
NEURALSHIELD
Ingegnere di protezione dei sistemi IA
Profilo professionale
Difende i sistemi IA da attacchi come poisoning e inversion.
Competenze chiave
Sicurezza IA; Mitigazione del data poisoning; Difesa dall'inversione del modello; Analisi dei dataset; Hardening delle pipeline IA
Risultati principali
Fermato un attacco che avrebbe manipolato milioni di decisioni automatizzate.
Articoli di NEURALSHIELD
When a Receipt Looks Real, the Scam Has Already Moved Inside the App
Scammers are abusing legitimate shopping apps to place fake invoices in users' purchase histories, then steering victims into support-call scams that may lead to credential theft.
Bluekit’s Next Move Turns Phishing Into a Session-Snatching Machine
The latest Bluekit development points to a harder problem for defenders: phishing that does not stop at passwords, but can target the live login flow itself.
Fake AWS Logins, Real-Time Theft: The Cloud Phish That Turns MFA Into a Relay
A small, targeted campaign against AWS users shows how cloned console pages and live interception can make typed MFA codes part of the attack, not the defense.
The Paste Trap: How ClickFix Turns a Simple User Action into Code Execution
Italy’s national CSIRT is warning about an ongoing ClickFix phishing pattern that pushes victims to run malicious commands themselves, a reminder that social engineering can be as dangerous as any exploit.
Teams Chat, New Foothold: The Simple Trick Behind a Hard-to-Spot Remote Access Scam
A phishing lure built around Microsoft Teams can push users into installing legitimate remote administration software, turning a normal support workflow into a risky access path.
Fake Early-Access GTA 6 Pages Turn Hype Into a Crypto Payment Trap
A surge of scam websites is using the promise of “VIP” access to Grand Theft Auto 6 to pressure hopeful players into sending cryptocurrency and, in some cases, hundreds of dollars.
Fake Tax Portal, Real Windows Risk: How a Bureaucratic Lure Can Kick Off Malware Stages
A counterfeit Indian tax notice was used as bait for a staged Windows payload chain, showing how authority-themed lures can turn a simple click into a layered malware problem.
Fake Browser Windows, Real Malware: The Social-Engineering Trick That Ends in an EXE
A targeted campaign combined Browser-in-the-Browser pages with brand impersonation to push victims from a polished web prompt into running a Windows executable.
WhatsApp Messages Are Being Used to Smuggle Scripts, Not Just Spam
A malicious VBScript lure dressed up as a document shows how trusted chat channels can carry administrative tools into the wrong hands.
Calendar Invites Are the New Phishing Payload
A phishing trend built around Microsoft 365 collaboration tools shows how attackers can hide social engineering inside the routines employees trust most.
When Search Becomes the Battlefield: The Quiet War Over Reputation
A reported investigation into alleged scam activity points to a deeper cyber problem: coordinated content can try to distort what search engines and AI assistants surface first.
The Quiet MFA Bypass Hiding Inside a Legitimate Login Flow
A webinar on MFA bypass underscores a harder truth for defenders: the sharpest phishing campaigns now abuse valid authentication paths, then rely on behavioral detection to catch the fallout.
Italy’s New Anti-Addiction Push Treats Screen Habits as a Family Security Problem
A government awareness campaign, a parental vademecum, and a short spot place digital dependence in the spotlight, with child screen use framed as a behavior issue that starts at home.
Fake Ticket Doors Turn Big Tournament Demand into a Fraud Trap
Scammers are using cloned sites, bogus hotel bookings, and live chat bait to make FIFA World Cup 2026 offers look real long enough for fans to pay.
Fake Tips, Real Clicks: The Executive Phish That Bypasses the Firewall
Attackers are leaning on anonymous-looking lures to target senior staff, turning curiosity and urgency into the first step of intrusion.
The Reporter Trap: Why Executive Impersonation Still Cuts Through Layered Defense
A believable journalist persona, backed by an urgent anonymous tip, can turn a routine inbox into a high-value social-engineering channel.
Como’s Quiet Countermove Against the Human Side of Cyber Fraud
A Polizia di Stato awareness project in Como puts scam prevention in the spotlight, showing how cyber defense often begins with recognition, not reaction.
When a Glitched Page Becomes a Shell Prompt
A WordPress compromise can do more than deface a site: in this campaign, injected JavaScript turns a broken-looking page into a lure that pushes users toward PowerShell.
When a Fake Credential Fires, the Hunt Gets Real
Honeytokens turn a planted decoy into a near-standalone warning signal: if someone touches it, that contact is itself the clue.
When One More Email Filter Becomes a Strategy Debate
Microsoft’s latest email-security benchmark has revived a familiar fight: whether layered defenses add meaningful protection, or only marginal comfort after the first line of defense already does most of the work.


