Vulnerability
May 11, 20267 min read
MSMQ RCE: Your Forgotten Message Queue Just Became a Hacker's Launchpad
An old, often-overlooked Microsoft service just got hit with a critical RCE, letting attackers turn your async comms into system commands.
Available for Opportunities
Shubham (Sam) Singla
Cybersecurity & IT Professional
Securing digital infrastructures and building robust web solutions. Specialized in SOC operations, Penetration Testing, and Full-stack Development.
Featured Projects
A snapshot of recent work — security tools, marketplaces, and automation. Click a card to see the full development timeline.
From the Blog
Daily cybersecurity writing — incident analysis, vulnerability disclosures, and defensive playbooks.
Vulnerability
May 10, 20268 min read
Your SharePoint Server: An Attacker's New Playground (CVE-2024-30044)
Microsoft SharePoint just dropped a critical RCE, letting attackers turn your collaboration hub into a launchpad.
Vulnerability
May 09, 20267 min read
GitLab RCE: Your CI/CD's Front Door Was Wide Open
A recent unauthenticated RCE in GitLab CE/EE means your private code and build pipelines might be an attacker's playground.
Core Skills
Tools and technologies I use to secure and build systems.
Cybersecurity Operations
Incident ResponseThreat DetectionRisk AssessmentComplianceMobile Testing
Technical Skills
Penetration TestingVulnerability AssessmentWeb App Security (Burp Suite)Linux AdministrationAPI Testing
Development & Tools
Scripting & AutomationVersion Control (Git)Network ConfigurationSDLC Awareness
Professional Experience
A timeline of my journey in Cybersecurity and IT Operations.
SOC Team Leader
NAB SOC
Oct 2025 - CurrentDocklands, VIC
- Led SOC operations during high-volume periods, managing 150+ security calls and alerts daily.
- Directed incident triage, escalation, and final resolution, ensuring SLA and client compliance.
- Set priorities, allocated workloads, and guided the team to maintain operational efficiency.
- Acted as the final authority on incident severity, response actions, and closure decisions.
- Coordinated with stakeholders and clients to communicate incidents, remediation, and outcomes.
Cyber Security Analyst
Web Alive
June 2025 - Oct 2025South Yarra, VIC
- Performed web app security testing on Web Commander, Events Booking, Exsited ERP, and Reed Events using Burp Suite Pro and manual testing (SQL, XSS).
- Conducted data access control checks across role-based views in Events Booking.
- Used Kali tools for directory, brute-forcing, and HTTP header analysis.
- Ran Nessus scans to identify vulnerabilities across WebAlive's network.
- Performed server setup with XCP-ng, Proxmox and VM creation on Rocky Linux 9.
- Performed API testing using Postman and performed manual testing.
Security Operations Centre Operator
NAB SOC
Feb 2024 - Oct 2025Docklands, VIC
- Managed over 150 calls daily, ensuring timely and effective response to security incidents.
- Actioned tickets based on client needs, improving response times by 20%.
- Provided technical support for security systems, enhanced functionality, and reliability.
- Delivered excellent customer service, addressing client inquiries and concerns.
- Implemented and monitored security protocols, resulting in a safer environment.