• Home
  • Viewing author profile for Ax Sharma

Ax Sharma

  • Location:Manchester, UK
  • Title:Security Researcher, Journalist
  • Forum Profile:AxSharma
  • Get in touch:
Author Photo
Author Bio

Ax Sharma is an Indian-origin British security researcher and journalist focused on malware analyses and cybercrime investigations. His areas of expertise include open source software security, threat intel analysis, and reverse engineering. Frequently featured by leading media outlets like the BBC, Channel 5, Fortune, WIRED, among others, Ax is an active community member of the OWASP Foundation and the British Association of Journalists (BAJ).

Send any tips via email or Twitter DM.

News
  • Rogers internet outage affecting customers in Ontario, Canada

    Rogers customers, primarily those located in Downtown Toronto and parts of Ontario, are reporting outages this week affecting their internet service. Some report being without internet for days, while others are experiencing intermittent disruptions and slowdowns when using their internet.

  • Children's snack recalled after its website caught serving porn

    Supermarket chain Lidl has been recalling four types of PAW Patrol-themed snacks across the UK. Except, the reason for the recall has got nothing to do with food contents, but the website listed on the snack's packaging serving porn.

  • Yes, there's an npm package called @(-.-)/env and some others like it

    Strangely named npm packages like -, @!-!/-, @(-.-)/env, and --hepl continue to exist on the internet's largest software registry. While not all of these may necessarily pose an obvious security risk, some were named before npm enforced naming guidelines and could potentially break tooling.

  • Rust devs push back as Serde project ships precompiled binaries

    Serde, a popular Rust (de)serialization project, has decided to ship its serde_derive macro as a precompiled binary. This has generated a fair amount of concern among some developers who highlight the future legal and technical issues this may pose, along with a potential for supply chain attacks.

  • UK gov keeps repeating its voter registration website is NOT a scam

    Every year local government bodies or councils across Britain contact residents, asking them to update their voter details on the electoral register if these have changed. To do so, residents are asked to visit HouseholdResponse.com, a domain that looks anything but official and has often confused people, who mistake it for a scam.

  • Amazon AWS distances itself from Moq amid data collection controversy

    Amazon AWS has withdrawn its association with open source project Moq after the project drew sharp criticism for its quiet addition of data collection features, as first reported by BleepingComputer.

  • Popular open source project Moq criticized for quietly collecting data

    Open source project Moq (pronounced "Mock") has drawn sharp criticism for quietly including a controversial dependency in its latest release. Moq's 4.20.0 release from this week included another project, SponsorLink, which caused an uproar among open source software consumers, who likened the move to a breach of trust.

  • Google News, Discover links showing 404 Not Found? Here's how to fix

    It happens here and then when Google Discover news feed stories you click on, take you to a 404 (Not Found) page—despite being live and up at the time. Here's how you can still read your favorite stories, and even workaround the bug that has occasionally bothered some users in the past.

  • Spotify down: music searches, pages, account signups not working

    Spotify users are reporting the music streaming service to be down in the last hour. Spotify team is currently investigating the cause.

  • Israel's largest oil refinery website offline after DDoS attack

    Website of Israel's largest oil refinery operator, BAZAN Group is inaccessible from most parts of the world as threat actors claim to have hacked the Group's cyber systems.

  • Apple rejects new name 'X' for Twitter iOS app because... rules

    Mr. Musk may have successfully pushed Twitter's new name and logo, 'X', and even made the vanity domain x.com redirect to the social media website, but that's not to say, the Mathematical double-struck letter will fit the bill everywhere. Apple's App Store can't accept Twitter iOS app's new name due to minimum character requirements

  • Twitter's rebranding to 'X' triggers Microsoft Edge security alert

    Microsoft Edge web browser has been displaying security warnings after Twitter changed its name to 'X'. It's got to do with a security feature dubbed 'Progressive Web App Icon change', designed to keep users safe during app icon or name changes.

  • Swiss visa appointments cancelled in UK due to 'IT incident'

    All appointments for Swiss Schengen tourist and transit visa applicants have been cancelled across the UK. TLScontact, the Swiss government's chosen IT provider for facilitating visa applicants for citizens of third countries, has blamed an 'IT incident' at its London, Manchester, and Edinburgh centers for appointment cancellations.

  • Shutterfly says Clop ransomware attack did not impact customer data

    Shutterfly, an online retail and photography manufacturing platform, is among the latest victims hit by Clop ransomware. Over the last few months, Clop ransomware gang has been exploiting a vulnerability in the MOVEit File Transfer utility to breach hundreds of companies to steal their data and attempt extortion against them.

  • JumpCloud resets admin API keys amid ‘ongoing incident’

    JumpCloud, a US-based enterprise software firm is notifying several customers of an "ongoing incident." As a caution, the company has invalidated existing admin API keys to protect its customer organizations. Headquartered in Colorado, the cloud-based directory-as-a-service platform serves over 180,000 organizations across the world.

Login