Skip To Main Content
Uri Katz on Muck Rack

Uri Katz

As seen in: arXiv, Packetst Storm, Claroty
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Uri Katz’s profile

Articles by Uri Katz

MameLoshnLM: Yiddish Language Model and Evaluation Benchmark

|
By Uri Katz, Omer Goldman, Tomasz Limisiewicz
| huggingface.co
Abstract We present MameLoshnLM, the first open-source 8B-parameter language model built specifically for Yiddish. Despite Yiddish's rich textual tradition, its limited digital presence and the scarcity of reliable evaluation resources have constrained progress in Yiddish language modeling. Existing multilingual corpora and benchmarks are often poor proxies for the language, containing substantial amounts of noisy, machine-translated, and misclassified text.
Open in Who Shared Issue with article?

Apple CarPlay Hacking Risks: CVE-2025-24132 Explained

|
By Uri Katz
At the recent DefCon conference, we had the opportunity to present Pwn My Ride, a comprehensive exploration of the Apple CarPlay attack surface. With vehicles becoming increasingly connected, the security of in-car systems like CarPlay is critical. Our talk focused on dissecting the protocols that enable CarPlay’s functionality and revealing multiple attack vectors that could be exploited against various CarPlay multimedia systems.
Open in Who Shared Issue with article?

NER Retriever: Zero-Shot Named Entity Retrieval with Type-Aware Embeddings

|
By Uri Katz, Yoav Goldberg, Oren Glickman
| arXiv
Open in Who Shared Issue with article?

AirBorne: Wormable Zero-Click RCE in Apple AirPlay Puts Billions of Devices at Risk

|
By Uri Katz, Avi Lumelsky, Gal Elbaz
| oligo.security
TL;DR Oligo Security Research has discovered a new set of vulnerabilities in Apple’s AirPlay Protocol and the AirPlay Software Development Kit (SDK), which is used by third-party vendors to integrate AirPlay into third-party devices.
Open in Who Shared Issue with article?

Apple Security Advisory 09-16-2024-5

|
By KU Leuven, TU Darmstadt, Mathy Vanhoef, Uri Katz
| Packetst Storm
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-09-16-2024-5 visionOS 2 visionOS 2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121249. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories.
Open in Who Shared View Duplicates (3) Issue with article?

APPLE-SA-09-16-2024-3 tvOS 18

|
By KU Leuven, TU Darmstadt, Mathy Vanhoef, Uri Katz
| seclists.org
Full Disclosure mailing list archives From: Apple Product Security via Fulldisclosure <fulldisclosure () seclists org> Date: Mon, 16 Sep 2024 18:07:33 -0700 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-09-16-2024-3 tvOS 18 tvOS 18 addresses the following issues. Information about the security content is also available at https://support.apple.com/121248.
Open in Who Shared View Duplicates (5) Issue with article?

[2304.13007] Answering Questions by Meta-Reasoning over Multiple Chains of Thought

|
By Tomer Wolfson, Ben Bogin, Uri Katz, Daniel Deutch
| arXiv
[Submitted on 25 Apr 2023 ( v1 ), last revised 2 Aug 2024 (this version, v4)] Title:Answering Questions by Meta-Reasoning over Multiple Chains of Thought View a PDF of the paper titled Answering Questions by Meta-Reasoning over Multiple Chains of Thought, by Ori Yoran and 5 other authors View PDF HTML (experimental) Abstract:Modern systems for multi-hop question answering (QA) typically break questions into a sequence of reasoning steps, termed chain-of-thought (CoT), before arriving at a...
Open in Who Shared View Duplicates (652) Issue with article?

Blinding Snort to Network Attacks

|
By Uri Katz
| Claroty
By Uri Katz | April 12, 2022 Executive Summary Team82 discovered a means by which it could blind the popular Snort intrusion detection and prevention system to malicious packets. The vulnerability, CVE-2022-20685, is an integer-overflow issue that can cause the Snort Modbus OT preprocessor to enter an infinite while-loop. A successful exploit keeps Snort from processing new packets and generating alerts.
Open in Who Shared Issue with article?

Ubuntu Security Notice USN-5179-1

|
By Uri Katz, Tal Keren, Shachar Menashe, Sharon Brizinov
| Packetst Storm
========================================================================== Ubuntu Security Notice USN-5179-1 December 07, 2021 busybox vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.10 - Ubuntu 21.04 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in BusyBox.
Open in Who Shared Issue with article?

Unboxing BusyBox - 14 new vulnerabilities uncovered by Claroty and JFrog

|
By Uri Katz, Tal Keren
| jfrog.com
Background Embedded devices with limited memory and storage resources are likely to leverage a tool such as BusyBox, which is marketed as the Swiss Army Knife of embedded Linux. BusyBox is a software suite of many useful Unix utilities, known as applets, that are packaged as a single executable file. Within BusyBox you can find a full-fledged shell, a DHCP client/server, and small utilities such as cp, ls, grep, and others.
Open in Who Shared Issue with article?
Show More