Product Security Team Updates (21st to 25th Oct)

Security Review Projects

10000ft (https://29022131.atlassian.net/projects/IS/queues/custom/149/IS-257)

Based on the smart sheet(link), shared questionnaire with 10000ft team

Search Platform Data Sync (https://29022131.atlassian.net/projects/IS/queues/custom/149/IS-264)

Discussed with Search team to understand sensitive data that is moved from production to staging.

IGT (https://29022131.atlassian.net/projects/IS/queues/custom/149/IS-261):

Discussed with IGT team on security questions raised by team.

BRIZZI E-Bill API Assessment & Code Review (https://29022131.atlassian.net/browse/IS-258)

Reviewed the APIs implementation found during the execution of the android application.
Waiting for the customer support for having a better knowledge of how to make the payments for the NFC card.

Renew Java Code Signing Certificate (https://29022131.atlassian.net/browse/IS-265)

Team can continue with renewal of Comodo code signing certificate and there are no security issues with it.

Security Assessment on our common libraries (https://29022131.atlassian.net/browse/IS-247)

The security review on this repository is completed and the observations are mentioned in the same code repository. Please let us know for any further queries regarding it.

EBill E-Money NFC Flow (https://29022131.atlassian.net/browse/IS-262)

Code Review In Progress

AWS Transfer for SFTP (https://29022131.atlassian.net/projects/IS/queues/custom/148/IS-263)

Project is initiated

Pen test for PMS tool (https://29022131.atlassian.net/projects/IS/queues/custom/148/IS-266)

Project is initiated