Writing

2025

• "Invitation Is All You Need: Invoking Gemini for Workspace Agents with a Simple Google Calendar Invite" in SafeBreach

• "Invitation Is All You Need! Promptware Attacks Against LLM-Powered Assistants in Production Are Practical and Dangerous" in SafeBreach

• "LDAPNightmare: SafeBreach Labs Publishes First Proof-of-Concept Exploit for CVE-2024-49113" in SafeBreach

• "An Update on QuickShell: Sharing Is Caring about an RCE Attack Chain on Quick Share" in SafeBreach

2024

• "QuickShell: Sharing Is Caring about an RCE Attack Chain on Quick Share" in SafeBreach

• "MagicDot: A Hacker’s Magic Show of Disappearing Dots and Spaces" in SafeBreach

2023

• "One Drive, Double Agent: Clouded OneDrive Turns Sides" in SafeBreach

• (Hebrew) "כך הפכתי את הכלי הפופולרי של מיקרוסופט לתוכנת כופר שאף כלי לא זיהה" in Geektime

2022

• "SafeBreach Labs Researcher Discovers Multiple Zero-Day Vulnerabilities in Leading Endpoint Detection and Response (EDR) and Antivirus (AV) Solutions" in SafeBreach

• "Unpatched Complex Active Directory Attacks" in SafeBreach

• "RemotePotato0 – A Complex Active Directory Attack" in SafeBreach