sohum@xyz:~$ whoami
Data scientist · security practitioner · builder
I'm Sohum — a data scientist, technology professional, and tinkerer. I work across data, cybersecurity, and software, and I'm currently in grad school writing systems code in C. Also: cannabis industry veteran and die-hard Chelsea fan.
01
Tableau dashboard tracking revenue, player engagement, and store-level KPIs for a fictional esports retail chain.
Auditing and hardening file and directory permissions in a Bash shell with ls, chmod, and least-privilege reasoning.
02
Low-level programming in C: memory management, pointers, data structures, and building tools from scratch.
Implementations and analysis of core algorithms: divide and conquer, dynamic programming, greedy methods, and graphs.
Systems programming close to the kernel: processes, scheduling, concurrency, virtual memory, and file systems.
Network programming from sockets up: protocols, client/server design, and reliable transport.
03
The ALPHV/BlackCat ransomware gang filed a regulatory disclosure related to a material cybersecurity incident affecting its victim, MeridianLink, on Wednesday, November 15, 2023. The group used the U.S. Securities and Exchange Commission's (SEC) Tips, Complaints, and Referrals page to file a complaint alleging that their victim failed to disclose a "significant breach" via a Form…
The Clorox Company (NYSE: CLX) disclosed on August 14, 2023 that it took certain systems offline following a cybersecurity breach. The manufacturing behemoth, which reported annual revenue of more than $7.3 billion for the year ending June 30, 2023, is known for its staple bleach, but its portfolio includes many other cleaning and personal care…
In Cybersecurity for Urban & Suburban Municipalities – Part 1: Overview, we learned about the vast and diverse range of considerations public officials need to consider when evaluating municipal cybersecurity. Shortly after we published Part 1, reports of multiple large cyberattacks broke. In one attack, the Colorado Department of Higher Education learned on June 19,…
Stolen Data from the suspected ransomware attack on Prospect Medical Holdings in August recently appeared for sale on the dark web. The sensitive personally identifiable information (PII) includes more than 500,000 social security numbers, patient and employee passports, driver's licenses, medical patient files including protected health information (PHI), financial documents, and legal documents, according to…