Author

 Ilia Kolochenko
Twitter
LinkedIn
RSS
E-Mail

Profile of Ilia Kolochenko

CEO, High-Tech Bridge
News & Commentary Posts: 2

Ilia Kolochenko is the CEO of web application security and penetration testing company High-Tech Bridge. Prior to establishing High-Tech Bridge in 2007, Ilia worked as a penetration tester, and IT security expert and manager with various financial institutions worldwide, implementing and managing complex IT security projects. He founded High-Tech Bridge with a goal of delivering efficient and effective penetration testing to companies of all sizes and in 2010 created a concept of hybrid security assessment of web applications, called ImmuniWeb, which was officially launched in 2014. In 2015 High-Tech Bridge was selected by PwC to deliver web application security to their clients via ImmuniWeb.

Recognised as the expert in the field of web application security and cybercrime investigation, Ilia has presented keynote speeches at major cyber security events, is a regular contributor to various information security media, and is regularly quoted in international business and financial media, including Forbes and Financial Times.

Articles by Ilia Kolochenko
Microsoft, Mastercard Aim to Change Identity Management
Kelly Sheridan, Staff Editor, Dark Reading,  12/3/2018
Windows 10 Security Questions Prove Easy for Attackers to Exploit
Kelly Sheridan, Staff Editor, Dark Reading,  12/5/2018
Starwood Breach Reaction Focuses on 4-Year Dwell
Curtis Franklin Jr., Senior Editor at Dark Reading,  12/5/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: I guess this answers the question: who's watching the watchers?
Current Issue
10 Best Practices That Could Reshape Your IT Security Department
This Dark Reading Tech Digest, explores ten best practices that could reshape IT security departments.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-20009
PUBLISHED: 2018-12-10
DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field.
CVE-2018-20010
PUBLISHED: 2018-12-10
DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field.
CVE-2018-20011
PUBLISHED: 2018-12-10
DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field.
CVE-2018-20012
PUBLISHED: 2018-12-10
PHPCMF 4.1.3 has XSS via the first input field to the index.php?s=member&c=register&m=index URI.
CVE-2018-20015
PUBLISHED: 2018-12-10
YzmCMS v5.2 has admin/role/add.html CSRF.