Building Windshock Lens: browser-side phishing triage for gray-zone AI-era pages.
Local analysis + rules, OCR, domain signals, and on-device AI for ambiguous cases.
Thanks @skocherhan@Malwarehunterr for sharing real phishing URLs.
https://t.co/qCtZSQsYfU
#Phishing#OnDeviceAI
There are moments when AI feels genuinely surprising. Not when it simply finds the right answer, but when it explains a problem from one field in the language of an entirely different field.
https://t.co/8M030vkn53
#AI#LLM#CyberSecurity#ProblemFraming#CrossDomainReasoning
PoisonChain — a malicious package scanning toolkit — has been updated.
This update adds Nexus scanning support and daily updates of publicly available malicious package intelligence.
https://t.co/C7ln37pvGb
#SupplyChainSecurity#npm#DevSecOps#Nexus#IncidentResponse
ScamGuard AI is a highly private, 100% on-device phishing and scam detection Chrome Extension. It leverages Chrome's built-in Gemini Nano to analyze links, page context, and structure in real time.
https://t.co/VXcczwc8lS
#Phishing#ChromeExtension#GeminiNano#OnDeviceAI
@HacktronAI’s React2Shell / Vercel WAF bypass write-up is a great reminder that modern WAF testing needs parser differential testing.
Inspired by this research, I updated my WAF/IPS/IDS retest project.
https://t.co/vjzHoRKDEs
#WAF#ParserDifferential#React2Shell
Recurring security incidents keep making us ask: who needs to know this better? Maybe the better question is: what should stay with people, and what should be built into defaults and guardrails?
https://t.co/RY8fjWIsdW
#SecureByDefault#DevSecOps#SecurityByDesign#ShiftLeft
While responding to the axios malicious package incident, I found I couldn't even trust the lockfile — and had to go straight to the build logs.
Tool : https://t.co/C7ln37pvGb
Youtube : https://t.co/MNTh9AJpVa
#SupplyChainSecurity#npm#axios#BlueNoroff#ThreatIntelligence
Vuln finders are still needed in #CyberSecurity.
What changed is this: raw sense became guidelines, and guidelines became structure #FromSenseToStructure.
In the #AISecurity era, findings will flood in.
The real bottleneck is interpretation and action.
https://t.co/hdI5whBzD7
axios npm supply chain attack.
If you had "axios": "^1.6.8" and ran npm install without a lockfile, you may have pulled 1.14.1.
Re-check even if you had a lockfile.
C2-linked anonymous VPS ranges (Hostwinds): https://t.co/Rk9gYks8Gr
#npm#axios#anonymous#vps