@goldbe

ceo @getBastionZero. infosec researcher and professor @BUCompSci https://xitter.cf/t.co/Csj18OQi16 mastodon:: @goldbe@infosec.exchange

 Boston
bastionzero.com
Joined April 2009
  • Tweets3.6K
  • Following1.1K
  • Followers4.4K
210Media
Replying to @OneRSAC @RSAConference @getBastionZero
This was such a great moment for our team @getBastionZero! Here's the video of my 3-min pitch about BastionZero, which placed 2nd amongst hundreds of startups at the #RSAC 2022 innovation sandbox. youtu.be/TFCj6l7WpHw

RSA Conference 2022 Innovation Sandbox - BastionZero, Inc.

Sharon Goldberg, CEO, BastionZero, Inc., pitches at the RSAC 2022 I...

youtube.com
1
3
7
New blog post from me!
Cloudflare
@Cloudflare19 Jun 2025
We read NIST’s new guidance on “Implementing a Zero-Trust Architecture” so that you don’t have to. Read this to get the key points on the newly-released NIST Special Publication 1800-35. cfl.re/4kM4wiH

Everything you need to know about NIST’s new guidance in “SP 1800-35: Implementing a Zero Trust...

We read NIST’s new guidance on “Implementing a Zero-Trust Architecture” so that you don’t have to. Read this to get the key points on the newly-released NIST Special Publication 1800-35.

blog.cloudflare.com
2
2
4
777
This reaction. 💙 Alisa Efimova & Misha Mitrofanov end their free skate and receive a standing ovation from the Boston crowd. #WorldFigure 📺 USA Network

This media is unavailable

9
58
6
537
56,576
They are missed 🕊️
Jackie Wong
@rockerskating8 Mar 2023
One of my favorite pairs programs in my early days of figure skating fandom - Evgenia Shishkova/Vadim Naumov were playful in their musicality, original in their lifts, and phenomenal in their line. They won 1994 Worlds with this fun free skate
1
518
It's live! 🎉
Cloudflare
@Cloudflare22 Oct 2024
Access for Infrastructure, will enable organizations to apply #ZeroTrust controls to their servers, databases, Kubernetes clusters, and more. Today we’re announcing short-lived SSH access as the first available feature of this integration. cfl.re/3Uj5Y0N

Fearless SSH: short-lived certificates bring Zero Trust to infrastructure

Access for Infrastructure, BastionZero’s integration into Cloudflare One, will enable organizations to apply Zero Trust controls to their servers, databases, Kubernetes clusters, and more. Today...

blog.cloudflare.com
1
14
705
SQL injection, sadly still relevant in 2024. It's the topic of "Lecture 2" of my "Intro to Infosec" course at @BUCompSci today (and has been for the last 10 years).
Ian Carroll
@iangcarroll29 Aug 2024
In April, @samwcyo and I discovered a way to bypass airport security via SQL injection in a database of crewmembers. Unfortunately, DHS ghosted us after we disclosed the issue, and the TSA attempted to cover up what we found. Here is our writeup: ian.sh/tsa

Bypassing airport security via SQL injection

We discovered a serious vulnerability in the Known Crewmember (KCM) and Cockpit Access Security System (CASS) programs used by the Transportation Security Administration.

ian.sh
1
634
Sharon Goldberg retweeted
Jennifer Rexford@jrexnet31 May 2024
Congratulations to @goldbe and the BastionZero team!
Sharon Goldberg@goldbe30 May 2024
With immense gratitude and excitement, I’m thrilled to announce that BastionZero is now part of Cloudflare! This is an incredible opportunity to take our tech to the the next level as we deeply integrate into the world’s largest SASE network. Watch this space!
1
1
12
1,976
Sharon Goldberg retweeted
Michelle Zatlyn
@zatlyn30 May 2024
Excited to share that @Cloudflare has acquired @getBastionZero, expanding the scope of Cloudflare’s VPN replacement solution beyond apps and networks to infrastructure. Welcome to the team! cfl.re/bastionzero

Cloudflare acquires BastionZero to extend Zero Trust access to IT infrastructure

We’re excited to announce that BastionZero, a Zero Trust infrastructure access platform, has joined Cloudflare. This acquisition extends our Zero Trust Network Access (ZTNA) flows with native access...

blog.cloudflare.com
7
8
2
84
7,901
Sharon Goldberg retweeted
Underscore VC@UnderscoreVC30 May 2024
Congratulations to @getBastionZero and @Cloudflare, as they join forces to help more IT and security teams provide zero-trust access to their servers and other infrastructure! We tip our hats to @goldbe and @Ethan_Heilman, the incredible co-founders of BastionZero. 👏
Michelle Zatlyn
@zatlyn30 May 2024
Excited to share that @Cloudflare has acquired @getBastionZero, expanding the scope of Cloudflare’s VPN replacement solution beyond apps and networks to infrastructure. Welcome to the team! cfl.re/bastionzero

Cloudflare acquires BastionZero to extend Zero Trust access to IT infrastructure

We’re excited to announce that BastionZero, a Zero Trust infrastructure access platform, has joined Cloudflare. This acquisition extends our Zero Trust Network Access (ZTNA) flows with native access...

blog.cloudflare.com
1
3
10
1,381
With immense gratitude and excitement, I’m thrilled to announce that BastionZero is now part of Cloudflare! This is an incredible opportunity to take our tech to the the next level as we deeply integrate into the world’s largest SASE network. Watch this space!
15
7
1
85
7,234
.@getBastionZero CEO @goldbe is teaming up with Cisco's @rlbarnes to solve a problem relevant to the #OpenPubkey community. Check out the blog below to learn more about their vision for Proof of Issuer Key Authority (PIKA). bastionzero.com/blog/introdu…
3
4
704
Sharon Goldberg retweeted
BastionZero@getBastionZero24 Apr 2024
Our CEO @goldbe and @rlbarnes from Cisco are excited to introduce PIKA: Proof of Issuer Key Authority to solve a problem relevant to #OpenPubkey #oidc and JWT (JSON Web Tokens). Learn more in our latest blog: bastionzero.com/blog/introdu…
2
4
607
I really like this new blog explaining how to generalize #openpubkey to any Identity Provider.
Ethan ✨ is on BlueSky✨ Heilman 🐱@Ethan_Heilman16 Apr 2024
Post explaining how we used Guillou-Quisquater (GQ) signatures add @gitlab CI/CD support to OpenPubkey This cryptographic combability trick allows #OpenPubkey to support all sorts of identity providers we never thought we could support. bastionzero.com/blog/general…
3
557
"Tracked as CVE-2024-3400, the issue has a CVSS score of 10.0, indicating maximum severity. " thehackernews.com/2024/04/ze…

Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack

Critical security flaw found in Palo Alto Networks firewalls. Hackers are already taking advantage.

thehackernews.com
478
Monster release from our #OpenPubkey team!
BastionZero@getBastionZero12 Apr 2024
BastionZero is proud to announce a new release of #OpenPubkey (Release v0.3.0), probably the biggest release we've ever done. The release is packed with 44 PRs from 10 different contributors at @getBastionZero, @Docker, and others. Read more. hubs.la/Q02sGsXM0
2
6
1,224
v0.3.0 release of OpenPubkey is out. Thanks to everyone who contributed, this is probably the biggest release we've ever done. github.com/openpubkey/openpu…

Release OpenPubkey Release v0.3.0 · openpubkey/openpubkey

What's Changed Allow setting op signature type on pk token creation by @lgmugnier in #63 Perform blinded ModInverse and replace big.Int with bigmod.Nat where needed by @johncmerfeld in #67 Add...

github.com
3
1
6
1,060
Excited to share a new @ietf draft that @rlbarnes and I just submitted to the OAuth working group. We introduce PIKA: Proof of Issue Key Authority, to solve a problem relevant to #OpenPubkey, OIDC and JWTs. ietf.org/archive/id/draft-ba…
1
1
1
7
940
more replies
PIKAs also allow verification of JWTs, ID Tokens and other OIDC tokens without querying the OP directly. Use PIKAs to reduce the load on a OP, or to build software #supplychain applications that need historical information about OP keys.
1
1
1
1
1,508
We're still digesting all the different ways that PIKAs can be used to improve the security of OIDC, SSO or software supply chain security applications. Please get in touch if you have any feedback on our new @ietf draft! ietf.org/archive/id/draft-ba…
1
2
351
Load more