Sign In

Roi Cohen

VP Sales & Co-Founder at Vicarius

Roi Cohen is an accomplished Vice President of Sales with extensive experience in computer and network security. With a Bachelor of Science in Industrial Engineering from Jerusalem College and an MBA in Management of Technology, Innovation, and Entrepreneurship from Tel Aviv University, Roi has become a proven leader in the industry. He is a Co-Founder and VP of Sales at Vicarius, where he displays his business development skills, and he has undertaken several critical roles at various organizations throughout his career.

Prior to his work with Vicarius, Roi led the Malware Research Team at CyberArk and contributed to the success of CYBERTINEL-Endpoint Security as a Sales Engineer and Malware Research Team Leader. In addition, he has worked as a Cyber Security Specialist at 2BSecure and as a .NET Developer and Project Manager at Ness Technologies. Roi has also gained experience as a Co-Founder and Web Manager at LBiS and as a Team Leader at Malam and Mamram.

With his expertise in sales, cybersecurity, and software development, Roi Cohen has established himself as a top executive in the industry, and he continues to make an impact in his role at Vicarius.

Highlights

Jul 9 · linkedin

🚨 Critical flaw CVE-2024-39930 found in Gogs' SSH server

This vulnerability allows remote code execution through argument injection, affecting versions up to 0.13.0 of Gogs (Windows systems are not affected)

Authenticated attackers can exploit this vulnerability by opening an SSH connection and sending a malicious --split-string env request if the built-in SSH server is activated.

Recommended actions: * Restrict SSH Access: Limit SSH access to trusted IP addresses and use firewall rules to minimize exposure. * Monitor and audit: Continuously monitor your systems for unusual activities and perform regular security audits. * Disable SSH Server on Gogs: Disable SSH Server on Gogs in the configurations to mitigate this attacks. * Stay updated: Update Gogs once the patch is available.

You can use these script to identify and fix the issue:

🔍 Detection script: https://lnkd.in/dQtiadqa 🩹 Remediation script: https://lnkd.in/d-upk8Sf

Jun 2 · linkedin

🚨 CVE-2024-1086, a critical use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component, is currently being actively exploited.

This vulnerability exists in the nft_verdict_init() function and allows for local privilege escalation by exploiting a double free condition when handling NF_DROP errors in specific configurations.

This flaw impacts a wide range of Linux kernels from versions 5.14 to 6.6, affecting major distributions like Debian and Ubuntu. It is imperative to upgrade past the kernel commit f342de4e2f33e0e39165d8639387aa6c19dff660 to mitigate this vulnerability.

For those maintaining affected systems, immediate action is recommended. We have prepared scripts to help detect vulnerable configurations and to patch this serious security gap.

🔍 Detection script: https://lnkd.in/dhvZDzfM

🩹 Remediation script: https://lnkd.in/dBg5XfGZ

🚨 CVE-2024-1086, a critical use-after-free vulnerability in the Linux kernel's netfilter: nf_tables

Related Questions

What is Vicarius' main focus or product?
How did Roi Cohen start his career in sales?
What are some notable achievements of Roi Cohen at Vicarius?
How does Roi Cohen's background influence his leadership style?
What other companies has Roi Cohen worked for?
Roi Cohen
Roi Cohen, photo 1
Roi Cohen, photo 2
Add to my network

Location

Israel