Author: Shay Vaishenker, Security Researcher
Shay Vaishenker is a Security Researcher at Transmit Security, researching and building detection logic for various cases. Shay has six years of experience, especially in web attacks, red team, bot detection and customer operations, having previously worked at PerimeterX (now HUMAN) and Imperva. Shay holds a Bachelor’s degree in Information Systems.
Detecting the Undetectable: How to Prevent Cybersecurity Risks from Anti-Detect Browsers
In our last blog on private browsing, we broke down some of the use cases, risks, and indicators for private browsing mode features on modern web browsers, such as Chrome’s Incognito mode and Firefox’s Private Windows. Similar to these features, anti-detect browsers allow users to browse the internet without being tracked or profiled. However, anti-detect […]
How to Protect Your Customers from SIM Card Attacks: The New Identity Theft Threat
From OTPs and two-factor authentication to registering users’ trusted devices, knowing your users’ mobile phone numbers is an indispensable component of keeping user accounts secure. But what happens when someone fraudulently gains access to a user’s phone number? This is not a hypothetical scenario but a growing threat that many smartphone users are unaware of. […]
Good Bots: What They Are and Why We Need Them
If you think all bots are a menace, think again. Popular search engines, text messaging apps, and chatbots — including Siri and Alexa — would not exist without good bots: software programs that perform specific tasks to benefit a user or organization. Good bots can be used for various purposes, including customer service, web crawling, […]
Private Browsing Mode Detection and Its Potential Fraudulent Use Cases
Privacy has become a paramount concern for Internet users in today’s digital world. As a result, web browsers have introduced features like private browsing mode to offer individuals a sense of security and anonymity while browsing the Internet. However, as with any technology, there are potential misuse cases associated with private browsing mode that enable […]
OpenBullet 2.0 Automates Evasive Attacks, But They Can Be Detected — Here’s How
OpenBullet, a legitimate web testing tool for developers, has grown wildly popular among hackers. Weaponizing open-source software is not new, but this one has cybersecurity teams on edge due to its ability to automate highly deceptive threats. The software not only runs credential stuffing attacks on autopilot but also provides a rich feature set that […]