/
initial_access_vector:phishing_link × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · medium

Generative AI erodes behavioral email detection: Proofpoint details AI-crafted BEC, device-code phishing and real estate lure campaigns

Proofpoint reported at its Protect 2026 conference that generative AI is removing the behavioral tells (awkward language, reused templates, repeated infrastructure) that email filters have relied on. Attackers can now produce fluent, personalized, unique messages for each recipient, which weakens behavior-only detection. The vendor cites …

yokai.hakaisecurity.io · medium

Client-Side Path Traversal chains in bug bounty targets enable stored XSS, account takeover and account deletion

Researcher Pedro Cruz (gankd) documents two Client-Side Path Traversal (CSPT) chains found in production bug bounty programs. The first turns CSPT into Stored XSS and account takeover on a payments platform's Angular POS single-page application. The second, found with Felipe Torres, triggers unauthorized account deletion on one of the lar…