Author

Oran F

@oran.f

articles: 25
total claps: 3
top claps: 3
avg read: 7.1 min
active: 2026-03-03 → 2026-07-12

Wiki topics

🔒 · Cybersecurity · 17 MAC · Macroeconomics · 5 🌐 · Web Development · 4 FIN · Fintech & Banking · 4 AI · AI · General · 4 🚆 · Urban & Transport · 3 AGT · AI Agents · 3 🎬 · Film & Television · 2

Top tags

#web-security ·23 #cybersecurity ·11 #ciso ·9 #pci-dss ·5 #website ·5 #data-privacy ·4 #payments ·4 #ai ·4 #supply-chain-security ·3 #agentic-ai ·3

OR Oran F · Reflectiz

The AI Visibility Gap Is Real – And It Lives on Your Website

Not a single CISO has full visibility into how AI is operating across their organization. Not one.

Apr 21, 2026 · 4 min read · 3 claps #ai #website #ciso

The AI Visibility Gap Is Real – And It Lives on Your Website

TCH HUM

OR Oran F · Reflectiz

10 Most Influential CISOs to Follow in 2026

A threat actor had gained unauthorized access to MongoDB corporate systems. Customer account metadata had been exposed. For some customers…

Apr 29, 2026 · 20 min read · 0 claps #ciso #cto #cio

10 Most Influential CISOs to Follow in 2026

ECO

OR Oran F · Reflectiz

The Stripe-Hosted Skimmer Explained

Imagine this scenario: A customer, excitedly finalizing a purchase on your e-commerce site, clicks “Pay Now.” Unbeknownst to them, or to…

Jul 06, 2026 · 12 min read · 0 claps #stripe #payments #payment-security

TCH MDA ECO

OR Oran F · Reflectiz

How Streaming Giant DAZN Passed Its First PCI DSS 4.0.1 Audit

A single line of malicious JavaScript, deftly injected into a third-party script on your checkout page, can siphon off thousands of credit…

Jul 09, 2026 · 11 min read · 0 claps #pci-dss #compliance #data-privacy

How Streaming Giant DAZN Passed Its First PCI DSS 4.0.1 Audit

OR Oran F · Reflectiz

Shopify PCI Compliance: What’s Covered and What’s Not

A major retailer, seemingly secure behind the robust infrastructure of their e-commerce platform, discovers a subtle, malicious script…

Apr 13, 2026 · 11 min read · 0 claps #shopify #pci-dss #web-security

Shopify PCI Compliance: What’s Covered and What’s Not

ECO TCH

OR Oran F · Reflectiz

Jscrambler npm Package Compromised: Why It Matters

Imagine your most trusted security guard. This guard is not just a standard patrolman; they are an elite, specialized operative, hired to…

Jul 12, 2026 · 11 min read · 0 claps #npm-package #supply-chain-security #cyberattack

Jscrambler npm Package Compromised: Why It Matters

TCH AI

OR Oran F · Reflectiz

How to Leverage TPRM Technology According to Gartner

Gartner’s recent conference event, How to Leverage TPRM Technology to Identify, Escalate, Mitigate, and Monitor Third-Party Risk, offered…

Apr 05, 2026 · 11 min read · 0 claps #tprm #gartner #web-security

How to Leverage TPRM Technology According to Gartner

ECO TCH

OR Oran F · Reflectiz

California’s revised CCPA rules took effect on January 1, 2026, and they expose a gap that most…

After you’ve updated your privacy policy, deployed a consent management platform, and added the ‘Do Not Sell or Share My Personal…

May 17, 2026 · 8 min read · 0 claps #privacy #web-security #data-privacy

California’s revised CCPA rules took effect on January 1, 2026, and they expose a gap that most…

AI ART TCH SCI

OR Oran F · Reflectiz

From Manual To Agentic: The Pentesting Evolution Explained

For most of its history, penetration testing has been a craft. At the outset, a skilled human studied an application, formed a hypothesis…

Jun 22, 2026 · 8 min read · 0 claps #pentesting #agentic-ai #web-security

From Manual To Agentic: The Pentesting Evolution Explained

ECO TCH

OR Oran F · Reflectiz

Top 7 Consent Management Platforms in 2026

A practical guide to the leading tools that help organizations manage user consent, and why verifying what happens next matters just as…

Jun 25, 2026 · 8 min read · 0 claps #pcm #data-privacy #website

Top 7 Consent Management Platforms in 2026

TCH

OR Oran F · Reflectiz

Reflectiz Policies: Your Security Standards, Automatically Enforced

Most security teams know which third-party vendors they trust. They know which pages require strict controls. They know their regulatory…

May 05, 2026 · 7 min read · 0 claps #cybersecurity #web-security #ciso

Reflectiz Policies: Your Security Standards, Automatically Enforced

AI TCH

OR Oran F · Reflectiz

Agentic AI and Web Security: The Visibility Problem

The security industry has spent two decades building systems that monitor. What it hasn’t built, not yet, are systems that can reliably…

Jul 07, 2026 · 7 min read · 0 claps #agentic-ai #web-security #pci-dss

Agentic AI and Web Security: The Visibility Problem

AI TCH SPT

OR Oran F · Reflectiz

CISO expert Guide to AI Typosquatting

AI-generated lookalike domains are now embedded inside the third-party scripts running on your web properties. Here’s why your current…

Jun 10, 2026 · 6 min read · 0 claps #agentic-ai #ai #cybersecurity

TCH ECO AI

OR Oran F · Reflectiz

PCI DSS 6.4.3 & 11.6.1 Solutions Compared (2026)

In 2023, the average cost of a data breach surged to an all-time high of $4.45 million, with a staggering 82% of these breaches involving…

Jul 08, 2026 · 6 min read · 0 claps #pci-dss #payments #payment-security

PCI DSS 6.4.3 & 11.6.1 Solutions Compared (2026)

ECO TCH SOC

OR Oran F · Reflectiz

AppsFlyer SDK Exploited in New Supply Chain Crypto Attack

Between March 9 and March 11, 2026, attackers had a 48-hour window inside one of the most widely embedded JavaScript libraries on the…

Apr 13, 2026 · 5 min read · 0 claps #supply-chain-security #web-security #crypto

AppsFlyer SDK Exploited in New Supply Chain Crypto Attack

AI TCH

OR Oran F · Reflectiz

TPRM in the AI Era: Gartner Top Tech Trends Revealed

Introduction

May 06, 2026 · 5 min read · 0 claps #tprm #ai #gartner

TPRM in the AI Era: Gartner Top Tech Trends Revealed

ECO SPT

OR Oran F · Reflectiz

The Payment Page That Passed Your Last Audit Isn’t the One Running Now

Beyond PCI DSS compliance: what an expert panel had to say about the accountability gap no framework alone can close, and why passing your…

Jun 17, 2026 · 5 min read · 0 claps #payments #pci-dss #web-security

The Payment Page That Passed Your Last Audit Isn’t the One Running Now

TCH

OR Oran F · Reflectiz

How Magecart’s ATMZOW Skimmer Is Still Hiding Inside Google Tag Manager

There’s an old principle that you should judge people by their actions, not their appearance, and modern web-skimming attacks are a…

Jun 04, 2026 · 5 min read · 0 claps #web-security #google-tag-manager #website

How Magecart’s ATMZOW Skimmer Is Still Hiding Inside Google Tag Manager

AI TCH

OR Oran F · Reflectiz

AI As Malicious C2 Servers Is Almost Here

Recent work by Check Point Research has shown how cybercriminals could use AI to enhance an existing attack method. Check Point has dubbed…

May 11, 2026 · 5 min read · 0 claps #ai #cybersecurity #infosec

AI As Malicious C2 Servers Is Almost Here

MDA ECO

OR Oran F · Reflectiz

Shai-Hulud 2.0: The Worm Returns — Bigger, Meaner, and Ready to Wipe Your Home Directory

Just when you thought the desert was safe, the great worm has awakened again.

Apr 14, 2026 · 5 min read · 0 claps #shai-hulud #npm #supply-chain-security

Shai-Hulud 2.0: The Worm Returns — Bigger, Meaner, and Ready to Wipe Your Home Directory

TCH ECO SOC

OR Oran F · Reflectiz

Web Supply Chain Security in ANZ

Right now, code is executing in your users’ browsers that your WAF has never inspected, your DAST never tested, and your pen testers never…

Apr 16, 2026 · 4 min read · 0 claps #website #supply-chain #web-security

ART ECO

OR Oran F · Reflectiz

The CTEM Divide: Why 84% of Security Programs Are Falling Behind

A new 2026 market intelligence study of 128 enterprise security decision-makers (available here) reveals a stark divide forming between…

Mar 09, 2026 · 3 min read · 0 claps #ctem #ciso #website

The CTEM Divide: Why 84% of Security Programs Are Falling Behind

TCH MDA GEN

OR Oran F · Reflectiz

How Broadway Gaming Achieved PCI DSS 4.0.1 Compliance

with Zero Audit Findings and Zero Developer Overhead

Apr 19, 2026 · 3 min read · 0 claps #gaming-security #website-security #pci-compliance

How Broadway Gaming Achieved PCI DSS 4.0.1 Compliance

TCH

OR Oran F · Reflectiz

Disney $2.75 Million CCPA Fine: Biggest Penalty so Far

When service users tell a provider not to share their data, that provider must honor their preference everywhere they use the service. When…

Mar 03, 2026 · 3 min read · 0 claps #data-privacy #ccpa #web-security

Disney $2.75 Million CCPA Fine: Biggest Penalty so Far

TCH ECO SOC

OR Oran F · Reflectiz

The Trivy Supply Chain Attack and the Visibility Gap

47 npm packages. Thousands of downloads poisoned. And the tool at the center of it — Trivy — was built to find vulnerabilities, not spread…

Jun 07, 2026 · 3 min read · 0 claps #supply-chain #npm #web-security