Security

Malik Haidar has spent years inside multinational environments tracing how telecom fraud and web‑scale scams turn clicks into cash. In this conversation, he breaks down a fake multi‑step CAPTCHA that silently triggers international SMS, the way cookies and back‑button hijacking filter and trap users

The Stakes: Passwords Finally Met Their Match Breaches kept rising, help desks drowned in reset tickets, and attackers outpaced users with slick phishing kits that hijacked one-time codes and pushed fatigue, so a different login primitive, not a harsher password rule, became the only credible path

Phones that ring under the guise of IT support have quietly become breach vectors, as retail counters and hotel front desks field urgent calls that end with executive logins compromised and cloud data queued for export. A new assessment from Unit 42 and RH-ISAC identified BlackFile, tracked as

From Benign Commas to Root Shells: How a Tiny Parsing Quirk Became a 15-Year Trap Seasoned defenders call it the most humbling kind of bug: one stray comma in a principal field that lets a valid SSH certificate unlock root while logs nod along as if nothing unusual happened. Across security teams,

Boardrooms cheered record AI rollouts while basic safeguards frayed, and attackers quietly slipped through reopened cracks. The tension between speed and security was no longer theoretical; it was surfacing in real incidents where sanctioned AI projects stumbled on fundamentals long considered

Malik Haidar has spent years inside multinationals translating threat intelligence into boardroom-ready decisions, bridging analytics with business impact. In this conversation with Jason Costain, he unpacks what an early, Lua‑powered sabotage platform reveals about state priorities, how k