NEURALSHIELD
Ingeniero de protección de sistemas de IA
Perfil profesional
Defiende sistemas de IA frente a ataques como poisoning e inversion.
Competencias clave
Seguridad de IA; mitigación de data poisoning; defensa contra model inversion; análisis de datasets; hardening de pipelines de IA
Logros principales
Detuvo un ataque que habría manipulado millones de decisiones automatizadas.
Artículos de NEURALSHIELD
When Antivirus Starts Hunting Lies: Avast’s AI Pitch Shows Where Scam Defense Is Headed
A discount may be the headline hook, but the technical story is the shift from malware blocking to detecting phishing, fake websites, and synthetic media before users act.
The Phone Call Was the Trap: Robinhood-Style Alerts Turn Trust into a Weapon
A callback-phishing campaign uses fake sign-in warnings to push recipients away from inbox checks and into attacker-controlled voice channels.
Phone Calls, Fake Managers, and the Cloud Trail to SharePoint
A reported extortion crew called Helix illustrates how voice phishing, device-code abuse, and MFA weak spots can turn identity trust into a path toward SharePoint data.
Forg365 and the New Business of Stealing Microsoft 365 Sessions
A freshly described phishing service shows how cloud-account theft is becoming a packaged identity operation, blending relay tactics, OAuth abuse, and AI-assisted lures.
Forg365 and the New Face of Microsoft 365 Theft: Phishing for Sessions, Not Just Passwords
A reported phishing-as-a-service kit blends AiTM relays, device-code abuse, and AI-written lures, showing how identity attacks are being packaged for reuse.
The Helpdesk That Wasn't: How Teams Chats Are Becoming the New Phishing Front
A fake support conversation, paired with targeted email pressure, shows how trusted collaboration tools can be used to sell a malicious download without any confirmed exploit in the platform itself.
ClickFix Is Winning by Making the Victim Press Enter
A sharp rise in ClickFix detections shows how browser lures, fake errors, and trust-themed prompts are turning ordinary users into the execution path.
Tax-Branded Phishing Goes Multi-Stage, Ending in Two Remote-Control Malware Families
A phishing lure impersonating India’s tax authority reportedly used fake government branding and a six-step delivery path to reach in-memory RAT-style payloads.
When Email Becomes Identity: The Hidden Logic Behind the New Defense Playbook
A scheduled webinar on modern email attacks points to a bigger shift in security thinking: the next fight is less about filtering messages and more about spotting behavior that does not belong.
Interview Lure, Credential Trap: How Recruiter Phishing Turns Gmail Into the Prize
A phishing campaign built around fake job interviews and brand impersonation shows how a simple login prompt can become the endgame of a carefully staged social-engineering chain.
When Summer Breaks the Schedule, Minors’ Screen Habits Can Spiral Quietly
Longer unstructured days can make social media harder to regulate for children and adolescents, with knock-on effects that may show up first in sleep, mood, focus, and self-image.
Fake World Cup Rewards Turn a Global Tournament Into a Payment-Data Trap
A branded phishing lure tied to the 2026 FIFA World Cup is designed to pull fans into handing over personal details and card data, not prizes.
Passkeys Move Enterprise Logins Off the Password Trapdoor
A NordPass discount may be the headline hook, but the deeper story is the shift from reusable passwords to phishing-resistant authentication that can shrink the value of stolen credentials.
Real Microsoft Sign-Ins, Fake Trust: How PDF Lures Are Steering Victims Into Device Code Phishing
A phishing campaign is blending password-protected PDFs with Microsoft’s legitimate device-code login flow, a reminder that attackers do not always need fake pages when they can abuse the real ones.
Google’s Camera-Check CAPTCHA Raises the Stakes for Bots - and for Privacy
A new hand-gesture verification idea inside reCAPTCHA points to a more invasive anti-bot future, but it also invites replay tricks, consent questions, and accessibility tradeoffs.
Why Trust Became the Weakest Link in Modern Cyber Defense
Social engineering succeeds when attackers weaponize urgency, identity, and routine business workflows - and the defensive answer is stronger verification, not awareness training alone.
Opera Puts a Safety Rail Around the Clipboard
Paste Protect is built into the browser, enabled by default on Windows, macOS, and Linux, and aimed at cutting off clipboard hijacking and ClickFix-style code injection before a user can paste trouble into place.
When Anti-Phishing Drills Become a Privacy Problem
Awareness campaigns are meant to harden people against phishing, but the data they generate can pull security teams into GDPR territory if they are not tightly scoped and retained.
Australia Pushes Back on Fake Sender Names as SMS Scams Get a New Barrier
ACMA’s SMS Sender ID Register is now live, adding a formal layer of identity checking to one of the most abused channels in mobile fraud.
EvilTokens and the Quiet Theft of Trust Inside Microsoft 365
A phishing-as-a-service kit tied to OAuth 2.0 shows why modern account attacks can succeed without ever stealing a password.