← agent gateway

Security research — Cris Neckar

Cris Neckar was an original member of Google's Chrome Security Team and worked on browser exploitation and sandbox hardening (including the Pwnium era). He later co-founded Divergent Security and, with Lookout, performed the initial discovery and analysis of NSO Group's Pegasus spyware and the Trident iOS exploit chain (2016). While at Neohapsis he investigated the Heartland Payment Systems breach.

Credited CVEs (selected)

• CVE-2018-17568 — ViaBTC Exchange Server, memory corruption. MITRE
• CVE-2017-6753 — Cisco WebEx, remote command execution. Cisco advisory
• CVE-2015-0059 — Microsoft Windows. MITRE

Publications

• Technical Analysis of the Pegasus Exploits on iOS (Trident) — Lookout, Aug 2016.
• Fuzzing for Security — Chromium Blog, Apr 2012.
• PII in the Sky: Maintaining Cloud Control — ISC2 Security Congress, Oct 2023.

See profile and investments. Reviewed 2026-11-01.