Profile for GonzSTL

GonzSTL
Member Since: March 12, 2014
Ninja
Posts: 257

Gonz Roman
IT Manager
St. Louis County Government
Clayton, MO USA

Gonz is an IT Manager at the St. Louis County Government, with over 20 years of experience in IT, encompassing applications development, desktop management, network and server infrastructure management, BCP/DRP, information systems security, and IT management. He was previously responsible for the security aspects of various initiatives at the St. Louis County Government including regulatory compliance, vulnerability management, and information security governance, a member of the Information Services Operations Committee, Information Services Steering Committee and the IT Security Group.

Gonz earned a BS from the University of Texas at Dallas with a major in Computer Science. He holds a CISSP, and is also an adjunct instructor at ITT Technical Institute in Earth City MO, teaching classes in Information Systems Security. He is active in the St. Louis chapter of the Society for Information Management (www.simnet.org).

The comments and opinions I post in this forum are my own, and they do not necessarily reflect the views, opinions, policies, and practices at my place of employment.



White House Cybersecurity Strategy at a Crossroads
Kelly Jackson Higgins, Executive Editor at Dark Reading,  7/17/2018
Mueller Probe Yields Hacking Indictments for 12 Russian Military Officers
Kelly Jackson Higgins, Executive Editor at Dark Reading,  7/13/2018
10 Ways to Protect Protocols That Aren't DNS
Curtis Franklin Jr., Senior Editor at Dark Reading,  7/16/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2016-10727
PUBLISHED: 2018-07-20
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive ...
CVE-2018-8018
PUBLISHED: 2018-07-20
Apache Ignite 2.5 and earlier serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one sends a spe...
CVE-2018-14415
PUBLISHED: 2018-07-20
An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth input elements on the admincp.php?app=prop&do=add screen.
CVE-2018-14418
PUBLISHED: 2018-07-20
In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI.
CVE-2018-14419
PUBLISHED: 2018-07-20
MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page.