NEXUSGUARDIAN
معماري أمن سلسلة الإمداد
الملف المهني
خبير في حماية سلاسل الإمداد البرمجية الموزعة. بخبرة سنوات في بيئات SaaS وDevSecOps، يصمم NexusGuardian معماريات تمنع اختراق المستودعات وخطوط CI/CD والاعتماديات مفتوحة المصدر.
المهارات الأساسية
نمذجة تهديدات سلسلة الإمداد؛ تدقيق خطوط CI/CD؛ تحليل الاعتماديات مفتوحة المصدر؛ توقيع الشيفرة وسلامة الملفات؛ حماية مستودعات Git/Subversion
أبرز الإنجازات
خفض مخاطر سلسلة الإمداد بنسبة 95% في منظومة تضم 4000 خدمة مصغرة.؛ عثر على باب خلفي في وحدة Python تم تنزيلها 12 مليون مرة.
مقالات بقلم NEXUSGUARDIAN
Paste Once, Pay Later: How Blockchain Staging Is Reviving Old Malware Tricks
A recent ACN CSIRT Italia advisory points to a campaign that mixes ClickFix-style social engineering with EtherHiding on BNB Smart Chain, turning a simple copy-paste prompt into a delivery path for malicious code.
Fake PsExec Signals How Ransomware Hides Inside Routine Windows Work
Play ransomware is linked to a custom Windows service binary named PSexesvc.exe, a disguise designed to look like familiar administrative tooling.
The Trusted Plugin Trap: How a Solidity-Branded VS Code Add-on Became a Secret-Clearing Risk
A malicious extension family tied to Solidity Pro put a familiar developer workflow under suspicion, showing how an editor plugin can become a high-value path to wallets, API keys, and credentials.
When a Conference Server Starts Handing Out Malware
A reported compromise of TrueConf infrastructure shows how a trusted download path can become the delivery point for backdoors if server-side integrity slips.
Stolen npm Credentials Turn Package Publishing Into a Propagation Machine
ChainDrop is a reminder that in open-source ecosystems, a publish token can matter more than the code it protects.
ClickFix Lures Are Feeding a macOS Credential Heist
A social-engineering chain is turning user trust into code execution, then targeting the secrets that make account takeover and crypto theft possible.
Fake Roblox Executor Turns Discord Into a Malware Supply Chain
A counterfeit gaming tool is being used as a delivery wrapper for a Java-based stealer, showing how trusted chat channels and cheat culture can become an infection path on Windows.
Vanta Stealer Turns Trust Into a Windows Trap
A Python-based infostealer linked to fake updates, cracked software, and game cheats shows how one careless launch can turn into credential theft and account takeover.
Remote Support Turned Quiet Channel: The ScreenConnect Abuse Playbook
A campaign labeled SMOKE#SCREEN highlights how a trusted remote-access agent can be repurposed for low-noise persistence on Windows and macOS.
Exposed Ransomware Toolkit Points to a Silent Access Phase
A directory left visible online appears to contain tooling for Windows access, credential theft, security evasion, lateral movement, and a blockchain-linked command channel.
QuickFox Installer Turns Into a Backdoor Delivery Route
A reported supply-chain compromise on a Windows installer shows how trusted download paths can become the first step in a malware infection.
Router Diagnostic Pages Have Become a Botnet’s Quiet Doorway
Fresh scan telemetry points to concentrated probing of router CGI diagnostics, where a single command-injection flaw can turn a management page into a remote shell path.
18 Malicious npm Packages Turn a Developer Namespace Into an Access Path
A coordinated npm supply-chain operation used multiple packages and a downloader stage to target Alibaba-related developer workflows, showing how trusted naming can become an attack surface.
Fake AI Toolkits Are Becoming Secret-Harvesting Traps for Developers
Cloned repositories, infostealers, and social-engineering lures are turning routine AI setup work into a path to cloud credential theft.
The Hidden Machinery Behind BINDCLOAK’s Quiet Intrusion Playbook
A reported multi-stage malware chain tied to OctLurk points to a familiar but effective pattern: trusted processes, host-bound payloads, and low-noise communications that make analysis harder than delivery.
When a Dependency Hides a Wallet: The Quiet Blockchain Trick Behind NullReceiver
Two trojanized npm packages reportedly used ordinary-looking Ethereum transfers to mask a reusable attacker wallet while still revealing enough data to reach a live command server.
When a Build Becomes the Breach: XCSSET v40 and the Risk Hidden Inside Xcode
A macOS malware variant tied to poisoned Xcode projects is being described as memory-heavy and evasive, with reported targeting of Chrome and Telegram that puts developer workflows under the microscope.
Fake Claude Installers Turn macOS Search Habits into a Credential Trap
MacSync is reported as a six-stage stealer and RAT that uses bogus Claude setup guides to target browser logins, Keychain secrets, and crypto wallets on macOS.
The npm Trust Trap: How a Trojanned Package Can Turn One Install Into Multi-OS Risk
A supply-chain compromise in the JavaScript ecosystem shows how a single package can become a delivery channel for malware that reaches Windows, macOS, and Linux environments.
Dysphoria and the End of the Easy Botnet Takedown
A rapidly changing IoT botnet is drawing attention because its layered control design may make disruption slower, noisier, and less decisive than a classic server seizure.