Or Yair

Black Hat·39 min

• Black Hat
• Red Team
• Date: 2025
• Location: Black Hat

Or Yair · Shmuel Cohen

Security researchers examine technical aspects of QuickShell: Sharing is Caring About an RCE Attack Chain on Quick Share.

Black Hat·48 min

• Black Hat
• AI Security
• Date: 2025
• Location: Black Hat

Or Yair · Stav Cohen · Ben Nassi

Security researchers examine technical aspects of SecTor 2025 | Invoking Gemini for Workspace Agents with Simple Google Calendar Invite.

Black Hat·45 min

• Black Hat
• Red Team
• Date: 2025
• Location: Black Hat

Or Yair

Presenters detail vulnerability discovery and exploitation in SecTor 2025 | Sharing Is Caring About an RCE Attack Chain on Quick Share.

Black Hat Europe 2025·37 min

• Black Hat
• Hardware
• Date: 2025
• Location: Black Hat

Or Yair · Shahak Morag

Engineers explore architecture and security mechanisms for A crash course in revealing insecure blind spots for DoS & DDoS.

Briefings·41 min

• Black Hat
• AI Security
• Date: Aug 2025
• Location: Las Vegas

Ben Nassi · Or Yair · Stav Cohen

Researchers uncover indirect prompt injection attack surfaces in workspace agents, demonstrating unauthorized cross-application data extraction.

CONFidence 2025·39 min

• CONFIDENCE
• Red Team
• Date: 2025
• Location: Confidence

Or Yair

Industry experts analyze emerging threats surrounding Or Yair - Quick Shell: Sharing is caring about an RCE attack chain on Quick Share.

Main Stage·46 min

• DEF CON
• AI Security
• Date: Aug 2025
• Location: Las Vegas

Ben Nassi · Or Yair · Stav Cohen

Demonstrates an indirect prompt injection attack where a Google Calendar invite autonomously triggers Gemini AI agents to exfiltrate private user emails and files.

Main Stage·37 min

• DEF CON
• Red Team
• Date: Aug 2025
• Location: Las Vegas

Or Yair · Shahak Morag

Discloses new remote denial-of-service vulnerabilities in Windows RPC and Active Directory that enable cascading Win-DoS and Win-DDoS epidemics across Domain Controllers.

PROIDEA Events·36 min

• PROIDEA
• Red Team
• Date: 2025
• Location: Proidea

Or Yair

Engineers explore architecture and security mechanisms for Or Yair: Aikido: Turning EDRs to Malicious Wipers Using 0-day Exploits | CONFidence 2023.

Black Hat Asia·37 min

• Black Hat
• Community
• Date: 2024
• Location: Black Hat

Or Yair

Engineers explore architecture and security mechanisms for Magicdot: A Hacker's Magic Show of Disappearing Dots and Spaces.

BlueHat IL·35 min

• COMMUNITY
• Red Team
• Date: 2024
• Location: Community

Or Yair

Industry experts analyze emerging threats surrounding Or Yair - Aikido: Turning EDRs to malicious wipers using 0-day exploits.

CONFidence·41 min

• CONFIDENCE
• Cloud
• Date: 2024
• Location: Confidence

Or Yair

Industry experts analyze emerging threats surrounding Or Yair: DoubleDrive: Double Agents Hide Behind The Clouds | CONFidence.

Main Stage·45 min

• DEF CON
• Mobile
• Date: Aug 2024
• Location: Las Vegas

Or Yair · Shmuel Cohen

Five-vulnerability exploit chain chaining unauthorized file writes and protocol bugs in Google Quick Share into remote code execution.

Black Hat USA·40 min

• Black Hat
• Cloud
• Date: 2023
• Location: Black Hat

Or Yair

Engineers explore architecture and security mechanisms for One Drive, Double Agent: Clouded OneDrive Turns Sides.

Black Hat Europe·33 min

• Black Hat
• Red Team
• Date: 2022
• Location: Black Hat

Or Yair

Industry experts analyze emerging threats surrounding Aikido: Turning EDRs to Malicious Wipers Using 0-day Exploits.