CEO & Co-Founder of SlashID
I'm the CEO and Co-Founder of SlashID, an identity security and governance platform that detects and prevents identity-based attacks.
Before SlashID, I founded IperLane, a mobile security company that was acquired by CrowdStrike. At CrowdStrike, I served as Senior Director, shipping the Falcon for Mobile product, sourcing and executing the acquisition of Preempt Security (now Falcon Identity Protection), and managing the Falcon Fund cybersecurity venture fund.
My earlier career was dedicated to offensive security research. Together with Ralf-Philipp Weinmann, I won Pwn2Own by demonstrating the first public return-oriented programming exploit on an ARM processor, compromising the iPhone 3GS through Safari. I also co-developed the exploit that defeated BlackBerry OS security at Pwn2Own. I co-authored the iOS Hacker's Handbook (Wiley) alongside Charlie Miller, Dion Blazakis, Dino Dai Zovi, Stefan Esser, and Ralf-Philipp Weinmann.
I've served on the Black Hat Review Board and as an Associate Researcher at the MIT Media Lab. I hold a BS in Computer Engineering from Politecnico di Milano.
I'm also an active angel investor, backing companies across cybersecurity, developer tools, healthcare, and infrastructure.
Detection and prevention of identity-based attacks, federation security, Agentic AI identity, IGA, non-human identities.
Exploit development, return-oriented programming, browser exploitation, sandbox escapes. Two-time Pwn2Own winner.
iOS and mobile platform security research, mobile threat defense product development, device exploitation and hardening.
Zero-knowledge fuzzing techniques, binary analysis, anomaly detection, and automated vulnerability discovery.
Mach-O binary analysis, in-memory injection, Mac OS X and iOS internals, ARM architecture.
Founded two companies (SlashID, IperLane). Executed strategic acquisitions at CrowdStrike including Preempt Security.
Active angel investor across cybersecurity, developer tools, healthcare, and infrastructure. Managed the Falcon Fund at CrowdStrike.
Contributed to Wassenaar Arrangement discussions on export controls for surveillance technologies and intrusion software.
Leading the development of an identity security platform that detects identity-based attacks by ingesting logs from identity providers, cloud platforms, and SaaS applications.
CrowdStrike
Shipped Falcon for Mobile (formerly IperLane). Sourced and executed the acquisition of Preempt Security (now Falcon Identity Protection). Managed the Falcon Fund cybersecurity venture fund in collaboration with Accel.
IperLane
Founded a mobile security startup focused on mobile threat defense. Acquired by CrowdStrike.
Led security research and engineering at a leading cybersecurity research and consulting firm providing software assurance and consulting services to government and commercial clients.
MIT Media Lab
Conducted research at the intersection of technology and society.
Independent / Zynamics / Secure Network
Offensive security research focused on Mac OS X, iOS, and mobile platforms. Two-time Pwn2Own winner (iPhone and BlackBerry). Published extensively at Black Hat, CanSecWest, ACM CCS, Microsoft BlueHat, and other top conferences. Contributed to Google Summer of Code (TrustedBSD).
Addresses a February 2026 warning about targeted vishing attacks where criminals pose as IT support to harvest credentials and MFA codes, demonstrating how identity telemetry can detect and contain such threats.
Examines the identity-centric attack methodology of the Scattered Spider group, analyzing breaches like MGM and Caesars, and outlining defensive strategies against trust-exploitation tactics.
Reconstructs an attack technique leveraging token manipulation for privilege escalation and lateral movement, mapping it to MITRE ATT&CK frameworks and recommending detection protocols.
Details a credential-harvesting campaign exploiting OAuth integrations to access Salesforce systems and extract embedded secrets across connected platforms.
Technical analysis of silent OAuth injection attacks targeting Entra ID for unauthorized persistence without user knowledge.
A technique for effective fuzzing without prior knowledge of the input format or binary internals.
In-memory Mach-O binary injection technique for Mac OS X enabling anti-forensics and advanced payload delivery.
Reflections and recommendations for the Wassenaar Arrangement on export controls for surveillance technologies and intrusion software.
A comprehensive guide to iOS security covering the security architecture, attack surfaces, exploitation techniques, and defense mechanisms of Apple's mobile platform.
Secure container technology for isolating and protecting business applications on Android devices without affecting personal data.
Talks and conference appearances spanning offensive security research, mobile security, identity, and policy.
Also served as Black Hat Review Board Member, helping select and curate conference talks.
Discussing SlashID's platform for detecting identity-based attacks in cloud environments.
On the cybersecurity startup landscape, securitizing cyber risk, and investment opportunities in the security space.
Interview on cybersecurity threats to the global order.
Recent media coverage and expert commentary on cybersecurity threats and identity security.
Following the Iran-linked cyberattack on medical technology giant Stryker, Vincenzo Iozzo explains why organizations must frequently back up cloud environments and adopt Infrastructure as Code (IaC) practices for faster recovery.
Vincenzo Iozzo warns that "Salesforce instances often contain highly sensitive customer data, including credentials and secrets that can be used for lateral movement."
Vincenzo Iozzo explains how AI adoption is compressing the response window for defenders: "Breakout times are steadily decreasing, in large part because of AI-assisted offensive operations."
I'm an active angel investor with a focus on cybersecurity, developer infrastructure, healthcare technology, and enterprise software. I am a Network Leader at Village Global and managed the Falcon Fund at CrowdStrike in collaboration with Accel.
Selected investments include:
Cybersecurity workforce resilience platform
Cap table and equity management for startups
Cloud infrastructure for running generative AI and data-intensive workloads
Cyber Insurance
AI-powered vision benefits platform
Continuous profiling for cloud-cost optimization