Asaf Hecht

A passionate Cyber Researcher who is also a former Helicopter Pilot :)

[David Shandalov @DavidShandalov]

Thrilled to announce that I’ll be speaking at #SecTor2026 in #Toronto!

If you want to see how modern evasion is moving beyond the CPU, add "Cloak and Filter" to your conference schedule. And make sure to come say Hi!

See you in Toronto!

#SecTor #Cybersecurity #InfoSec

[Asaf Hecht @Hechtov]

An insightful piece about OAuth security.
Vulnerabilities in redirect_uri, registration flow, and state parameters were found in many websites and present a significant attack surface:

@CyberarkLabs @g3rzi #OAuth
https://t.co/ulUrvCDhTm

[Asaf Hecht @Hechtov]

Kubiscan = a great open-source tool for strengthening Kubernetes security! 🎯
Now with this easy guide to boost your Kubiscan skills and run it in no time 🚀👇
https://t.co/Lbv2APJWM6

@CyberarkLabs @CyberArk #Kubernetes #Kubiscan #Cybersecurity #OpenSource

[Asaf Hecht @Hechtov]

How safe is your data with FAANG companies? 🧐 Our recent research reveals potential threats and how to stay protected:
@CyberarkLabs @CyberArk #TechNews #DataSecurity

https://t.co/VLAJvT2Yjv

[Asaf Hecht @Hechtov]

New open-source tool for decompiling #Python executables with local LLMs!
Great one, check it out.
It works well on all Python versions including v.13 :)
More details:
https://t.co/CHq7APeba6

@CyberArk @CyberarkLabs #MalwareAnalysis #Privacy #AI #Python

[CyberArk Labs @CyberarkLabs]

🕹️There's no honor amongst thieves... 🎮

In 2 weeks, @0xdavidel will join @Andy_Thompson in a live presentation and Q&A where David will discuss how he discovered a video game cheat developer was stealing from his own customers.

https://t.co/h6yxzSkc1h

[Asaf Hecht @Hechtov]

Great example for using CodeQL to find cool vulnerabilities:

@g3rzi, @CyberarkLabs, #CodeQL #BulnerabilityReseach

https://t.co/OTyRKqXIj9

[CyberArk Labs @CyberarkLabs]

.@ShakReiner just published this eye-opening article about a security vulnerability in #LargeLanguageModels (#LLMs ) that allowed him to execute arbitrary code on a server through a simple chat prompt.

#RCE #ArtificialIntelligence #AI

https://t.co/wddbT00z64

[Asaf Hecht @Hechtov]

Exciting news, INTENT Security Conference is coming soon 🎉

1. Do you want to share your research work? The CFP is closing soon, make sure to check it out.
2. Registration for INTENT is now open 😀

Find out more and register at https://t.co/wmdDEMy4Wu.

@CyberarkLabs #INTENT

[Sean Metcalf @PyroTek3]

Slides from my @MCTTP_Con talk "A Decade of Active Directory Attacks - What We've Learned & What's Next" are now posted: https://t.co/IOhVdRoNYb

[Asaf Hecht @Hechtov]

Interested in security and working with Azure DevOps, this post is for you:

@CyberarkLabs #Enlightening #AzureDevOps @g3rzi

https://t.co/HDvwGdrQNt

[CyberArk Labs @CyberarkLabs]

1/5 🔐 Azure DevOps users, listen up! A new security analysis by @g3rzi exposes potential risks in pipeline execution. This is a must-read for anyone serious about #DevSecOps.

#AzureDevOps #CyberSecurity

[CyberArk @CyberArk]

Don't miss this opportunity to hear from @CyberarkLabs @Andy_Thompson, as he delves into the latest activities and tactics of the notorious threat actor group, Scattered Spider. Register today! https://t.co/46Di0renG2

#IdentitySecurity #ransomware #cybersecurity

[Asaf Hecht @Hechtov]

Malware embedded in a game cheating - well... be aware:

https://t.co/weieooTDzz

[Asaf Hecht @Hechtov]

Oh this is an interesting one - the hacking scene behind game cheating:

#game_cheating #malware
@CyberArk @CyberarkLabs @0xdavidel

https://t.co/PDpVmzqsAZ

[CyberArk Labs @CyberarkLabs]

🚨Think twice before cheating! 🚨
Our latest blog by @0xdavidel reveals how the #EvolvedAim developer exploited his own clients.

Find out more now! 🔗 https://t.co/5Z1gMWFOgm

#Malware #Gaming #EscapefromTarkov

[CyberArk Labs @CyberarkLabs]

🤔Curious about the history and evolution of video game cheating? 🤔

Our latest blog @0xdavidel covers everything from built-in cheats to advanced DMA methods. Discover how developers fight back and the risks involved.

Read more here: https://t.co/Z50FSOqZSm

[CyberArk Labs @CyberarkLabs]

🚀Golang SSL Verification Bypass Explained🚀

Michael Pasternak of CyberArk Labs breaks down the process of bypassing SSL verification in Golang.

https://t.co/ZQky2xMxSz

[Asaf Hecht @Hechtov]

Insightful example for a web race condition vulnerability (CVE-2024-172):

https://t.co/8ql8dM6MUP

[CyberArk Labs @CyberarkLabs]

Race Conditions Found in Open-source IAM Solution Keycloak 🔑 (CVE-2024-1722)

https://t.co/zYPuMpND8x