@ynvb

Not the droid you are looking for 🤖 VP Research @SaltSecurity | Former Head Of Cyber Research @_cpresearch_ . Opinions are my own.

 In a galaxy far far away
Joined July 2010
  • Tweets1.4K
  • Following555
  • Followers1.4K
66Media
Just discovered a full account takeover on Grammarly.com, Vidio.com and more using a new OAuth attack technique. This is the last part of the OAuth trilogy; in total, we could take over 1+ BILLION accounts! salt.security/blog/oh-auth-a… #OAuth #hacking

Grammarly: Free AI Writing Assistance

Grammarly makes AI writing convenient. Work smarter with personalized AI guidance and text generation on any app or website.

grammarly.com
4
87
3
272
44,310
Replying to @SaltSecurity
@SaltSecurity's contribution, beyond the sponsorship, warms our hearts. A big shoutout to @ynvb, who contributed ideas and use cases that were quoted in the latest addition. 💖
1
2
291
Yaniv Balmas retweeted
Dark Reading
@DarkReading2 Mar 2023
Booking.com OAuth Implementation Allows Full Account Takeover: bit.ly/3yosNoN by Elizabeth Montalbano
7
1
5
4,095
Just discovered Mandiant has an Urban Dictionary entry. Fantastic stuff. Huge if true. urbandictionary.com/define.p…
4
42
2
271
Yaniv Balmas retweeted
securylight@securylight18 Nov 2022
Replying to @ynvb
@ynvb You Rock! Wonderful Talk at OWASP GLOBAL APPSEC SF
1
2
👋 Attending #OWASP Global AppSec San Francisco this week? Don't miss @SaltSecurity VP of Research @ynvb's session "API Security: Stories from the Trenches" Friday, Nov. 18! Get details here: ow.ly/s9i850LCVUf #apisecurity @owasp
8
3
Yaniv Balmas retweeted
Eyal Itkin@EyalItkin5 Oct 2022
I finally had some free time on my hands and decided to extend Scout's support to Nvidia's DPUs. Scout v2.1.0: Now with aarch64 support and improved support when working on a native arm machine. github.com/eyalitki/Scout

GitHub - eyalitki/Scout: Scout - Instruction based research debugger (a poor man's debugger)

Scout - Instruction based research debugger (a poor man's debugger) - eyalitki/Scout

github.com
1
4
16
Attacking services is different from attacking software! A great presentation by @SaltSecurity VP of Research @ynvb at #BHUSA!! 👏👏 We are on the show floor @MandalayBay ! Stop by to learn more about Salt Labs API security research in person!! #apisecurity #BlackHat2022
2
11
Introducing Return to Monkey Island, a new game by Ron Gilbert that picks up where Monkey Island 2: LeChuck's Revenge left off. returntomonkeyisland.com

Return to Monkey Island | Coming 2022

Introducing Return to Monkey Island, a new game by Ron Gilbert that picks up where Monkey Island 2: LeChuck's Revenge left off.

612
4,053
3,428
16,137
Yaniv Balmas retweeted
raptor@0xdea25 Jan 2022
The @qualys team is back at it! pwnkit: Local Privilege Escalation in polkit’s pkexec (CVE-2021-4034) openwall.com/lists/oss-secur…
94
9
280
Today Smashing the Stack for Fun and Profit is 25 years old. Older than I was when I wrote it.
44
606
85
2,728
Yaniv Balmas retweeted
Inbar Raz
@inbarraz1 Apr 2021
The @BsidesTLV #cfp was supposed to close this morning, but there has been a stream of proposals in the last few days so we are extending the CFP until the end of Thursday, 15/4/2021. Thanks for all those who've already submitted!
4
8
Israeli firm Check Point says an NSA zero-day exploit was replicated by Chinese hackers and used for years. (Long prior to its leak by Shadow Brokers) wired.com/story/china-nsa-ha… A source now confirms Lockheed Martin found the Chinese version of the tool being used on a US network.

China Hijacked an NSA Hacking Tool—and Used It for Years

The hackers used the agency’s EpMe exploit to attack Windows devices years before the Shadow Brokers leaked the agency’s zero-day arsenal online.

wired.com
13
222
34
400
It has to be the Homebrew terminal profile though, so it looks like I’m escaping the Matrix
24
81
15
807
We are releasing Dnspooq - 7 vulnerabilities in dnsmasq, and open source DNS forwarder used in major Linux distributions and by dozens of vendors jsof-tech.com/disclosures/dn…
2
42
4
53
Our researchers were able to fingerprint and track PlayBit — a prominent exploit developer whose Windows LPE exploits were used by infamous crime groups like REvil and Maze. We analyzed their exploitation techniques and share some intelligence about them. research.checkpoint.com/2020…

Exploit Developer Spotlight: The Story of PlayBit - Check Point Research

Research By: Eyal Itkin and Itay Cohen Introduction Exploits have always been an important and integral part of malicious attacks. They allow attackers to gain capabilities that are not easy to...

research.checkpoint.com
65
4
182
Yaniv Balmas retweeted
Yoav Alon@yoavalon30 Sep 2020
Another win32k bug we found, like the previous ones, found by fuzzing using Syzkaller. Minimal repro at CPR website.
Check Point Research
@_CPResearch_29 Sep 2020
[CPR-Zero] CVE-2020-1510 (Windows 10 Kernel): Out-Of-Bounds Read in the StrechBlt function in win32kfull.sys cpr-zero.checkpoint.com/vuln…

CPR-Zero: CVE-2020-1510

Check Point Research Vulnerability Repository

cpr-zero.checkpoint.com
12
66
Today's stumped researcher is tomorrow's outdated signature and next week's ransomware infection. We explain more than you ever wanted to know about the high-profile and super-fragmented landscape of Gozi derivatives. research.checkpoint.com/2020…

Gozi: The Malware with a Thousand Faces - Check Point Research

Introduction Most of the time, the relationship between cybercrime campaigns and malware strains is simple. Some malware strains, like the gone-but-not-forgotten GandCrab, are intimately tied to a...

research.checkpoint.com
2
52
3
109
Supreme Leader has also released an additional set of individuals wanted by @dprkcert
1
6
6
44
Yaniv Balmas retweeted
MicrosVuln@microsvuln16 Jul 2020
Twitter authentication in action 😁
26
5
107
Load more