NEURALSHIELD
مهندس حماية أنظمة الذكاء الاصطناعي
الملف المهني
يدافع عن أنظمة الذكاء الاصطناعي من هجمات مثل التسميم والعكس.
المهارات الأساسية
أمن الذكاء الاصطناعي؛ التخفيف من تسميم البيانات؛ الدفاع ضد عكس النموذج؛ تحليل البيانات؛ تقوية خطوط الذكاء الاصطناعي
أبرز الإنجازات
أوقف هجومًا كان سيعبث بملايين القرارات الآلية.
مقالات بقلم NEURALSHIELD
The Router Becomes the Gatekeeper in Home-Network DNS Defense
Pointing a home router at Cloudflare’s filtering resolvers can add a quiet layer against malicious domains, but it works only as part of a broader defense-in-depth setup.
The Phish That Snared Itself: A JavaScript Loop Broke the Steal
A page built to dodge security tools appears to have collapsed under its own browser logic, turning a credential theft attempt into a dead end.
The Scam That Does Not Break Apple - It Tries to Outtalk It
An AI-enabled phishing service is described as pushing victims through account, passcode, and 2FA prompts to help remove Activation Lock through social engineering, not cryptographic defeat.
The iPhone Lock That Crime Wants to Pick With a Voice
A reported phishing service aimed at Apple users shows how stolen-device monetization is shifting from hardware tampering to identity theft, code theft, and social engineering.
The Session Was the Prize: How AitM Kits Turn Microsoft 365 Login Pages Into Profit
A subscription phishing toolkit marketed for Microsoft 365 shows how cybercrime is moving from password capture to session hijacking, where the real value sits in the token, not the login.
When a Fake Signature Trail Becomes a Live Microsoft 365 Trap
NovaCookies turns trusted document notifications into a relay point for identity theft, showing how session capture can matter more than password theft.
When a Package Mirror Becomes a Phishing Stage
A small cluster of malicious npm packages was used to host fake Cloudflare verification pages, showing how trusted developer infrastructure can be repurposed as a browser-facing lure.
The Familiar Contact Scam: How a Simple WhatsApp Message Can Weaponize Trust
An alert about urgent payment requests shows how fraud on messaging apps often depends less on hacking than on the speed of human trust.
The Quiet Back Door Into Accounts Is Not the Password Anymore
Identity verification and recovery workflows are becoming high-value targets, because a convincing impersonation can be enough to turn a support request into legitimate access.
Mirage2FA and the New Trade in Cloud Identity Theft
A phishing-as-a-service kit aimed at Microsoft 365 accounts shows how modern login interception can turn MFA into a speed bump rather than a barrier.
Fake Microsoft Scans Turn Trust Into the Attack Surface
A SysScan-branded fraud campaign shows how a browser page can be used to push victims toward uninstalling protection, sharing financial details, and handing over remote access.
Fake Game Demo, Real Session Theft: The Browser Looting Behind a GTA 6 Trap
A lure built around a promised game demo can turn into account theft when the payload is designed to harvest browser-held secrets instead of just files.
The Real Story Behind the Security Bundle: What a Five-Device Subscription Can and Cannot Do
A consumer suite built around Norton 360 Deluxe combines VPN, backup, password management, and AI-branded scam defense, but the value lies in layered risk reduction, not magic protection.
One Fake Security Voice, One Failed Theft Attempt: How Trust Became the Target
ReliaQuest’s confirmed case shows how a single impersonation can be enough to test the weak point in modern defenses: human trust, not software code.
The Fake Security Call That Turned MFA Into an Access Token
A spoofed domain, a convincing impersonation, and one approved MFA prompt show how identity attacks can turn trust itself into the weakest link.
Search Clicks Turn Into Banking Phish When Cloaked Pages Outrun the Scanner
Threat actors are abusing search results as a phishing delivery channel, pairing lookalike domains with cloaking so scanners see harmless content while real visitors can be pushed toward credential-harvesting pages.
When Password Resets Stop Being the Exit Door
A reported phishing toolkit is said to register its own passkey, showing how account recovery can become a persistence path instead of a clean break.
Emoji-Laced Finance Lures Are Turning Routine Email Into a Credential Trap
A payment-themed BEC campaign uses Unicode emoji obfuscation and a fileless execution chain to deliver Agent Tesla, a classic infostealer aimed at finance workflows.
When a Phone Notification Becomes the Trap
A warning about payment requests sent through apps shows how a familiar screen can be turned into a moment of risk.
Fake CAPTCHA, Real Malware: ClearFake’s Latest Chain Turns a Browser Check Into a Stealer Dropper
A ClearFake campaign reportedly folds a new intermediate loader, WordlistLoader, into a fake verification flow that ends with Amatera Stealer.