Security researcher · Israel
Builder with the mindset of a breaker.
I break the software everyone relies on, hunt the campaigns hiding inside trusted infrastructure — and build products people use.
- Now
- Lead Security Researcher, Island
- Before
- Threat Hunter, Guardio Labs
- Trained
- IDF Unit 8200
01The coverage
Hundreds of headlines.
Worldwide.
ForbesGeektimeThe Hacker NewsBleepingComputerDark ReadingSecurityWeekTechRadarPCMag
The RegisterBrowser-in-browser attacks use fake Meta Muse Ad lure to steal credentials
KasperskySubdoMailing campaign: hijacking domains for spamming
ForbesSubdoMailing Threat To New Gmail Security Rules
CointelegraphEtherHiding: Hackers create novel way to hide malicious code in blockchains
Microsoft DefenderSecure architecture design – How Defender for Office 365 protects against EchoSpoofing
TechRadarChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes
Consumer AffairsFake ChatGPT scam uses trusted websites to trick users into installing malware
Cyber InsiderProofpoint’s Services Abused to Dispatch Millions of Phishing Emails
TechRadarOpera found a significant security flaw that could have allowed hackers to run any file they want - but it says everything is now fine
The Hacker NewsOpera 'MyFlaw' Bug Could Let Hackers Run Any File on Windows and macOS
ITProA flaw in Proofpoint’s anti-phishing platform allowed a hacker to send millions of spam emails
Techzine GlobalTsunami of spoof emails due to abuse of Proofpoint service
iTnewsSalesforce email compromised for phishing attacks
CPO MagazineMassive Ad Fraud Campaign Sends Million of Spam Emails from Thousands of Hijacked Reputable Domains
Windows ReportResearchers Warn Fake ChatGPT and Gemini Sites Are Stealing MFA Codes
The Hacker NewsMicrosoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions
Risky BusinessRisky Bulletin: Linux kernel discloses 442 CVEs as AI bugpocalypse settles in
DevOps.comFakeGit Targets AI Coding Agents with Malicious GitHub Repos
Apiiro ResearchNever Deleted, Only Re-Pointed: Inside the 17,600-Repo FakeGit Fleet That Re-Arms Overnight
eSecurityPlanetFake AI Marketing Sites Put a Browser Inside Your Browser to Steal Logins
BleepingComputerHijacked subdomains of major brands used in massive spam campaign
Help Net SecurityMalicious GitHub Repos Weaponized to Trick AI Agents and Developers
SecurityWeekSalesforce Email Service Zero-Day Exploited in Phishing Campaign
BleepingComputerHackers use Binance Smart Chain contracts to store malicious scripts
ICT Security MagazineBadBlocker: la vulnerabilità latente in Adblock for YouTube per Chrome
DarkRelay SecurityOpera Zero-Day RCE Vulnerability Analysis: MyFlaw
BleepingComputerFacebook Messenger phishing wave targets 100K business accounts per week
TechNaduAgentBaiting: FakeGit Weaponizes 800+ Fake AI Skills for SmartLoader
HexnodeFakeGit Malware: 7,600 Fake GitHub Repositories
BleepingComputerFake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
TechRadarProofpoint email filter flaw exploited to send out millions of phishing messages
SecurityWeekDomains Once Owned by Major Firms Help Millions of Spam Emails Bypass Security
Tech TimesTelegram’s Role in ‘Democratization’ of Cybercrime Unveiled by Guardio Labs
CPO MagazineFacebook Messenger Phishing Campaign Targets Millions of Business Accounts Locking Out Owners
Dark ReadingSalesforce Zero-Day Exploited to Phish Facebook Credentials
BleepingComputerHackers exploited Salesforce zero-day in Facebook phishing attack
TechRadarThis Microsoft Edge security flaw could have allowed hackers to install all kinds of malicious extras - but there's good news
The Hacker NewsProofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Messages
- The RegisterBrowser-in-browser attacks use fake Meta Muse Ad lure to steal credentials
- KasperskySubdoMailing campaign: hijacking domains for spamming
- ForbesSubdoMailing Threat To New Gmail Security Rules
- CointelegraphEtherHiding: Hackers create novel way to hide malicious code in blockchains
- Microsoft DefenderSecure architecture design – How Defender for Office 365 protects against EchoSpoofing
- TechRadarChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes
- Consumer AffairsFake ChatGPT scam uses trusted websites to trick users into installing malware
- Cyber InsiderProofpoint’s Services Abused to Dispatch Millions of Phishing Emails
- TechRadarOpera found a significant security flaw that could have allowed hackers to run any file they want - but it says everything is now fine
- The Hacker NewsOpera 'MyFlaw' Bug Could Let Hackers Run Any File on Windows and macOS
- ITProA flaw in Proofpoint’s anti-phishing platform allowed a hacker to send millions of spam emails
- Techzine GlobalTsunami of spoof emails due to abuse of Proofpoint service
- iTnewsSalesforce email compromised for phishing attacks
- CPO MagazineMassive Ad Fraud Campaign Sends Million of Spam Emails from Thousands of Hijacked Reputable Domains
- Windows ReportResearchers Warn Fake ChatGPT and Gemini Sites Are Stealing MFA Codes
- The Hacker NewsMicrosoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions
- Risky BusinessRisky Bulletin: Linux kernel discloses 442 CVEs as AI bugpocalypse settles in
- DevOps.comFakeGit Targets AI Coding Agents with Malicious GitHub Repos
- Apiiro ResearchNever Deleted, Only Re-Pointed: Inside the 17,600-Repo FakeGit Fleet That Re-Arms Overnight
- eSecurityPlanetFake AI Marketing Sites Put a Browser Inside Your Browser to Steal Logins
- BleepingComputerHijacked subdomains of major brands used in massive spam campaign
- Help Net SecurityMalicious GitHub Repos Weaponized to Trick AI Agents and Developers
- SecurityWeekSalesforce Email Service Zero-Day Exploited in Phishing Campaign
- BleepingComputerHackers use Binance Smart Chain contracts to store malicious scripts
- ICT Security MagazineBadBlocker: la vulnerabilità latente in Adblock for YouTube per Chrome
- DarkRelay SecurityOpera Zero-Day RCE Vulnerability Analysis: MyFlaw
- BleepingComputerFacebook Messenger phishing wave targets 100K business accounts per week
- TechNaduAgentBaiting: FakeGit Weaponizes 800+ Fake AI Skills for SmartLoader
- HexnodeFakeGit Malware: 7,600 Fake GitHub Repositories
- BleepingComputerFake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
- TechRadarProofpoint email filter flaw exploited to send out millions of phishing messages
- SecurityWeekDomains Once Owned by Major Firms Help Millions of Spam Emails Bypass Security
- Tech TimesTelegram’s Role in ‘Democratization’ of Cybercrime Unveiled by Guardio Labs
- CPO MagazineFacebook Messenger Phishing Campaign Targets Millions of Business Accounts Locking Out Owners
- Dark ReadingSalesforce Zero-Day Exploited to Phish Facebook Credentials
- BleepingComputerHackers exploited Salesforce zero-day in Facebook phishing attack
- TechRadarThis Microsoft Edge security flaw could have allowed hackers to install all kinds of malicious extras - but there's good news
- The Hacker NewsProofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Messages
heise onlineYouTube ad blocker with 11 million installations with possible backdoor
Geektimeפתחתם מייל מדיסני פלוס? חוקרים ישראליים גילו שיכול להיות שאלו האקרים מתחזים
The Hacker News8,000+ Subdomains of Trusted Brands Hijacked in Massive 'SubdoMailing' Spam Operation
The RegisterProofpoint phishing palaver plagues millions with ‘perfectly spoofed’ emails from IBM, Nike, Disney, others
SecurityWeekRemote Code Execution Vulnerability Found in Opera File-Sharing Feature
BleepingComputerProofpoint settings exploited to send millions of phishing emails daily
PCMagTelegram Is a Scammer's Paradise Thanks to Cheap Phishing Tools
Google MandiantDPRK Adopts EtherHiding
Broadcom Threat IntelAnti-EchoSpoofing Protection in Email Security.cloud
MSPowerUserMicrosoft patches Edge browser vulnerability that could have led to malicious extension installation
SecurityWeekSites of Major Orgs Abused in Spam Campaign Exploiting Virtual Tour Software Flaw
Security BoulevardTelegram is a Wide-Open Marketplace for Phishing Tools
Protos‘EtherHiding’ hack uses Binance blockchain to extort WordPress users
ForkastAgentBaiting: How 800+ Fake AI Skills Deliver Malware at Scale
Opera SecuritySetting the record straight on the “MyFlaw” vulnerability
BleepingComputerFakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
SecurityBrief UKAdblock for YouTube extension flagged for security risk
Cloud Security AllianceFakeGit and AgentBaiting: Malicious Repos Target AI Agents
IT-ConnectAdblock for YouTube: 11 Million Installs and a Serious Security Flaw to Fix
Cyber InsiderChrome extension Adblock for YouTube with 11 million users could be silently weaponized
SC MediaMassive spam ads campaign facilitated by krpano framework XSS exploit
The Hacker NewsChrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
Wiz Researchkrpano XSS Exploitation Campaign Tracking
Dark ReadingMillions of Facebook Business Accounts Targeted by Python Malware
The Hacker NewsBinance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign
Cyber InsiderFake ChatGPT and Gemini ad tools bait users with bogus login windows
Broadcom Threat IntelFakeGit Infrastructure Re-Armed in Large-Scale RePointing Campaign
The Hacker NewsFakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
BeEncryptedPopular ‘Adblock for YouTube’ Chrome Extension Found With Remote Code Execution Risk
SC MediaWidespread email spoofing facilitated by Proofpoint email routing flaw
The Hacker NewsHackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites
Digital Information WorldTelegram is Home to Many Scammers and Cyber Criminals Who Sell Many Phishing Tools at Cheap Prices
Tom's GuideHackers are using Facebook Messenger to spread password-stealing malware — how to stay safe
The Hacker NewsPhishers Exploit Salesforce's Email Services Zero-Day in Targeted Facebook Campaign
Security BoulevardPhishing Campaign Exploited Salesforce Flaw to Attack Facebook Users
SC MediaFacebook Messenger exploited in phishing campaign aimed at business accounts
The Hacker NewsFake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
- heise onlineYouTube ad blocker with 11 million installations with possible backdoor
- Geektimeפתחתם מייל מדיסני פלוס? חוקרים ישראליים גילו שיכול להיות שאלו האקרים מתחזים
- The Hacker News8,000+ Subdomains of Trusted Brands Hijacked in Massive 'SubdoMailing' Spam Operation
- The RegisterProofpoint phishing palaver plagues millions with ‘perfectly spoofed’ emails from IBM, Nike, Disney, others
- SecurityWeekRemote Code Execution Vulnerability Found in Opera File-Sharing Feature
- BleepingComputerProofpoint settings exploited to send millions of phishing emails daily
- PCMagTelegram Is a Scammer's Paradise Thanks to Cheap Phishing Tools
- Google MandiantDPRK Adopts EtherHiding
- Broadcom Threat IntelAnti-EchoSpoofing Protection in Email Security.cloud
- MSPowerUserMicrosoft patches Edge browser vulnerability that could have led to malicious extension installation
- SecurityWeekSites of Major Orgs Abused in Spam Campaign Exploiting Virtual Tour Software Flaw
- Security BoulevardTelegram is a Wide-Open Marketplace for Phishing Tools
- Protos‘EtherHiding’ hack uses Binance blockchain to extort WordPress users
- ForkastAgentBaiting: How 800+ Fake AI Skills Deliver Malware at Scale
- Opera SecuritySetting the record straight on the “MyFlaw” vulnerability
- BleepingComputerFakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
- SecurityBrief UKAdblock for YouTube extension flagged for security risk
- Cloud Security AllianceFakeGit and AgentBaiting: Malicious Repos Target AI Agents
- IT-ConnectAdblock for YouTube: 11 Million Installs and a Serious Security Flaw to Fix
- Cyber InsiderChrome extension Adblock for YouTube with 11 million users could be silently weaponized
- SC MediaMassive spam ads campaign facilitated by krpano framework XSS exploit
- The Hacker NewsChrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
- Wiz Researchkrpano XSS Exploitation Campaign Tracking
- Dark ReadingMillions of Facebook Business Accounts Targeted by Python Malware
- The Hacker NewsBinance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign
- Cyber InsiderFake ChatGPT and Gemini ad tools bait users with bogus login windows
- Broadcom Threat IntelFakeGit Infrastructure Re-Armed in Large-Scale RePointing Campaign
- The Hacker NewsFakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
- BeEncryptedPopular ‘Adblock for YouTube’ Chrome Extension Found With Remote Code Execution Risk
- SC MediaWidespread email spoofing facilitated by Proofpoint email routing flaw
- The Hacker NewsHackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites
- Digital Information WorldTelegram is Home to Many Scammers and Cyber Criminals Who Sell Many Phishing Tools at Cheap Prices
- Tom's GuideHackers are using Facebook Messenger to spread password-stealing malware — how to stay safe
- The Hacker NewsPhishers Exploit Salesforce's Email Services Zero-Day in Targeted Facebook Campaign
- Security BoulevardPhishing Campaign Exploited Salesforce Flaw to Attack Facebook Users
- SC MediaFacebook Messenger exploited in phishing campaign aimed at business accounts
- The Hacker NewsFake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
- The RegisterBrowser-in-browser attacks use fake Meta Muse Ad lure to steal credentials
- KasperskySubdoMailing campaign: hijacking domains for spamming
- ForbesSubdoMailing Threat To New Gmail Security Rules
- CointelegraphEtherHiding: Hackers create novel way to hide malicious code in blockchains
- Microsoft DefenderSecure architecture design – How Defender for Office 365 protects against EchoSpoofing
- TechRadarChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes
- Consumer AffairsFake ChatGPT scam uses trusted websites to trick users into installing malware
- Cyber InsiderProofpoint’s Services Abused to Dispatch Millions of Phishing Emails
- TechRadarOpera found a significant security flaw that could have allowed hackers to run any file they want - but it says everything is now fine
- The Hacker NewsOpera 'MyFlaw' Bug Could Let Hackers Run Any File on Windows and macOS
- ITProA flaw in Proofpoint’s anti-phishing platform allowed a hacker to send millions of spam emails
- Techzine GlobalTsunami of spoof emails due to abuse of Proofpoint service
- iTnewsSalesforce email compromised for phishing attacks
- CPO MagazineMassive Ad Fraud Campaign Sends Million of Spam Emails from Thousands of Hijacked Reputable Domains
- Windows ReportResearchers Warn Fake ChatGPT and Gemini Sites Are Stealing MFA Codes
- The Hacker NewsMicrosoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions
- Risky BusinessRisky Bulletin: Linux kernel discloses 442 CVEs as AI bugpocalypse settles in
- DevOps.comFakeGit Targets AI Coding Agents with Malicious GitHub Repos
- Apiiro ResearchNever Deleted, Only Re-Pointed: Inside the 17,600-Repo FakeGit Fleet That Re-Arms Overnight
- eSecurityPlanetFake AI Marketing Sites Put a Browser Inside Your Browser to Steal Logins
- BleepingComputerHijacked subdomains of major brands used in massive spam campaign
- Help Net SecurityMalicious GitHub Repos Weaponized to Trick AI Agents and Developers
- SecurityWeekSalesforce Email Service Zero-Day Exploited in Phishing Campaign
- BleepingComputerHackers use Binance Smart Chain contracts to store malicious scripts
- ICT Security MagazineBadBlocker: la vulnerabilità latente in Adblock for YouTube per Chrome
- DarkRelay SecurityOpera Zero-Day RCE Vulnerability Analysis: MyFlaw
- BleepingComputerFacebook Messenger phishing wave targets 100K business accounts per week
- TechNaduAgentBaiting: FakeGit Weaponizes 800+ Fake AI Skills for SmartLoader
- HexnodeFakeGit Malware: 7,600 Fake GitHub Repositories
- BleepingComputerFake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
- TechRadarProofpoint email filter flaw exploited to send out millions of phishing messages
- SecurityWeekDomains Once Owned by Major Firms Help Millions of Spam Emails Bypass Security
- Tech TimesTelegram’s Role in ‘Democratization’ of Cybercrime Unveiled by Guardio Labs
- CPO MagazineFacebook Messenger Phishing Campaign Targets Millions of Business Accounts Locking Out Owners
- Dark ReadingSalesforce Zero-Day Exploited to Phish Facebook Credentials
- BleepingComputerHackers exploited Salesforce zero-day in Facebook phishing attack
- TechRadarThis Microsoft Edge security flaw could have allowed hackers to install all kinds of malicious extras - but there's good news
- The Hacker NewsProofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Messages
- The RegisterBrowser-in-browser attacks use fake Meta Muse Ad lure to steal credentials
- KasperskySubdoMailing campaign: hijacking domains for spamming
- ForbesSubdoMailing Threat To New Gmail Security Rules
- CointelegraphEtherHiding: Hackers create novel way to hide malicious code in blockchains
- Microsoft DefenderSecure architecture design – How Defender for Office 365 protects against EchoSpoofing
- TechRadarChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes
- Consumer AffairsFake ChatGPT scam uses trusted websites to trick users into installing malware
- Cyber InsiderProofpoint’s Services Abused to Dispatch Millions of Phishing Emails
- TechRadarOpera found a significant security flaw that could have allowed hackers to run any file they want - but it says everything is now fine
- The Hacker NewsOpera 'MyFlaw' Bug Could Let Hackers Run Any File on Windows and macOS
- ITProA flaw in Proofpoint’s anti-phishing platform allowed a hacker to send millions of spam emails
- Techzine GlobalTsunami of spoof emails due to abuse of Proofpoint service
- iTnewsSalesforce email compromised for phishing attacks
- CPO MagazineMassive Ad Fraud Campaign Sends Million of Spam Emails from Thousands of Hijacked Reputable Domains
- Windows ReportResearchers Warn Fake ChatGPT and Gemini Sites Are Stealing MFA Codes
- The Hacker NewsMicrosoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions
- Risky BusinessRisky Bulletin: Linux kernel discloses 442 CVEs as AI bugpocalypse settles in
- DevOps.comFakeGit Targets AI Coding Agents with Malicious GitHub Repos
- Apiiro ResearchNever Deleted, Only Re-Pointed: Inside the 17,600-Repo FakeGit Fleet That Re-Arms Overnight
- eSecurityPlanetFake AI Marketing Sites Put a Browser Inside Your Browser to Steal Logins
- BleepingComputerHijacked subdomains of major brands used in massive spam campaign
- Help Net SecurityMalicious GitHub Repos Weaponized to Trick AI Agents and Developers
- SecurityWeekSalesforce Email Service Zero-Day Exploited in Phishing Campaign
- BleepingComputerHackers use Binance Smart Chain contracts to store malicious scripts
- ICT Security MagazineBadBlocker: la vulnerabilità latente in Adblock for YouTube per Chrome
- DarkRelay SecurityOpera Zero-Day RCE Vulnerability Analysis: MyFlaw
- BleepingComputerFacebook Messenger phishing wave targets 100K business accounts per week
- TechNaduAgentBaiting: FakeGit Weaponizes 800+ Fake AI Skills for SmartLoader
- HexnodeFakeGit Malware: 7,600 Fake GitHub Repositories
- BleepingComputerFake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
- TechRadarProofpoint email filter flaw exploited to send out millions of phishing messages
- SecurityWeekDomains Once Owned by Major Firms Help Millions of Spam Emails Bypass Security
- Tech TimesTelegram’s Role in ‘Democratization’ of Cybercrime Unveiled by Guardio Labs
- CPO MagazineFacebook Messenger Phishing Campaign Targets Millions of Business Accounts Locking Out Owners
- Dark ReadingSalesforce Zero-Day Exploited to Phish Facebook Credentials
- BleepingComputerHackers exploited Salesforce zero-day in Facebook phishing attack
- TechRadarThis Microsoft Edge security flaw could have allowed hackers to install all kinds of malicious extras - but there's good news
- The Hacker NewsProofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Messages
- heise onlineYouTube ad blocker with 11 million installations with possible backdoor
- Geektimeפתחתם מייל מדיסני פלוס? חוקרים ישראליים גילו שיכול להיות שאלו האקרים מתחזים
- The Hacker News8,000+ Subdomains of Trusted Brands Hijacked in Massive 'SubdoMailing' Spam Operation
- The RegisterProofpoint phishing palaver plagues millions with ‘perfectly spoofed’ emails from IBM, Nike, Disney, others
- SecurityWeekRemote Code Execution Vulnerability Found in Opera File-Sharing Feature
- BleepingComputerProofpoint settings exploited to send millions of phishing emails daily
- PCMagTelegram Is a Scammer's Paradise Thanks to Cheap Phishing Tools
- Google MandiantDPRK Adopts EtherHiding
- Broadcom Threat IntelAnti-EchoSpoofing Protection in Email Security.cloud
- MSPowerUserMicrosoft patches Edge browser vulnerability that could have led to malicious extension installation
- SecurityWeekSites of Major Orgs Abused in Spam Campaign Exploiting Virtual Tour Software Flaw
- Security BoulevardTelegram is a Wide-Open Marketplace for Phishing Tools
- Protos‘EtherHiding’ hack uses Binance blockchain to extort WordPress users
- ForkastAgentBaiting: How 800+ Fake AI Skills Deliver Malware at Scale
- Opera SecuritySetting the record straight on the “MyFlaw” vulnerability
- BleepingComputerFakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
- SecurityBrief UKAdblock for YouTube extension flagged for security risk
- Cloud Security AllianceFakeGit and AgentBaiting: Malicious Repos Target AI Agents
- IT-ConnectAdblock for YouTube: 11 Million Installs and a Serious Security Flaw to Fix
- Cyber InsiderChrome extension Adblock for YouTube with 11 million users could be silently weaponized
- SC MediaMassive spam ads campaign facilitated by krpano framework XSS exploit
- The Hacker NewsChrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
- Wiz Researchkrpano XSS Exploitation Campaign Tracking
- Dark ReadingMillions of Facebook Business Accounts Targeted by Python Malware
- The Hacker NewsBinance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign
- Cyber InsiderFake ChatGPT and Gemini ad tools bait users with bogus login windows
- Broadcom Threat IntelFakeGit Infrastructure Re-Armed in Large-Scale RePointing Campaign
- The Hacker NewsFakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
- BeEncryptedPopular ‘Adblock for YouTube’ Chrome Extension Found With Remote Code Execution Risk
- SC MediaWidespread email spoofing facilitated by Proofpoint email routing flaw
- The Hacker NewsHackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites
- Digital Information WorldTelegram is Home to Many Scammers and Cyber Criminals Who Sell Many Phishing Tools at Cheap Prices
- Tom's GuideHackers are using Facebook Messenger to spread password-stealing malware — how to stay safe
- The Hacker NewsPhishers Exploit Salesforce's Email Services Zero-Day in Targeted Facebook Campaign
- Security BoulevardPhishing Campaign Exploited Salesforce Flaw to Attack Facebook Users
- SC MediaFacebook Messenger exploited in phishing campaign aimed at business accounts
- The Hacker NewsFake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
- heise onlineYouTube ad blocker with 11 million installations with possible backdoor
- Geektimeפתחתם מייל מדיסני פלוס? חוקרים ישראליים גילו שיכול להיות שאלו האקרים מתחזים
- The Hacker News8,000+ Subdomains of Trusted Brands Hijacked in Massive 'SubdoMailing' Spam Operation
- The RegisterProofpoint phishing palaver plagues millions with ‘perfectly spoofed’ emails from IBM, Nike, Disney, others
- SecurityWeekRemote Code Execution Vulnerability Found in Opera File-Sharing Feature
- BleepingComputerProofpoint settings exploited to send millions of phishing emails daily
- PCMagTelegram Is a Scammer's Paradise Thanks to Cheap Phishing Tools
- Google MandiantDPRK Adopts EtherHiding
- Broadcom Threat IntelAnti-EchoSpoofing Protection in Email Security.cloud
- MSPowerUserMicrosoft patches Edge browser vulnerability that could have led to malicious extension installation
- SecurityWeekSites of Major Orgs Abused in Spam Campaign Exploiting Virtual Tour Software Flaw
- Security BoulevardTelegram is a Wide-Open Marketplace for Phishing Tools
- Protos‘EtherHiding’ hack uses Binance blockchain to extort WordPress users
- ForkastAgentBaiting: How 800+ Fake AI Skills Deliver Malware at Scale
- Opera SecuritySetting the record straight on the “MyFlaw” vulnerability
- BleepingComputerFakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
- SecurityBrief UKAdblock for YouTube extension flagged for security risk
- Cloud Security AllianceFakeGit and AgentBaiting: Malicious Repos Target AI Agents
- IT-ConnectAdblock for YouTube: 11 Million Installs and a Serious Security Flaw to Fix
- Cyber InsiderChrome extension Adblock for YouTube with 11 million users could be silently weaponized
- SC MediaMassive spam ads campaign facilitated by krpano framework XSS exploit
- The Hacker NewsChrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
- Wiz Researchkrpano XSS Exploitation Campaign Tracking
- Dark ReadingMillions of Facebook Business Accounts Targeted by Python Malware
- The Hacker NewsBinance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign
- Cyber InsiderFake ChatGPT and Gemini ad tools bait users with bogus login windows
- Broadcom Threat IntelFakeGit Infrastructure Re-Armed in Large-Scale RePointing Campaign
- The Hacker NewsFakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
- BeEncryptedPopular ‘Adblock for YouTube’ Chrome Extension Found With Remote Code Execution Risk
- SC MediaWidespread email spoofing facilitated by Proofpoint email routing flaw
- The Hacker NewsHackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites
- Digital Information WorldTelegram is Home to Many Scammers and Cyber Criminals Who Sell Many Phishing Tools at Cheap Prices
- Tom's GuideHackers are using Facebook Messenger to spread password-stealing malware — how to stay safe
- The Hacker NewsPhishers Exploit Salesforce's Email Services Zero-Day in Targeted Facebook Campaign
- Security BoulevardPhishing Campaign Exploited Salesforce Flaw to Attack Facebook Users
- SC MediaFacebook Messenger exploited in phishing campaign aimed at business accounts
- The Hacker NewsFake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cited by Microsoft MSRC · Google Mandiant · CERT-EU · US HHS · Spamhaus · NJCCIC
All research & press →