Overview Phishing is no longer riddled with typos and bad grammar. Thanks to large language models (LLMs), attackers can now generate convincing, context-aware, and linguistically flawless phishing content at scale. What was once a human-limited social engineering tactic is now… Read More ›
Overview AI systems aren’t static. Over time, their performance degrades — not because the model changes, but because the world does. This phenomenon is known as model drift or model decay, and it’s one of the most overlooked risks in… Read More ›
Overview As AI adoption accelerates, so does the unauthorized development of AI models inside organizations. These are known as shadow models — AI systems trained or fine-tuned by internal teams or individuals outside official governance structures. Like shadow IT, these… Read More ›
Overview As organizations adopt AI tools across critical operations, a new threat vector has emerged from within: the prompt engineer. These individuals have deep access to AI systems, know how to influence outputs, and often manage the prompts that control… Read More ›
Overview Modern AI systems don’t emerge from a vacuum — they’re built on layers of dependencies: public datasets, third-party model weights, code libraries, pre-trained embeddings, and cloud APIs. This complex supply chain introduces a critical risk: AI supply chain attacks… Read More ›
Overview Computer vision models are remarkably powerful — they detect tumors, unlock your phone, and power autonomous vehicles. But what if you could fool them with a few strategically placed pixels? Welcome to the world of adversarial examples — a… Read More ›
Overview As financial institutions and digital services increasingly rely on AI for identity verification, a new wave of fraud is emerging: synthetic identity fraud powered by generative AI. This type of fraud blends real and fake information to create believable… Read More ›
Overview As AI systems become integral to enterprise workflows, customer service, and decision-making, they also introduce new threat surfaces. One of the most underestimated threats in the AI space today is the prompt injection attack. These attacks don’t exploit code… Read More ›
UltimateWindowsSecurity.com has created a Windows Security Log Encyclopedia which contains a extensive collection of logs for Windows, SQL, SharePoint, Exchange, and Sysmon.
MITRE Engage is a framework to help plan and discuss how to engage adversaries. These resources will allow defenders and decision makers to perform analysis and develop a plan to engage adversaries on their terms using denial and deception techniques.