<link>https://aliblog.me</link> <width>32</width> <height>32</height> </image> <itunes:explicit>no</itunes:explicit><itunes:subtitle>مرحباً بكم في مدونة الأمن السيبراني مقالات وأفكار من واقع الخبرة في التدريب والاستشارات الرقمية</itunes:subtitle><item> <title>الذكاء الاصطناعي التوليدي في مواجهة نفسه</h1> <article> <h1>الذكاء الاصطناعي التوليدي في مواجهة نفسه</h1> <p>abcom7@gmail.com — Fri, 07 Nov 2025 01:17:17 +0000</p> <h2 class="wp-block-heading has-text-align-right"> الذكاء الاصطناعي التوليدي: سلاح ذو حدين في المعركة السيبرانية</h2> <p class="has-text-align-right"><strong> لماذا أصبح الذكاء الاصطناعي التوليدي محور المعركة السيبرانية؟</strong></p> <p class="has-text-align-right">في عالم يتسارع فيه التطور الرقمي، أصبح الذكاء الاصطناعي التوليدي يحتل Generative AI الصدارة في المشهد الأمني، ممثلاً نقطة تحول تاريخية في موازين القوى بين المهاجمين والمدافعين. تشير الدراسات إلى أن 86% من قادة الأمن السيبراني أفادوا بتعرض مؤسساتهم لهجمات مرتبطة بالذكاء الاصطناعي خلال العام الماضي فقط، مما يؤكد أننا أمام ظاهرة ليست عابرة، بل هي إعادة تشكيل للقواعد الأمنية كما نعرفها.</p> <p> </p> <figure class="wp-block-image alignright size-large is-resized"></figure> <p class="has-text-align-right"><strong> ما الذي أحاول معالجته في هذه المقالة؟</strong></p> <p class="has-text-align-right">تهدف هذه المقالة إلى تقديم رؤية شاملة ومتوازنة لدور الذكاء الاصطناعي التوليدي في المشهد الأمني، مع التركيز على:</p> <p class="has-text-align-right">– الكشف عن الآليات المزدوجة للذكاء الاصطناعي التوليدي في تعزيز القدرات الهجومية والدفاعية</p> <p class="has-text-align-right">– تحليل التحديات الجديدة الناشئة عن هذه التقنية</p> <p class="has-text-align-right">– تقديم رؤى استباقية للاستفادة من إمكاناتها مع تخفيف مخاطرها</p> <p class="has-text-align-right">– سد الفجوة بين الإمكانيات التقنية والمتطلبات الاستراتيجية للمؤسسات</p> <p> </p> <p class="has-text-align-right"><strong>الوجه المظلم – تعزيز القدرات الهجومية</strong></p> <p class="has-text-align-right"> </p> <p class="has-text-align-right"><strong> هجمات التصيد المتطورة</strong></p> <p class="has-text-align-right">لم يعد الأمر مجرد رسائل بريد إلكتروني تحتوي على أخطاء إملائية يمكن اكتشافها بسهولة. أصبح الذكاء الاصطناعي التوليدي قادراً على إنشاء رسائل تصيد شديدة التخصيص والتقنية، حيث يمكنه:</p> <p class="has-text-align-right">– تحليل أنماط الكتابة للمستهدفين من خلال منشوراتهم على وسائل التواصل الاجتماعي</p> <p class="has-text-align-right">– محاكاة أسلوب الكتابة للرؤساء والزملاء بدقة مذهلة</p> <p class="has-text-align-right">– توليد محتوى مقنع يبدو وكأنه جاء من مصادر موثوقة</p> <p class="has-text-align-right"></p> </article> <article> <h1>A ghost in your network: Fileless Malware</h1> <p>abcom7@gmail.com — Wed, 05 Nov 2025 01:26:07 +0000</p> <h3 class="wp-block-heading"> <strong>There’s a ghost in your network.</strong></h3> <p>It’s called <strong>Fileless Malware</strong>.</p> <p>It doesn’t have a file. It can’t be found by traditional scans. It uses YOUR tools like PowerShell and WMI to do its dirty work. </p> <p>Why should you, as a leader, care? <br> It evades your security investments.<br> It leads to longer, costlier breaches.<br> It threatens your core operations.</p> <p>I’ve just published a deep dive into this unseen adversary. It’s a must-read for every cybersecurity professional and business manager.</p> <p>Stop the unseen. <strong>Read the full story and defense plan <a href="https://aliblog.me/the-unseen-adversary-why-fileless-malware-is-the-top-business-risk-you-cant-ignore/">here</a>:</strong></p> <p></p> <p></p> </article> <article> <h1>Password Strength Checker — Is Your Password Strong Enough?</h1> <p>abcom7@gmail.com — Sun, 24 Aug 2025 06:18:38 +0000</p> <p><br>Check your password strength privately in your browser. Clear checklist for lowercase/uppercase/numbers/symbols. Optional breach check.</p> <hr class="wp-block-separator has-alpha-channel-opacity"/> <h2 class="wp-block-heading"></h2> <p>Weak passwords are the #1 way hackers get in. Most online “strength checkers” either nag you with pointless rules or send your password to a server. Not here.</p> <p>This password strength checker runs <strong>100% locally in your browser</strong>. Nothing is stored, nothing is sent. You get a clear checklist for the basics — lowercase, uppercase, numbers, symbols — plus the option to see if your password has ever been leaked in a public data breach.</p> <p><strong>Try it now:</strong></p> <pre class="wp-block-code"><code></code></pre>  <div class="wrap" id="ali-pw-wrap"> <h2>Password strength checker</h2> <div class="row"> <input id="pw" type="password" autocomplete="new-password" placeholder="Type your password…" /> <button type="button" id="toggleBtn">Show</button> </div>  <div class="meter" aria-hidden="true"><div id="bar" class="bar"></div></div>  <div id="summary" class="hints" aria-live="polite"></div>  <div class="checks" id="checks"> <div class="check" id="chk-lower"><span class="mark"></span><span>Lowercase (a–z)</span></div> <div class="check" id="chk-upper"><span class="mark"></span><span>Uppercase (A–Z)</span></div> <div class="check" id="chk-digit"><span class="mark"></span><span>Numbers (0–9)</span></div> <div class="check" id="chk-symbol"><span class="mark"></span><span>Symbols (!@#…)</span></div> </div> </div> <style> #ali-pw-wrap { font-family: system-ui, -apple-system, Segoe UI, Roboto, Arial; margin: 1rem 0; max-width: 560px } .row { display: flex; gap: .5rem; align-items: center } input { flex: 1; padding: .6rem; border: 1px solid #bbb; border-radius: .5rem } #toggleBtn { padding: .6rem .8rem; border: 1px solid #bbb; background: #fff; border-radius: .5rem; cursor: pointer } .meter { height: 10px; background: #eee; border-radius: 999px; overflow: hidden; margin: .75rem 0 } .bar { height: 100%; width: 0% } .bar.weak{background:#d9534f}.bar.ok{background:#f0ad4e}.bar.good{background:#5bc0de}.bar.strong{background:#5cb85c} .hints { font-size: .95rem; color: #333; margin-top: .25rem } .checks { margin-top: .5rem; display: grid; gap: .25rem } .check { display: flex; align-items: center; gap: .5rem; font-size: .95rem } /* icon box */ .check .mark { width: 1.25rem; height: 1.25rem; display: inline-flex; align-items: center; justify-content: center; line-height: 1; } /* keep as fallback if SVG fails */ .check.ok .mark { color: #66BB6A !important; } .check.dim .mark { color: #bbb !important; } </style> <script> document.addEventListener('DOMContentLoaded', () => { const $pw = document.getElementById('pw'); const $toggle = document.getElementById('toggleBtn'); const $bar = document.getElementById('bar'); const $sum = document.getElementById('summary'); const $lower = document.getElementById('chk-lower'); const $upper = document.getElementById('chk-upper'); const $digit = document.getElementById('chk-digit'); const $symbol = document.getElementById('chk-symbol'); // Inline SVGs use currentColor, and we set the color in JS so themes can't override const CHECK_SVG = '<svg viewBox="0 0 24 24" width="16" height="16" aria-hidden="true"><path fill="currentColor" d="M9 16.2l-3.5-3.5-1.4 1.4L9 19 20.3 7.7l-1.4-1.4z"/></svg>'; const CROSS_SVG = '<svg viewBox="0 0 24 24" width="16" height="16" aria-hidden="true"><path fill="currentColor" d="M18.3 5.7l-1.4-1.4L12 9.2 7.1 4.3 5.7 5.7 10.6 10.6 5.7 15.5l1.4 1.4L12 12 16.9 16.9l1.4-1.4-4.9-4.9z"/></svg>'; function analyze(pw){ const hasLower = /[a-z]/.test(pw); const hasUpper = /[A-Z]/.test(pw); const hasDigit = /\d/.test(pw); const hasSymbol = /[^A-Za-z0-9]/.test(pw); const len = pw.length; // simple score for the bar (optional visual) let s = 0; if (len >= 12) s += 2; else if (len >= 8) s += 1; const variety = [hasLower,hasUpper,hasDigit,hasSymbol].filter(Boolean).length; if (variety >= 3) s += 1; if (variety === 4 && len >= 14) s += 1; const score = Math.max(0, Math.min(4, s)); return { len, hasLower, hasUpper, hasDigit, hasSymbol, score }; } function setChecklist($el, ok) { $el.classList.toggle('ok', ok); $el.classList.toggle('dim', !ok); const mark = $el.querySelector('.mark'); // inject SVG and hard-set color inline to beat theme CSS mark.innerHTML = ok ? CHECK_SVG : CROSS_SVG; mark.style.color = ok ? '#66BB6A' : '#bbb'; // lighter green / soft grey } function render(r){ // length only $sum.textContent = `Length: ${r.len}`; // checklist setChecklist($lower, r.hasLower); setChecklist($upper, r.hasUpper); setChecklist($digit, r.hasDigit); setChecklist($symbol, r.hasSymbol); // bar const cls = ['weak','weak','ok','good','strong'][r.score]; const widths = ['20%','35%','55%','75%','100%'][r.score]; $bar.className = 'bar ' + cls; $bar.style.width = widths; } $toggle.addEventListener('click', () => { const shown = $pw.type === 'text'; $pw.type = shown ? 'password' : 'text'; $toggle.textContent = shown ? 'Show' : 'Hide'; }); $pw.addEventListener('input', () => render(analyze($pw.value))); render(analyze('')); }); </script>  <hr class="wp-block-separator has-alpha-channel-opacity"/> <h3 class="wp-block-heading">Why use this tool?</h3> <ul class="wp-block-list"> <li><strong>Privacy-first:</strong> no password leaves your device.</li> <li>Green checks for what’s strong, grey if missing.</li> <li><strong>Modern standards:</strong> based on NIST guidance — focus on length & uniqueness, not silly complexity rules.</li> </ul> <hr class="wp-block-separator has-alpha-channel-opacity"/> <h3 class="wp-block-heading">How to create stronger passwords</h3> <ul class="wp-block-list"> <li>Aim for <strong>12–16+ characters</strong>.</li> <li>Use <strong>3–4 character types</strong> (lower, upper, numbers, symbols).</li> <li>Prefer <strong>passphrases</strong> (random words) over short “complex” words.</li> <li>Never reuse a password across accounts.</li> <li>Pair with <strong>2FA</strong> for critical accounts.</li> </ul> <hr class="wp-block-separator has-alpha-channel-opacity"/> <h3 class="wp-block-heading">FAQ</h3> <p><strong>Do you store my password?</strong><br>No. Everything runs in your browser. If you enable the breach check, only a short hash prefix is shared, not the actual password.</p> <p><strong>What do the green checks mean?</strong><br>Each line (lowercase, uppercase, numbers, symbols) lights up when your password includes that type.</p> <p><strong>Can I generate passwords here?</strong><br>This tool checks passwords. A generator is coming soon.</p> <hr class="wp-block-separator has-alpha-channel-opacity"/> <p>If this helped you, share it with colleagues or friends. Want a <strong>corporate-branded version</strong> of this tool for employee awareness? <a href="https://aliblog.me/contact/">Contact me</a>.</p> <p></p> </article> <article> <h1>🚨 New Tool: Link Scanner (VirusTotal-Powered Chrome Extension)</h1> <p>abcom7@gmail.com — Tue, 19 Aug 2025 10:40:48 +0000</p> <p>Phishing is still the #1 way attackers break into companies and personal accounts.</p> <p>I got tired of repeating “don’t click suspicious links” — so I built something simple: a Chrome extension that actually helps you check.</p> <h2 class="wp-block-heading"> How It Works</h2> <ul class="wp-block-list"> <li><strong>Right-click any link</strong> → choose <em>“Scan with Link Scanner”</em></li> <li><strong>Or open the popup</strong> and paste a URL directly</li> <li>Instantly see a verdict: <strong>Safe / Suspicious / Malicious </strong></li> <li></li> </ul> <figure class="wp-block-image aligncenter size-full is-resized"></figure> <h2 class="wp-block-heading"> One-Time Setup (VirusTotal API Key)</h2> <p>The extension is powered by VirusTotal’s free API. To make it work, you’ll need a free API key (takes 1 minute).</p> <p><strong>Steps:</strong></p> <ul class="wp-block-list"> <li>Create a free VirusTotal account: <a href="http://virustotal.com/gui/join-us">virustotal.com/gui/join-us</a></li> <li>Go to your <a>VirusTotal profile</a> , API Key → click on Copy key to clipboard<br></li> </ul> <figure class="wp-block-image aligncenter size-large"></figure> <p></p> <ul class="wp-block-list"> <li>In Chrome, open the extension → <strong>Options</strong></li> <li>Paste your API key and click <strong>Save</strong></li> </ul> <p></p> <figure class="wp-block-image aligncenter size-full"></figure> <p>That’s it — now you can scan links on demand.</p> <h2 class="wp-block-heading"> Why Use It</h2> <ul class="wp-block-list"> <li>Phishing is the most common cyber attack vector</li> <li>Browser “safe browsing” features aren’t always enough</li> <li>Link Scanner makes it dead simple to double-check before you click</li> <li><strong>Peace of mind in 2 clicks</strong></li> </ul> <h2 class="wp-block-heading"> Privacy </h2> <ul class="wp-block-list"> <li>We <strong>don’t collect or share data</strong> — ever</li> <li>Only the URL you choose to scan goes to VirusTotal</li> <li>Your API key is stored <strong>locally</strong> on your device and never leaves it</li> </ul> <figure class="wp-block-image aligncenter size-large is-resized"></figure> <h2 class="wp-block-heading"> Install Now</h2> <p> <a href="https://aliblog.me/link-scanner-virustotal-for-chrome/">Link Scanner (VT)</a></p> <h2 class="wp-block-heading"> Feedback Wanted</h2> <p>Try it today, and if you spot something odd or have a feature request, drop me a comment or message. Feedback is gold.</p> <p>Reply here:</p> <ul class="wp-block-social-links is-layout-flex wp-block-social-links-is-layout-flex"><li class="wp-social-link wp-social-link-linkedin wp-block-social-link"><a href="https://www.linkedin.com/posts/ali-binmahfodh-78171524b_new-tool-link-scanner-virustotal-powered-activity-7363821775777914882-PPiU?utm_source=share&utm_medium=member_desktop&rcm=ACoAAD3dOxEBLsd2kR6rnX_wc48byeZgQDw1-eU" class="wp-block-social-link-anchor"><svg width="24" height="24" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false"><path d="M19.7,3H4.3C3.582,3,3,3.582,3,4.3v15.4C3,20.418,3.582,21,4.3,21h15.4c0.718,0,1.3-0.582,1.3-1.3V4.3 C21,3.582,20.418,3,19.7,3z M8.339,18.338H5.667v-8.59h2.672V18.338z M7.004,8.574c-0.857,0-1.549-0.694-1.549-1.548 c0-0.855,0.691-1.548,1.549-1.548c0.854,0,1.547,0.694,1.547,1.548C8.551,7.881,7.858,8.574,7.004,8.574z M18.339,18.338h-2.669 v-4.177c0-0.996-0.017-2.278-1.387-2.278c-1.389,0-1.601,1.086-1.601,2.206v4.249h-2.667v-8.59h2.559v1.174h0.037 c0.356-0.675,1.227-1.387,2.526-1.387c2.703,0,3.203,1.779,3.203,4.092V18.338z"></path></svg><span class="wp-block-social-link-label screen-reader-text">LinkedIn</span></a></li> <li class="wp-social-link wp-social-link-x wp-block-social-link"><a href="https://x.com/AliBinmahfodh/status/1958031884987850875" class="wp-block-social-link-anchor"><svg width="24" height="24" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false"><path d="M13.982 10.622 20.54 3h-1.554l-5.693 6.618L8.745 3H3.5l6.876 10.007L3.5 21h1.554l6.012-6.989L15.868 21h5.245l-7.131-10.378Zm-2.128 2.474-.697-.997-5.543-7.93H8l4.474 6.4.697.996 5.815 8.318h-2.387l-4.745-6.787Z" /></svg><span class="wp-block-social-link-label screen-reader-text">X</span></a></li></ul> <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper"> <blockquote class="twitter-tweet" data-width="500" data-dnt="true"><p lang="en" dir="ltr">New: Link Scanner — VirusTotal for Chrome. Right-click any link or paste a URL → instant verdict: Safe / Suspicious / Malicious. No data collection. Try it: <a href="https://t.co/fk3jr5fi9a">https://t.co/fk3jr5fi9a</a><br> <a href="https://twitter.com/hashtag/cybersecurity?src=hash&ref_src=twsrc%5Etfw">#cybersecurity</a> <a href="https://twitter.com/hashtag/phishing?src=hash&ref_src=twsrc%5Etfw">#phishing</a> <a href="https://twitter.com/hashtag/ChromeExtension?src=hash&ref_src=twsrc%5Etfw">#ChromeExtension</a></p>— Ali Binmahfodh (@AliBinmahfodh) <a href="https://twitter.com/AliBinmahfodh/status/1958031884987850875?ref_src=twsrc%5Etfw">August 20, 2025</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> </div></figure> </article> <article> <h1>OSINT: المفتاح السري لاستخبارات العالم المفتوح</h1> <p>abcom7@gmail.com — Thu, 03 Jul 2025 08:47:01 +0000</p> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>مقال