Erez Yalon
where else to find them
what they talk about
all 6 in the filters
where they keep going back
- RSAC Conference2 editions2020–2021
all 9 in the filters
on a stage with
- Adam Nygateonce
- Luis Gomesonce
- Paulo Silvaonce
all 5 in the filters
who talks about the same things
- Jeff Williams13 talks
- Alyssa Miller12 talks
- Jason Haddix10 talks
- Isabelle Mauny9 talks
- Christian Wenz12 talks
- Katy Anton8 talks
| title | conference | date |
|---|---|---|
| The Simple, Yet Lethal, Anatomy of a Software Supply Chain Attack | SOSS Fusion 2024 | 2024-10-22 |
Shows concrete attacker methods and real incidents: account takeovers on npm that push crypto miners from a 10M-weekly-download ua‑parser release, a March 7… | ||
| The Simple, Yet Lethal, Anatomy of an AI Attack | SOSS Fusion 2024 | 2024-10-22 |
Shows concrete attacks: a known campaign targets the Ray package and Ray package had no auth, letting attackers leverage dependencies to touch model training… | ||
| OWASP API Security Project | Global AppSec Lisbon 2024 | 2024-06-24 |
OWASP API Top 10 history and methods are explicit: the project first compiles incidents by scraped bug bounty platforms then cross‑checks CWEs and community… | ||
| The Supply Chain Conundrum: Why Traditional Application Security Is... | OpenGovCon @ Open Source Summit North America 2023 | 2023-05-10 |
Claim: vulnerability-focused tooling misses unrecognized risk that averages 4.5 years between bug introduction and fix, while recognized risk is only ~3… | ||
| Objects In The Rear View Mirror Are Closer Than They Appear | OWASP 20th Anniversary 2021 | 2021-09-24 |
Claim: cloud native complexity raises real exploitable gaps by gluing code, SCA, SAST, container scans, Kubernetes and IaC (Terraform, CloudFormation) so… | ||
| Colorful AppSec - Red, Blue, or Purple? | RSAC 2021 | 2021-05-17 |
Red teams run realistic attack exercises that go beyond bug bounties to probe APIs, mobile apps, infrastructure and business logic, uncovering risks that lack… | ||
| Don’t Worry, Be API Addressing AppSec’s Modern Challenge | OWASP Global AppSec Virtual 2020 | 2020-10-22 |
Claims that API security is now modern app security and that access control is the biggest gap backed by concrete outcomes: an OWASP API Security Top 10 is… | ||
| Hey Google, Activate Spyware! – When Google Assistant Uses a Vulnerability as a Feature | Black Hat Asia 2020 | 2020-09-29 |
Research finds Android camera intents that let any app without specific camera permission trigger capture and recording by exploiting no permissions exported… | ||
| Don’t Worry, Be API: Addressing AppSec’s Newest Challenge | RSAC 2020 Asia Pacific & Japan | 2020-07-15 |
Checkmarx-led research defines an OWASP API Security Top 10 and claims access control is the biggest API risk, splitting it into BOLA (broken object-level… | ||
| Hey Google, Activate Spyware! When Google Assistant Uses a Vulnerability as a Feature | RSA Conference 2020 DevSecOps & Application Security | 2020-02-24 |
Erez Yalon, Director of Security Research, Checkmarx
This talk will highlight serious security findings in Android smartphones, enabling attackers to remotely… | ||
| Serverless Infections: Malware Just Found a New Home | OWASP AppSec USA 2018 | 2018-10-11 |
Claiming the first-ever RCE stored and viral PoC, the team implements a payload on Amazon Lambda that reads the Lambda task root, compresses and curls entire… | ||
| nothing matches | ||