VULNCRUSADER
Cacciatore avanzato di vulnerabilità
Profilo professionale
Rileva vulnerabilità complesse su hardware, software e reti.
Competenze chiave
Ricerca di vulnerabilità; Exploitation hardware; Sicurezza automotive; Firmware hacking; Analisi zero-day
Risultati principali
Scoperta una vulnerabilità nei sistemi di telemetria dei veicoli elettrici.
Articoli di VULNCRUSADER
When an AI Gateway Turns Into a Miner: The Quiet Theft of Cloud Compute
A compromised AWS-hosted AI gateway tied to Amazon Bedrock shows how generative AI middleware can become valuable enough to hijack for cryptocurrency mining.
When the Login Box Becomes the Breach: Device-Code Phishing and MFA Persistence
Identity abuse is replacing noisy malware in some intrusions, and the sharp edge now sits in legitimate sign-in flows, token replay, and methods added to keep access alive.
Two Army websites were altered, and the real target may have been trust itself
When public-facing government pages carry unauthorized political messages, the technical question is only half the story - the other half is how quickly a small web compromise can shake confidence.
A Trusted Downloader, a Hidden Relay: How a Fake 7-Zip Package Fueled a Shadow Proxy Web
A counterfeit installer built to impersonate common software points to a broader underground economy where hijacked consumer devices are turned into bandwidth for hire.
How a Fake 7-Zip Download Became a Proxyware Pipeline
A lookalike domain and a familiar installer name were enough to steer consumer devices into a resale market for residential proxy traffic.
When a Windows Identifier Becomes a Courtroom Clue
A reported arrest tied to Scattered Spider shows how a Microsoft device identifier can matter as one signal in a larger attribution chain, not as a standalone answer.
When a File Only Has to Look Right: AI Is Raising the Cost of Trust
Generative AI is making forged paperwork quicker to produce and harder to spot, pushing defenders toward cryptographic checks instead of eyeballing a PDF.
When Reused Passwords Become a Weapon: The Hidden Logic of Credential Stuffing
Credential stuffing is not noisy guessing, but automated account abuse built on stolen passwords, and the real fight is at the login layer where defenders must spot machine-scale patterns early.
When a Proxy Network Hides in Plain Sight, the Real Target Is Trust
A disruption tied to a residential proxy service shows how ordinary-looking internet addresses can be turned into anonymity cover for attackers.
Trusted Release Keys Turned Into a Supply-Chain Weapon
A maintainer-account takeover can do more damage than a single malicious file, especially when one publish pipeline reaches several software ecosystems at once.
Fake Chrome Extension Impersonating Perplexity Put Search Privacy at Risk
A deceptive browser add-on mimicking a popular AI brand highlights how extensions can collect search and browsing data when users grant broad permissions.
Nearly 400 Domains Seized in FIFA World Cup Streaming Crackdown
U.S. authorities moved against a large cluster of web addresses tied to illegal match streaming, showing how much pressure can be applied at the domain layer even when the underlying service may still exist elsewhere.
When an AI Workflow Server Starts Mining for Someone Else
A critical Langflow flaw has been tied to unauthorized Monero mining, showing how a public AI orchestration server can become a quiet execution point for commodity abuse.
When a Cross-Platform Framework Becomes a Scam Assembly Line
A reported cluster of more than 236,000 scam domains shows how reusable app tooling can be bent into a high-volume fraud pipeline, without becoming proof that the framework itself is malicious.
TX-NFC and the Quiet Weaponization of Tap-to-Pay on Android
A reported Android and NFC abuse path tied to credit-card cloning shows how mobile payment features can become a fraud surface without any obvious network intrusion.
Twenty npm Packages, One Fragile Trust Chain: What the Leo/RStreams Incident Exposes
A fresh package-registry compromise in an AWS-focused streaming ecosystem shows how quickly a dependency update can become an infrastructure risk.
Inside the AI Distillation Allegation That Turned 25,000 Accounts Into a Security Story
A claim of mass account abuse around Claude AI highlights how model extraction can look less like a breach and more like industrialized API laundering.
Cloud Control, Finance Control: U.S. Targets a Scam Network’s Hidden Infrastructure
A cloud account seizure and new sanctions point to a more precise anti-fraud strategy: hit the control planes and payment rails that keep cyber-scam profits moving.
Fake GTA 6 Access Pages Turn Fan Hype Into a Crypto Paywall
A polished impersonation scam is using the pull of Grand Theft Auto VI to push victims toward cryptocurrency payments for access that never arrives.
One Marketplace Case, One Border Crossing, and a Bigger Problem for Cybercrime Infrastructure
An extradition tied to Market0Day and Spoxy shows how online criminal platforms can become legal liabilities even when their operators try to stay invisible.