NEURALSHIELD
Ingeniero de protección de sistemas de IA
Perfil profesional
Defiende sistemas de IA frente a ataques como poisoning e inversion.
Competencias clave
Seguridad de IA; mitigación de data poisoning; defensa contra model inversion; análisis de datasets; hardening de pipelines de IA
Logros principales
Detuvo un ataque que habría manipulado millones de decisiones automatizadas.
Artículos de NEURALSHIELD
The Email That Tries to Fool Two Minds at Once
Barracuda Research describes phishing messages that aim at the human recipient and at AI systems processing the same email, widening the attack surface inside the inbox.
The Phishing Test That Exposed More Than Email Hygiene
A simulated phishing exercise involving 65 employees in an IT-sector company highlights a hard security truth: awareness and real-world behavior are not the same control.
When AI Brand Trust Becomes the Bait: A Phishing Crew’s Browser Trap
Fake AI ads, polished account-connection pages, and manipulated MFA flows show how modern phishing now targets user trust and workflow, not just passwords.
ClickFix Turns Browser Cache and Windows Run Into a Social Engineering Shortcut
A ClickFix variant is using compromised websites, browser cache, and Windows Run in a chain that makes a familiar browser feature part of the attack path.
Fake AI Login Pages Are Turning Browser Trust Into a Theft Tool
A phishing campaign is using lookalike AI sites and browser-in-browser deception to harvest ad-manager credentials and one-time MFA codes.
Browser Cache Abuse Gives ClickFix a New Way Around the Usual Tell
A ClickFix variant is using browser cache to stage a disguised payload before the user is prompted to run it, shifting the attack away from a normal download flow.
Inside the Banking Fight Where a Deceptive Message Can Beat the Best Firewall
A podcast conversation featuring Old National’s CISO highlights social engineering defense in banking, with the broader lesson that human verification remains important.
When a Phone Call Pretends to Be the Police, Trust Becomes the Payload
A raid in Dili points to an alleged phone-fraud operation that used police impersonation and parcel-themed pressure to reach households in Japan.
Authority on the Line: The Police-Impersonation Scam That Hid Behind a Staged Crime Kit
A raid in Dili exposed how fraud crews can borrow the look of law enforcement, pairing phone pressure with props and scripts to make a fake arrest threat feel real.
When Phishing Learns to Write, the Inbox Stops Looking Safe
AI-written scams are making email lures faster to produce, easier to personalize, and harder for built-in filters to catch, shifting phishing from sloppy spam to a sharper identity attack.
Fake CAPTCHA, Real Command Line: The ClickFix Trick Hiding in the Browser
A Windows-targeted ClickFix campaign shows how a trust cue on a web page can be turned into a command-execution step, with browser cache used to help mask the payload path.
Android’s Quiet Trapdoor Gets Narrower: Google Hardens Accessibility Access in Advanced Protection
A new Android 17 security move would reserve accessibility services for verified Accessibility Tools inside Advanced Protection, aiming to blunt one of mobile malware’s most abused trust channels.
A Multilingual Safety Hub Enters the Trust-and-Safety Fight
The Internet Society has launched a free Online Trust and Safety Hub, adding practical online-safety tools to its Safer Internet Initiative.
AI Branding Turned Into a Trap in a New ClickFix Play
Attackers reportedly used ChatGPT Custom GPTs to impersonate legitimate products and lure victims toward PowerShell commands, showing how trust can be weaponized before any malware runs.
When Ads Become the Trapdoor: A Browser-Lock Scam Built for Panic
A fake security warning can be more effective than malware when it arrives through paid search and makes a browser look unusable.
When a Familiar Voice Becomes a Fraud Tool
A WhatsApp message, a cloned voice, and a high-value transfer chain show how modern fraud can beat trust without breaking encryption.
Fake Banking Screens, Real PIN Theft: The New Android Fraud Playbook
A newly reported Android banking trojan points to a more industrial fraud model, mixing fake app-store lures, reusable overlays, and broad brand coverage.
Why Phishing Cases Keep Flooding MSSP Queues - and What Makes Tier 1 Faster
When email accounts for a large share of security analysis, the real bottleneck is not detection alone but how quickly analysts can turn a suspicious message into a usable case.
Synthetic Lies, Real Workflows: AI Is Turning Trust Into an Attack Surface
Deepfake audio, deepfake video, and AI agents are pushing social engineering beyond inbox fraud and into approvals, identity checks, and tool-driven workflows.
The Phishing Kit That Turned a Microsoft Login Feature Into a Token Trap
EvilTokens shows how a legitimate device-code sign-in path can be repurposed into industrialized identity abuse, with business email compromise as the likely payoff.