Founders’ takes, commentary on cybersecurity events, or industry shifts.
A personal reflection on social engineering, human behavior, and identity in the age of AI, drawing from real-world experience and behavioral analysis to explain why understanding people still matters more than understanding machines.
A personal reflection from years in offensive security on how recovery, community, and honest conversations have become more important than perfect defenses in modern cybersecurity.
Malicious browser extensions silently exfiltrate identity data, sessions, and chats while bypassing traditional security controls. This technical deep dive shows how they work and why recovery plans ignore them.
Let’s get something straight: most “holiday breaches” don’t start during the holidays – we already covered last week.They continue during the holidays. We didn’t exploit a 0day.We didn’t phish anyone on December 29th.We didn’t bruteforce a login. We reused an identity that was already trusted, and that’s the part everyone keeps missing. The myth: “no
North Korean threat actors are stealing cryptocurrency through fake Zoom meetings by exploiting trust, screen sharing, and malware delivery instead of blockchain vulnerabilities. These attacks rely on advanced social engineering, targeting crypto founders, developers, and investors to drain wallets and launder funds for state-sponsored operations.
Keeping up to date with the status of the work, absorbing new requirements and sudden changes, meshing internal and client needs…these are a big part of my daily routine as a project manager in Baited. And to keep up with all the work that needs to be done, some ingredients are a must! Those who,
I took the big leap! From being a Project Manager in a big corp to a PM in a rapidly growing Cybersecurity startup. And as if that wasn’t enough, the team is scattered across the four corners of the planet. This journey is transforming every aspect of how I work and lead, quite the rollercoaster!
I’m the founder of Baited, a cybersecurity startup that simulates hyper-realistic phishing and social engineering attacks. We harness the power of AI and your online footprint to expose the cracks in human security, not to exploit, but to empower. We’re a team of ethical hackers, builders, and dreamers. And yes, we’re fully bootstrapped. No outside
