security
Writing collected under this topic.
SecurityFile Attack Deep Dives: ICS Calendar Invites
How attackers weaponize .ics calendar invites to phish credentials, bypass MFA, and steal OAuth consent — and the fields that catch them.
SecurityFile Attack Deep Dives: Office Documents as an Attack Surface
Every way an Office document attacks: macros, remote templates, embedded objects, hyperlinks, QR handoffs and invoice fraud, plus the signals that catch each.
SecurityFile Attack Deep Dives: HTML as an Attack Surface
Every way an HTML page attacks: smuggling, external fetches, QR handoffs, phone callbacks, credential phishing, job scams, and AI prompt injection.
SecurityHow File-Based Attacks Land: A Detection Engineer's Field Guide
A practical taxonomy of how malware and phishing arrive as files, why classic controls miss them, and how detection should think.