It was a pleasure to speak at the Intent Summit✅

Thanks for featuring my DSLs attack techniques research! Read all about it in our blog- tenable.com/blog/the-dark-…

My Black Hat talk recording “The GCP Jenga Tower: Hacking Millions of Google’s Servers With a Single Package (and more)” is up! Feel free to watch it and enjoy ;) youtu.be/nZWpDeY9p6g?si…

🏃‍♂️Meet ImageRunner: A privilege escalation vulnerability I discovered in GCP Cloud Run. Thank you for the Google VRP (Google Bug Hunters) team for working closely with us on this one. *Stay tuned for more blogs to come! tenable.com/blog/imagerunn…

Say hi to ConfusedComposer😵‍💫- a fresh GCP privilege escalation vuln I discovered in Cloud Composer. This one is a variant of ConfusedFunction, which some of you might remember from my previous blog and recent talks. Shoutout to the Google VRP (Google Bug Hunters) team :) tenable.com/blog/confusedc…

Published a write up on a couple of RCEs Sreeram KL Raidh Ĥere and I found in Google Cloud products. We got a $10k bounty - and somehow also received a pair of Nikes. stazot.com/?article=datap…

Recently got back from Google’s bugSWAT LHE event in Tokyo 🇯🇵 - focused on AI, and what an experience! Met old friends, made new ones, and even found some valid vulns in Gemini and other AI products. Can’t wait to the next Cloud bugSWAT in a month! A big thanks to Google VRP (Google Bug Hunters)

👻This is GerriScary: a vulnerability I discovered in Google's Gerrit that allowed to hack several projects and affected 18 Google projects including ChromiumOS (CVE-2025-1568), Chromium, Bazel, and Dart. Dive into the full details here: tenable.com/blog/gerriscar…

With 𝐚 𝐭𝐨𝐭𝐚𝐥 𝐨𝐟 ~18 vulnerability reports across popular Google Cloud products, including several critical and high-severity issues, I’m excited to share that I earned 2nd place in the latest Google LHE! Huge thanks to the Google VRP (Google Bug Hunters) team and all the researchers.

🧙‍♂️ OCI, Oh My: I recently discovered a classic 1-click Remote Code Execution through CSRF that affects Oracle Cloud Shell and Code Editor Integrated Services. Full details: tenable.com/blog/remote-co…

My vulnerability is featured in the blog

😶‍🌫️ Big news! The Gemini Trifecta: I discovered a "Trifecta" of three new vulnerabilities (now remediated) in Google Gemini Cloud Assist, Search Model, and its browsing tool. Full technical details: tenable.com/blog/the-trife…

🕵️#𝟭 𝗜𝗦𝗥𝗔𝗘𝗟 & #𝟭𝟴 𝗪𝗢𝗥𝗟𝗗𝗪𝗜𝗗𝗘: 𝗚𝗼𝗼𝗴𝗹𝗲 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗥𝗲𝘀𝗲𝗮𝗿𝗰𝗵𝗲𝗿𝘀 𝗟𝗲𝗮𝗱𝗲𝗿𝗯𝗼𝗮𝗿𝗱 Massive personal milestone! 🎉 I'm ranked #1 in Israel and #18 worldwide on the Google VRP! Thrilled to be a part of it.