Alexander Culafi is a Cybersecurity Reporter at Dark Reading. He specializes in topics such as cybercrime, data breaches, and cloud security, while also exploring themes in technology and artificial intelligence. His work has been featured in TechTarget, IoT World Today, and Dark Reading.
Preston is the artificial intelligence that powers the Intelligent Relations PR platform. Meet Preston
Not enough data
Alexander Culafi's coverage mainly focuses on cybersecurity, particularly topics such as ransomware, data breaches, and zero-day flaws. He appears to value expert commentary and relies significantly on government announcements and data citations.
If you are considering reaching out to Alexander with a pitch or expertise in the field of cybersecurity, it would be beneficial to offer insights into emerging threats, analysis of recent attacks or breaches, potential vulnerabilities in software & SaaS systems, or trends related to privacy & cybersecurity. Additionally, providing access to relevant data that supports your pitch could enhance its appeal.
Given his focus on these themes and topics within the realm of cybersecurity and technology-related issues affecting organizations globally without any specific geographic focus mentioned for his reporting reach.
This information evolves through artificial intelligence and human feedback. Improve this profile .
ClickFix-style threat campaigns are using a new trick to evade detection and deliver Amatera, an increasingly prevalent infostealer.
North Korean operatives posing as IT workers are improving their tactics, but researchers say there are still ways to spot them before they do damage.
The surge of AI-powered vulnerability reports is driving down bug bounty prices, and that could spell trouble for independent researchers.
By: Alexander Culafi
The ClickFix-style campaign features a sophisticated, multistage attack chain that includes reverse tunnels into victim organizations' networks.
In one attack, threat actors stole an API key that ultimately led to the consumption of $600,000 in public AI model credits for the security nonprofit.
The exploitation activity follows attacks earlier this summer on two other zero-day vulnerabilities in the vendor's edge devices.
By: Alexander Culafi
Vulnerabilities are running out of places to hide, thanks to frontier AI models, and it could create problems for those that sell software.
Threat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ScreenConnect remote access.
By: Alexander Culafi
US agencies claim Chinese companies covertly extracted billions of tokens from OpenAI, Anthropic, Google Gemini, and SpaceX's Grok to reduce development costs.
The GoldFactory threat group exploits the Android Work Profile feature to deliver the Gigabud Trojan, while Mantax Otax spreads separately.
