BSidesTLV 2023

ofir shaty

Ofir Shaty is a Senior Security Researcher at Dig Security, bringing over 6 years of experience in Data Security and Web Application Security to the team. 
Prior to joining Dig, Ofir worked as a Senior Security Researcher at Imperva, where he specialized in researching database attacks. He has published groundbreaking research in the field of data security databases security attack techniques from both an offensive and defensive perspective.

The speaker's profile picture


The dark side of cloud-based database engines
Ofir Balassiano, ofir shaty

Cloud migration has revolutionized the way we work with databases, But the cloud provider's changes to popular database engines have created new attack vectors. Our presentation will explore the evolving database attack landscape in the cloud, showcasing a case study of a critical CloudSQL (GCP) vulnerability we recently found and advanced lateral movement and PE techniques.