About

Hey, I'm Oleg.

I'm a security researcher in Israel. My cyber journey started the classic way: typing “How to become a Hacker?” into YouTube. I never really stopped asking.

Oleg Zaytsev

Fast forward: 8200 alum, former threat hunter at Guardio Labs, and now Lead Security Researcher at Island, where we build the enterprise browser. My days go to browser internals, email infrastructure and, lately, the AI agents everyone is wiring into their workflows.

My favourite part of the job is when a finding becomes a story. I write my research for everyone, not just other researchers, and when it travels, vendors ship fixes, defenders get a name for what they're seeing, and the industry gets a little safer. SubdoMailing and EchoSpoofing started as write-ups; now they're terms the biggest names in security use.

Building is the other half. I like knowing exactly how things are built — it's what makes breaking them easy, and it's why I build too. dorin.app started as a threat-hunting pipeline pointed at Israel's rental market and turned into a product more than 20,000 people use. Making something people rely on every day feels as good as finding the hole in someone else's.

Beyond that: cats (who doesn't), riddles, photography, and great ideas. If you have a question about one of my posts and ChatGPT couldn't help — you'll just have to reach out.

  1. Lead Security Researcher, IslandBreaking the enterprise browser from the inside — and hunting what targets it. AgentBaiting, BadBlocker, the fake AI-ads campaign.
  2. Threat Hunter, Guardio LabsMyFlaw in Opera, CVE-2024-21388 in Edge, PhishForce in Salesforce. Named SubdoMailing and EtherHiding; exposed EchoSpoofing.
  3. IDF Unit 8200Where the habit of taking things apart turned into a craft.
  4. Founder, dorin.appAn AI apartment hunter for Israel, serving 20,000+ users. Designed, built, launched and grown alone.
hey@olegzay.com