Zachary Julian is a Senior Security Consultant at Bishop Fox. In this role, he specializes in web application penetration testing, source code review, and hybrid application assessments. Zach discovered CVE-2017-11617, a stored cross-site scripting vulnerability affecting a popular webmail product, and has presented at events such as (ISC)2 Phoenix, CactusCon, and Converge Detroit. He has also been quoted on topical security issues in Forbes, Vice Motherboard, The Intercept, and eSecurityPlanet.

Security Research:

Hot New ‘Anonymous’ Chat App Hijacks Millions of Contact Data

How I Built An XSS Worm On Atmail

An Overview of BGP Hijacking

Past Speaking Engagements:

2015 - Converge Detroit - Homebrew Censorship Detection by Analysis of BGP Data

Subject Matter Expertise:

• Source Code
• Hybrid app assessments
• Bug bounty
• Malware
• BGP hijacking
• Web App
• 0-Days
• Privacy/Anonymity
• Blue team
• Political security
• Healthcare
• Media
• Cloud computing