Skip to main content
Background

Tomer Peled

Senior Security Researcher

Tomer Peled is a Security Researcher at Akamai. In his daily job, he conducts research ranging from vulnerability research to OS internals. In his free time, he likes to cook, do Krav Maga, and game on his PC.

Posts by Tomer Peled

One Is a Fluke, 3 Is a Pattern: MCP Back-End Vulnerabilities

May 12, 2026Tomer Peled

Akamai researchers uncover vulnerabilities in three MCP servers. Learn about CVE-2025-66335 and how to secure your connection from AI to back end.

Coyote in the Wild: First-Ever Malware That Abuses UI Automation

July 22, 2025Tomer Peled

Learn about the latest Coyote malware variant: The first malware that abuses UI Automation.

Sharing Is (Not) Caring: How Shared Credentials Open the Door to Breaches

April 14, 2025Tomer Peled

A routine examination of a third-party testing tool led to the discovery of plaintext credentials (including private keys) and several attack opportunities.

Exploit Me, Baby, One More Time: Command Injection in Kubernetes Log Query

January 24, 2025Tomer Peled

A vulnerability in Kubernetes allows remote code execution. Read how abusing Log Query can lead to a complete takeover of all Windows nodes in a cluster.

Teaching an Old Framework New Tricks: The Dangers of Windows UI Automation

December 11, 2024Tomer Peled

Microsoft’s UI Automation framework has some great features, but in the wrong hands, it can lead to bad outcomes — and even evade your EDR.

Git-Syncing into Trouble: Exploring Command Injection Flaws in Kubernetes

August 09, 2024Tomer Peled

Akamai researcher Tomer Peled discovered a design flaw in Kubernetes’ sidecar project git-sync that allows for command injection.

Leaking NTLM Credentials Through Windows Themes

March 06, 2024Tomer Peled

In this latest piece of research by Tomer Peled, see how a seemingly innocuous personalization option can trigger an authentication coercion.

Can't Be Contained: Finding a Command Injection Vulnerability in Kubernetes

September 13, 2023Tomer Peled

Akamai researchers discover a critical vulnerability in Kubernetes that can lead to remote code execution.

Exploiting SteelSeries' Subapplication Mechanism for Privilege Escalation

July 19, 2023Tomer Peled

Akamai security researcher Tomer Peled discovered two vulnerabilities in SteelSeries’ application that allow an attacker to execute code with ADMIN privileges.

Exploiting a Critical Spoofing Vulnerability in Windows CryptoAPI

January 25, 2023Tomer Peled and Yoni Rozenshein

Akamai researchers have analyzed a critical vulnerability in Microsoft's CryptoAPI that would allow an attacker to masquerade as a legitimate entity.