Skip To Main Content
Shaun Nichols on Muck Rack

Shaun Nichols

Verified
Oakland
As seen in: CyberRisk Alliance, SC Media, The New York Times, Wiley Online Library, SearchSecurity, TechTarget, TechTarget Japan, The Register, SiliconANGLE, iTnews, Computing, Rova and
Writer with @scmagazine formerly @SearchSecurity @LBNLcs, @theregister and some departed publications. He/him. After-hours (possibly NSFW): @ShaunIsntFunny
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Shaun

Contact Shaun, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

Russia vs. Telegram: What’s Behind the Durov Terrorism Charge

|
By Shaun Nichols Verified
| Security Point Break
Russia’s FSB has charged Telegram founder Pavel Durov with aiding terrorism and issued an international arrest warrant, placing him on a wanted list. Durov, who lives in Dubai, has not been detained. The FSB’s statement, announced Wednesday, July 29, accuses Telegram’s administration of failing to remove channels, chats and bots hosted on the platform’s servers. It alleges Telegram is being used by Ukrainian intelligence services and extremist organizations to coordinate attacks inside Russia.
Open in Who Shared Issue with article?

ChatGPT Agents Could Allow CSRF Attack Chaos: Here’s How

|
By Shaun Nichols Verified
| Security Point Break
A flaw in the way ChatGPT handled Workspace Agents could have allowed for serious cross-site request forgery attacks. According to researcher Mike Takahashi of Zenity Labs, a flaw dubbed AgentForger could allow for the creation of ChatGPT agents that are able to harvest account credentials and spy on users across multiple accounts with persistence. Zenity demonstrated the attack scenario in a post Thursday showing the forged agent’s post-exploitation reach.
Open in Who Shared Issue with article?

SocGholish Attackers Hijack 1,509 WordPress Sites for Drive-by Attacks

|
By Shaun Nichols Verified
| Security Point Break
Hundreds of poisoned WordPress sites are feeding visitors into a fake-browser-update campaign, and the operation is still running a month after international law enforcement took down the malware’s infrastructure. Kirk, a researcher at -tracking site Derp.ca, tracked 1,509 WordPress sites between April 21 and July 21, 2026, that were rigged to funnel visitors into a SocGholish infection chain. The sites are otherwise legitimate in origin, however hacked, Kirk found.
Open in Who Shared Issue with article?
See all 3,721 licensed articles (3,725 Total)