The Netskope Threat Labs team is #hiring experienced researchers in Brazil, Spain, and Portugal! The team is a fully remote team focused on innovation and thought leadership, researching problems including supply chain security, AI security, and command and control. www.netskope.com/company/care...

GitHub status is green, but I'm getting the uniorn. Is it just me?

$NTSK is officially trading! I've been here for 7 years, and at my previous company (acquired by Netskope) for another 3 -- 10 years spent building products, enabling the field, and ultimately building a research team that I am extremely proud of! netskope.com/threat-labs

In honor of Steven Crowe, who passed away after a brutal battle with acute myeloid leukemia, we fund groundbreaking research. Thanks to your past support, two projects are making a huge impact! Please join us in continuing this life-saving work. give.curesearch.org/fundraiser/6...

Securing LLMs and the Model Context Protocol requires new thinking. Our latest blog post highlights prompt injection via tool definitions & cross-server tool shadowing. Traditional security isn't enough; we need zero trust & strong isolation. www.netskope.com/blog/securin... #LLM #AI #Cybersecurity

The ⏰'s ticking! Our #CallForPapers for #BSidesPhilly is still open, but the submission deadline is S9/15! Don't miss your chance to share your research & expertise with the Philly #cybersecurity community. Submit now before it's too late! 🔗 bsidesphilly.org/call-for-pap... #Infosec

🤠 Welcome to the Wild West of AI. LLMs are powerful, but the way they connect to tools can be dangerously insecure. Our latest blog provides a detailed yet accessible overview of MCP security. #LLM #AIsecurity #Cybersecurity #MCP www.netskope.com/blog/securin...

Just over an hour to go until "Whispers Through the Firewall" at the Red Team Village. Hubert WS Lin (林悟生) shares how to use TCP source port numbers as a covert data exfiltration channel. #DEFCON33 #Netskope

Dagmawi Mulugeta and Colin Estep take the BlackHat stage in less than 2 hours! Come learn about Netskope's newest open source threat detection tool. #bhusa #blackhat

We found what looks like a new version of XWorm, indicating that it is under active development focused on detection evasion. We expect to be seeing it used to target more victims in the near future. www.netskope.com/blog/xworm-v... #infosec #malware

I'm hiring a fully remote threat research position for Netskope Threat Labs and will be in Vegas for BlackHat next week. Please DM me if you are interested in the role and want to meet up in person. I have positions open in Brazil and Spain.

I am #hiring for a threat research position in Brazil focused on network/cloud/ai security. Please reach out if interested. www.netskope.com/company/care...

Grammarly often suggests that I move my adverbs to split my infinitives. If I accept the suggestion, Grammarly is upset and suggests that I move the adverb back because splitting infinitives is bad. I like to assume that this is some genAI slop and heuristics battling it out behind the scenes.

"I don't have a password, so I can't connect," the hacker says in one call. The agent replies, "Oh, OK. OK. So let me provide the password to you OK?"

@defcon.bsky.social Red Team Village schedule hot off the presses. Netskope Threat Labs' own Hubert Lin will be running his reverse port knocking workshop Saturday morning at 11! Hope to see you there. www.netskope.com/netskope-thr...

Weird spam email this morning. No links. No images. Just some text. Is this some kind of bizarre marketing campaign?

Fake DeepSeek installers are delivering the Sainbox RAT and Hidden rootkit. Our latest blog details how this campaign, attributed to the Silver Fox group, works. #malware #RAT #rootkit #infosec www.netskope.com/blog/deepsee...

I wrote about how the telecom and Trump administration's response to the worst telecom hack in U.S. history is basically to pretend it never happened:

Does your security stack protect you against the latest generation of fake CAPTCHAs that evade browser-based defenses by tricking the victim into downloading the payload using the RUN dialog in Windows to download LegionLoader, LummaStealer, and more... www.netskope.com/blog/lumma-s....

I received what I was certain was an iCloud phishing email this morning, but after 6 total redirects, it turns out it was actually just really scammy marketing for Total Drive. I assume that the name is short-hand for "I totally shouldn't trust this company with any of my data."

101 packets transmitted, 35 received, +1 duplicates, 65.3465% packet loss Trying to get any work done using an airplane's internet connection is brutal.

29% of Netskope customers have completely blocked Elon Musks's Grok AI and 61% have controls to limit its use. What is your strategy? #genai #infosec www.netskope.com/blog/to-grok...

Excited to share that @netskope.com Threat Labs will not only be represented at Black Hat US this summer, we will also be at the DEF CON Red Team Village!

Learn how a new #phishing campaign is targeting Navy Federal Credit Union customers using Glitch, Telegram, and fake captchas. Understand the tactics and protect yourself. Read the full analysis by @netskope.com Threat Labs: www.netskope.com/blog/glitch-... #Cybersecurity #Infosec

New PureHVNC RAT campaign leveraging fake fashion/beauty job offers. Leandro Fróes at @netskope.com provides a comprehensive technical walkthrough of the infection chain and post-exploitation activity. #Netskope #Phishing #malware #infosec www.netskope.com/blog/purehvn...

This RSAC 2025 Vendor Spotlight focuses on @Netskope's new AI and Data Security capabilities www.linkedin.com/pul... via @LinkedIn

Very excited to share that two of @netskope.com's own were accepted to @blackhatevents.bsky.social US! www.blackhat.com/us-25/briefi...

These E-ZPass #phishing emails are never-ending. This one wasn't as well-targeted (wrong state and one that I rarely drive through). Site required a key (included in phishing link I was sent) and a mobile browser user-agent string. hjyu[.]husndbuhdfytoef[.]cfd

"DOGE Big Balls" definitely wins the prize for most interesting #ransomware name so far this year. www.netskope.com/blog/new-dog...

Mimecast flagged this photo of me during the AI panel at Secure World Philadelphia as "Possible Pornographic Image (90% probability)". I guess my takes were too hot. I'll tone it down next time.

BSidesLV is always a good time.

Kidnapped and trafficked under direct orders from the Trump administration.

Missed opportunity for "Make cryptocurrency fraud great again" as a subject line. www.justice.gov/dag/media/13...

Data being sent into GenAI apps is up 30x year-over-year and 72% of users are still using personal GenAI apps. Learn more and what you can do to mitigate the risks in our latest GenAI Report. www.netskope.com/netskope-thr...

If you used 23andMe and haven't deleted your data yet, here is how to do it: 1. Log into your account 2. Go to Profile > Settings 3. Click "View" in the "23andMe Data" section 4. Download your data 5. Click "Permanently Delete Data" in the "Delete Data" section.

I have shut down my X account and culled my FB presence down to very little (there are a few groups I need it for). I have started moving away from Google (Mail, Photos, Drive) and into the @proton.me ecosystem. What other recent moves have you done off of problematic platforms?

Leandro breaks down a new sample of the Elysium ransomware used by Ghost/Cring/Crypt3r d1c5e7b8e937625891707f8b4b594314

More toll phishing. This one registered on Alibaba Cloud 2 days ago, a good reminder that blocking newly registered domains is a good idea. If not, make sure uwetjtmy[.]xin is on your blocklist. Already reported to Alibaba for take down. #phishing #infosec

Financial services report released by Netskope Threat Labs. Explore the latest data on genAI, personal app risks, and social engineering threats in the financial services sector. #Cybersecurity #Finance #infosec #Netskope www.netskope.com/netskope-thr...

@netskope.com Threat Labs pivoted from our #LummaStealer investigation and found thousands of potential victims clicking on malicious links in keywords. Jan Michael breaks down the keywords and payloads involved in his latest post #phishing #malware #infosec www.netskope.com/blog/fake-ca...

More toll #phishing coming in, this one for E-ZPass. Text message contains a Bitly link that forwards to a URL on nwfpp[.]shop.

More toll #phishing #scams spreading via SMS. This one using thetollroads-paytollasj[.]world. Reported the domain to the Alibaba and Cloudflare.

Analysis of a new Golang backdoor that abuses Telegram for C2. #malware #backdoor f84ca2a61f648542f970e7120de116d2 www.netskope.com/blog/telegra...

@netskope.com Threat Labs latest: Analysis of a #phishing campaign using SEO poisoning, Webflow, and fake CAPTCHAs to steal credit card numbers. www.netskope.com/blog/new-phi...

Today, we released our Japan Threat Report. Japanese organizations have been more effective than the rest of the world at reducing the risks surrounding Generative AI and personal app use. Read the full report to learn how. www.netskope.com/netskope-thr...

More #phishing pages uncovered by Leandro Froes at @netskope.com using Telegram to post the stolen credentials.

I'm very excited to share that @netskope.com Threat Labs' Hubert Lin was accepted to present at RSAC 2025! I look forward to seeing many of you there! #RSAC2025

@netskope.com Threat Labs just published our Canada Threat Report. One area that Canada stood out was in aggressive GenAI app adoption and the data risks that come with it. www.netskope.com/netskope-thr...

Help me finish this sentence. Freezing these cybersecurity grants (of which I listed just a few) is good for the country because ____________________.

Awesome to see Leandro's Lumma Stealer research highlighted in @forbes.com today www.forbes.com/sites/daveyw...