Jason Xie

Director SME - Offensive Security Services

As the Technical Director of Bastion Security Group, Jason mentors security consultants in technical capabilities, drives penetration testing and quality assurance efforts.

Talk to an expert

Highlights

Career highlights

‍

As the Technical Director of Bastion Security Group, Jason mentors security consultants in technical capabilities, drives penetration testing and quality assurance efforts, and leads training initiatives in areas including Active Directory Exploitation,Secure Software Development, and Wireless Network Security.

‍

Cyber security news

Latest advisories

Stay ahead of emerging threats with our expert blog posts, research, and industry updates.

Nokia WS-NOC and NSP Vulnerabilities

During a security engagement, Steve Nyan Lin discovered numerous vulnerabilities within WS-NOC and NSP which could lead to a low-privileged user accessing administrative functionalities, cross-site scripting and open redirection.

Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server - (CVE-2026-12620)

During a security engagement, Leo Diamat discovered that the GridTime 3000 GNSS Time Server web application transmitted session access tokens via URL query string parameters on multiple endpoints.

Cross-Site Scripting (XSS) Vulnerability on Several Endpoints by Utilising Cross-Site Request Forgery (CSRF) in GridTime™ 3000 GNSS Time Server - (CVE-2026-12619)

During a security engagement, Leo Diamat discovered that multiple endpoints in the GridTime 3000 GNSS Time Server web application were vulnerable to reflected Cross-Site Scripting (XSS) via an unsanitised token parameter.

Discover our services

We have the tools to pinpoint risks

Whether it’s hidden vulnerabilities or patterns you might miss, we help you stay one step ahead and make confident, informed decisions. Understand how our services can help your business uncover critical risks

Talk to an expert

Employee Cyber Training & Awareness

Our employee cyber training builds awareness of phishing, social engineering and everyday security habits, making your people your first line of defence.

Our advisory services give senior guidance on strategy, risk and governance, including vCISO support, so your leaders can make defensible security decisions.

Are you experiencing a security breach?

Incident Response