Viewing profile — shahartal

Author here (Yarden & Shahar from Check Point Research). Context on what this is and isn't: We set out to break Cloudflare's Code Mode and ended up in workerd, the runtime undernea…

CVE-2025-68664 ( langchain-core ): object confusion during (de)serialization can leak secrets (and in some cases escalate further). Details and mitigations in the post.

Hey all — authors of Vault Fault here (I’m Shahar, CEO at Cyata), really appreciate all the thoughtful comments. Just to clarify - all the vulnerabilities were found manually by a …

all fighter jet principals and employees should have arrest warrants out for them. those damn fighter jets makers, killing people around the world with their jets. I mean, what did…

fixed. anyone else experiencing trouble?

Original defcon presentation at http://shahart.al/I-hunt-TR-069-admins-shahar-tal-dc22.pdf

A relevant post: http://shahart.al/2013/07/13/on-the-perils-of-owning-a-vanit... (Also - check out the reddit thread [link in text])