NEURALSHIELD
Ingegnere di protezione dei sistemi IA
Profilo professionale
Difende i sistemi IA da attacchi come poisoning e inversion.
Competenze chiave
Sicurezza IA; Mitigazione del data poisoning; Difesa dall'inversione del modello; Analisi dei dataset; Hardening delle pipeline IA
Risultati principali
Fermato un attacco che avrebbe manipolato milioni di decisioni automatizzate.
Articoli di NEURALSHIELD
Trust in a Text: The INPS-Themed Smishing Playbook Behind a Fake Fuel Bonus
A reported SMS campaign borrows a familiar public name and a tempting welfare-style incentive to push recipients toward a click, showing how social engineering beats complexity when timing is right.
Scareware’s New Trick: Turning a Fake Help Desk Into a Fraud Engine
A campaign built around CypherLoc shows how social engineering can be packaged, repeated, and scaled by making urgency look like technical support.
33 Years for Sextortion: Why Coercion Alone Can Be a High-Impact Cyber Crime
A guilty plea and a long prison term in a case involving more than 145 children show how online abuse can inflict serious harm without a breached server or malware campaign.
When a Secret Becomes a Relay Race
A reminder about confidentiality shows how quickly private details can spread once one trusted person decides the secret is worth sharing.
Carnival Breach Puts a Spotlight on the Most Dangerous Login in the Building
A reported social-engineering compromise of an employee account at Carnival Corporation shows how a trusted identity can become the shortest path to customer records.
Fake Transit Notices Turn an Everyday SMS Into a Card-Harvesting Trap
A recent ATAC-themed smishing campaign shows how a routine payment or ticket message can be twisted into a prompt for card data, without any proof of a breach in the transport operator’s systems.
One PIN, Many Secrets: The Vaultjacking Claim That Shifts Phishing Up the Stack
Researchers say a live phishing proxy may turn a single stolen Google Password Manager PIN into broad access to synced credentials, but the full exploit path remains unverified.
The Passkey Trap: Why One PIN Can Become the Weakest Link in a Synced Vault
A reported phishing technique puts the spotlight on the recovery layer behind Google Password Manager, where convenience features can become high-value targets.
Fake FIFA Gates Open Ahead of the 2026 World Cup
An FBI warning points to spoofed FIFA-themed websites built to trick fans into handing over personal details during the tournament buildup.
SBI Flags a Deactivation Scam Built to Trap YONO Users
Fake SMS and WhatsApp messages are being used in phishing campaigns aimed at SBI digital banking customers, turning account anxiety into a weapon.
Lookalike FIFA Domains Turn World Cup Hype Into a Phishing Runway
With the 2026 FIFA World Cup approaching, threat actors are using fake FIFA-themed domains to trick users into sharing personal information.
The Executive Voice Is No Longer a Guarantee: Deepfakes Are Turning Trust Into an Attack Surface
Synthetic media is blurring the boundary between trusted authority and digital deception, exposing weaknesses in business approval workflows.
Encrypted Chats, Old Tricks: Why Phishing Is Moving Past SMS
Chinese-language phishing operations are reportedly leaning on RCS and iMessage to deliver credential theft lures inside trusted messaging apps, where SMS-era defenses are weaker.
Bluekit Turns Phishing Into a Managed Workflow, and That Changes the Threat Model
A new phishing kit pairs more than 40 branded templates with an AI drafting panel, anti-analysis checks, and Telegram-based collection, showing how cybercrime tooling keeps becoming easier to operate.
Search Results Became the Trap: Fake AI CLI Installers Turn Developer Curiosity Into Risk
Counterfeit installers posing as Gemini CLI and Claude Code show how search manipulation can become a delivery channel for malware, even when the underlying products are not the target.
Encrypted Chats Are Becoming Phishing’s Quietest Highway
RCS and iMessage can carry the same old scam with less carrier visibility, pushing defenders away from SMS-era controls and toward device-side and user-side detection.
When a Real Microsoft Login Becomes the Trap
A phishing service built around OAuth device code flow shows how attackers can turn a legitimate sign-in path into token theft, session hijacking, and MFA bypass.
Inside the Browser-Lock Scam Kit Turning Support Warnings into Phone Traps
CypherLoc is being used to push fake Microsoft support scams by turning the browser itself into a fear engine, with encrypted, condition-based logic designed to frustrate scanners and sandboxes.
Richiamo del Mondiale, infrastruttura reale: una rete di phishing cresce rapidamente
Un aumento da 79 domini imitativi a 222 siti malevoli mostra come il branding di un evento possa trasformarsi in una superficie di phishing scalabile ancora prima dell’inizio del torneo.
Quando la password non è il bottino: il furto di token di Microsoft 365 nascosto dentro Kali365
Un kit di phishing legato alla distribuzione su Telegram sta spingendo gli aggressori verso il furto di sessione, trasformando un accesso riuscito in un punto d’appoggio più duraturo negli account cloud.