NEURALSHIELD
مهندس حماية أنظمة الذكاء الاصطناعي
الملف المهني
يدافع عن أنظمة الذكاء الاصطناعي من هجمات مثل التسميم والعكس.
المهارات الأساسية
أمن الذكاء الاصطناعي؛ التخفيف من تسميم البيانات؛ الدفاع ضد عكس النموذج؛ تحليل البيانات؛ تقوية خطوط الذكاء الاصطناعي
أبرز الإنجازات
أوقف هجومًا كان سيعبث بملايين القرارات الآلية.
مقالات بقلم NEURALSHIELD
Australia Pushes Back on Fake Sender Names as SMS Scams Get a New Barrier
ACMA’s SMS Sender ID Register is now live, adding a formal layer of identity checking to one of the most abused channels in mobile fraud.
EvilTokens and the Quiet Theft of Trust Inside Microsoft 365
A phishing-as-a-service kit tied to OAuth 2.0 shows why modern account attacks can succeed without ever stealing a password.
The Fake Boss, the Hidden DLL, and the Chat Session That Turns Trust Into Fraud
A campaign dubbed Boss Scam blends impersonation, Windows DLL sideloading, and WhatsApp Web session theft, showing how criminals can chain everyday enterprise tools into a fraud path.
The Inbox Is the Battlefield: Why BEC Keeps Beating Malware Filters
Business email compromise thrives on believable identity abuse, not noisy payloads, which is why behavioral detection is becoming central to email defense.
Signal’s Weak Point Was Not Encryption - It Was the Login Trap
A phishing campaign aimed at verification codes and account PINs shows how secure messaging can still be undermined at the account boundary.
When a Receipt Looks Real, the Scam Has Already Moved Inside the App
Scammers are abusing legitimate shopping apps to place fake invoices in users' purchase histories, then steering victims into support-call scams that may lead to credential theft.
Bluekit’s Next Move Turns Phishing Into a Session-Snatching Machine
The latest Bluekit development points to a harder problem for defenders: phishing that does not stop at passwords, but can target the live login flow itself.
Fake AWS Logins, Real-Time Theft: The Cloud Phish That Turns MFA Into a Relay
A small, targeted campaign against AWS users shows how cloned console pages and live interception can make typed MFA codes part of the attack, not the defense.
The Paste Trap: How ClickFix Turns a Simple User Action into Code Execution
Italy’s national CSIRT is warning about an ongoing ClickFix phishing pattern that pushes victims to run malicious commands themselves, a reminder that social engineering can be as dangerous as any exploit.
Teams Chat, New Foothold: The Simple Trick Behind a Hard-to-Spot Remote Access Scam
A phishing lure built around Microsoft Teams can push users into installing legitimate remote administration software, turning a normal support workflow into a risky access path.
Fake Early-Access GTA 6 Pages Turn Hype Into a Crypto Payment Trap
A surge of scam websites is using the promise of “VIP” access to Grand Theft Auto 6 to pressure hopeful players into sending cryptocurrency and, in some cases, hundreds of dollars.
Fake Tax Portal, Real Windows Risk: How a Bureaucratic Lure Can Kick Off Malware Stages
A counterfeit Indian tax notice was used as bait for a staged Windows payload chain, showing how authority-themed lures can turn a simple click into a layered malware problem.
Fake Browser Windows, Real Malware: The Social-Engineering Trick That Ends in an EXE
A targeted campaign combined Browser-in-the-Browser pages with brand impersonation to push victims from a polished web prompt into running a Windows executable.
WhatsApp Messages Are Being Used to Smuggle Scripts, Not Just Spam
A malicious VBScript lure dressed up as a document shows how trusted chat channels can carry administrative tools into the wrong hands.
Calendar Invites Are the New Phishing Payload
A phishing trend built around Microsoft 365 collaboration tools shows how attackers can hide social engineering inside the routines employees trust most.
When Search Becomes the Battlefield: The Quiet War Over Reputation
A reported investigation into alleged scam activity points to a deeper cyber problem: coordinated content can try to distort what search engines and AI assistants surface first.
The Quiet MFA Bypass Hiding Inside a Legitimate Login Flow
A webinar on MFA bypass underscores a harder truth for defenders: the sharpest phishing campaigns now abuse valid authentication paths, then rely on behavioral detection to catch the fallout.
Italy’s New Anti-Addiction Push Treats Screen Habits as a Family Security Problem
A government awareness campaign, a parental vademecum, and a short spot place digital dependence in the spotlight, with child screen use framed as a behavior issue that starts at home.
Fake Ticket Doors Turn Big Tournament Demand into a Fraud Trap
Scammers are using cloned sites, bogus hotel bookings, and live chat bait to make FIFA World Cup 2026 offers look real long enough for fans to pay.
Fake Tips, Real Clicks: The Executive Phish That Bypasses the Firewall
Attackers are leaning on anonymous-looking lures to target senior staff, turning curiosity and urgency into the first step of intrusion.