Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Corin Imai
Agentic Intel Community Launches as the First Peer Network Shaping the Future of AI-Powered Threat Intelligence
New community brings practitioners together to foster threat intel innovation in the age of AI AUSTIN, TX, UNITED STATES, July 30, 2026 / EINPresswire.com/ -- Agentic Intel Community (AIC) today launched as the first peer network built specifically for practitioners applying agentic AI across cybersecurity and threat intelligence, including threat intel, cybercrime investigations, security operations, and application security.
From Newsroom to Threat Room: Audra Streetman’s Journey into Cybersecurity
A Non-Traditional Path into Cybersecurity Audra Streetman’s story stands as proof that the cybersecurity industry is increasingly open to diverse backgrounds. Starting in broadcast journalism, she began noticing a spike in ransomware stories affecting local businesses. One attack in particular the JBS Foods ransomware incident shifted her perspective on cybersecurity as a long-term societal challenge. “That was sort of a wake-up for me… It can shut down production.
Attribution in the Age of AI: Cloud Threats, Real Attacks,and Zero-Knowledge Adversaries
Attribution Is Harder Than Ever—But Still Essential “Attribution is one of cybersecurity’s most contested topics. It’s messy, political, and when done wrong, dangerous.” – Kali Fencl As threat actors increasingly reuse tools, spoof identities, and operate in the cloud, traditional attribution methods are under pressure.
Web3-Related Domain Takeovers
Crypto NewsSquarespaceWeb3 Crypto News relayed widespread social media reports of Web3-related domain takeovers of Squarespace-held domains. Using 0xngmi’s list as a guidepost, we are releasing passive DNS records for the listed sites observed since 2024-07-01 to allow for further analysis (please note times are recorded in epoch time). Inclusion in this list does NOT necessarily indicate compromise.
DomainTools Reflections on the 2024 Data Breach Investigations Report
Another year has passed and that means another Verizon DBIR, but this time DomainTools was a Contributing Organization! Freaking cool for us since our mission is to make the Internet a safer place and highlighting learnings is one way to help in that mission.
PCI Compliance in the Age of Cloud Native Tech
Corin Imai Corin is security and compliance strategist and director of product marketing at Styra. Corin began her career in information technology working on desktop virtualization, networking and cloud computing technologies. Later, she plunged into security, focusing on application development, sensitive data, DNS research and connected devices. The Payment Card Industry Data Security Standard (PCI DSS) entered the scene back in 2004 with the rise of payment fraud.
PCI Compliance in the Age of Cloud Native Tech
February 1, 2022 The Payment Card Industry Data Security Standard (PCI DSS) entered the scene back in 2004 with the rise of payment fraud. Created by leaders in the credit card industry, PCI DSS was developed to provide a baseline of technical and operational requirements designed to protect cardholder payment data and was commonly understood by those in the legacy security world.
Could Automation Kill the Security Analyst?
Five skills to ensure job security in the Age of Automation. We have entered the Age of Automation, accompanied by a surge in discussions about artificial intelligence (AI), machine learning (ML), and deep learning (DL). Speculation about how automation will affect the future of the security workforce is rising, too — including the impact on the new remote workforce. Could automation kill the role of the security analyst?
Newest Log4j Security Vulnerability - CVE-2021-44228 - Log4Shell
Styra Declarative Authorization Service (DAS), both SaaS and self-hosted, as well as Open Policy Agent (OPA), are not affected by the Log4j security vulnerability. The newest Apache Log4j Java-based logging utility vulnerability (CVE-2021-44228) was disclosed to Apache by Alibaba's Cloud Security Team on November, 24 2021 by Chen Zhaojun and published on December, 9 2021.
Spoofing Banks is a Balancing Act
On November 12, 2019, DomainTools PhishEye picked up 291 domains that were spoofing the key term, “natwest”. From this data set, we saw that the Proximity (evaluates the likelihood a domain may be part of an attack campaign by analyzing how closely connected it is to other known-bad domains) scores were pretty high for the first screen’s worth of domains (60+).
The Burden of Spoof: The Ongoing Investigation of Walmartcareers[.]us
15 days ago, our phishing detection solution PhishEye picked up multiple domains spoofing the term “Walmart”. The one that caught my eye was walmartcareers[.]us. When I decided to export the results from the July 25, 2019 PhishEye report, into Iris (our flagship investigative tool - which to be frank is pretty awesome) the investigation BLEW UP. So, in this blog post, I would like to share the current status of the investigation, as well as next steps in my research methodology.
The Burden of Spoof: The Ongoing Investigation of Walmartcareers[.]us
15 days ago, our phishing detection solution PhishEye picked up multiple domains spoofing the term “Walmart”. The one that caught my eye was walmartcareers[.]us. When I decided to export the results from the July 25, 2019 PhishEye report, into Iris (our flagship investigative tool – which to be frank is pretty awesome) the investigation BLEW UP. So, in this blog post, I would like to share the current status of the investigation, as well as next steps in my research methodology.
Inside the Murky World of HMRC Phishing Campaigns
DomainTools identifies malicious campaigns targeting HMRC and other organizations with the intent of capturing PII When people in the UK think of phishing scams, there’s a fair chance that the ones they are thinking about look something like this: This is a phishing email which claims to be from HMRC (Her Majesty’s Revenue and Customs), the non-governmental department responsible for collecting taxes.
More than a Buzzword: Survey Reveals Cyber Threat Intelligence Trends
By Corin Imai, Senior Security Advisor, DomainTools Cyber Threat Intelligence (CTI), the collection and analysis of information about current and potential cyber-attacks and attempts, has evolved significantly in recent years. The accumulation and research of cyber threat data across human insights, open source information, and technical intelligence from cybersecurity tools has reached mainstream adoption, according to a 2019 Ponemon Report: The Value of Threat Intelligence from Anomali.
Kubernetes security through Styra DAS: Pre-built PCI policy packs
August 19, 2021 Not only has cloud native transformed the velocity in which organizations execute and maintain business operations, but it has also redefined storage, network and compute. From the infrastructure that IT operations maintains, to the applications that supply customers with the ability to interact with their data—DevOps teams have to deliver more services than ever, and they have to do it fast, with little to no error. Easy, right?
Bristol Council Is Phishing Its Own Employees To Improve Security
Phishing attacks have been launched by Bristol City Council IT chiefs against the authority’s own staff to beef up cyber security after a “worrying” report revealed the danger of a breach has increased. Bristol City Council employees who fall for the “scams”, staged by their own colleagues, are redirected to a training programme to help them avoid succumbing to a real attack.
Phishing Campaign Pretends To Be An Anti-Fraud Exercise
Following the news that CyberInt has discovered a re-emerging international phishing campaign that delivers Ramnit Worm/Botnet malware targeting financial organisations in Asia which it believes is heading for the UK as well, Corin Imai, senior security advisor at DomainTools offers the following commentary.
Researchers Obtain A Command Server Used By North Korean Hacker Group
Following the news that researchers have been handed a seized server believed to be used by North Korean Hackers to launch dozens of targeted attacks last year, Corin Imai, senior security advisor at DomainTools, provides the following commentary. Corin Imai, Senior Security Advisor at DomainTools: “Being able to pinpoint where the malware campaign originated from is incredibly valuable information for the purpose of protecting critical national infrastructures.
Microsoft Says Hackers Targeted EU Thinktanks And NFPs With Phishing Emails
Following the news that Microsoft announced that hackers targeted European think tanks and non-profit organizations which often have contact with government officials, Corin Imai, Senior Security Advisor at DomainTools commented below. Corin Imai, Senior Security Advisor at DomainTools: “Microsoft’s discovery is an important reminder that while phishing is often associated with consumer-facing scams, the threat to businesses and organisations is equally as serious.
Collection Of 127 Million Stolen Account For Sale On The Dark Web
Hacker Breaches Dozens of Sites, Puts 127 Million New Records Up for Sale https://t.co/s6EXRJEnuf pic.twitter.com/kVNS8N1mUp — Rafael Maita (@RedySeguridad) February 15, 2019 Following the news that a collection of 127 million accounts has been found for sale on the Dark Web, Corin Imai, Sr. Senior Security Advisor at DomainTools commented below.
WhatsApp Deleting 2 Million Accounts A Month To Combat Fake News On Platform
WhatsApp says it is deleting 2m accounts per month as part of an effort to blunt the use of the world’s most popular messaging app to spread fake news and misinformation. The Facebook-owned service published the data as part of a white paper on “stopping abuse” that was launched on Wednesday in India, the biggest market for the company with more than 200m users.
Cyber Threat Intelligence on the Up and Up
The 2019 SANS CTI Survey Reveals the Evolution of Threat Intelligence Best Practices Once an industry buzzword, Cyber Threat Intelligence (CTI) is now a critical resource for enterprise security. With each passing year, security professionals are becoming increasingly sophisticated in how they generate, collect, share, and use this information.
Moggmentum Linked To Kremlin Twitter Output
The Byline times recently released social media research which indidcates that the #Moggmentum campaign aimed at boosting support for a Conservative party led by hard-Brexit supporter Jacob Rees-Mogg is being backed by social media accounts associated with Russia’s pro-Brexit interference campaign.
Information Security Buzz
WhatsApp is putting a worldwide limit of five on the number of times a message may be forwarded in an effort to stomp out misinformation and the spreading of rumours. “Starting today, all users on the latest versions of WhatsApp can now forward to only five chats at once, which will help keep WhatsApp focused on private messaging with close contacts,” the company said in an update to a blog post, confirming a Reuters report.
BEC Scammers Targeting Payroll Diversion
News broketodaythatBEC scammers have responded to the flurry of attention brought on their practices in 2018 by moving towards a different tactic; impersonating an employee and issuing a fraudulent request to change their bank account details with the HR department. Corin Imai, Senior Security Advisor at DomainTools: “As public awareness of BEC scams has grown in the past year, it is only natural for scammers to pivot towards a different entry point.
What Does Brexit Mean For Cybersecurity?
Following last night’s failed Brexit deal vote, and the instability it has caused, Corin Imai, senior security advisor at DomainTools has given her views on where Britain’s exit from the European Union leaves the cybersecurity industry. Corin Imai, Senior Security Advisor at DomainTools: “The UK is likely to face a plethora of cybersecurity challenges once article 50 is triggered.
DNS Resolutions - DomainTools Blog
With 2018 in the rear view mirror for most, we wanted to look at some attainable goals for 2019 within organizations. Actionable Cybersecurity Resolutions for 2019 Dedicate 5 hours a week to Threat Hunting Focus on Orchestration Go back to the basics (Back to the Future) Threat Hunting In 2018 we saw a shift in the industry, not only was Threat Hunting a buzzword, but it was moving toward as a focus in more organizations.
New Android Trojan Targets PayPal Users
News has broken that security researchers at Slovakia’s ESET have identified a new banking Trojan that bypasses PayPal’s two-factor authentication (2FA) to steal funds – waiting until users have fully logged in before enabling its exploit. The multifaceted malware also has a secondary function, downloading HTML-based phishing overlay screens for five apps – Google Play, WhatsApp, Skype, Viber, and Gmail – an initial list that can be dynamically updated.
Russian Central Bank Targeted By Phishing Attack
Banks in Russia today were the target of a massive phishing campaign that aimed to deliver a tool used by the Silence group of hackers. The group is believed to have a background in legitimate infosec activities and access to documentation specific to the financial sector. The fraudulent emails purported to come from the Central Bank of Russia (CBR) and contained a malicious attachment.
Risky Business on Cyber Monday
New Data Reveals Online Shoppers Aren’t So Careful When it Comes to Sweet Deals With Thanksgiving next week, U.S. consumers and retailers are awaiting the first flurries of holiday shopping season, planning out their deals, steals and strategies for Black Friday and Cyber Monday.
Reported Breaches In The First 9 Months Of 2018 Exposed 3.6 Billion Records
There have been 3,676 publicly disclosed data compromise events through September 30. Breach activity continues at a consistent pace for 2018, which although significant in level, will likely not reach the numbers we saw in 2017, according to the 2018 Q3 Data Breach QuickView report by Risk Based Security.
#17 to the NIPP Critical Infrastructure List - Our Democracy
Recently, there have been more publicized attacks to what we consider our critical infrastructure.
Those Who Do, Teach - Changing the Stigma
Let me start off by saying that I have a deep passion for cybersecurity and truly believe that there are folks out there fighting every day to protect the Personally Identifiable Information (PII) and Intellectual Property (IP) of individuals and organizations. With the skills gap increasing and the need for education internally within organizations, our unsung heroes face one more to-do item on a long list of items.
The Glory Days - DomainTools Blog
In 2014, I joined an Application Security vendor, and this would be what our team still refers to as The Glory Days. We had a stellar team, and made friendships that will last a lifetime. One of those individuals that I admire the most, is Wendy Zenone. I’m probably her biggest fan girl. So, when I heard that week two of National Cyber Security Awareness Month (NCSAM) was about educating for a career in cybersecurity, I immediately thought of her.
Information Security Buzz
Security researchers in the US have suggested that there is a marked difference in the level of Russian engagement in hacking the 2018 election when compared to their activity in influencing the 2016 election. While the Russian bots of Twitter are still engaging in the spreading of fake news on partisan issues, the large scale hacking attempts we seen in 2016 are largely absent.
Pumpkin Spice and Everything Nice(ly) Secured
As the Fall season rolls around we all think about pumpkin bread and pumpkin spiced lattes…oh wait that might just be me. Most people in our industry would be reminded by tweets, their Marketing team, or the massive amount of posts on October 1 stating the importance of National Cyber Security Awareness Month (NSCAM). This was constructed by the government to raise awareness around cybersecurity in 2004.
Nearly 3 Million Phishing Incidents Since January In Japan
It’s being reported that a record 2.9 million people in Japan have been directed through phishing emails to fake websites created to steal sensitive information in the first half of this year. The report by Trend Micro Inc. released Monday said such fraudulent attempts are increasingly aimed at stealing accounts used for shopping, communication and other services with major firms such as Apple Inc., Amazon.com Inc., Rakuten Inc. and Line Corp.
WhatsApp Takes The Fightback To Phishing
In a bid to curb the menace of misinformation forwards, Facebook-owned WhatsApp has started testing a ‘suspicious link detection’ feature. The feature was made available in WhatsApp Android beta 2.18.204, to a limited number of users. “We are seeing more and more companies move toward protecting their customers’ data through limiting the sharing of known-bad domains.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Corin
Contact Corin, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack