Blog | Thousand Guards

top of page

Buscar

The Operator Didn’t Hack the Network. The AI Planned the Attack

The Operator Didn’t Hack the Network. The AI Planned the Attack

The Operator Didn’t Hack the Network. The AI Planned the Attack

Javier Conejo del Cerro

31 jul2 min de lectura

When Water Becomes the Target: Understanding the Coordinated Cyberattacks Against Minnesota’s Water Systems

When Water Becomes the Target: Understanding the Coordinated Cyberattacks Against Minnesota’s Water Systems

When Water Becomes the Target: Understanding the Coordinated Cyberattacks Against Minnesota’s Water Systems

Javier Conejo del Cerro

29 jul2 min de lectura

When Timing Becomes Root: How a Fraction of a Second Turned into Full Linux Privileges

When Timing Becomes Root: How a Fraction of a Second Turned into Full Linux Privileges

When Timing Becomes Root: How a Fraction of a Second Turned into Full Linux Privileges

Javier Conejo del Cerro

28 jul2 min de lectura

When Malware Sends a Message: How TELESHIM Turned Telegram into a Command-and-Control Channel

When Malware Sends a Message: How TELESHIM Turned Telegram into a Command-and-Control Channel

When Malware Sends a Message: How TELESHIM Turned Telegram into a Command-and-Control Channel

Javier Conejo del Cerro

27 jul2 min de lectura

When AI Becomes the Insider: Understanding the AgentForger Attack

When AI Becomes the Insider: Understanding the AgentForger Attack

When AI Becomes the Insider: Understanding the AgentForger Attack

Javier Conejo del Cerro

24 jul2 min de lectura

When Trust Crosses the Line: How an Adobe Acrobat Extension Exposed WhatsApp Web

When Trust Crosses the Line: How an Adobe Acrobat Extension Exposed WhatsApp Web

When Trust Crosses the Line: How an Adobe Acrobat Extension Exposed WhatsApp Web

Javier Conejo del Cerro

23 jul2 min de lectura

When the Session Is the Target: Understanding the Kratos Phishing Kit

When the Session Is the Target: Understanding the Kratos Phishing Kit

When the Session Is the Target: Understanding the Kratos Phishing Kit

Javier Conejo del Cerro

22 jul2 min de lectura

When Tomorrow Becomes the Hiding Place: How HollowGraph Turned Microsoft 365 Calendars into Command-and-Control

When Tomorrow Becomes the Hiding Place: How HollowGraph Turned Microsoft 365 Calendars into Command-and-Control

When Tomorrow Becomes the Hiding Place: How HollowGraph Turned Microsoft 365 Calendars into Command-and-Control

Javier Conejo del Cerro

21 jul2 min de lectura

When Copy and Paste Becomes the Attack: Understanding TELEPUZ and the Rise of ClickFix Malware

When Copy and Paste Becomes the Attack: Understanding TELEPUZ and the Rise of ClickFix Malware

When Copy and Paste Becomes the Attack: Understanding TELEPUZ and the Rise of ClickFix Malware

Javier Conejo del Cerro

17 jul2 min de lectura

When Trust Clicks for You: Understanding the Claude for Chrome Extension Weakness

When Trust Clicks for You: Understanding the Claude for Chrome Extension Weakness

When Trust Clicks for You: Understanding the Claude for Chrome Extension Weakness

Javier Conejo del Cerro

15 jul2 min de lectura

When Trust Becomes the Attack Vector: How ShinyHunters Abused OAuth to Breach Salesforce Environments

When Trust Becomes the Attack Vector: How ShinyHunters Abused OAuth to Breach Salesforce Environments

When Trust Becomes the Attack Vector: How ShinyHunters Abused OAuth to Breach Salesforce Environments

Javier Conejo del Cerro

14 jul2 min de lectura

MemGhost: When One Email Becomes a Permanent False Memory for AI Agents

MemGhost: When One Email Becomes a Permanent False Memory for AI Agents

MemGhost: When One Email Becomes a Permanent False Memory for AI Agents

Javier Conejo del Cerro

13 jul2 min de lectura

RedWing: Telegram-Powered Android Banking Malware Lowers the Barrier for Cybercrime

RedWing: Telegram-Powered Android Banking Malware Lowers the Barrier for Cybercrime

RedWing: Telegram-Powered Android Banking Malware Lowers the Barrier for Cybercrime

Javier Conejo del Cerro

8 jul2 min de lectura

Pegasus Spyware Compromises European Parliament Member Investigating Surveillance Abuse

Pegasus Spyware Compromises European Parliament Member Investigating Surveillance Abuse

Pegasus Spyware Compromises European Parliament Member Investigating Surveillance Abuse

Javier Conejo del Cerro

3 jul2 min de lectura

ToddyCat Uses OAuth Abuse to Silently Compromise Corporate Gmail Accounts

ToddyCat Uses OAuth Abuse to Silently Compromise Corporate Gmail Accounts

ToddyCat Uses OAuth Abuse to Silently Compromise Corporate Gmail Accounts

Javier Conejo del Cerro

2 jul2 min de lectura

The Fake Perplexity Extension That Quietly Logged Every Search

The Fake Perplexity Extension That Quietly Logged Every Search

The Fake Perplexity Extension That Quietly Logged Every Search

Javier Conejo del Cerro

30 jun2 min de lectura

StegoAd: Microsoft Dismantles a Massive Edge Extension Campaign Hiding Malware in Images and Fonts

StegoAd: Microsoft Dismantles a Massive Edge Extension Campaign Hiding Malware in Images and Fonts

StegoAd: Microsoft Dismantles a Massive Edge Extension Campaign Hiding Malware in Images and Fonts

Javier Conejo del Cerro

29 jun2 min de lectura

Turla Unveils STOCKSTAY: A New Generation Backdoor Powering Advanced Espionage Campaigns

Turla Unveils STOCKSTAY: A New Generation Backdoor Powering Advanced Espionage Campaigns

Turla Unveils STOCKSTAY: A New Generation Backdoor Powering Advanced Espionage Campaigns

Javier Conejo del Cerro

26 jun4 min de lectura

The Malware That Gaslights AI

The Malware That Gaslights AI

The Malware That Gaslights AI

Javier Conejo del Cerro

25 jun3 min de lectura

The PostCSS Package That Wasn’t PostCSS

The PostCSS Package That Wasn’t PostCSS

The PostCSS Package That Wasn’t PostCSS

Javier Conejo del Cerro

23 jun3 min de lectura

bottom of page