Picture

Shir @shirtamari

Head of Research @wiz_io 🧙‍♂️ Tel Aviv, Israel Joined December 2020
  • Tweets
    235
  • Followers
    2K
  • Following
    476
  • Likes
    404
Shir retweeted
clintgibler Profile Picture

Clint Gibler @clintgibler

3 weeks ago

😨 Wiz identifies risks in AI-as-a-Service platforms Cross tenant vulns found in Hugging Face! * Malicious pickle file → privesc in EKS, steal secrets * Malicious Dockerfile → RUN cmd in build, attack shared registry by @shirtamari & @sagitz_ wiz.io/blog/wiz-and-h…

Shir retweeted
AmitaiCo Profile Picture

Amitai Cohen 🎗️ @AmitaiCo

4 weeks ago

And while you're at it, listen to the quick special episode of Crying out Cloud that @edenkoby and I recorded earlier today with @shirtamari, in which we discuss their research findings and how risks like these might be avoided in the future. (2/2) youtu.be/UvsSuh4MfuA

Shir retweeted
sagitz_ Profile Picture

sagitz @sagitz_

4 weeks ago

We uploaded a backdoored AI model to @huggingface which we could use to potentially access other customers’ data✨ Here is how we did it - and collaborated with Hugging Face to fix it 🧵⬇️

Shir retweeted
AminovDanielle Profile Picture

Danielle Aminov @AminovDanielle

4 weeks ago

We have been reverse engineering the XZ Utils backdoor and are sharing some initial findings: we've identified multiple hooking options to adapt to different environments, and a hardcoded fake public key that can appear in verbose SSH logs depending on attacker-controlled flags.

shirtamari Profile Picture

Shir @shirtamari

4 weeks ago

What a quick response from the best team

wiz_io Profile Picture

Wiz @wiz_io

a month ago

What a quick response from the best team

Shir retweeted
AminovDanielle Profile Picture

Danielle Aminov @AminovDanielle

a month ago

I've been looking into how the xz backdoor works and drew this sketch to make it easier to understand. I'll update it as new information comes to light ✨

Shir retweeted
wiz_io Profile Picture

Wiz @wiz_io

a month ago

Say hello to CISOasis.com — the world’s 1st cybersecurity meditation app 🌴

Shir retweeted
k4kratik Profile Picture

🇰 🇷 🇦 🇹 ❕ 🇰 ☁ @k4kratik

a month ago

Indeed! it was so fun solving these crazy puzzles with the OG @exploit_sh💪🏻😎 Give it a spin and I assure that It will worth every second of your time as you will improve your debugging skills and Kubernetes knowledge! GG @shirtamari @nirohfeld @wiz_io k8slanparty.com/certificate/D3…

exploit_sh Profile Picture

~/crappy @exploit_sh

a month ago

Indeed! it was so fun solving these crazy puzzles with the OG @exploit_sh💪🏻😎 Give it a spin and I assure that It will worth every second of your time as you will improve your debugging skills and Kubernetes knowledge! GG @shirtamari @nirohfeld @wiz_io k8slanparty.com/certificate/D3…

Shir retweeted
nirohfeld Profile Picture

Nir Ohfeld @nirohfeld

2 months ago

We (+@shirtamari) felt nostalgic, so we created a LAN Party 🛜 Only it won't be CS 1.6 this time - It's @kubernetesio network security challenges! ☸ Battle everything from @IstioMesh to @kyverno 🥊 Try it yourself! #k8slanparty k8slanparty.com

shirtamari Profile Picture

Shir @shirtamari

2 months ago

😂

AmitaiCo Profile Picture

Amitai Cohen 🎗️ @AmitaiCo

2 months ago

😂

Shir retweeted
hillai Profile Picture

Hillai Ben-Sasson @hillai

2 months ago

My @BlackHatEvents talk about #BingBang is live on YouTube! 🥳📽️ Watch how I hacked into a @bing admin panel (and SO much more) - all using a simple flaw in @Azure Active Directory 🔑👀 Check it out here 👉👉👉 youtu.be/l4hA2eZuMF8

hillai Profile Picture

Hillai Ben-Sasson @hillai

a year ago

My @BlackHatEvents talk about #BingBang is live on YouTube! 🥳📽️ Watch how I hacked into a @bing admin panel (and SO much more) - all using a simple flaw in @Azure Active Directory 🔑👀 Check it out here 👉👉👉 youtu.be/l4hA2eZuMF8

Shir retweeted
wiz_io Profile Picture

Wiz @wiz_io

3 months ago

Dive into our blog for an in-depth analysis of their audacious OAuth attack – from compromising a legacy account to gaining unrestricted access to corporate mailboxes. wiz.io/blog/midnight-…

Shir retweeted
AmitaiCo Profile Picture

Amitai Cohen 🎗️ @AmitaiCo

3 months ago

Sketch of interpretation of Midnight Blizzard's attack flow based on @MsftSecIntel's blogpost (had to make a few assumptions, noted in grey). Big h/t to @cnotin and @EricaZelic for their analysis of this incident (links in thread) and to @LSecResearch for valuable input.

JohnLaTwC Profile Picture

John Lambert @JohnLaTwC

3 months ago

Sketch of interpretation of Midnight Blizzard's attack flow based on @MsftSecIntel's blogpost (had to make a few assumptions, noted in grey). Big h/t to @cnotin and @EricaZelic for their analysis of this incident (links in thread) and to @LSecResearch for valuable input. https://t.co/iwmVnCyxEL

Shir retweeted
wiz_io Profile Picture

Wiz @wiz_io

3 months ago

💥 BOOM! Introducing "Cloud Threat Landscape": our extensive (internal) cloud security incident database is now public! Explore 107 incidents, 96 threat actors, and 100+ attack techniques: wiz.io/cloud-threat-l…

Shir retweeted
sagitz_ Profile Picture

sagitz @sagitz_

4 months ago

Does anyone have any contact to share with the security folks at @replicate ? 🙏

Shir retweeted
sshaybbc Profile Picture

Shay Berkovich @sshaybbc

6 months ago

☸️Real-world (not a survey 😉) Kubernetes stats are hard to come by. Use our report to make informative decisions about your K8s deployments. #Kubernetes #k8s Examples: 💠 The most popular managed service? EKS 💠 Best cluster version hygiene? GKE 💠 Oldest version observed? 👇 1/

wiz_io Profile Picture

Wiz @wiz_io

6 months ago

☸️Real-world (not a survey 😉) Kubernetes stats are hard to come by. Use our report to make informative decisions about your K8s deployments. #Kubernetes #k8s Examples: 💠 The most popular managed service? EKS 💠 Best cluster version hygiene? GKE 💠 Oldest version observed? 👇 1/

Shir retweeted
clintgibler Profile Picture

Clint Gibler @clintgibler

6 months ago

🆕 Announcing the EKS Cluster Games A new CTF event to help you identify and learn about common Amazon EKS security issues 5 scenarios You’ll learn the misconfigs & exploit them in a controlled environment By @wiz_io's @nirohfeld wiz.io/blog/announcin…

shirtamari Profile Picture

Shir @shirtamari

6 months ago

We've started a Kubernetes Capture The Flag challenge. It's all about AWS EKS, five different challenges, showing common mistakes in k8s environments that we found in our research. Give it a try! #EKSClusterGames eksclustergames.com

Shir retweeted
nirohfeld Profile Picture

Nir Ohfeld @nirohfeld

6 months ago

When was the last time you exploited a misconfiguration in an EKS cluster? Check out the new CTF @ronenshh and I built to test your skills and learn about common, real-life security issues in K8s and EKS eksclustergames.com

Shir retweeted
wiz_io Profile Picture

Wiz @wiz_io

6 months ago

GAME ON! Today, we're launching our new CTF event — EKSClusterGames.com 🕹️ Test your Amazon EKS security skills in real-world scenarios. Prove your expertise, top the leaderboard, and get an official certificate 🏆 Kudos to our research team: @nirohfeld @ronenshh

Trends for United States

Maxey
105 B posts
Knicks
80,3 B posts
Columbia
1,04 Mn posts
Pacers
23,4 B posts
Embiid
61 B posts
Sixers
58,2 B posts
Brunson
33,6 B posts
Pat Bev
4.373 posts
#bucciovertimechallenge
3.386 posts
Mobley
8.844 posts
Paolo
13,4 B posts
#FearTheDeer
2.067 posts
Game 6
49 B posts
Rojas
15,6 B posts
Bucks in 7
1.629 posts
Giannis
13,2 B posts
Beasley
3.104 posts
#LetEmKnow
7.482 posts
Hamilton Hall
204 B posts
WKCR
40,7 B posts

You might like

Father of 4 || Pilot of many
Dan
@DanSela6
7K Followers
Container & Cloud Security אבטחת חמגשים
Yuval Avrahami
@yuvalavra
762 Followers
Cloud security researcher @wiz_io ✦
Nir Ohfeld
@nirohfeld
2K Followers
A comprehensive module-based malware development course providing fundamental to advanced level knowledge
MalDev Academy
@MalDevAcademy
11K Followers
CTO @wiz_io a leader in cloud security, proudly working with Wiz Research team on cloud vulnerabilities #ChaosDB #OMIGOD. leading the effort for #CloudCVE.
Ami Luttwak
@amiluttwak
1K Followers
full-stack scientist 🧪
faulty *ptrrr
@0x_shaq
2K Followers
Cloud Security Researcher at @wiz_io • Microsoft Most Valuable Researcher 21/22/23 • Black Hat Speaker
sagitz
@sagitz_
4K Followers
Secure everything you build and run in the cloud
Wiz
@wiz_io
8K Followers
Non-profit cloud security conference. June 17-18, 2024 in Arlington, VA. September 17, 2024 in Brussels, Belgium.
fwd:cloudsec
@fwdcloudsec
4K Followers
• Cloud and container security • Cloud security research and open source @DatadogHQ • https://t.co/AnCl0xutWx
Christophe Tafani-Der..
@christophetd
5K Followers
Studying math, reversing and Twitter... | Security Researcher @ Kaspersky, GReAT | Drovosec CTF team | Tweets are my own
Leonid Bezvershenko
@bzvr_
3K Followers
Tweeting about Application Security, Hacking, & Cybersecurity • Helped secure organizations like Google • Opinions are my own
payloadartist
@payloadartist
34K Followers
💼 Principal Security Engineer 📚 Writing https://t.co/TrQKzxfnYg 💬 I tweet about Cloud Security and technical leadership ✍🏻 Subscribe to https://t.co/MR69KiF8RH
Marco Lancini
@lancinimarco
6K Followers
Security Researcher - Google's Threat Analysis Group | 0days all day. Love all things bytes, assembly, and glitter. she/her.
Maddie Stone
@maddiestone
64K Followers
Principal Identity Security Researcher at Microsoft. Ex-Secureworks. (MSc, MEng, PhD, CITP, CCSK). And yes, opinions are my own ;)
Dr. Nestori Syynimaa
@DrAzureAD
17K Followers