@terminatorLM

Researcher

Joined February 2022
  • Tweets160
  • Following419
  • Followers1.2K
56Media
Wow, I just broke into the Top 10 A-lister Google's Bug Hunter Leaderboard worldwide, proudly representing Israel!
2
13
1,285
Writer AI patched WriteOut, a one-click session isolation flaw in its enterprise AI platform. A victim who clicked a public preview link while logged in could have their session cookie forwarded into an attacker-controlled sandbox, where it could be recovered and replayed. How the preview proxy crossed tenant lines: thehackernews.com/2026/07/wrโ€ฆ
1
8
17
16,100
๐Ÿซ We at Sand Security recently discovered WriteOut - a ๐—ฐ๐—ฟ๐—ถ๐˜๐—ถ๐—ฐ๐—ฎ๐—น ๐˜ƒ๐˜‚๐—น๐—ป๐—ฒ๐—ฟ๐—ฎ๐—ฏ๐—ถ๐—น๐—ถ๐˜๐˜† in Writer, the enterprise AI platform trusted by Fortune 500. sandsecurity.ai/blog/writeouโ€ฆ
1
6
440
๐Ÿซ  It runs in a sandbox. We treat this like a final security answer. Here is our overview of what a sandbox is, and what it isn't: sandsecurity.ai/blog/what-a-โ€ฆ
2
7
356
I'm so happy to have won the MVH at the latest Google LHE (Seoul 2026). Thank you, @GoogleVRP, for the amazing event!
17
11
2
234
34,082
Our Google Cloud VRP researchers don't miss! ๐Ÿ”ฅ Check out @terminatorLM's latest Looker research uncovering 9 novel cross-tenant vulns in Looker. See how it was done: ๐Ÿ‘‡
Liv Matan@terminatorLMMar 10
๐ŸซฃLeakyLooker: 1 Cross-tenant vulnerability? How about 9? (1/10)๐Ÿงต Iโ€™m incredibly proud to share LeakyLooker. I discovered 9 novel cross-tenant vulnerabilities in Google Cloudโ€™s Looker Studio that broke fundamental design assumptions. Here is how I broke tenant isolation: ๐Ÿ‘‡
1
11
87
9,031
๐ŸซฃLeakyLooker: 1 Cross-tenant vulnerability? How about 9? (1/10)๐Ÿงต Iโ€™m incredibly proud to share LeakyLooker. I discovered 9 novel cross-tenant vulnerabilities in Google Cloudโ€™s Looker Studio that broke fundamental design assumptions. Here is how I broke tenant isolation: ๐Ÿ‘‡
1
22
1
76
13,425
more replies
Disclosure (9/10)๐Ÿงต Huge thanks to the Google VRP team. They handled these reports professionally and moved quickly to remediate them all. All issues are now fully patched. No customer action is required.
1
1
6
657
Read the full technical deep dive and payloads here: tenable.com/blog/leakylookerโ€ฆ (10/10)๐Ÿงต
1
2
9
874
๐Ÿ‘€ LookOut: Novel Remote Code Execution & Internal Database Access vulnerabilities that I discovered in Google Looker tenable.com/blog/google-lookโ€ฆ
3
5
45
3,345
Thank you for the shoutout :) it was a pleasure.
sapir federovsky
@sapirxfed25 Dec 2025
๐ŸŽ„๐ŸŽ„๐ŸŽ„ I went to a meetup last night about cloud attacks and watched a talk by @terminatorLM about GCP, and it was SO GOOD!! I came home with so many ideas and so much motivation. Turns out itโ€™s also on YouTube! please watch it, no matter which cloud youโ€™re into๐Ÿคญ youtu.be/nZWpDeY9p6g?siโ€ฆ
702
๐Ÿค– HackedGPT: Unpacking 7 Vulnerabilities we discovered in ChatGPT Following up on our work: Yarden Curiel, Moshe Bernstein, and I are proud to share the technical details of our ChatGPT research tenable.com/blog/hackedgpt-nโ€ฆ
1
7
33
2,930
๐Ÿ•ต๏ธ#๐Ÿญ ๐—œ๐—ฆ๐—ฅ๐—”๐—˜๐—Ÿ & #๐Ÿญ๐Ÿด ๐—ช๐—ข๐—ฅ๐—Ÿ๐——๐—ช๐—œ๐——๐—˜: ๐—š๐—ผ๐—ผ๐—ด๐—น๐—ฒ ๐—ฉ๐˜‚๐—น๐—ป๐—ฒ๐—ฟ๐—ฎ๐—ฏ๐—ถ๐—น๐—ถ๐˜๐˜† ๐—ฅ๐—ฒ๐˜€๐—ฒ๐—ฎ๐—ฟ๐—ฐ๐—ต๐—ฒ๐—ฟ๐˜€ ๐—Ÿ๐—ฒ๐—ฎ๐—ฑ๐—ฒ๐—ฟ๐—ฏ๐—ผ๐—ฎ๐—ฟ๐—ฑ Massive personal milestone! ๐ŸŽ‰ I'm ranked #1 in Israel and #18 worldwide on the Google VRP! Thrilled to be a part of it.
6
8
114
12,996
Load more