Mohamed Elnouby

He was born in 1988 in Esna, Qena, upper Egypt. He graduated from the faculty of the tourism and hotels Elmenia university. He started working on the programming and computer networks field since 1999 and worked for many organizations like S3Geeks. He cooperated with some volunteering works like the Arabization of Twitter and he also worked as the general moderator for the Arabic version for Foursquare app and a freelance programmer and the Chief Technology Officer in Google business community in upper Egypt. In 2014, he joined OWASP Cairo Chapter as an online coordinator, then he became a leader in OWASP for project (QRLJacking) upon he was discovering QRLJacking the new Social Engineering attack vector. ==Notable works==

Samsung vulnerability 2014 In October 2014, there were media reports that hackers can use the Samsung "Find My Mobile" feature to attack phones and Mohamed Elnouby discovered that, this feature allows users to remotely lock or wipe their phones if they're misplaced or stolen, If Find My Mobile is turned on, hackers can remotely lock the device and change its unlock code, rendering it useless. According to the National Cyber Security Division, which is part of the U.S. Department of Homeland Security: the hackers can exploit a flaw in Samsung's Find My Mobile system to execute denial-of-service attacks. Samsung said it is looking into the situation. United Nations data leak On 25 Sep 2018, the United Nations was hit with two damning data leak allegations, researchers uncovered a pair of flaws that had left a number of its records, and those of its employees, accessible to hackers online. The security researcher Kushagra Pathak found that the UN had left an unsecured set of Trello, Jira and Google Docs projects exposed to the internet. Pathak, who has specialized in uncovering vulnerable Trello boards and web apps, said the exposed information included account credentials and internal communications and documents used by UN staff to plan projects. Elnouby found that applicants seeking a job at the UN had uploaded their resumes through an improperly configured web application. If exploited, the bugs could have allowed attackers to gain access to the directory index that documented the job applications by conducting Man-in-the-Middle (MiTM) attacks. ==Awards==

He was nominated for Arab CISO Of The Year Award (final shortlist) in Arab Security Conference 2019. == References ==