Ubuntu ESM packages recognized by vulnerability scanners? It's challenging to work through the false positives every time when you do the right thing and patch responsibly.

Following roughly the #5amclub guidelines to organise my day helped a lot for me to stay on top of my priorities. Strava confirmed that I’m pretty consistent now. Do you prefer to wake up early?

What's happening this Saturday? It seems everyone is working, I even get answers from vendors. This is a working Saturday for Hungary, but I get global responses?

Downloading 1.7TB of ingress logs from a recent #DDoS attack. I really like to dig deep in the data to learn more about attack patterns to improve our tooling.

The love locks on bridges and view points are usually a nice challenge for red team members or physical pentesters. There’s a single root lock which holds this whole bunch at the top station of the Budapest Funicular - if you want practice material. #InfoSec

Working with the #InfoSec team at #Liferay setting up the OKRs for next year. We have some very exciting projects to work on, it's a tough choice where to focus. What are the key investments you are planning to make?