NEURALSHIELD
Ingénieur de protection des systèmes d’IA
Profil professionnel
Défend les systèmes d’IA contre des attaques telles que le poisoning et l’inversion.
Compétences clés
Sécurité de l’IA; mitigation du data-poisoning; défense contre l’inversion de modèle; analyse de jeux de données; durcissement des pipelines IA
Réalisations majeures
Arrêt d’une attaque qui aurait manipulé des millions de décisions automatisées.
Articles de NEURALSHIELD
The Inbox Is Wearing a Mask: How Phishing Now Hides Inside Trust Signals
A new benchmark highlights a familiar problem with sharper edges: attackers are packaging phishing inside trusted-looking senders, redirect chains, and obfuscated links to pressure email defenses from several angles at once.
The Breach That Starts Like a Normal Login
A stolen credential can look harmless at first, but once identity is trusted, the incident can spread into data access, operational disruption, and a race to contain the damage.
Google’s Opaque Search Redirects Could Quietly Erase a Crucial Safety Cue
When a search click passes through an unreadable redirect path, users lose one of the simplest ways to judge whether a link looks trustworthy before opening it.
The Request Looked Official. The Trust Itself Was the Target.
A forged authority message can move sensitive identity and transaction data without a traditional system breach, which is why verification workflows now deserve the same scrutiny as perimeter defenses.
Verified, Then Weaponized: How a Brand Account Became a Malware Delivery Rail
A reported hijack of HBO Max’s verified Reddit identity, u/hbomax, shows how trust signals can be converted into a distribution channel for ClickFix-style malware campaigns.
When a Verified Brand Becomes the Payload
A hijacked HBO Max Reddit identity was used to push ClickFix-style malicious ads, showing how trust signals can be repurposed into an execution path for Windows and macOS users.
AI-Polished CEO Fraud Is Turning Finance Desks Into the New Attack Surface
A wave of AI-assisted impersonation is making business email compromise look routine, pushing finance teams toward fraudulent ACH requests that can slip past security tools and land in everyday workflows.
347,000 Emails, One Trusted Brand, and a Phishing Run That Cut Too Close
A breach-linked email campaign aimed at a hardware-wallet audience shows how social engineering can scale when attackers borrow a legitimate sender relationship.
When the Fake Login Lives in the Browser, Defenders Lose the Easy Trail
A phishing flow built around blob URLs shifts the credential trap away from hosted pages and into browser memory, where ordinary scanning may have less to inspect.
The Phone Call That Walks Past the Firewall
AI is making voice-based deception faster, more personal, and more scalable, turning trust itself into the main attack surface.
When MFA Is Not the Finish Line: The Quiet Battle Over Account Recovery
Attackers do not always try to break the login screen; they may go after the process that hands an account back to its owner, where weak identity checks can undo strong authentication.
Ransomware Branding Meets a Sale: What This Avast Offer Really Signals
A discounted 10-device security plan promises anti-ransomware and deepfake defenses, but the real story is the gap between product claims and verified protection.
When a Spreadsheet Becomes the Relay: ClickFix Actors Move Malware Logic into Google Cloud
A browser-first campaign shows how trusted collaboration tools can be repurposed into covert infrastructure, turning user trust into part of the attack path.
Cloud Tools, Browser Trust, and a Crypto Theft Chain Hiding in Plain Sight
A campaign tied to cryptocurrency theft shows how social engineering and ordinary web services can be combined into a control path that lives inside the victim’s browser.
When Search Becomes the Trap: BengalSEO and the Quiet Abuse of Bing
A long-running SEO poisoning operation shows how ordinary search queries can be bent into a delivery path for malware and phone-based fraud.
When MFA Is Not Enough: The Session That Lets Phishers Walk In
A Microsoft 365 phishing operation shows why modern identity defense is no longer just about passwords and codes, but about whether a browser session can be stolen and reused.
The MFA Illusion: Why Stolen Microsoft 365 Sessions Are the New Prize
A reported phishing operation built around Evilginx2-style relays shows how attackers can win after the login succeeds by reusing the session, not cracking the password.
Microsoft Teams Draws a Curtain Over QR Code Lures in External Chats
A new reveal-before-view step adds friction to QR-code phishing in Teams conversations that cross organizational boundaries.
Microsoft Turns QR Codes into a Suspicious Object in Teams
A planned Teams control would hide QR codes from external senders, adding friction to a familiar phishing path that often depends on speed, habit, and misplaced trust.
Invisible Characters, Visible Risk: The Phishing Trick That Slips Past Simple Filters
A finance-themed phishing wave used hidden Unicode tag characters to split suspicious words at the processing layer, exposing how text security can fail when it only reads what the eye can see.