# Moshe Siman Tov Bustan

**Security Research Team Lead, at OX Security**

## About

Moshe is a Security Research Team Lead at OX Security, a company specializing in software supply chain security, and has worked in the security industry for 13 years. His work spans cloud security research, container security, memory forensics, and an in-depth understanding of programming languages. He also has extensive experience in mobile security, including iOS and Android research, deep analysis of Android malware, sandboxing, and memory forensics.

Beyond security research, Moshe has published multiple "Can It Run Doom?" projects online, and is also a professional guitarist in a progressive metal band.

## Connect

- [LinkedIn](https://www.linkedin.com/in/hexploit/)

## Sessions

### Mo Vulns Mo Problems: Responsible Disclosure & Irresponsible Maintainers In The AI Era

**What you will learn:** 
Attendees will learn how a proper security disclosure process works, including best practices for finding the proper secure channels to communicate with maintainers, and what to do when open source vulnerabilities affect real production environments.

Attendees will learn how to validate if an open source project is likely to contain vulnerabilities, if its maintainers are not treating security disclosures properly, and if they should avoid using a specific open source project because of that.

Attendees will gain insights from our research that they can use to decide on their internal security bounty programs, patching, vulnerability criticality and incident response time - our research will contain the average time to patch open source code, average number of publicly disclosed vulnerabilities, average number of security programs per repository and more.

Attendees will learn how to properly communicate disclosures from both a researcher and a maintainer perspective, while also learning about core elements that define critical vulnerabilities, such as command execution primitives and information exposure bugs that can hide in plain sight.

## Speaking At

- [RBLN West 2026 - San Francisco](https://www.rbln.com/events/2026/west)

---
*Source: [RBLN (Rebellion) Cybersecurity Conference – Technical Security Event for Hackers, AI Builders & Operators](https://www.rbln.com/speakers/moshe-siman-tov-bustan)*