Sabitlenmiş Tweet
Liv Matan
154 posts
Liv Matan retweetledi
Our Google Cloud VRP researchers don't miss! 🔥 Check out @terminatorLM's latest Looker research uncovering 9 novel cross-tenant vulns in Looker.
See how it was done: 👇
Liv Matan@terminatorLM
🫣LeakyLooker: 1 Cross-tenant vulnerability? How about 9? (1/10)🧵 I’m incredibly proud to share LeakyLooker. I discovered 9 novel cross-tenant vulnerabilities in Google Cloud’s Looker Studio that broke fundamental design assumptions. Here is how I broke tenant isolation: 👇
English
🫣LeakyLooker: 1 Cross-tenant vulnerability? How about 9? (1/10)🧵
I’m incredibly proud to share LeakyLooker. I discovered 9 novel cross-tenant vulnerabilities in Google Cloud’s Looker Studio that broke fundamental design assumptions.
Here is how I broke tenant isolation: 👇
English
👀 LookOut: Novel Remote Code Execution & Internal Database Access vulnerabilities that I discovered in Google Looker
tenable.com/blog/google-lo…
English
Thank you for the shoutout :) it was a pleasure.
sapir federovsky@sapirxfed
🎄🎄🎄 I went to a meetup last night about cloud attacks and watched a talk by @terminatorLM about GCP, and it was SO GOOD!! I came home with so many ideas and so much motivation. Turns out it’s also on YouTube! please watch it, no matter which cloud you’re into🤭 youtu.be/nZWpDeY9p6g?si…
English
High Signal #01: postMessage, pre-auth RCE, and Gemini hacks newsletter.bugbountydaily.com/p/high-signal-…
English
I'm really excited to share my first research article related to hacking Google Gemini!
buganizer.cc/hacking-gemini…
#bugSWAT #GoogleVRP
English
🤖 HackedGPT: Unpacking 7 Vulnerabilities we discovered in ChatGPT
Following up on our work: Yarden Curiel, Moshe Bernstein, and I are proud to share the technical details of our ChatGPT research
tenable.com/blog/hackedgpt…
English
😶🌫️ Big news! The Gemini Trifecta:
I discovered a "Trifecta" of three new vulnerabilities (now remediated) in Google Gemini Cloud Assist, Search Model, and its browsing tool.
Full technical details:
tenable.com/blog/the-trife…
English
My vulnerability is featured in the blog
Google VRP (Google Bug Hunters)@GoogleVRP
The inaugural Cloud VRP ☁️ bugSWAT event was a record-setter 🏆: With 91 identified vulnerabilities resulting in ~$1.6 million in rewards, the event underscored the value of collaboration with external security researchers. bughunters.google.com/blog/536440198…
English