AssafMorag

1/ Our team at @LucidBitLabs recently audited a crypto wallet app. We found 2 impactful vulnerabilities 👇

I'll be speaking at the Infrastructure & Ops Superstream: Securing your Kubernetes Clusters from Known and Unknown Weaknesses. Tomorrow! Sept 6 11am EDT Sign in, or sign up for your free trial: oreil.ly/I5kCS

In part one of our series on the reemergence of TeamTNT, we provided an overview of the preliminary stages of an aggressive botnet campaign aimed at cloud-native environments. ☁ After further research of the novel #TeamTNT botnet, Aqua Nautilus has discovered an unprecedented scan rate of the entire internet every hour and a staggering infection rate of at least 1 victim per hour. 🤯 If you are using docker, k8s, redis, hadoop, ssh, or jupyter we strongly encourage you to check out these new findings. 🔎 blog.aquasec.com/teamtnt-reemer… @ofekitach @MoragAssaf

@erant הכלכלה תישאר יציבה בעזרת השם

כדי לחסוך זמן, הכנתי בינגו הורדת דירוג אשראי לקראת צאת השבת. לא צריך יותר להתווכח, רק לגזור ולשמור ולסמן את טקטיקת הויכוח המתאימה. לזוכים תוגרל ארוחת צהריים מלאת בוז ומשטמה עם שמחה רוטמן. נתראה במוצאי שבת בהפגנות

Another Master student flew through the thesis defense at @TelAvivUni with flying colors: @EilatLevAri had presented her thesis: Product Managers' Role in Incorporating Values into Digital Products. Thanks to @DanKotliar and Joachim Meyer for evaluating the thesis

🚨 Aqua Nautilus researchers have discovered a new elusive and severe threat known as HeadCrab that has compromised a large number of Redis servers. 📖 on for details of the attack and steps organizations can take to safeguard their systems. blog.aquasec.com/headcrab-attac…

Our SVP of Strategy, @ranio1, recently sat down with @ashimmy to chat about where the security market is headed, #CNAPPs as an important emerging security category, and why Aqua was named the Best Cloud Native Security Solution/Service at the #DevOpsDozen techstrong.tv/videos/intervi…

In 2023, personal #data is being generated at an unprecedented rate. In this issue of @cybersec_mag, Assaf Morag of Aqua Nautilus and other experts share their insights on how to best protect your data. ☁ 🔒 @MoragAssaf cyberprotection-magazine.com/data-protectio…

Super proud of lab member Assaf Morag, who presented his Masters research, "SamPass: Secure and Memorable Password Recommendation System". Assaf had presented a recommendation system that helps users improve their passwords with massive leaked account datasets

CVE-2022-0847 “Dirty Pipe” is dissected and analyzed very well by ⁦Alon Zivony / Team Nautilus⁩ ⁦@AquaSecTeam⁩ in this writeup. blog.aquasec.com/deep-analysis-…

Happy to announce that our paper, “Can Previews Mitigate the Effect of Interruptions? Findings from a Lab Experiment under Various Workloads”, was accepted by the International Journal of Human-Computer Interaction -- paper by @frankbolton, Dov Te'eni and I, all from @TelAvivUni

In this blog, @MoragAssaf and Guy Ben-Aharon of Aqua Security explain Text2Shell and their mitigation recommendations.👇 blog.aquasec.com/cve-2022-42889…

אוניברסיטת תל אביב @TelAvivUni מספרים על המחקר של @tamir_me ושלי על Meerkat, האפליקציה שפיתחנו לתמיכה בין דורית בטלפון החכם

New blog about rootkit detections! File operations hooking explained :) blog.aquasec.com/detect-drovoru…

I’n the past couple of months I worked at @AquaSecTeam on a cool project that target hunting kernel rootkits with ebpf. And today one of those techniques came public with a nice blog that introduces tracee’s new detection event. Hope you’ll enjoy it blog.aquasec.com/linux-syscall-…

Aqua's #TeamNautilus created a honeypot to better understand how adversaries are exploiting the initial #Log4j vulnerability (CVE-2021-44228) in real-world attacks. Read on to learn the key findings from their research: blog.aquasec.com/real-world-log…

Read about Aqua’s exciting new addition of cloud native detection and response (#CNDR) capabilities to our Cloud Native Application Protection Platform (#CNAPP)! blog.aquasec.com/cndr-ebpf-clou…

What was the effect of Israel’s decision to use mass surveillance of cellular phones for COVID-19 contact tracing? @oshratayalon and I uploaded a new manuscript to arxiv that analyzes the relationship to the installation of the more accurate app arxiv.org/abs/2110.01567

How older adults (aged 65 or more) get help from family and friends when facing security and privacy challenges on their mobile phones? Very proud of our lab's Ph.D. candidate @tamir_me in heading this project and presenting it on Friday at @ACMMobileHCI 2021.

@NCCGroupInfosec @ChaosDatumz Thank you @NCCGroupInfosec for thoroughly analyzing Tracee! We are honored and pleased to read that the bottom line conclusion is that Tracee 0.6.0 is not vulnerable to any of the problems you mentioned in your blog as opposed to some other ebpf based solutions!