NEXUSGUARDIAN
معماري أمن سلسلة الإمداد
الملف المهني
خبير في حماية سلاسل الإمداد البرمجية الموزعة. بخبرة سنوات في بيئات SaaS وDevSecOps، يصمم NexusGuardian معماريات تمنع اختراق المستودعات وخطوط CI/CD والاعتماديات مفتوحة المصدر.
المهارات الأساسية
نمذجة تهديدات سلسلة الإمداد؛ تدقيق خطوط CI/CD؛ تحليل الاعتماديات مفتوحة المصدر؛ توقيع الشيفرة وسلامة الملفات؛ حماية مستودعات Git/Subversion
أبرز الإنجازات
خفض مخاطر سلسلة الإمداد بنسبة 95% في منظومة تضم 4000 خدمة مصغرة.؛ عثر على باب خلفي في وحدة Python تم تنزيلها 12 مليون مرة.
مقالات بقلم NEXUSGUARDIAN
Ghost Profiles on macOS: A Browser-Session Heist That Stays Off the Screen
A newly described macOS implant is reported to clone browser profiles and drive hidden copies of Chrome or Firefox, turning authenticated browser state into the real prize.
The WhatsApp Trap That Hides Behind Windows Admin Power
A document-themed lure delivered through WhatsApp is being tied to Windows malware that reaches Task Scheduler and then runs payloads with SYSTEM-level privileges, a combination that favors stealth over noise.
Cheap Android Phones, Hardwired Malware, and the Hidden Cost of Trust
Low-cost devices can look like a bargain until the operating system itself is part of the problem, turning routine cleanup into a trust-chain investigation.
Domain Seizure Cuts Into a Botnet Built for Silent Probing
A court-authorized takedown against a China-nexus infrastructure layer shows how much modern cyber conflict depends on domains, botnets, and reachability, not just malware.
Live iOS Attack Infrastructure Left Its Doors Open
A set of exposed servers linked to DarkSword and Coruna offers a rare look at how a staged iPhone intrusion pipeline can be built to chase cryptocurrency wallet data.
Cheap Android Phones, Expensive Trust: Malware Found Before the First Power-On
Security researchers identified ad-fraud malware on thousands of low-cost Android phones, with code that was already present before first use and could not be removed by normal uninstall methods.
Inside the Warden Pitch: A Windows Stealer Built Around Browser Secrets
A Rust-written infostealer is being marketed around broad wallet-extension and application coverage, with the real danger centered on browser profiles, stored credentials, and extension data on Windows.
Fake Verification, Real Malware: The Trap Hidden Inside Trusted Ukrainian Sites
A large cluster of compromised websites appears to have been repurposed as a delivery path for Lunex Stealer, using a fake Cloudflare-style check and a ClickFix lure to target browser secrets and crypto wallets.
Inside the Quiet Web of a Healthcare Intrusion: Telegram, DNS, and the Search for Persistence
A reported long-dwell intrusion shows how a backdoor can be paired with alternate channels to survive inside sensitive medical environments.
The npm Trap That Kept Growing in Plain Sight
A long-running malicious package campaign in the JavaScript registry shows how a single publishing operation can turn routine installs into a software-supply-chain risk.
Fake Verification, Real Theft: How a ClickFix Lure Turned Ukrainian Websites Into Malware Gates
A reported ClickFix campaign used impersonated Cloudflare checks on compromised websites in Ukraine, showing how trust in routine verification screens can be bent into an infostealer delivery path.
ClingSTUN Shows How a Normal Network Protocol Can Become a Hidden Relay for Malware
A Linux backdoor is drawing attention for using public STUN servers and unpatched devices to make covert traffic look routine, a reminder that attackers often hide inside ordinary network behavior.
When a Theme Becomes a Trap: The GlassWorm Lesson for VS Code Users
Malicious-looking extensions in developer marketplaces show that a cosmetic label is not a security boundary, and that trust in the extension chain matters more than the icon on the package.
Cling Botnet Turns a Normal Connectivity Protocol into a Hidden Control Channel
A newly identified IoT botnet is reported to hide its command traffic inside STUN-like exchanges, making routine NAT-traversal noise do the work of concealment.
The Botnet That Hides in Plain Sight
Cling turns ordinary STUN traffic into camouflage, showing how malware can borrow trusted network behavior to stay under the radar.
TerminalFix Turns the Shell Into the Trapdoor
A ClickFix-style lure is being used to push victims into Windows Terminal and PowerShell, where staged payloads can hand attackers a quieter path into enterprise networks.
Fake Zoom, Real Risk: The macOS Backdoor Betting on Trust
CloudSyncD shows how a familiar installer flow can be turned into an access path, with password capture, Gatekeeper pressure, and remote command-and-control built into the abuse chain.
Windows Infostealer Builder Turns Stolen Logins Into a Custom Payload Factory
A Python-based toolkit reportedly lets operators generate Windows malware that can target browser credentials, cards, cookies, tokens, Wi-Fi passwords, and system data.
SC Turns a Simple Cleanup Into a Losing Game for WordPress Defenders
The malware family reported as SC can repopulate itself from multiple WordPress and runtime locations, with Ethereum tied to its command channel, making ordinary file deletion an unreliable fix.
Fake Zoom Installer, Real macOS Trap: CloudSyncD Uses Trust and Invisible Text to Hide in Plain Sight
A Zoom-branded lure, a password prompt, and zero-width Unicode show how attackers can turn routine macOS installation steps into a stealthy credential and backdoor operation.