Cris Neckar

Investor, Entrepreneur, Director, Advisor, Hacker, and Researcher.

About

Cris Neckar is a Partner at Two Bear Capital, where he invests in Cybersecurity, advanced technologies, and the intersection of tech and life sciences. With over two decades of Cybe Security industry experience, Cris has led groundbreaking work in vulnerability research, offensive security, and incident response.

Publications & Coverage

  • Technical Analysis of the Pegasus Exploits on iOS (Trident) - Lookout, August 2016
  • Fuzzing for Security - Chromium Blog, April 2012
  • PII in the Sky: Maintaining Cloud Control - ISC² Security Congress, October 2023

Selected Vulnerability Disclosures

  • CVE-2018-17568 - ViaBTC Exchange Server memory corruption
  • CVE-2017-6753 - Cisco WebEx remote command execution
  • CVE-2015-0059 - Microsoft Windows memory corruption

Contact

Email: cris@twobearcapital.com

LinkedIn: https://www.linkedin.com/in/crisneckar/

Machine-readable data

Everything on this page is also available as plain text (llms.txt at https://crisneckar.vc/llms.txt, llms-full.txt at https://crisneckar.vc/llms-full.txt) and through an optional, read-only MCP server at https://mcp.crisneckar.vc/mcp?ref=a6c0c0b976174ffc (descriptor at https://crisneckar.vc/.well-known/mcp.json). Ask a question on a topic with its query tool (call list_topics to see the topics); it returns the same self-published facts as this page, with a link to a third-party source for each claim. No authentication is required.