Log in/ Sign up
en
image
GCSA Insight
0Followers
11Articles
Seeing Is Deceiving: A Public Threat Awareness and Defense Framework Against AI Real-Time Video Call Fraud in 2026
Seeing Is Deceiving: A Public Threat Awareness and Defense Framework Against AI Real-Time Video Call Fraud in 2026
We "know it's dangerous," but we "don't know what the danger looks like."
May 12
Workflows as the Attack Surface-An Analysis of Recruitment-Based Intrusion Techniques
Workflows as the Attack Surface-An Analysis of Recruitment-Based Intrusion Techniques
This report describes attack patterns based on publicly available threat intelligence and does not attribute activity to any specific country, organization, or individual.
Apr 28
The Kelp DAO rsETH Exploit: A Post-Mortem on Cross-Chain Message Forgery
The Kelp DAO rsETH Exploit: A Post-Mortem on Cross-Chain Message Forgery
Kelp DAO fell victim to a sophisticated exploit resulting in a catastrophic loss of $293 million.
Apr 27
CyberStrikeAI Global Action: Detailed Analysis Report
CyberStrikeAI Global Action: Detailed Analysis Report
This operation was led by an automated AI agent requiring no human intervention.
Apr 24
Frontend Credential Leakage Attack: The Vercel Environment Variable Exposure Incident
Frontend Credential Leakage Attack: The Vercel Environment Variable Exposure Incident
The attackers leveraged an AI tool, Context.ai, as an entry point.
Apr 18
Social Engineering and Governance Game – Drift Protocol $285 Million Attack Analysis
Social Engineering and Governance Game – Drift Protocol $285 Million Attack Analysis
By March 2026, its total value locked (TVL) had exceeded $1.2 billion, ranking third among Solana DEXs, surpassing even older protocols like Serum.
Mar 27
The Interface Betrayal: How Bybit's $1.5B Loss Exposes Web3's Semantic Security Gap
The Interface Betrayal: How Bybit's $1.5B Loss Exposes Web3's Semantic Security Gap
The Real Problem Isn't the Hack — It's How We Trust the System
Jan 08
From Rounding Bug to Systemic Exploitation: A Deep Dive into Balancer’s $128M Attack
From Rounding Bug to Systemic Exploitation: A Deep Dive into Balancer’s $128M Attack
The attacker targeted Composable Stable Pools, exploiting a rounding direction error in scaling math combined with the composability of batchSwap
Nov 03
Weaponization of Prompt Injection: From EchoLeak to ForcedLeak
Weaponization of Prompt Injection: From EchoLeak to ForcedLeak
Two landmark cases—EchoLeak and ForcedLeak—demonstrate that zero-click attacks and indirect prompt injection have become core risks facing enterprise AI assistants.
Jul 01
Triad Nexus/FUNNULL Infrastructure Reconstruction After Sanctions
Triad Nexus/FUNNULL Infrastructure Reconstruction After Sanctions
By April 2026, Silent Push disclosed that the network had completed a "de-FUNNULL-ization"
Mar 27