Suggestions
Rotem Bar
Cyber Paladin & Head of Marketplace @Cider Security
Rotem Bar is a seasoned cybersecurity professional with over 15 years of experience in the security and development industries. He currently serves as the Head of Marketplace Integrations at Cider Security.13 Rotem has a diverse background that includes roles in startups, penetration testing, red teaming, and hacking production plants.
Career Highlights
- Senior Manager Appsec Innovation Labs at Palo Alto Networks (December 2022 - Present)1
- Head of Marketplace Integrations at Cider Security (2021 - December 2022)13
- Cyber Developments Team Leader and Security Specialist at AppsFlyer (2019 - 2021)1
- Vision and Concept at CYMOTIVE Technologies (2015 - 2019)1
- CTO at Komodo Consulting (2013 - 2015)1
Expertise
Rotem specializes in creating tools for defending systems, developing and automating processes within the security pipeline to assess and mitigate risks associated with code entering systems. He is known for his skills in programming, security, and networking.1
Notable Achievements
In February 2022, Rotem discovered an Unauthenticated DOM-based Reflected Cross-Site Scripting vulnerability in Elementor, which he reported through the Patchstack Alliance.3 This finding affected millions of websites, highlighting his expertise in identifying critical security issues.3
Education and Background
Rotem completed his K12 education at Misgav from 1990 to 2002.1 He also served in the Israeli Defense Forces' Military Advocate General's Office, where he was a District Military Prosecution Head involved in matters of National Security, retiring with the rank of Captain.2
Rotem Bar is actively involved in the cybersecurity community, sharing his knowledge and contributing to open-source tools to enhance cybersecurity measures.
Highlights
And if I can’t find a full exploit chain demonstrating high impact, but I did find a very interesting lead which allows me to execute code.
As someone from inside I would be glad to receive this lead, even if it is unbaked and does not show a full exploitation path.. Why? because I know it can be exploited in time, with a more experienced attacker or after some feature change, and I can internally can get the full access to logs, source code and easily understand the real impact (well sometimes)
I hope next time you are triaging a bug received from an external party, VRP, or bug bounty hunter, if it seems like a good lead please help the bug hunter from the inside, at the end of the day you two are on the same team
Random thoughts after receiving a ...until valid potential has been shown, we can't validate this issue
Asi Greenholts presenting the Dendro worm at BSidesTLV
PS. Who here remembers the Boggy B soundtrack from worms armageddon? Best song ever
