Omid Mirzaei

Anti-Abuse @Apple

[Cisco Talos Intelligence Group @TalosSecurity]

Attackers are recycling phone numbers used in scam emails like they’re going out of style. Learn how Talos is turning those digits into a roadmap to expose the hidden infrastructure: https://t.co/KYEEnY7H9H

[Omid Mirzaei @malearnity]

Read our latest research on n8n, an AI-powered automation platform, and how it’s being abused.

[Cisco Talos Intelligence Group @TalosSecurity]

It's an n8n n8tmare! In our latest blog, Talos researchers share how threat actors are exploiting AI workflow platforms like n8n to launch sophisticated phishing and malware campaigns: https://t.co/Jn9SLIZymH

[Blue Team Con @BlueTeamCon]

📣 Today at 4PM CT - @malearnity dives into CSS abuses to deliver malware via email and shows you how to fortify your cyber defenses to protect yourself and your team.

Join on YouTube: https://t.co/ILC7CyLOun
Join on Twitch: https://t.co/c9ynJDrkGr

[Omid Mirzaei @malearnity]

I'll be going live in a few hours (5pm ET). Come join us:

https://t.co/m4Yq47Uqas

You'll have the opportunity to ask your questions in the chat.

[Blue Team Con @BlueTeamCon]

The first Blue Team Con Online events of 2026 have been listed! Get a chance to see talks you missed, or just refresh your memory from last summer.

See them here: https://t.co/fsRYVs4mRp

(...and don't forget to subscribe to our YouTube channel and follow us on Twitch!)

[Blue Team Con @BlueTeamCon]

Thanks to the many speakers who have shared their presentation decks from Blue Team Con 2025. They've been added to the individual talk pages on our site - check it out!
https://t.co/h68U6Lssmv

[Omid Mirzaei @malearnity]

Promise made, promise kept: This blog shares highlights from my recent talk at @BlueTeamCon. It’s the result of over a year of monitoring how threat actors use hidden text in emails.
#email #security #phish

[Cisco Talos Intelligence Group @TalosSecurity]

Attackers are slipping spam past email defenses by manipulating CSS properties. Read the latest Cisco Talos blog to uncover how hidden text salting works, why it’s so widespread in spam and what it means for email security: https://t.co/6mOxDKtfcN

[Blue Team Con @BlueTeamCon]

This year's schedule just dropped and it's jam-packed with amazing talks and fun events. Check it out now and get started on your itinerary - you won't want to miss a thing.
https://t.co/lMC6qEct4U

[Omid Mirzaei @malearnity]

4) Related blog posts:
- https://t.co/Z10a9twtUz
- https://t.co/KFfoQw8DhF

Related podcasts:
- https://t.co/DCd1388CsL

Related papers:
- https://t.co/FhKiCNkhtG

[Omid Mirzaei @malearnity]

1) Here’s a sneak peek at my upcoming presentation for Blue Team Con:

Introduction: How benign technologies like CSS are exploited by threat actors; where and how content can be concealed in emails. @TalosSecurity

[Blue Team Con @BlueTeamCon]

🚨Blue Team Con 2025 Talk Alert🚨

Talk Title: Unseen but Not Unheard: Exposing the Cases of CSS Abuse in Email Threats and Fortifying Defenses

Presented by: Omid Mirzaei

See abstract: https://t.co/l0Vdb0y1hD

[Omid Mirzaei @malearnity]

3) Findings: Performance review, case studies, and common concealment techniques seen in the wild.
Future Work: Planned improvements and expanded use cases.
Conclusion: Exploring both offensive and defensive uses of LLMs for content concealment.

[The Hacker News @TheHackersNews]

🚨 Hackers now talk you into getting hacked.

PDF phishing emails impersonate Microsoft, PayPal, DocuSign—urging you to call fake support lines.

On the call, they steal your info or install malware.

FBI, Cisco, and Varonis warn: it’s rising fast.

Read how it works → https://t.co/pt5hx94yI8

[Omid Mirzaei @malearnity]

This report comes from the latest update to our brand impersonation detection system.

[Cisco Talos Intelligence Group @TalosSecurity]

Did you know PDFs may be the perfect disguise for phishing attacks? Cisco Talos is enhancing email threat detection and uncovering new tactics like callback phishing (aka TOAD) and Adobe abuse: https://t.co/sFTaeZHWWr

[Omid Mirzaei @malearnity]

Can't wait for #blueteamcon.

[Blue Team Con @BlueTeamCon]

BTC 2025 talks, speakers, trainings, and trainers have been selected and are now live on the BTC site! Check them out:
Talks: https://t.co/h68U6Lssmv
Speakers: https://t.co/EmXzsG7rbF
Trainings: https://t.co/qXyEmvNu6I
Trainers: https://t.co/UNZqHi2026

Tickets on sale June 3rd!

[Omid Mirzaei @malearnity]

I'm very excited to share that my talk, "Unseen but Not Unheard: Exposing the Cases of CSS Abuse in Email Threats and Fortifying Defenses," has been accepted to the @BlueTeamCon.
Thank you from the program committee and looking forward to meet a lot of great researchers there.

[Omid Mirzaei @malearnity]

Watch out for this YouTube redirect in phishing emails: https://youtube.com@[target_uri]
#Email #phishing #redirect

[Cisco Talos Intelligence Group @TalosSecurity]

Cisco Talos’ 2024 Year in Review is available for download now! With visibility into more than 886 billion security events per day, the report features our key insights. Read the full report here: https://t.co/4IibOqH46Y

[The Hacker News @TheHackersNews]

👀 Your email client might be leaking more than you think...

Hackers are exploiting CSS to bypass spam filters and track users without JavaScript.

🚨 Cisco Talos warns that attackers use CSS properties like media, text-indent, and opacity to hide phishing content and fingerprint victims.

Stay ahead—learn how at https://t.co/DOkhT0RALu.

[Omid Mirzaei @malearnity]

This follow-up blog (previous blog: https://t.co/Z10a9twtUz) explores the security and privacy risks of CSS abuse in emails. Read more about how attackers leverage CSS for evasion and tracking:
#email_security #ThreatIntelligence #email

[Cisco Talos Intelligence Group @TalosSecurity]

Cascading Style Sheets (CSS) are ever present in modern day web browsing, however it's far from their own use. Read our latest blog Abusing with style: Leveraging cascading style sheets for evasion and tracking to learn more: https://t.co/adCuEWfZyC