KnowBe4 Threat Lab reveals how attackers abuse six Google services to bypass email gateways and deploy credential harvesters and remote access tools.

Guillaume Técher — Personal website

Learn how you can easily determine the Screen refresh rate with the help of a little trick in the browser with JavaScript

This writeup details multiple IP leak vulnerabilities I discovered affecting Brave's Tor window and Chrome VPN extensions that allowed a malicious actor to leak the real IP address of any visitor to a remote host. Also covers a connect-src CSP bypass for DNS-based data exfiltration and two new Popunder techniques that work on Chrome, Firefox & Safari.

Are users accessing your site while masking their true identity, device, or behavior? You’re not alone. A growing number of actors now rely on anti-detect browsers to spoof fingerprints, rotate identities, and bypass detection systems. To help you stay ahead, we’ve compiled essential information on the most commonly used anti-detect tools—and how to detect and defend against them effectively.

Learn how the new Headless Chrome's near-perfect fingerprint and the CDP signal have impacted bot detection recently.

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack. - mandatoryprogrammer/thermoptic

A behind-the-scenes look at HelloTDS: the stealthy infrastructure driving FakeCaptcha scams, malware and more across millions of devices

In my blog post about spoofing viewability measurements, I mentioned that: The main drawback of this method is that it can be detected by using reflection, that is, it’s possible to detect that the…

This paper study the blackhat cloaking techniques used by deceptive websites to hide bad content from search engine crawler and security scanners.

Evasion techniques