Roee Sagi

Security Researcher at @orcasec

[Roee Sagi @RoeeSagi]

@thisis0xczar and I have discovered #CosMiss, a vulnerability in #MicrosoftAzure Cosmos DB where authentication checks were missing from Jupyter Notebooks (https://t.co/Gs9VX2h1a5)
Keep reading for the highlights about this new #vulnerability🧵⬇️ (1/6)

[Yuval Gordon @YuG0rd]

🚀 We just released my research on BadSuccessor - a new unpatched Active Directory privilege escalation vulnerability
It allows compromising any user in AD, it works with the default config, and.. Microsoft currently won't fix it 🤷‍♂️
Read Here - https://t.co/c969sNjQH0

[Marina Medvin 🇺🇸 @MarinaMedvin]

When Palestinians tell you who they are, believe them.

Listen —

[Ella Ke @EllaTravelsLove]

Why were the hostages hidden in a market, as Hamas continues to risk their own people and use them as human shields?

Israel is dealing with an almost impossible combat zone.

#HamasisISIS

[Yanir Tsarimi @Yanir_]

I hacked Microsoft's AI bot for healthcare on a Friday night

Within hours I could access data of multiple healthcare organizations, but it didn't stop there

Microsoft fixed the issue, and then I did it again, and again, and again..

Here's the story of Lethal Injection: 💉

[Eylon Levy @EylonALevy]

The first question that left me speechless (but only for a second):

[David Lisovtsev @david_lisovtsev]

First clear footage from the Al Ahli tragedy in Gaza, but what do you notice?
this is a surface explosion, almost no soil is thrown up, so it's not an air bomb.
Looks like a failed Hamas rocket that landed there, what a tragedy has Hamas brought to the people of Gaza!

[Ella Ke @EllaTravelsLove]

#HamasisISIS

[Ella Ke @EllaTravelsLove]

Hamas is ISIS.

who kidnaps babies?

Don't look away.

#HamasisISIS

[Ella Ke @EllaTravelsLove]

This is an Israeli hostage in Gaza.

Notice the sandbags. Printed on them: "The people of Japan" and "For free distribution for Palestinian refugees"

I wonder if Japan knows their sandbags are being used by terrorists and not refugees.

#HamasisISIS
#hamas
#Israel
#Israel_under_attack
#Palestine
#Gaza
#Gaza_under_attack

credit to: @imshin

[Ella Ke @EllaTravelsLove]

Hamas, an Islamic fundamentalist terrorist organization has kidnapped elderly women, mothers with their babies. Hamas are as brutal as ISIS.
Please share! these babies are kidnapped and held in Gaza in horrendous conditions.

#gaza #Israel_under_attack #israel

[Ron BY @RonB_Y]

The video of my #defcon talk is now available!
https://t.co/QOj7V9YmDj

[Yuval Gordon @YuG0rd]

An advisory for the Remote Code Execution vulnerability I have discovered on Rockwell PanelView Plus devices was just published.

https://t.co/RXjkwHs55Y

https://t.co/zotMMo1SbZ
Stay tuned!

[Brian in Pittsburgh @arekfurt]

Microsoft has posted a blog saying it has found the likely explanation (though it deleted via log rotation the logs that would have proved this😬) for loss of its token signing key in the MS cloud breach earlier this year:

Bloody crash dumps:
https://t.co/vHp55eA7HR

[Orca Security @orcasec]

Security researcher @RoeeSagi found that over 37% of #Azure accounts have at least one overly permissive guest user 🔑 Learn about how a compromised Azure Active Directory Guest user leads to #sensitivedata leakage: https://t.co/qBZSO03Zji

[Ron BY @RonB_Y]

Presenting my research at @defcon was incredible!
The repo for my tool #NoFilter is:
https://t.co/dx2PzQEATB
Slides available here:
https://t.co/q9AXD8ARn1
The research will be published as a blog post soon
#DEFCON #DEFCON31

[Ofir Balassiano @ofir_balassiano]

🚨 We found a new Vulnerability in GCP CloudSQL 🚨
I am honored to disclose a new vulnerability that I found with @Nu11p01Nt in GCP CloudSQL that could have been used to escalate privileges from a basic user to a full-fledged sysadmin on the container.

https://t.co/W8xuiJ05U8

[BlueHat IL @BlueHatIL]

Lidor Ben Shitrit & Roee Sagi are here to give us a great glimpse into performing security research on Azure services and the process behind the scenes of triaging such vulnerabilities and mitigating the them.

[Orca Security @orcasec]

We recently hosted 100+ #securityresearchers who learned from @RoeeSagi about his studies of the attack surface of #Azure VMs and its internal infrastructure. Learn more about the #CosMiss vulnerability: https://t.co/9yucvc0xLR

#telaviv #cloudsecurity #secops #OrcaSecurity

[Roee Sagi @RoeeSagi]

@terminatorLM Great work!

[Liv Matan @terminatorLM]

Recently I discovered a one-click RCE vulnerability in #Azure that affects Function apps, App services, and Logic apps.

The vulnerability enables attackers to fully take over the targeted victim's application and managed identity token.

This is the story of #EmojiDeploy ._. 🧵