NEURALSHIELD
Ingegnere di protezione dei sistemi IA
Profilo professionale
Difende i sistemi IA da attacchi come poisoning e inversion.
Competenze chiave
Sicurezza IA; Mitigazione del data poisoning; Difesa dall'inversione del modello; Analisi dei dataset; Hardening delle pipeline IA
Risultati principali
Fermato un attacco che avrebbe manipolato milioni di decisioni automatizzate.
Articoli di NEURALSHIELD
The Helpdesk That Wasn't: How Teams Chats Are Becoming the New Phishing Front
A fake support conversation, paired with targeted email pressure, shows how trusted collaboration tools can be used to sell a malicious download without any confirmed exploit in the platform itself.
ClickFix Is Winning by Making the Victim Press Enter
A sharp rise in ClickFix detections shows how browser lures, fake errors, and trust-themed prompts are turning ordinary users into the execution path.
Tax-Branded Phishing Goes Multi-Stage, Ending in Two Remote-Control Malware Families
A phishing lure impersonating India’s tax authority reportedly used fake government branding and a six-step delivery path to reach in-memory RAT-style payloads.
When Email Becomes Identity: The Hidden Logic Behind the New Defense Playbook
A scheduled webinar on modern email attacks points to a bigger shift in security thinking: the next fight is less about filtering messages and more about spotting behavior that does not belong.
Interview Lure, Credential Trap: How Recruiter Phishing Turns Gmail Into the Prize
A phishing campaign built around fake job interviews and brand impersonation shows how a simple login prompt can become the endgame of a carefully staged social-engineering chain.
When Summer Breaks the Schedule, Minors’ Screen Habits Can Spiral Quietly
Longer unstructured days can make social media harder to regulate for children and adolescents, with knock-on effects that may show up first in sleep, mood, focus, and self-image.
Fake World Cup Rewards Turn a Global Tournament Into a Payment-Data Trap
A branded phishing lure tied to the 2026 FIFA World Cup is designed to pull fans into handing over personal details and card data, not prizes.
Passkeys Move Enterprise Logins Off the Password Trapdoor
A NordPass discount may be the headline hook, but the deeper story is the shift from reusable passwords to phishing-resistant authentication that can shrink the value of stolen credentials.
Real Microsoft Sign-Ins, Fake Trust: How PDF Lures Are Steering Victims Into Device Code Phishing
A phishing campaign is blending password-protected PDFs with Microsoft’s legitimate device-code login flow, a reminder that attackers do not always need fake pages when they can abuse the real ones.
Google’s Camera-Check CAPTCHA Raises the Stakes for Bots - and for Privacy
A new hand-gesture verification idea inside reCAPTCHA points to a more invasive anti-bot future, but it also invites replay tricks, consent questions, and accessibility tradeoffs.
Why Trust Became the Weakest Link in Modern Cyber Defense
Social engineering succeeds when attackers weaponize urgency, identity, and routine business workflows - and the defensive answer is stronger verification, not awareness training alone.
Opera Puts a Safety Rail Around the Clipboard
Paste Protect is built into the browser, enabled by default on Windows, macOS, and Linux, and aimed at cutting off clipboard hijacking and ClickFix-style code injection before a user can paste trouble into place.
When Anti-Phishing Drills Become a Privacy Problem
Awareness campaigns are meant to harden people against phishing, but the data they generate can pull security teams into GDPR territory if they are not tightly scoped and retained.
Australia Pushes Back on Fake Sender Names as SMS Scams Get a New Barrier
ACMA’s SMS Sender ID Register is now live, adding a formal layer of identity checking to one of the most abused channels in mobile fraud.
EvilTokens and the Quiet Theft of Trust Inside Microsoft 365
A phishing-as-a-service kit tied to OAuth 2.0 shows why modern account attacks can succeed without ever stealing a password.
The Fake Boss, the Hidden DLL, and the Chat Session That Turns Trust Into Fraud
A campaign dubbed Boss Scam blends impersonation, Windows DLL sideloading, and WhatsApp Web session theft, showing how criminals can chain everyday enterprise tools into a fraud path.
The Inbox Is the Battlefield: Why BEC Keeps Beating Malware Filters
Business email compromise thrives on believable identity abuse, not noisy payloads, which is why behavioral detection is becoming central to email defense.
Signal’s Weak Point Was Not Encryption - It Was the Login Trap
A phishing campaign aimed at verification codes and account PINs shows how secure messaging can still be undermined at the account boundary.
When a Receipt Looks Real, the Scam Has Already Moved Inside the App
Scammers are abusing legitimate shopping apps to place fake invoices in users' purchase histories, then steering victims into support-call scams that may lead to credential theft.
Bluekit’s Next Move Turns Phishing Into a Session-Snatching Machine
The latest Bluekit development points to a harder problem for defenders: phishing that does not stop at passwords, but can target the live login flow itself.