Kasif Dekel

[Kasif Dekel @kasifdekel]

Honored to be on that list alongside with @ronenshh! We found critical RCEs in Azure, hopefully soon to be public :) stay tuned!

[Microsoft Security Response Center @msftsecresponse]

Congratulations to all the researchers recognized in this quarter’s MSRC 2021 Q3 Security Researcher Leaderboard! For a full list of top researchers, check out our blog post: https://t.co/MJUsRjRSDr

[Ronen Shustin @ronenshh]

We (+@nirohfeld) found a critical vulnerability chain in NVIDIA's Triton Inference Server (CVE-2025-23319) that can lead to full Remote Code Execution (RCE).
An unauthenticated attacker can remotely take over the server, a cornerstone of many AI/ML production environments. 🧵

[Ronen Shustin @ronenshh]

This was a huge effort from the team. With every small primitive we discovered, we got closer—until we finally landed a full unauthenticated RCE. I had a ton of fun working on this research. ☸️👇

[Kasif Dekel @kasifdekel]

Funny lil thing I had to check. #WhatsApp `secret chat` feature isn't as secure as you'd hope. Found a funny way to easily bypass it. It’s supposed to provide local/physical protection to your convos but don't trust it with your super secret convos! 😅. Report dismissed by #Meta.

[Ronen Shustin @ronenshh]

We discovered a container escape vulnerability in the @NVIDIA Container Toolkit. It allows attackers to gain full access to the host's filesystem and achieve Remote Code Execution (RCE).

Here's everything you need to know about CVE-2024-0132 🧵👇

[Kasif Dekel @kasifdekel]

Thanks @MSFTResearch !

[Kasif Dekel @kasifdekel]

Honored to be listed in Microsoft Most Valuable Researchers 2022 🙃.

[Microsoft Security Response Center @msftsecresponse]

Check out the scrolling MVR list that played at the MSRC Black Hat party! @guhe120 @pnig0s @callum_infosec @wtm_offensi @MDeilamyM @edwardzpeng @bee13oy @SinSinology @Hperalta89 @b2ahex @kasifdekel @jq0904 @Creastery @M3ikShizuka @ronenshh @Yanir_ @hillstone_lab @D1iv3 @DrAzureAD

[Kasif Dekel @kasifdekel]

@maxpl0it Kudos Max!

[Kasif Dekel @kasifdekel]

A cool research project that @ronenshh and I worked on during 2021.

[SentinelOne @SentinelOne]

🔥New on #SentinelLabs! A must-read for fuzzing fans, this post gives a detailed look at the advanced techniques used in our recent discovery of multiple bugs in Defender for #IoT. By @kasifdekel.

Read the blog: https://t.co/Ql3uP3jLrd

#fuzzing #cybersecurity #defender

[Kasif Dekel @kasifdekel]

@maxpl0it Yup, Sibony and Yair are there as well.

[Kasif Dekel @kasifdekel]

I was recorded running in this video :0

[StandWithUs @StandWithUs]

Terror in the heart of #TelAviv: A shooting took place tonight in Dizengoff Square. At least 6 people are in critical condition. More to follow.

[Kasif Dekel @kasifdekel]

@notdurson Speedy recovery!

[Kasif Dekel @kasifdekel]

Recent research that @ronenshh and I worked on.
Users are advised to patch their systems ASAP!

[SentinelOne @SentinelOne]

🔥New on #SentinelLabs! We’ve just disclosed 10.0 CVSS vulnerabilities on Microsoft’s Azure Defender for IoT allowing unfettered access to your Microsoft-protected organization. By @kasifdekel & @ronenshh.

https://t.co/e8TvQEhM5z

#azure #iot #xdr #vulnerabilities

[Kasif Dekel @kasifdekel]

@PhilipTsukerman @OryanDP I have one too! I called my dog Unicode to confuse him :P #sorrytoo

[maxpl0it @maxpl0it]

- Use-after-frees from JIT
- CodeQL for variant analysis
- Never-before-seen exploit primitives
- Tenured heap tomfoolery

I’ve packed just about everything in this post!

[Kasif Dekel @kasifdekel]

@notdurson @Dayvee87 https://t.co/EH97W13gmB

[Kasif Dekel @kasifdekel]

Nice exposure! I actually tweeted about it like 3 years ago https://t.co/pVheVCBJk8

[Antonio Cocomazzi @splinter_code]

Windows Defender AV allows Everyone to read the configured exclusions on the system 🤦

reg query "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions" /s

[Kasif Dekel @kasifdekel]

Sorry about that @FlowerCode_ & @tiraniddo, I reported a LPE vulnerability and they decided to remove it. Hoped they'd release a fixed version. I find DeviceTree useful too and you can find a signed version in the repo alongside with the vuln details: https://t.co/9w6SciFonw

[James Forshaw @tiraniddo]

@FlowerCode_ DeviceTree no longer working?

[Kasif Dekel @kasifdekel]

As always, awesome research done by my teammate @maxpl0it!

[SentinelOne @SentinelOne]

➖ New on SentinelLabs! @maxpl0it has discovered a high severity flaw in NetUSB which could remotely exploited to execute code on the kernel.

https://t.co/T5LOicvg08

#research #netUSB #infosec #rce #security #SentinelLabs #XDR #iotsecurity #ranger

[Kasif Dekel @kasifdekel]

Cool @metasploit module by @Junior_Baines :D

https://t.co/Mvu6PlTEbS

[Kasif Dekel @kasifdekel]

@maxpl0it <3