Charbel Farhat

Security Researcher & Engineer

I'm a Security Researcher and Engineer with a strong background in Backend & Cloud Engineering and a passion for Vulnerability Research.

Interests: Vulnerability Research, Cloud Security, Distributed Systems, Python, CTFs

Recent Projects

Cloud SaC Pipeline

22 Oct 2025

Automated security scanning pipeline that catches IaC vulnerabilities before deployment

DevSecOps Terraform Cloud GCP Python GitHub Actions Security

See all projects on GitHub

Blogs

A Quick Look At The MemoryOS Supply Chain Worm

29 Oct 2026

I finally got some time to look at this one. Last month, a single malicious release (MemoryOS 2.0.34 on PyPI), alongside three npm releases of the companion OpenClaw plugin, carried a bundled malicious go implant called sckit. The releases targeted...

Malware Analysis Supply Chain Attacks Reverse Engineering Go

Pass Me The Salt: Decrypting TP-Link Omada Fusion Pro Firmware

14 Oct 2026

I’ve been messing around with TP-Link firmware images for a while now and I figured why not write a blog about decrypting the latest firmware image (4.0.0 Build 20260914) for their Omada Fusion Pro 2.5G and shed some light on...

Firmware Analysis Reverse Engineering Cryptography TP-Link IoT

The False Sense of Security in Supply Chain Scanning

07 Jan 2026

Modern software is built on layers of third-party dependencies, CI/CD tooling, and external services. Supply chain attacks exploit this trust by compromising components upstream, allowing malicious code to spread downstream into otherwise legitimate applications. The impact and frequency of these...

Supply Chain Attacks DevSecOps SAST GuardDog semgrep YARA PyPI npm

See all 13 blogs

Career Changelog

This changelog is a fun little experiment I built to showcase my journey. For a complete overview of my experience and skills, my resume is available upon request.

All notable changes to this project (my career) will be documented in this section.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

1.2.0 - Cybersecurity Engineer @ Coordinates Middle East (Jan 2026 to Aug 2026)

Added

Skills to work with different security products in a multi-tenant MDR environment.
Skills to investigate novel techniques and attack chains used by threat actors and develop high-fidelity detections across cloud and hybrid environments.
Skills to engage with clients, providing security recommendations and design verification for their projects to ensure proposed architectures meet high security standards.
Use of Fortinet FortiSIEM, Microsoft Sentinel, Microsoft Defender, IBM QRadar, Palo Alto Networks Cortex XDR, Palo Alto Networks Cortex XSOAR, CrowdStrike Falcon, SentinelOne, Python, PowerShell, KQL...
Automating Active Directory and Entra ID Conditional Access Policies assessments.
Knowledge in Cloud Security and Threat Hunting at scale.
Broad Knowledge in Managed Detection and Response.

1.1.0 - Backend & Cloud Engineer @ WITS (Sep 2022 to Mar 2025)

Added

Skills to develop SaaS solutions.
Use of Agile methodologies.
Use of Python, C++, FastAPI, MongoDB, Elasticsearch, Docker, Kubernetes, Celery, RabbitMQ, Redis, AWS, GCP, CI/CD Pipelines, Ansible, NGINX, Cloudflare.
Building of scalable distributed systems using microservices and RESTful APIs.
Knowledge in SDLC, system design, testing, cloud platforms...
Deeper knowledge in the Cybersecurity industry: HFM, recon, vulnerabiity scanning, automation...

1.0.0 - Backend Engineer Intern @ WITS (Aug 2022 to Sep 2022)

Added

Use of Python, C++, FastAPI, PostgreSQL, Docker, Celery, RabbitMQ, Redis.
knowledge in the Cybersecurity industry.

0.1.0 - The Beginning (2022)

Added

The beginning of my professional journey into software engineering with a passion for problem solving and cybersecurity.