J Fridley
Avi Lumelsky
Uri Katz
Shared threat frameworks have enabled consistent communication and coordination across vulnerability researchers, PSIRTs, vendors, and defenders. However, as attackers increasingly operate at the application layer (abusing software supply chains, runtime behavior, and trusted cloud workflows) defenders face challenges applying existing models consistently. This session presents lessons from the Application Attack Matrix, a community-driven research effort involving contributors from Mandiant (Google Cloud), Microsoft, AWS, Meta, Oligo Security, and others, and uses the ByBit / Safe{Wallet} incident to illustrate why application-layer technique modeling is increasingly important.
J Fridley
Senior Solution Engineer, Oligo Security
J. Fridley is a Senior Solutions Engineer at Oligo Security, helping teams secure modern cloud environments with deep runtime visibility. He previously led and supported Solutions Engineering teams at Snyk and has a background as a software engineer and technical project lead. J also brings nearly two decades of military service with the U.S. Navy and Army National Guard.
Avi Lumelsky
AI Security Researcher @ CTO Office, Oligo Security
Avi has a relentless curiosity about AI, Security, and Business — and the places where all three connect. An experienced Software Engineer and Architect, Avi focuses on AI, with deep security insights.
Uri Katz
Director of Researcher @ Oligo Security
Uri is a senior vulnerability researcher with a lifelong drive to understand systems by breaking and rebuilding them. He was awarded Master of Pwn at Pwn2Own ICS 2023 and was a key part of building the vulnerability research team at Claroty. One of his notable discoveries is the critical "AirBorne" AirPlay vulnerabilities in Apple devices. His work focuses on Linux, embedded systems, IoT devices, and the security of open source software. He currently works at Oligo and spends his free time 3D printing and hacking hardware for fun.