Moshe Siman Tov Bustan
Moshe is a Security Research Team Lead at OX Security, a company specializing in software supply chain security. His work spans cloud security research, container security, memory forensics, and an in-depth understanding of programming languages. He also has extensive experience in mobile security, including iOS and Android research, deep analysis of Android malware, sandboxing, and memory forensics.
Beyond security research, Moshe has published multiple "Can It Run Doom?" projects online, and is also a professional guitarist in a progressive metal band.
Nir is a rocket scientist who got a bit bored so he moved to cyber. Since then as a whitehat he has managed to break dozens of mobile, web, and desktop applications. These days Nir is focused on software supply chain research and innovative attack vector research via widely-used software projects. Nir holds a B.Sc degree in physics from Tel Aviv University. He enjoys sports and learning Spanish.
Session
In this talk we expose how modern, browser-based IDEs (like VS Code and Cursor) have become the software supply chain's weakest link. The talk demonstrates how threat actors weaponize malicious extensions, 0-day vulnerabilities, and Chromium exploits to turn a developer's workspace into an enterprise backdoor - and delivers actionable insights for scaling IDE security.