On 25.10.2021 I reported a Local Privilege escalation vulnerability on CyberArk EPM which is used to help organization in enforcing least privileges, reducing the risk of information being stolen and block attacks on the organization endpoints. CyberArk EPM is offered for both “on-prem” and SaaS(Cloud) versions. The vulnerability affected all…

“Azure Cloud Shell is a browser-based shell experience to manage and develop Azure resources. Cloud Shell offers a browser-accessible, pre-configured shell experience for managing Azure resources without the overhead of installing, versioning, and maintaining a machine yourself.” so we will start right away with how things works in the backend…

Kubernetes is the leading container orchestration platform for SMB and enterprises that provides a fast deployment, load balancing, high availability, resource monitoring and is now widely offered as a service on different Cloud providers. Microsoft Azure During a security analysis that I have done on a customer’s containers environment running…

On the 30.5.2019 I Presented at OWASP Global AppSec Tel Aviv conference with my team leader Asher Genachowski. The lecture was focused on docker containers security, security best practices, the dangers of privileged containers and more. The following steps allow anyone who desire to recreate the demo by themselves. …