Silverstripe - Host Header Injection
Silverstripe CMS is affected by a Host Header Injection flaw, which can be exploited to manipulate password reset workflows, potentially redirecting or compromising user data.
Highlights
Career highlights
Craig Joyce is an Executive Director at Bastion Security Group, one of the largest cyber security organisations across Australia and New Zealand, formed following Bastion’s acquisition of Cythera in late 2024.
Craig co-founded Cythera in 2018 and built it into a leading mid-market managed security services provider in Australia. Earlier, he co-founded O2 Networks, scaling its delivery organisation to more than 100 staff prior to its acquisition by Telstra in 2014, before going on to lead Telstra’s cyber security practice. Across a career spanning more than 25 years, he has built high performance businesses and helped organisations solve complex technology challenges with a clear focus on commercial outcomes.
Outside of work, Craig is a reviewer for StereoNET International and a lifelong audiophile with a strong interest in post-punk and electronic music. When not pursuing better sound, he spends time exploring Melbourne’s live music scene or working on his hobby farm in the Macedon Ranges.
Cyber security news
Latest advisories
Stay ahead of emerging threats with our expert blog posts, research, and industry updates.
