2025
"Invitation Is All You Need! Owning Any Agent of Gemini for Workspace Using One Simple Google Calendar Invitation" (w/ Ben Nassi & Stav Cohen):
Upcoming:
DEF CON 33 (2025)
"QuickShell: Sharing is caring about an RCE attack chain on Quick Share":
2024
"QuickShell: Sharing is caring about an RCE attack chain on Quick Share" (w/ Shmuel Cohen):
"Magicdot: A Hacker's Magic Show of Disappearing Dots and Spaces":
"DoubleDrive: Double Agents Hide Behind The Clouds":
"Aikido: Turning EDRs to Malicious Wipers Using 0-day Exploits":
2023
"One Drive, Double Agent: Clouded OneDrive Turns Sides":
"Aikido: Turning EDRs to Malicious Wipers Using 0-day Exploits":
HackCon Online 2023
2022
"Aikido: Turning EDRs to Malicious Wipers Using 0-day Exploits":
"Modern techniques used by Advanced Persistent Threat actors for discovering 0-day vulnerabilities":