Roi Nisimi

Roi Nisimi, a cloud and offensive security researcher with a focus on GitHub Actions, joins Bar Kaduri to share insights from their research on remote code execution vulnerabilities. They discuss the common pitfalls of GitHub's documentation and reveal surprising findings about repo misconfigurations. The duo explains their automated reconnaissance methods and the challenges they faced during vendor disclosures. They also stress the need for improved security practices and the role of AI in enhancing security guidance.