Oreen Livni
Security Researcher
Oreen is a Security Researcher on Cycode's research team, specializing in supply chain and open-source security. He is passionate about researching CI/CD pipeline security and developing security research tools. Outside of work, Oreen enjoys surfing, climbing, exploring arts, and gardening.
-
January 9, 2025
Introducing Cycode Technologies Inventory: Enhance Visibility and Control across Your SDLC Tools
Cycode introduces powerful new insights into its Complete ASPM platform providing security teams visibility and context into the technologies in...
-
December 23, 2024
Don’t Let Your GitOps Agent Become a Backdoor: Practical Guide to Secure GitOps CD Systems
GitOps has completely changed how we manage deployments, offering speed and efficiency to our cloud environments...
-
December 15, 2024
AI-Powered Security Research: How We Prioritized 40,000 GitLab Servers for Exposed Secrets
Cycode Labs has uncovered a significant security risk in the default configuration of GitLab self-hosted servers, where the "explore"...
-
August 6, 2024
AI Discovery with Cycode AI: Uncovering AI Usage & Risk Across Your Organization
Adequate visibility is the key to managing the risks associated with ungoverned AI usage. Recognizing this necessity...
-
May 21, 2024
Redis or Not – Revealing a Critical Vulnerability in Argo CD Kubernetes Controller
Cycode Researchers have uncovered a new vulnerability, CVE-2024-31989, with a critical score of 9.1. The vulnerability affects Kubernetes clusters equipped...
-
February 22, 2024
Building Secure CI/CD Pipelines: Key Strategies from NIST SP 800-204D
In today's fast-paced world of software development, speed and agility are paramount. Continuous integration and continuous delivery (CI/CD) pipelines...
-
October 25, 2023
Introducing Raven: CI/CD Pipeline Security with Open Source Vulnerability Scanner Starting with GitHub Actions
Cycode is proud to announce the public release of Raven...
-
August 7, 2023
VS Code’s Token Security: Keeping Your Secrets… Not So Secretly
This is the full story of the vulnerability we have discovered within Visual Studio Code (VS Code) concerning the handling...