Database Security
Authentication
Privacy
Compliance
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management

Author

Bob G. Stasio

Profile of Bob G. Stasio

Senior Product Manager, Cyber Analysis, IBM
Member Since: 1/15/2016
Author
News & Commentary Posts: 1
Comments: 0

Bob Stasio is currently a Senior Product Manager at IBM i2 Safer Planet. Prior to this role, Bob worked in the private sector standing up threat intelligence programs at Bloomberg and global financial firms. He accomplished these efforts as the owner of his own consulting firm and working internally within the enterprise. He also has deep government experience having held positions at NSA's Cyber Center, U.S. Cyber Command, U.S. Army's Signals Intelligence Corps, the FAA, and NASA.

Bob served as a U.S. Army officer, and is a recipient of numerous military awards, including the Bronze Star and Global War on Terrorism Expeditionary Medal. Bob is also a Truman National Security Fellow, Brookings Institution Council on U.S. and Italy fellow, and serves on the advisory board of multiple startups.

Bob received a Bachelors of Science degree in Mathematical Physics from the State University of New York at Buffalo. He holds a Master's degree and certifications in Intelligence Studies and Network Protection, respectively. Bob is also a graduate of numerous U.S. Department of Defense professional education courses focusing on intelligence operation, and holds various technical certifications, including CISSP.
Articles by Bob G. Stasio
Microsoft, Mastercard Aim to Change Identity Management
Kelly Sheridan, Staff Editor, Dark Reading,  12/3/2018
Windows 10 Security Questions Prove Easy for Attackers to Exploit
Kelly Sheridan, Staff Editor, Dark Reading,  12/5/2018
Starwood Breach Reaction Focuses on 4-Year Dwell
Curtis Franklin Jr., Senior Editor at Dark Reading,  12/5/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: I guess this answers the question: who's watching the watchers?
Current Issue
10 Best Practices That Could Reshape Your IT Security Department
This Dark Reading Tech Digest, explores ten best practices that could reshape IT security departments.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-20009
PUBLISHED: 2018-12-10
DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field.
CVE-2018-20010
PUBLISHED: 2018-12-10
DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field.
CVE-2018-20011
PUBLISHED: 2018-12-10
DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field.
CVE-2018-20012
PUBLISHED: 2018-12-10
PHPCMF 4.1.3 has XSS via the first input field to the index.php?s=member&c=register&m=index URI.
CVE-2018-20015
PUBLISHED: 2018-12-10
YzmCMS v5.2 has admin/role/add.html CSRF.