Person
Chief research officer and co-founder of DecryptAds, an ad-tech transparency firm, and a threat researcher at network security company Infoblox.
OpenAI lets advertisers target ChatGPT users by uploaded email, phone number or Android advertising ID, according to 404 Media's tests. Prompts that users may assume are private are a targeting input too.
Perspective Coverage
3 publishersReality
OpenAI is rolling out ChatGPT ads to eligible Free and Go users in selected regions, matched in part to the current conversation. A work prompt typed into a personal free account falls inside that matching, though OpenAI says advertisers do not receive chats.
Reality
Brian Krebs reports a hacker selling searchable access to 153 million US and Canadian licences, with suspicion pointing at the vendor IDScan.net. Any age gate built on a document scan owns that exposure.
Perspective Coverage
7 publishersReality
Every company that outsourced KYC document capture now owns an exposure it never inventoried, because the images being sold appear to come from the verifier rather than from any of its customers. The FBI opened the file in New Orleans.
Perspective Coverage
7 publishersReality
The Justice Department seized this service's original domain in December 2022 and arrested six people. The FBI has now taken two more of its domains, and the warrant affidavit counts hundreds of thousands of attacks since 2022.
Perspective Coverage
6 publishersReality
IDScan.net is notifying people about names and ID numbers and offering credit monitoring, while the records Brian Krebs examined each carried infrared and ultraviolet captures, the layer that document authentication actually tests.
Perspective Coverage
4 publishersReality
KrebsOnSecurity traced the records toward New Orleans ID-verification vendor IDScan after nine people matched timestamps on their stolen scans to the day they handed a license over. The FBI's New Orleans field office says it is looking into the incident.
Reality
CyberLeek's drip-feed of stolen footage carries no notification clock. Take-Two's answer has been DMCA subpoenas, and researchers read the case as an insider threat investigation.
Reality
DecryptAds cross-references ads.txt, app-ads.txt and sellers.json into one searchable view. In ESPN's files it counts 143 ad partners and 19 registered data broker domains.
Reality