Francesco Lacerenza
Italia
1182 follower
Oltre 500 collegamenti
Informazioni
I'm 27, MSc in Cybersecurity, Application Security Engineer and Bug Hunter.
Passionate about Web Security, Network Protocols and Cloud Infrastructures.
Currently focused on Application Security Engineering and Cloud Security.
Attività
-
Join Doyensec's Francesco Lacerenza for Teleport Connect 2024! Learn how to protect against IDP compromise and harden your infrastructure and check…
Join Doyensec's Francesco Lacerenza for Teleport Connect 2024! Learn how to protect against IDP compromise and harden your infrastructure and check…
Consigliato da Francesco Lacerenza
-
Cross-site request forgery (CSRF) remains a viable vector in modern web applications despite browsers having been considerably hardened against CSRF.…
Cross-site request forgery (CSRF) remains a viable vector in modern web applications despite browsers having been considerably hardened against CSRF.…
Consigliato da Francesco Lacerenza
-
My latest research is out! I’m revealing a new Windows Installer EOP technique using Custom Actions and a flawed repair process. Microsoft hasn’t…
My latest research is out! I’m revealing a new Windows Installer EOP technique using Custom Actions and a flawed repair process. Microsoft hasn’t…
Consigliato da Francesco Lacerenza
Esperienza
Formazione
Progetti
-
Mentee at LeadTheFuture
-
Among the few Italian students selected to be mentees for LeadTheFuture, a leading mentorship non-profit organization for students in STEM, with acceptance rate below 20%. LeadTheFuture empowers top-performing students to achieve their goals and contribute to their communities by giving them one-on-one guidance from high-impact mentors coming from the world's leading STEM innovation hubs such as Silicon Valley and CERN.
-
Selected for the CyberchallengeIT Security Traning Program
-
Cyberchallenge IT is the the main Italian initiative aiming at identifying, recruiting and placing the next generation of IT security professionals. The Contest and the courses are organized by:
Ministry of Defense, National Intelligence Department, CINI (Cybersecurity National Lab), CISSapienza (Cyber Intelligence and Information security), the Italian University System and Private Companies in the IT Security Field.
Riconoscimenti e premi
-
Awarded by Meta for a Vulnerability disclosure during BountyConEDU 2022
Meta
Meta hosted its first ever European BountyConEDU in Spain aimed at University students. I was selected as attendee. During the live hack competition focused on Meta’s public bug bounty scope, I was awarded for a vulnerability disclosure.
Hall of Fame link : https://www.facebook.com/whitehat/thanks/ -
Awarded by Microsoft for an High Severity Impact Vulnerability disclosure
Microsoft Security Response Center (MSRC)
Second disclosure on the same component of my first submission, it was reviewed as High Severity Impact in the scope of the Microsoft Identity Bounty Program, the program curates the security and privacy of both consumer (Microsoft Account) and enterprise (Azure ActiveDirectory) identity solutions.
Microsoft Online Services Acknowledgements (Hall of Fame) link : https://msrc.microsoft.com/update-guide/acknowledgement/online -
Awarded by Microsoft for an High Severity Impact Vulnerability disclosure
Microsoft Security Response Center (MSRC)
The disclosure was reviewed as High Severity Impact in the scope of the Microsoft Identity Bounty Program, the program curates the security and privacy of both consumer (Microsoft Account) and enterprise (Azure ActiveDirectory) identity solutions.
Microsoft Online Services Acknowledgements (Hall of Fame) link : https://msrc.microsoft.com/update-guide/acknowledgement/online -
Recognized in the Mimecast Hall of Fame
Mimecast
Mimecast is an international company specializing in cloud-based email management for Microsoft Exchange and Microsoft Office 365, including security, archiving, and continuity services to protect business mail.
The company has a Responsible Disclosure Program, the Hall of Fame is where they recognize the researchers that have responsibly reported a security vulnerability.
Hall Of Fame link: https://www.mimecast.com/responsible-disclosure/ -
Recognized in the Issuu Hall of Fame
Issuu, Inc.
Issuu is a media company which gives anyone with digitally bound content the ability to upload and distribute their publications worldwide.
The company has a Responsible Disclosure Program, the Hall of Fame is where they recognize the researchers that have responsibly reported a security vulnerability.
Hall Of Fame link: https://issuu.com/responsible-disclosure -
Recognized in the Telecom Italia Hall of Fame
TELECOM Italia
Telecom Italia, is an Italian telecommunications company headquartered in Rome and Milan, which provides telephony services, mobile services, and DSL data services. It is the largest Italian telecommunications services provider in revenues and subscribers.
The company has a Responsible Disclosure Program, the Hall of Fame is where they recognize the researchers that have responsibly reported a security vulnerability.
Hall of Fame link:…Telecom Italia, is an Italian telecommunications company headquartered in Rome and Milan, which provides telephony services, mobile services, and DSL data services. It is the largest Italian telecommunications services provider in revenues and subscribers.
The company has a Responsible Disclosure Program, the Hall of Fame is where they recognize the researchers that have responsibly reported a security vulnerability.
Hall of Fame link: https://www.telecomitalia.com/tit/it/footer/responsible-disclosure.html
Responsible Disclosure Article Link: https://medium.com/@thesauruss/subdomain-takeover-a-tim-italia-rischio-di-cookie-stealing-legitimate-phishing-ecc-aa0404cc2245 -
CTF Player
Elmec Informatica
First classified at the Capture The Flag organized by Elmec Datacenter (Varese) for the University of Milan with the team Acher.
-
Developer and spokesman
IBM
First classified at the Hackathon organized by IBM with the team 0-DAY in the challenge New Buy Experience. It is always a pleasure discover new technologies and build with them a new and secure prospective for the future.
-
Developer and spokesman
Vodafone Foundation
First classified at the Hackathon organized by Vodafone Foundation with the team 0-DAY.
It was a pleasure to work with my classmates and produce innovation for the OSO Social Network;
in my opinion what took us to the top was our passion and hard work made in the correct definition of the Idea , from the "need" to the implementation. -
Developer
Vodafone Italia
Second Classified at the VodafoneHack (hackathon) with the team VodUp, helpful experience , it is always a pleasure to work with different people from totally different fields in order to build innovation.
Altre attività di Francesco
-
📚 tl;dr sec 238 Security Engineering @ Google Interview Notes, BSidesSF Talks, GitHub CI/CD Egress Filtering ✨ Highlights 📺 Conferences 📺 -…
📚 tl;dr sec 238 Security Engineering @ Google Interview Notes, BSidesSF Talks, GitHub CI/CD Egress Filtering ✨ Highlights 📺 Conferences 📺 -…
Consigliato da Francesco Lacerenza
-
Nice way to bypass CSRF protections (even with 'SameSite: Lax' defense in depth configured) using Client-Side Path Traversal as a gadget. Recommended…
Nice way to bypass CSRF protections (even with 'SameSite: Lax' defense in depth configured) using Client-Side Path Traversal as a gadget. Recommended…
Consigliato da Francesco Lacerenza
-
As a security company, we're honored when others in our field trust us to help secure their products! We're proud that the world-class testing our…
As a security company, we're honored when others in our field trust us to help secure their products! We're proud that the world-class testing our…
Consigliato da Francesco Lacerenza
-
We need fewer sensationalist articles about security breaches and more practical, step-by-step guides to prevent, detect, and remediate compromises.…
We need fewer sensationalist articles about security breaches and more practical, step-by-step guides to prevent, detect, and remediate compromises.…
Consigliato da Francesco Lacerenza
Altri profili simili
Altre persone che si chiamano Francesco Lacerenza in Italia
Su LinkedIn ci sono altre 11 persone che si chiamano Francesco Lacerenza in Italia
Vedi altre persone che si chiamano Francesco Lacerenza