Ideas, proof, and field notes.

CRXfiltrate: A Chrome Extension JavaScript Execution Backdoor Past Every Defense Layer

Quish Splash - When the QR Code Is the Weapon: A Multi-Wave Phishing Campaign That Slipped Past Every Filter.

Claude Fraud - When Trusted Tools Become the Attack Surface: Weaponizing AI Developer Tooling Against the Security Community

Stryker Wiper Attack: What Security Teams Need to Know Now