Love cyber security, opinions are mine.
Joined November 2016
- Tweets 37
- Following 103
- Followers 618
- Likes 25
7 Photos and videos
Mar 23
Speaking at RSAC tomorrow — Session VLG-T10.
I found critical vulnerabilities in Claude Code, Codex CLI, Cursor & Gemini CLI that silently turn dev workstations into attack surfaces.
No malware. No phishing. Just trusted tools executing text that become a malicious instructions.
130
Feb 26
I hacked Claude Code! It turns out "agentic" is just a fancy new way to get a shell. I achieved full RCE and hijacked organization API keys. CVE-2025-59536 | CVE-2026-21852
research.checkpoint.com/2026…
#ai #Claude
11
128
587
106,967
3 Dec 2025
How to turn $0.000000000000000045 into a massive $9M DeFi HACK?
The attacker poisoned the protocol's state, exploiting a missing storage reset to mint septillions of phantom tokens from practically zero capital.
#yeth #Crypto #hack #defi
research.checkpoint.com/2025…
2
682
2 Dec 2025
We turned OpenAI Codex CLI into a remote code execution vector, exposing a critical Command Injection vulnerability (CVE-2025-61260).
executes silently zero user interaction needed.
#ai #openai #rce #vulnerability
research.checkpoint.com/2025…
2
2
707
5 Nov 2025
$128M drained from Balancer. This wasn't a complex smart contract flaw, it was the weaponization of arithmetic state.
research.checkpoint.com/2025…
205
4 Nov 2025
just broke a core assumption of trusted comms, 4 MSTeams vulnerabilities let attackers wear the CEO’s face, rewrite message history and spoof calls across platforms used by hundreds of millions. Read our research.
research.checkpoint.com/2025…
189
5 Aug 2025
Today, i released MCPoison CVE-2025-54136, a persistent remote code execution vulnerability in the Cursor IDE. This marks a new era of client-side exploitation, where AI tools are reshaping the attack surface.
research.checkpoint.com/2025…
1
219
13 Aug 2022
Had a great time talking @defcon 🇺🇸 sharing recent Web3 vulnerabilities that exploited millions of dollars from crypto platforms.
1
4
28 Jul 2022
On August 12 we’ll talk in @defcon USA 🇺🇸🤘🏻 In our workshop, we will share TOP 10 vulnerabilities in blockchain smart contracts following recent crypto hacking research. We’ll demo every vulnerability on the blockchain from both attacker and defender perspectives.
5
4
26 Apr 2022
Oded Vanunu retweeted
14 Apr 2022
.@_CPResearch_ identified a vulnerability in the Rarible #NFT marketplace that could have caused users to lose their NFTs. @Od3dV, Check Point Head Of Products Vulnerability Research, spoke to @Cointelegraph about the investigation: bit.ly/3xnm8vE
1
12
4
14 Apr 2022
New NFT hijack research we just published @TheHackersNews…one click to rule them all amp.thehackernews.com/thn/20…
Oded Vanunu retweeted
7 Aug 2019
Live at #BHUSA with @CNBC’s @YasminKhorram filming a special #WhatsApp segment with @Od3dV Oded Vanunu Head of #Vulnerability Products at @_CPResearch_ and Roman Zaikin #Security Researcher. research.checkpoint.com/
3
6
8 Aug 2018
56billion messages per day...we released a research paper how easy to manipulate whatsApp messages..research.checkpoint.com/fake…
2
2
3
17 Jun 2018
Today 20:00 at local DEFCON Tel Aviv....Gal Elbaz will talk on #bashware...@CheckPointSW building.
1 May 2018
#SiliVaccine great research we just published...inside North Korea AV....Enjoy...research.checkpoint.com/sili…