Security researcher · Israel
Builder with the mindset of a breaker.
I break the software everyone relies on, hunt the campaigns hiding inside trusted infrastructure — and build products people use.
- Now
- Lead Security Researcher, Island
- Before
- Threat Hunter, Guardio Labs
- Trained
- IDF Unit 8200
01The coverage
Hundreds of headlines.
Worldwide.
The Hacker NewsBleepingComputerForbesDark ReadingSecurityWeekTechRadarPCMagGeektime
The RegisterBrowser-in-browser attacks use fake Meta Muse Ad lure to steal credentials
Geektimeפתחתם מייל מדיסני פלוס? חוקרים ישראליים גילו שיכול להיות שאלו האקרים מתחזים
Microsoft DefenderSecure architecture design – How Defender for Office 365 protects against EchoSpoofing
TechRadarChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes
Consumer AffairsFake ChatGPT scam uses trusted websites to trick users into installing malware
Google MandiantDPRK Adopts EtherHiding
The Hacker News8,000+ Subdomains of Trusted Brands Hijacked in Massive 'SubdoMailing' Spam Operation
MSPowerUserMicrosoft patches Edge browser vulnerability that could have led to malicious extension installation
The Hacker NewsMicrosoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions
SC MediaFakeGit campaign reactivates, distributing SmartLoader malware via GitHub
SecurityBrief UKAdblock for YouTube extension flagged for security risk
DevOps.comFakeGit Targets AI Coding Agents with Malicious GitHub Repos
Cloud Security AllianceFakeGit and AgentBaiting: Malicious Repos Target AI Agents
IT-ConnectAdblock for YouTube: 11 Million Installs and a Serious Security Flaw to Fix
Cyber InsiderChrome extension Adblock for YouTube with 11 million users could be silently weaponized
SC MediaMassive spam ads campaign facilitated by krpano framework XSS exploit
The Hacker NewsChrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
Wiz Researchkrpano XSS Exploitation Campaign Tracking
Dark ReadingMillions of Facebook Business Accounts Targeted by Python Malware
BleepingComputerFacebook Messenger phishing wave targets 100K business accounts per week
DarkRelay SecurityOpera Zero-Day RCE Vulnerability Analysis: MyFlaw
The Hacker NewsHackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites
BleepingComputerFake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
Cyber InsiderFake ChatGPT and Gemini ad tools bait users with bogus login windows
Cyber PressHackers Impersonate ChatGPT, Claude and Gemini in Human-Operated MFA Phishing Campaign
NeoTeoIsland reports fake AI-ad portals steering sign-ins in real time
Broadcom Threat IntelFakeGit Infrastructure Re-Armed in Large-Scale RePointing Campaign
SecurityWeekPhishing Campaign Exploited Proofpoint Email Protections for Spoofing
The Hacker NewsOpera 'MyFlaw' Bug Could Let Hackers Run Any File on Windows and macOS
The Hacker NewsHackers Exploit Facebook Messenger to Deliver Python-Based Stealer Malware
BleepingComputerHackers exploited Salesforce zero-day in Facebook phishing attack
The RegisterBrowser-in-browser attacks use fake Meta Muse Ad lure to steal credentials
Geektimeפתחתם מייל מדיסני פלוס? חוקרים ישראליים גילו שיכול להיות שאלו האקרים מתחזים
Microsoft DefenderSecure architecture design – How Defender for Office 365 protects against EchoSpoofing
TechRadarChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes
Consumer AffairsFake ChatGPT scam uses trusted websites to trick users into installing malware
Google MandiantDPRK Adopts EtherHiding
The Hacker News8,000+ Subdomains of Trusted Brands Hijacked in Massive 'SubdoMailing' Spam Operation
MSPowerUserMicrosoft patches Edge browser vulnerability that could have led to malicious extension installation
The Hacker NewsMicrosoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions
SC MediaFakeGit campaign reactivates, distributing SmartLoader malware via GitHub
SecurityBrief UKAdblock for YouTube extension flagged for security risk
DevOps.comFakeGit Targets AI Coding Agents with Malicious GitHub Repos
Cloud Security AllianceFakeGit and AgentBaiting: Malicious Repos Target AI Agents
IT-ConnectAdblock for YouTube: 11 Million Installs and a Serious Security Flaw to Fix
Cyber InsiderChrome extension Adblock for YouTube with 11 million users could be silently weaponized
SC MediaMassive spam ads campaign facilitated by krpano framework XSS exploit
The Hacker NewsChrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
Wiz Researchkrpano XSS Exploitation Campaign Tracking
Dark ReadingMillions of Facebook Business Accounts Targeted by Python Malware
BleepingComputerFacebook Messenger phishing wave targets 100K business accounts per week
DarkRelay SecurityOpera Zero-Day RCE Vulnerability Analysis: MyFlaw
The Hacker NewsHackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites
BleepingComputerFake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
Cyber InsiderFake ChatGPT and Gemini ad tools bait users with bogus login windows
Cyber PressHackers Impersonate ChatGPT, Claude and Gemini in Human-Operated MFA Phishing Campaign
NeoTeoIsland reports fake AI-ad portals steering sign-ins in real time
Broadcom Threat IntelFakeGit Infrastructure Re-Armed in Large-Scale RePointing Campaign
SecurityWeekPhishing Campaign Exploited Proofpoint Email Protections for Spoofing
The Hacker NewsOpera 'MyFlaw' Bug Could Let Hackers Run Any File on Windows and macOS
The Hacker NewsHackers Exploit Facebook Messenger to Deliver Python-Based Stealer Malware
BleepingComputerHackers exploited Salesforce zero-day in Facebook phishing attack
ForbesSubdoMailing Threat To New Gmail Security Rules
GIGAZINEThe YouTube ad-blocking extension with 11M downloads could execute arbitrary JavaScript via server change
SecurityWeekRemote Code Execution Vulnerability Found in Opera File-Sharing Feature
BleepingComputerProofpoint settings exploited to send millions of phishing emails daily
PCMagTelegram Is a Scammer's Paradise Thanks to Cheap Phishing Tools
Broadcom Threat IntelAnti-EchoSpoofing Protection in Email Security.cloud
Dark ReadingDisney, Nike, IBM Signatures Anchor 3M Fake Emails a Day
Opera SecuritySetting the record straight on the “MyFlaw” vulnerability
BleepingComputerFakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
Risky BusinessRisky Bulletin: Linux kernel discloses 442 CVEs as AI bugpocalypse settles in
CybernewsFacebook Messenger phishing wave targets business accounts
Cyber Security NewsAgentBaiting Campaign Uses 800 Fake AI Skills and MCP Servers to Deliver SmartLoader Malware
Apiiro ResearchNever Deleted, Only Re-Pointed: Inside the 17,600-Repo FakeGit Fleet That Re-Arms Overnight
eSecurityPlanetFake AI Marketing Sites Put a Browser Inside Your Browser to Steal Logins
BleepingComputerHijacked subdomains of major brands used in massive spam campaign
Help Net SecurityMalicious GitHub Repos Weaponized to Trick AI Agents and Developers
SecurityWeekSalesforce Email Service Zero-Day Exploited in Phishing Campaign
BleepingComputerHackers use Binance Smart Chain contracts to store malicious scripts
The Hacker NewsBinance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign
ICT Security MagazineBadBlocker: la vulnerabilità latente in Adblock for YouTube per Chrome
The Hacker NewsFakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
The Hacker NewsPhishers Exploit Salesforce's Email Services Zero-Day in Targeted Facebook Campaign
The Hacker NewsFake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cyber Security NewsHackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes
GBHackersFake ChatGPT, Claude and Gemini Ads Use Browser-in-the-Browser Phishing to Steal Accounts
TechNaduFake ChatGPT, Gemini, and Claude Ad Tools Steal Logins and MFA Codes in New Phishing Campaign
The Hacker NewsProofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Messages
TechRadarThis Microsoft Edge security flaw could have allowed hackers to install all kinds of malicious extras - but there's good news
Cyber Security NewsOpera “MyFlaw” Vulnerability Allows Hackers To Run Any File On Windows and Mac
Tom's GuideHackers are using Facebook Messenger to spread password-stealing malware — how to stay safe
Dark ReadingSalesforce Zero-Day Exploited to Phish Facebook Credentials
ForbesSubdoMailing Threat To New Gmail Security Rules
GIGAZINEThe YouTube ad-blocking extension with 11M downloads could execute arbitrary JavaScript via server change
SecurityWeekRemote Code Execution Vulnerability Found in Opera File-Sharing Feature
BleepingComputerProofpoint settings exploited to send millions of phishing emails daily
PCMagTelegram Is a Scammer's Paradise Thanks to Cheap Phishing Tools
Broadcom Threat IntelAnti-EchoSpoofing Protection in Email Security.cloud
Dark ReadingDisney, Nike, IBM Signatures Anchor 3M Fake Emails a Day
Opera SecuritySetting the record straight on the “MyFlaw” vulnerability
BleepingComputerFakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
Risky BusinessRisky Bulletin: Linux kernel discloses 442 CVEs as AI bugpocalypse settles in
CybernewsFacebook Messenger phishing wave targets business accounts
Cyber Security NewsAgentBaiting Campaign Uses 800 Fake AI Skills and MCP Servers to Deliver SmartLoader Malware
Apiiro ResearchNever Deleted, Only Re-Pointed: Inside the 17,600-Repo FakeGit Fleet That Re-Arms Overnight
eSecurityPlanetFake AI Marketing Sites Put a Browser Inside Your Browser to Steal Logins
BleepingComputerHijacked subdomains of major brands used in massive spam campaign
Help Net SecurityMalicious GitHub Repos Weaponized to Trick AI Agents and Developers
SecurityWeekSalesforce Email Service Zero-Day Exploited in Phishing Campaign
BleepingComputerHackers use Binance Smart Chain contracts to store malicious scripts
The Hacker NewsBinance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign
ICT Security MagazineBadBlocker: la vulnerabilità latente in Adblock for YouTube per Chrome
The Hacker NewsFakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
The Hacker NewsPhishers Exploit Salesforce's Email Services Zero-Day in Targeted Facebook Campaign
The Hacker NewsFake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cyber Security NewsHackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes
GBHackersFake ChatGPT, Claude and Gemini Ads Use Browser-in-the-Browser Phishing to Steal Accounts
TechNaduFake ChatGPT, Gemini, and Claude Ad Tools Steal Logins and MFA Codes in New Phishing Campaign
The Hacker NewsProofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Messages
TechRadarThis Microsoft Edge security flaw could have allowed hackers to install all kinds of malicious extras - but there's good news
Cyber Security NewsOpera “MyFlaw” Vulnerability Allows Hackers To Run Any File On Windows and Mac
Tom's GuideHackers are using Facebook Messenger to spread password-stealing malware — how to stay safe
Dark ReadingSalesforce Zero-Day Exploited to Phish Facebook Credentials
The RegisterBrowser-in-browser attacks use fake Meta Muse Ad lure to steal credentials
Geektimeפתחתם מייל מדיסני פלוס? חוקרים ישראליים גילו שיכול להיות שאלו האקרים מתחזים
Microsoft DefenderSecure architecture design – How Defender for Office 365 protects against EchoSpoofing
TechRadarChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes
Consumer AffairsFake ChatGPT scam uses trusted websites to trick users into installing malware
Google MandiantDPRK Adopts EtherHiding
The Hacker News8,000+ Subdomains of Trusted Brands Hijacked in Massive 'SubdoMailing' Spam Operation
MSPowerUserMicrosoft patches Edge browser vulnerability that could have led to malicious extension installation
The Hacker NewsMicrosoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions
SC MediaFakeGit campaign reactivates, distributing SmartLoader malware via GitHub
SecurityBrief UKAdblock for YouTube extension flagged for security risk
DevOps.comFakeGit Targets AI Coding Agents with Malicious GitHub Repos
Cloud Security AllianceFakeGit and AgentBaiting: Malicious Repos Target AI Agents
IT-ConnectAdblock for YouTube: 11 Million Installs and a Serious Security Flaw to Fix
Cyber InsiderChrome extension Adblock for YouTube with 11 million users could be silently weaponized
SC MediaMassive spam ads campaign facilitated by krpano framework XSS exploit
The Hacker NewsChrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
Wiz Researchkrpano XSS Exploitation Campaign Tracking
Dark ReadingMillions of Facebook Business Accounts Targeted by Python Malware
BleepingComputerFacebook Messenger phishing wave targets 100K business accounts per week
DarkRelay SecurityOpera Zero-Day RCE Vulnerability Analysis: MyFlaw
The Hacker NewsHackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites
BleepingComputerFake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
Cyber InsiderFake ChatGPT and Gemini ad tools bait users with bogus login windows
Cyber PressHackers Impersonate ChatGPT, Claude and Gemini in Human-Operated MFA Phishing Campaign
NeoTeoIsland reports fake AI-ad portals steering sign-ins in real time
Broadcom Threat IntelFakeGit Infrastructure Re-Armed in Large-Scale RePointing Campaign
SecurityWeekPhishing Campaign Exploited Proofpoint Email Protections for Spoofing
The Hacker NewsOpera 'MyFlaw' Bug Could Let Hackers Run Any File on Windows and macOS
The Hacker NewsHackers Exploit Facebook Messenger to Deliver Python-Based Stealer Malware
BleepingComputerHackers exploited Salesforce zero-day in Facebook phishing attack
The RegisterBrowser-in-browser attacks use fake Meta Muse Ad lure to steal credentials
Geektimeפתחתם מייל מדיסני פלוס? חוקרים ישראליים גילו שיכול להיות שאלו האקרים מתחזים
Microsoft DefenderSecure architecture design – How Defender for Office 365 protects against EchoSpoofing
TechRadarChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes
Consumer AffairsFake ChatGPT scam uses trusted websites to trick users into installing malware
Google MandiantDPRK Adopts EtherHiding
The Hacker News8,000+ Subdomains of Trusted Brands Hijacked in Massive 'SubdoMailing' Spam Operation
MSPowerUserMicrosoft patches Edge browser vulnerability that could have led to malicious extension installation
The Hacker NewsMicrosoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions
SC MediaFakeGit campaign reactivates, distributing SmartLoader malware via GitHub
SecurityBrief UKAdblock for YouTube extension flagged for security risk
DevOps.comFakeGit Targets AI Coding Agents with Malicious GitHub Repos
Cloud Security AllianceFakeGit and AgentBaiting: Malicious Repos Target AI Agents
IT-ConnectAdblock for YouTube: 11 Million Installs and a Serious Security Flaw to Fix
Cyber InsiderChrome extension Adblock for YouTube with 11 million users could be silently weaponized
SC MediaMassive spam ads campaign facilitated by krpano framework XSS exploit
The Hacker NewsChrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
Wiz Researchkrpano XSS Exploitation Campaign Tracking
Dark ReadingMillions of Facebook Business Accounts Targeted by Python Malware
BleepingComputerFacebook Messenger phishing wave targets 100K business accounts per week
DarkRelay SecurityOpera Zero-Day RCE Vulnerability Analysis: MyFlaw
The Hacker NewsHackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites
BleepingComputerFake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
Cyber InsiderFake ChatGPT and Gemini ad tools bait users with bogus login windows
Cyber PressHackers Impersonate ChatGPT, Claude and Gemini in Human-Operated MFA Phishing Campaign
NeoTeoIsland reports fake AI-ad portals steering sign-ins in real time
Broadcom Threat IntelFakeGit Infrastructure Re-Armed in Large-Scale RePointing Campaign
SecurityWeekPhishing Campaign Exploited Proofpoint Email Protections for Spoofing
The Hacker NewsOpera 'MyFlaw' Bug Could Let Hackers Run Any File on Windows and macOS
The Hacker NewsHackers Exploit Facebook Messenger to Deliver Python-Based Stealer Malware
BleepingComputerHackers exploited Salesforce zero-day in Facebook phishing attack
ForbesSubdoMailing Threat To New Gmail Security Rules
GIGAZINEThe YouTube ad-blocking extension with 11M downloads could execute arbitrary JavaScript via server change
SecurityWeekRemote Code Execution Vulnerability Found in Opera File-Sharing Feature
BleepingComputerProofpoint settings exploited to send millions of phishing emails daily
PCMagTelegram Is a Scammer's Paradise Thanks to Cheap Phishing Tools
Broadcom Threat IntelAnti-EchoSpoofing Protection in Email Security.cloud
Dark ReadingDisney, Nike, IBM Signatures Anchor 3M Fake Emails a Day
Opera SecuritySetting the record straight on the “MyFlaw” vulnerability
BleepingComputerFakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
Risky BusinessRisky Bulletin: Linux kernel discloses 442 CVEs as AI bugpocalypse settles in
CybernewsFacebook Messenger phishing wave targets business accounts
Cyber Security NewsAgentBaiting Campaign Uses 800 Fake AI Skills and MCP Servers to Deliver SmartLoader Malware
Apiiro ResearchNever Deleted, Only Re-Pointed: Inside the 17,600-Repo FakeGit Fleet That Re-Arms Overnight
eSecurityPlanetFake AI Marketing Sites Put a Browser Inside Your Browser to Steal Logins
BleepingComputerHijacked subdomains of major brands used in massive spam campaign
Help Net SecurityMalicious GitHub Repos Weaponized to Trick AI Agents and Developers
SecurityWeekSalesforce Email Service Zero-Day Exploited in Phishing Campaign
BleepingComputerHackers use Binance Smart Chain contracts to store malicious scripts
The Hacker NewsBinance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign
ICT Security MagazineBadBlocker: la vulnerabilità latente in Adblock for YouTube per Chrome
The Hacker NewsFakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
The Hacker NewsPhishers Exploit Salesforce's Email Services Zero-Day in Targeted Facebook Campaign
The Hacker NewsFake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cyber Security NewsHackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes
GBHackersFake ChatGPT, Claude and Gemini Ads Use Browser-in-the-Browser Phishing to Steal Accounts
TechNaduFake ChatGPT, Gemini, and Claude Ad Tools Steal Logins and MFA Codes in New Phishing Campaign
The Hacker NewsProofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Messages
TechRadarThis Microsoft Edge security flaw could have allowed hackers to install all kinds of malicious extras - but there's good news
Cyber Security NewsOpera “MyFlaw” Vulnerability Allows Hackers To Run Any File On Windows and Mac
Tom's GuideHackers are using Facebook Messenger to spread password-stealing malware — how to stay safe
Dark ReadingSalesforce Zero-Day Exploited to Phish Facebook Credentials
ForbesSubdoMailing Threat To New Gmail Security Rules
GIGAZINEThe YouTube ad-blocking extension with 11M downloads could execute arbitrary JavaScript via server change
SecurityWeekRemote Code Execution Vulnerability Found in Opera File-Sharing Feature
BleepingComputerProofpoint settings exploited to send millions of phishing emails daily
PCMagTelegram Is a Scammer's Paradise Thanks to Cheap Phishing Tools
Broadcom Threat IntelAnti-EchoSpoofing Protection in Email Security.cloud
Dark ReadingDisney, Nike, IBM Signatures Anchor 3M Fake Emails a Day
Opera SecuritySetting the record straight on the “MyFlaw” vulnerability
BleepingComputerFakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
Risky BusinessRisky Bulletin: Linux kernel discloses 442 CVEs as AI bugpocalypse settles in
CybernewsFacebook Messenger phishing wave targets business accounts
Cyber Security NewsAgentBaiting Campaign Uses 800 Fake AI Skills and MCP Servers to Deliver SmartLoader Malware
Apiiro ResearchNever Deleted, Only Re-Pointed: Inside the 17,600-Repo FakeGit Fleet That Re-Arms Overnight
eSecurityPlanetFake AI Marketing Sites Put a Browser Inside Your Browser to Steal Logins
BleepingComputerHijacked subdomains of major brands used in massive spam campaign
Help Net SecurityMalicious GitHub Repos Weaponized to Trick AI Agents and Developers
SecurityWeekSalesforce Email Service Zero-Day Exploited in Phishing Campaign
BleepingComputerHackers use Binance Smart Chain contracts to store malicious scripts
The Hacker NewsBinance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign
ICT Security MagazineBadBlocker: la vulnerabilità latente in Adblock for YouTube per Chrome
The Hacker NewsFakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
The Hacker NewsPhishers Exploit Salesforce's Email Services Zero-Day in Targeted Facebook Campaign
The Hacker NewsFake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cyber Security NewsHackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes
GBHackersFake ChatGPT, Claude and Gemini Ads Use Browser-in-the-Browser Phishing to Steal Accounts
TechNaduFake ChatGPT, Gemini, and Claude Ad Tools Steal Logins and MFA Codes in New Phishing Campaign
The Hacker NewsProofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Messages
TechRadarThis Microsoft Edge security flaw could have allowed hackers to install all kinds of malicious extras - but there's good news
Cyber Security NewsOpera “MyFlaw” Vulnerability Allows Hackers To Run Any File On Windows and Mac
Tom's GuideHackers are using Facebook Messenger to spread password-stealing malware — how to stay safe
Dark ReadingSalesforce Zero-Day Exploited to Phish Facebook Credentials
Cited by Microsoft MSRC · Google Mandiant · CERT-EU · US HHS · Spamhaus · NJCCIC
All research & press →