Ronen Shustin

Haven't touched Android research in 5 years, but Android and I just became friends again 🤝. Reported a cool 3-vulnerability chain going from untrusted -> root.

AI had a major impact on this chain, more info about that soon.

With my love for PHP exploits, going to sleep just as a WordPress Core vulnerability dropped gave me huge FOMO.

One thing is certain... it's a beautiful vulnerability.

The last year and especially the last few months have been the tipping point for me to understand how impactful AI agents are for security and vulnerability research. I used to be a bit of an AI hater, but seeing the capabilities of current models changed my mind a bit.

We (+@nirohfeld) found a critical vulnerability chain in NVIDIA's Triton Inference Server (CVE-2025-23319) that can lead to full Remote Code Execution (RCE).
An unauthenticated attacker can remotely take over the server, a cornerstone of many AI/ML production environments. 🧵

This was a huge effort from the team. With every small primitive we discovered, we got closer—until we finally landed a full unauthenticated RCE. I had a ton of fun working on this research. ☸️👇

A couple of months ago, we at @wiz_io discovered a container escape vulnerability in the NVIDIA Container Toolkit, which impacts many cloud and AI SaaS providers. We're finally able to share the technical details.
wiz.io/blog/nvidia-ai…

We discovered a container escape vulnerability in the @nvidia Container Toolkit. It allows attackers to gain full access to the host's filesystem and achieve Remote Code Execution (RCE).

Here's everything you need to know about CVE-2024-0132 🧵👇

This is gold

Today we share our Alibaba Cloud research for the first time, where we gained unauthorized access to other customers' databases in two different services 🚨

This complex research involved RCE, PE, Container escape, K8s lateral movement, and supply chain attack. Check it out 🧵

Excited to share #HellsKeychain, a supply-chain attack affecting IBM Cloud Databases for PostgreSQL. Read about how we chained multiple vulnerabilities in IBM Cloud’s environment to intervene in their internal image-building process
wiz.io/blog/hells-key…

golang x86 register based calling convention: rax, rbx, rcx... why?? :(

I’m thrilled to finally release our work on #ExtraReplica - a major cross-account vulnerability in #Azure PostgreSQL Flexible Server
wiz.io/blog/wiz-resea…

Honored to be on that list alongside with @kasifdekel! We found critical RCEs in Azure, hopefully soon to be public :)

Amazing tool for hacking C# Unity based games! It has a neat feature that generates an IDAPython script which populates the game symbols, types and more.
github.com/djkaty/Il2CppI…

In the past year, I was researching Azure Stack, which is an on-premise version of Azure Cloud. In the following blog posts, we present information on what is Azure Stack and its architecture and disclose a vulnerability in Azure App Service that allowed a sandbox escape.

A research I finished long time ago, it was fun :)
research.checkpoint.com/we-decide-what…

My new __destruct file write gadget for Swift Mailer is now merged into PHPGGC, Cool project @cfreal_!
github.com/ambionics/phpg…

Here is my writeup on how I solved the express-yourself challenge from the #35C3 CTF.
github.com/r0nen/ctf/tree…