Surface Security

@S1n1st3rSecuri1 Some really neat stuff being done with newer phishing kits.

Recently did an analysis of a newer phishing kit that combines Browser-in-the-Middle and Blob URL Phishing, along with other techniques, to make a really evasive phishing page. Check it out: surface-security.com/blog/nyasher-b…

Join us for a night of fun at DEF CON! luma.com/zzaij9pp

@S1n1st3rSecuri1 @reybango @mrd0x Yep, too easy 👍

@reybango @mrd0x @Surfacesec you stop this right?

@mrd0x BitM just keep going on and on! 😃 bleepingcomputer.com/news/security/…

Surface has launched their data sovereign browser security platform! Super excited for this, good to have a tool doing what red teamers have been suggesting for years.

We out here 🤘🎉 prweb.com/releases/surfa…

@surfacesec is opening up the platform for free trials and discounted early pilot pricing. If you want browser level visibility, but don’t want your data landing on third party servers or a rip and replace motion on all your browser, then now’s your time to try it out! Linked->

Thank you to our exhibiting sponsors for SLEUTHCON 2026! We wouldn't be a success without the support of our sponsors! We hope to see you tomorrow in Arlington, VA. There are still a few tickets left for our stragglers, and you can always join us virtually, too!

Checkout our newest blog post where we cover the similarities between the Kali365 device code phishing kit and Sneaky2fa, an AiTM style phishing kit. surface-security.com/blog/kali365-s…

This was an interesting case we found when testing @Surfacesec’s phishing detection engine. It involves HTML smuggling but not in the way we typically think of it from a red team perspective. surface-security.com/blog/blob-url-…

Surface stops these attacks in the browser and provides timelines and details for analysts. Get full visibility on current and emerging threats in the browser in the Surface platform, all from a simple browser extension.

@zellic_io @0xocdsec @eternalsakura13 Yet another reason to use Surface…

Microsoft Edge's Enhanced Security Mode was designed to be the ultimate defense when browsing unfamiliar websites. Zellic researchers @eternalsakura13 and R1nd0 found 23 RCEs in it. Their target? DrumBrake, Microsoft's WebAssembly interpreter. The irony? This security feature became a massive attack surface itself. These findings span type confusion, out-of-bounds memory access, use-after-free, and critical control flow errors.

@Surfacesec just released their platform and as a red teamer, it’s good. - Adaptive learning of auth endpoints - Surface Vision: Patent-pending architecture of visual and code signals to catch phishing. - Sovereign architecture: Your data stays yours I’ve linked their post below

Checkout our recent blog post on ClickFix and related attacks: surface-security.com/blog/clickfix-…

@shenetworks Would it be competing doing some work for us?👀

Thank you to everyone who reached out. Unfortunately my job hunt has to be paused due to my noncompete. I will definitely let everyone know when I’m able to resume looking. 💔