A passionate Cyber Researcher who is also a former Helicopter Pilot :)
Joined March 2016
- Tweets1.1K
- Following308
- Followers683
- Likes537
Asaf Hecht retweeted
Thrilled to announce that I’ll be speaking at #SecTor2026 in #Toronto!
If you want to see how modern evasion is moving beyond the CPU, add "Cloak and Filter" to your conference schedule. And make sure to come say Hi!
See you in Toronto!
#SecTor #Cybersecurity #InfoSec
An insightful piece about OAuth security.
Vulnerabilities in redirect_uri, registration flow, and state parameters were found in many websites and present a significant attack surface:
@CyberarkLabs @g3rzi #OAuth
cyberark.com/resources/threa…
Kubiscan = a great open-source tool for strengthening Kubernetes security! 🎯
Now with this easy guide to boost your Kubiscan skills and run it in no time 🚀👇
cyberark.com/resources/threa…
@CyberarkLabs @CyberArk #Kubernetes #Kubiscan #Cybersecurity #OpenSource
How safe is your data with FAANG companies? 🧐 Our recent research reveals potential threats and how to stay protected:
@CyberarkLabs @CyberArk #TechNews #DataSecurity
cyberark.com/resources/threa…
New open-source tool for decompiling #Python executables with local LLMs!
Great one, check it out.
It works well on all Python versions including v.13 :)
More details:
cyberark.com/resources/threa…
@CyberArk @CyberarkLabs #MalwareAnalysis #Privacy #AI #Python
Asaf Hecht retweeted
🕹️There's no honor amongst thieves... 🎮
In 2 weeks, @0xdavidel will join @Andy_Thompson in a live presentation and Q&A where David will discuss how he discovered a video game cheat developer was stealing from his own customers.
linkedin.com/events/threatre…
Great example for using CodeQL to find cool vulnerabilities:
@g3rzi, @CyberarkLabs, #CodeQL #BulnerabilityReseach
cyberark.com/resources/threa…
Asaf Hecht retweeted
.@ShakReiner just published this eye-opening article about a security vulnerability in #LargeLanguageModels (#LLMs ) that allowed him to execute arbitrary code on a server through a simple chat prompt.
#RCE #ArtificialIntelligence #AI
cyberark.com/resources/threa…
Exciting news, INTENT Security Conference is coming soon 🎉
1. Do you want to share your research work? The CFP is closing soon, make sure to check it out.
2. Registration for INTENT is now open 😀
Find out more and register at intentsummit.org/.
@CyberarkLabs #INTENT
Asaf Hecht retweeted
Slides from my @MCTTP_Con talk "A Decade of Active Directory Attacks - What We've Learned & What's Next" are now posted: trimarc.co/SeanTalkMCTTP2024
Interested in security and working with Azure DevOps, this post is for you:
@CyberarkLabs #Enlightening #AzureDevOps @g3rzi
cyberark.com/resources/threa…
Asaf Hecht retweeted
1/5 🔐 Azure DevOps users, listen up! A new security analysis by @g3rzi exposes potential risks in pipeline execution. This is a must-read for anyone serious about #DevSecOps.
#AzureDevOps #CyberSecurity
Asaf Hecht retweeted
Don't miss this opportunity to hear from @CyberarkLabs @Andy_Thompson, as he delves into the latest activities and tactics of the notorious threat actor group, Scattered Spider. Register today! spr.ly/6013lPtgv
#IdentitySecurity #ransomware #cybersecurity
Malware embedded in a game cheating - well... be aware:
cyberark.com/resources/threa…
Oh this is an interesting one - the hacking scene behind game cheating:
#game_cheating #malware
@CyberArk @CyberarkLabs @0xdavidel
cyberark.com/resources/threa…
Asaf Hecht retweeted
🚨Think twice before cheating! 🚨
Our latest blog by @0xdavidel reveals how the #EvolvedAim developer exploited his own clients.
Find out more now! 🔗 cyberark.com/resources/threa…
#Malware #Gaming #EscapefromTarkov
Asaf Hecht retweeted
🤔Curious about the history and evolution of video game cheating? 🤔
Our latest blog @0xdavidel covers everything from built-in cheats to advanced DMA methods. Discover how developers fight back and the risks involved.
Read more here: cyberark.com/resources/threa…
Asaf Hecht retweeted
🚀Golang SSL Verification Bypass Explained🚀
Michael Pasternak of CyberArk Labs breaks down the process of bypassing SSL verification in Golang.
cyberark.com/resources/threa…
Insightful example for a web race condition vulnerability (CVE-2024-172):
cyberark.com/resources/threa…
Asaf Hecht retweeted
Race Conditions Found in Open-source IAM Solution Keycloak 🔑 (CVE-2024-1722)
cyberark.com/resources/threa…