Whats The Hax?

What syscall-layer tooling cannot see in P2P infrastructure 8d ago Announcing the External Penetration Testing Program Pack 8d ago The way AI voice phishing gets demonstrated is making people worse at spotting it 9d ago Escaping Claude Cowork’s local VM sandbox via CVE-2026-46331 9d ago XBOW Agents found three RCEs as SYSTEM (and root) on Bing Image Search 9d ago Thailand's Ministry of Finance targeted with an AI agent running with approval prompts disabled 9d ago Open Evaluation Framework for AI Pentesting Agents on Real-World Targets 10d ago Device Code Phishing: The Microsoft 365 Attack That Walks Past MFA 10d ago GitHub issues $100,000 bounty for critical RCE vulnerability 10d ago CVE-2026-50458: Finding a UAF in the Windows Brokering File System 10d ago I was reporter #11 for a WPForms PayPal webhook vulnerability (CVE-2026-4986) 11d ago The Hidden CCS2 Attack Surface on EV Chargers 11d ago Writeup & POC: CVE-2026-49176 Windows WalletService to SYSTEM (LPE) 12d ago Leaking internal headers in Flask Ninja with deserialization 12d ago Crawling the Complete IPv4 Reverse DNS Space 13d ago Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239) 13d ago Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25 13d ago Multiple Chinese civic apps share one reward/lottery backend whose signing secret is recoverable 14d ago wp2shell (CVE-2026-63030): Pre-Auth RCE Chain in WordPress Core - Analysis and Open-Source Scanner 14d ago Pixels to Payload: Dissecting a Four-Stage Bitmap-Steganography Dropper Delivering AsyncRAT :: Rhys Downing 14d ago White House launches AI-driven "Gold Eagle" clearinghouse to centralize public-private vulnerability coordination 15d ago wp2shell: Pre Authentication RCE in WordPress Core 15d ago Keeping private namespaces private - Quad9 blog 15d ago Openwrt pre-auth remote root exploit 15d ago Windows AppResolver LPE: From AppContainer to SYSTEM. PoC linked to CVE-2026-50454 16d ago No Shark is Safe: Millions of Shark Vacuums are Vulnerable to RCE 17d ago [$13337] Confused Deputy: Google IdP Universal Account Takeover via Device Code Flow Hijacking 17d ago ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping via Unvalidated IOCTL 17d ago HN Security - My Semgrep C/C++ ruleset is ready for prime time again 18d ago The Memory Heist - How I tricked Claude into leaking your deepest, darkest secrets 18d ago (More) Unauthenticated Arbitrary Code Execution in ServiceNow 18d ago Smashing the ServiceNow Sandbox – Pre Authentication RCE 19d ago Context Bombs: Using AI Guardrails as a defensive mechanism 19d ago CET-Compliant Callstack Spoofing via Thread Pool & Enum Callback Trampolining (Rust PoC) 19d ago Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639) 20d ago Persistence via Fake AMSI Provider | Playbook & Detection Strategies 20d ago Vulnerability in Realtek driver allows DMA controller abuse from user mode with no additional hardware or driver 20d ago Scanning malicious websites with arbitrary number of VPN tunnels (Part 2) 21d ago Can AI-generated adversaries break TTP-based attribution? (arXiv 2026) 23d ago Towards CSI: What's the best harness? (arXiv 2026) 23d ago Suspected Russian Threat Actor Impersonates Legitimate Crypto Wallets to Deploy Remote Utilities 24d ago 1 in 2 devices sold in Africa exfiltrate data to China 24d ago Inside an AI coal mine security camera network powered by plaintext passwords 24d ago Drift Corpus: binary diffs of 240+ 2026 Windows kernel patches 24d ago Bad Epoll: The bug missed by Mythos 25d ago GitLost: a public GitHub issue can steer an org's Agentic Workflow into leaking private repo contents, and a one-word prefix ("Additionally") bypassed the threat-detection guardrail 25d ago New OST2 class: "Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!" 27d ago Playing Around With ADIDNS RPC Internals 27d ago Windows Service - Playbook & Detection Strategies 27d ago It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza) - watchTowr Labs 30d ago FIFA was saved this time 30d ago /r/netsec's Q3 2026 Information Security Hiring Thread 31d ago Privilege escalation to root in Lima QEMU guests via a world-writable agent socket (CVE-2026-53657) 32d ago r/netsec monthly discussion & tool thread 32d ago CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) - watchTowr Labs 32d ago Auditing OpenReception: 16 CVEs in an end-to-end encrypted appointment booking platform (unauthenticated admin creation, account takeover, E2E bypass) 33d ago Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) - watchTowr Labs 33d ago I tried a Local AI model (Qwen 3.6 27b) for security research and it works surprisingly well. 35d ago Dissecting Apple's Sparse Image Format (ASIF) 35d ago A peek into Reddit's anti-spam internals 35d ago CVE-2025-52465 geoserver arbitrary file write vulnerability 37d ago CargoWise WebTracker - The keys were in the cargo 38d ago Exploiting vulnerabilities in Johnson & Johnson web apps 38d ago Cloudflare patches Copy-Fail across every server in two days 40d ago New Cisco RCE was fixed 40d ago CVE-2026-25860 turn XSS to RCE 40d ago Exploiting Auth0 Defaults in XSS Attacks - elttam 41d ago Scanning malicious websites with 'infinite' number of VPN tunnels (Part 1) 41d ago Use-after-free in the QPACK encoder of nginx HTTP/3 - CVE-2026-42530 43d ago OpenBSD MPLS kernel stack leaks remotely (CVE-2026-56099) 44d ago Squidbleed (CVE-2026-47729) - Heartbleed-style vulnerability that leaks internal memory from every version of Squid Proxy, in its default configuration 44d ago CVE-2026-5667: Unauthenticated Remote Control of Mitsubishi MAC-577IF-2E WiFi Adapters via Probe Request Reconnaissance 44d ago Would you like some malware served at the very top of DuckDuckGo? 45d ago Worth a MalExt Report? A 2 Million-User Chrome Extension Added Give Freely/Wildlink in a 5-Day Update 45d ago QoS Policies to Restrict EDR Traffic and Detection Strategies 46d ago Getting a CVE Without Shipping Slop 46d ago PrizeBuzz phishing network analysis 46d ago 27 Years in the Dark: OpenBSD Fixes Ancient Remote Kernel Auth Bypass 46d ago Empty-ciphertext panic in aws-encryption-provider (CVD with AWS) 47d ago Chaining Security Bugs in Discuz! X5.0: from Race Condition to Pre-Auth RCE 47d ago SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon 48d ago Researcher accidentally gained access to a threat actor-controlled phishing website 49d ago PromptSnatcher: AdBlocker stealing Ai Chats - 90k installs 49d ago MeshCentral: From XSS to RCE 49d ago Getting the PID from random numbers in PHP 50d ago The Axios npm compromise was visible in registry metadata before anyone ran npm install 50d ago Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) - watchTowr Labs 50d ago Free Compromise Detection for GitHub Repos - Tracebit Community Edition 50d ago Major AI Clients Shipping With Broken OAuth Implementations (JUNE 2026 UPDATE) 51d ago Old Passwords Die Hard: Abusing CREDHIST for offline credential recovery 51d ago Marking Your Own Homework (Check Point Remote Access VPN IKEv1 Authentication Bypass CVE-2026-50751) - watchTowr Labs 51d ago Detecting AI-specific threats in Claude Enterprise from the Compliance API: a prefilter + LLM-as-judge pipeline with Sigma rules 51d ago Claude Fable 5: mid-tier results on coding tasks 51d ago Fable 5 and the analyst-AI threat model: what a Mythos-class model changes for security work 52d ago Hacking Google with A.I. for $500,000 52d ago Prompt injection: attacking the analyst's AI 52d ago Pre-auth XXE → HTTP SSRF on ArubaOS 8.13.2 closed as "theoretical / no valid PoC" despite TCP pcap, sshd localhost log, and internal port scan — documenting for community review 52d ago We post-trained a model for offensive security instead of teaching it to refuse 52d ago How Fraudsters Bypass Facial Recognition and Stay Hidden in 2026 53d ago FedRAMP Penetration Testing: How to Pass Your ATO Review and Get Cloud Authorized Faster 53d ago certSIGN: Inconsistent revocation status (CRL "revoked" vs OCSP "good") for intermediate CA "certSIGN Web CA" 53d ago BlackSun - Defender for Endpoint on macOS 53d ago GhostTrace – a Windows forensic scanner that finds what "Uninstall" leaves behind (22 modules, read-only, offline) 53d ago Jupyter Enterprise Gateway - From Notebook to Kubernetes Cluster Admin - elttam 53d ago More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520) - watchTowr Labs 53d ago Apple’s Siri-AI, or more shouting into the void about “private” agents 53d ago Entra Agent ID from a Security Perspective 54d ago X.com silently injects session-bound tracking tokens into your clipboard on every copy — security tools correctly flag this as malicious injection 54d ago WinGet - Code Execution, Persistence and Detection Strategies 54d ago I found 23 Chrome extensions hijacking 758,000 users' searches for affiliate revenue 54d ago I just completed Search Skills room on TryHackMe! Learn to efficiently search the Internet and use specialised services and technical docs for information 54d ago AI Agents May Always Fall for Prompt Injections 54d ago Arc Gate — runtime governance proxy for AI agents, catches multi-turn prompt injection via geometric drift detection — try to break it 55d ago EDRChoker: Choking The Telemetry Stream to Bypass Defenses 56d ago PSA: Attack Shark R85 HE (FREEWOLF US / Amazon) — BadUSB credential harvester, confirmed malware 56d ago CVE-2026-46640: Developing payloads for Twig sandbox bypass 56d ago Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption 57d ago Keeping Secrets Out of Logs 58d ago Unauthenticated RCE as QSECOFR via IBM i Management Central — port 5555, client-controlled verify flag, no credentials required (V7R4 and earlier) 58d ago System Over Model, Tested: Reproducing Mythos’s FreeBSD Find on Local Open-Weight Models 58d ago Empty-ciphertext panic in aws-encryption-provider (CVD with AWS) 59d ago Re:CACHE - Excessive reflection, type confusion, and 0-click SXSS on Next.js 59d ago Enter the WasmForge: Compiling Sliver into WebAssembly 59d ago Season VI of the US Games launches TOMORROW! 59d ago EU CRA mandatory vulnerability reporting enters into force September 11, 2026 — what the 24-hour obligation requires 60d ago Interesting- What LLM vuln research looks like 60d ago Hacking your PC using your speaker without ever touching it 60d ago Abusing iDEAL (Wero): how criminals weaponise legitimate payment links in phishing 60d ago Golang code review notes II - elttam 60d ago Using AI to Secure Its Generated Code Is a Ponzi Scheme 60d ago Four coordinated npm supply chain campaigns active in May–June 2026 — TTPs, IOCs, and detection notes 60d ago We Added a Detection Rule. We Were Not Expecting This. 60d ago 1-Click GitHub Token Stealing via a VSCode Bug 60d ago Device Code Phishing Forensics: What We Learned Investigating BEC in the Wild 61d ago NuGet Code Execution As A Service 61d ago Blind POST SSRF in phpBB 4.0.0-alhpa1 Web Push (CVD with phpBB) 61d ago Dutch Police and NCSC dismantle 17-million-device botnet running on 200 servers seized from local hosting provider 62d ago r/netsec monthly discussion & tool thread 62d ago Poisoning Claude Code: One GitHub Issue to Break the Supply Chain 62d ago Stealing Passwords via HTML Injection Under a Strict CSP 62d ago Subnet discovery through multi-protocol TTL tracing 62d ago ThinkPad firmware reverse-engineering toolchain: archived Lenovo BIOS → named SoC pads, EC analysis, CVE diffs, coreboot/OpenCore port scaffolding 62d ago LLMReaper - DOM Based AI Conversation Exfiltration via Browser Extensions 63d ago Digital Trap: Iran Uses Selective Internet Restoration to Track and Arrest January Protesters 64d ago A practical checklist for evaluating npm packages (supply chain attacks, slopsquatting, etc.) 64d ago Introducing Keyhog: The First GPU Accelerated secret scanner 64d ago OffensiveCon26 YouTube Playlist released 64d ago 1,001 IPs, 64 countries, one operation: mapping a botnet by its back end · HoneyLabs blog 65d ago I evaluated 5 LLM agents on patching real-world CVEs. Here is what I found. 65d ago Fooling around with encrypted reasoning blobs 65d ago CALIF: An AI audit of FreeBSD 65d ago CoreEvent GraphQL API – BOLA/IDOR exposing 10k+ records (PII, ticket QR codes) via unauthenticated queries 65d ago The Word 'Toad' Gave Any Website Full Control of Chrome's Most Popular VPN 65d ago Visual Studio Extensions Revisited 65d ago Threat Intel: Kemper Corporation Hit by ShinyHunters Salesforce Extortion Campaign (269k Accounts Ingested by HIBP) 65d ago Drupal PostgreSQL SQL Injection: From SELECT-Only to RCE 66d ago What scanners are actually trying against AI infrastructure 66d ago Defense by accumulation 66d ago New Phishing Technique - Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault 66d ago MalShark: MCP-Powered Malware Traffic Analysis — Benchmarked Against Real Malware 67d ago A week after Dutch FIOD seized 800+ servers, the hosting network's ASN (AS209847) is still scanning at its normal daily rate 67d ago HN Security - AI Reporter - Let's automate reporting in Burp Suite! 67d ago Threat Intel: Lithuania Investigates B2B Credential Misuse Exposing 600,000 National Registry Records 67d ago RCE in Strix Agent(Sandbox): A practical guide to prompt injections with impact 67d ago Navigating Lax Load Balancers: When an Intersection Gets You Inside 67d ago Encrypted DNS in 2026: DoH, DoT, DoQ and DoH3 protocol comparison — including DNS hijacking attack vectors and what each protocol actually prevents 67d ago OTP lockout state leaked valid-code signal, enabling OLX account takeover 68d ago How journalists rely on VPNs to protect press freedom 68d ago Analyzing the Taiwan High-Speed Rail (THSR) TETRA incident (part 1) 68d ago Update Starlette Now. New severe vulnerability dropped. 68d ago The War Between Wars: How an IRGC Front Runs Destructive OT and IT Attacks Under Cover of a Ceasefire 68d ago How credential brokering prevents AI agents from compromising credentials via prompt injection 69d ago CVE-2021-21735: ZTE H168N wizard whitelist exposed PPPoE and WLAN secrets pre-auth 69d ago Threat Intel: ShinyHunters Leaks 9.4GB Database of 7-Eleven Franchisee Systems Post-Extortion Refusal 69d ago nmap on Linux: Guide to Network Scanning and Discovery 69d ago Prompt Injection finally broke my brain a little. My first article as a security student. 70d ago How to Use Claude AI: A Complete Technical Beginner's Guide 70d ago Pardon MIE?: how Mythos did not bypass Apple MIE 71d ago CVE-2026-9256 - "nginx-poolslip", another new vulnerability in the rewrite module 71d ago AI Security CTF (free, open) - prompt injection, agent workflow hijacking, guardrail bypass - June 17-22 71d ago Just added an interactive security map to my project NoEyes showing exactly what the server sees (and doesn't) 71d ago Restoring Testability: Handling Complex Scenarios in Burp Suite with a Custom Extension 71d ago Zyxel low-priv account leaked super-admin, FTPS, and TR-069 secrets across router fleets 72d ago Data breach in name of protest 72d ago pnpm 11 Might Finally Be a Better Default Than npm 72d ago durabletask (Microsoft's Python Durable Task client) compromised by TeamPCP | same Mini Shai-Hulud payload as last week's TanStack wave 72d ago [Analysis] CISA contractor left AWS GovCloud admin keys, plaintext passwords, SAML certs, and Kubernetes configs on a public GitHub repo for 183 days — with secret scanning deliberately disabled 72d ago GitHub Actions Cache Poisoning is eating open source 72d ago CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox 72d ago CVE-2026-34474: Pre-auth credential disclosure in ZTE H298A / H108N via ETHCheat 72d ago FatGid - FreeBSD 14.x kernel LPE 72d ago Keys to the Kingdom: Anonymous SQL Injection in Drupal Core (CVE-2026-9082) 72d ago GitHub ~3,800 internal repos compromised through a malicious VS Code extension 73d ago The IBM X-Force Index 2026 explains all three in one finding. 73d ago Score by collisions, patch by panic: defensive architecture for the post-90-day-disclosure era 74d ago CVE-2026-45585: Windows BitLocker — YellowKey Recovery Bypass Analysis 74d ago [ Removed by Reddit ] 74d ago CVE-2026-34472: Pre-auth credential exposure and auth bypass in ZTE H188A V6 routers 74d ago Iran Wants to Tax the Internet Flowing Through the Strait of Hormuz While Restricting Its Own Citizens Online 74d ago The IBM X-Force Index 2026 explains all three in one finding. 74d ago GitHub hit by a compromised VSCode extension 74d ago When Filenames Become Attack Surfaces: Weaponizing NASA's CFITSIO Extended Filename Syntax 74d ago We audited 12K n8n templates: most have critical vulnerabilities 74d ago Veilgate - Deception proxy 74d ago Sleeping Agent: Silent persistent C2 through Web Push 74d ago GhostTree: Unveiling Path Manipulation Techniques to Bypass Windows Security 74d ago How Storm-2949 turned a compromised identity into a cloud-wide breach 75d ago Pathfinding Labs: Deploy, test, and learn from 100+ intentionally vulnerable AWS environments 75d ago CVE-2026-34473: Pre-auth ZTE H-series router DoS via CGILua request-body parsing 75d ago RCE and arbitrary file write in Vitess vtbackup via untrusted MANIFEST fields 75d ago New Age of Collisions: Reading Arbitrary Files Pre-Auth as root in cPanel (CVE-2026-29205) 75d ago The quiet death of behavioral anti-bot and the pivot to hardware ZKPs 75d ago AudioHijack: adversarial audio attacks on generative voice models transfer from open weights to Microsoft and Mistral production systems 75d ago ShinyHunters Stole 275 Million Student Records. The Ransom Deadline Is May 12. 75d ago The down fall of bug bounties 76d ago TanStack Supply Chain Attack (And How to Lock Down GitHub Actions) 76d ago Attacking Cloud Service Providers (ACSP) - An interactive textbook on control-plane intrusion and breaking cross-tenant isolation 76d ago Autonomous AI Penetration Testing with Consent-First Ethical Framework — Research Paper + Working Implementation 76d ago Ansible security and compliance guide 76d ago Instrumenting QT6 desktop apps with Frida - Part 2: Building the Bypass Chain 77d ago AI-assisted cyberattacks are changing the threat landscape faster than most organizations realize. 78d ago Microsoft MDASH found 16 Windows RCEs — here's exactly how the 100-agent pipeline works 78d ago Apple Maildrop lets you rewrite the filename, size, and icon on any icloud.com attachment link — no signature, no validation — reported July 2023, still live 78d ago North Korean Hackers Now Using AI? Kaspersky Warns of New Threat Targeting South Korean Govt Systems 78d ago Automating code security reviews with Claude Mythos-level capabilities 79d ago Instrumenting QT6 desktop apps with Frida - Part 1 79d ago From Vercel Typosquatting to an Obfuscated macOS Malware Loader 79d ago HyperVenom: Using Hyper-V for Ring -1 Control from Usermode 79d ago Detecting Exploitation of CrushFTP Vulnerability (CVE-2025-31161) With PacketSmith Yara Detection Module - Using track_state and flow_state 79d ago VELVET CHOLLIMA Infostealer Campaign Using Trading App as Lure 80d ago CVE-2026-44338: Scanners Target PraisonAI Within Four Hours of Disclosure 80d ago How to Check Computer Activity: 2026 Guide for Windows and Mac 80d ago CVE-2026-42945 : NGINX Heap Buffer Overflow in rewrite module - Writeup and PoC 80d ago Hunting the Behavior Behind npm Supply Chain Attacks 80d ago WaSteal: 126 Chrome extensions, 148K installs, one Brazilian operator silently sending WhatsApp user data and ad cookies to its servers 80d ago Apple Maildrop lets you rewrite the filename, size, and icon on any icloud.com attachment link — no signature, no validation — reported July 2023, still live 80d ago On vendor disclosure timelines, bounty programme incentive misalignment, and the psychological contract 80d ago /sbin/ping -G sweepmax has no bounds check on macOS: deterministic BSS out-of-bounds write, confirmed by Apple 80d ago Apple's smbd has no FSCTL_SRV_COPYCHUNK limit enforcement: 256 bytes in, 64 GiB disk I/O out 80d ago On-prem vs IaaS vs PaaS vs SaaS for self-hosted IAM (Keycloak case study) 80d ago A stealth approach to Process Injection - EntryPoint Hijacking 81d ago A year of Apple Security Bounty research — 16 closed findings, full disclosure 81d ago AI-Coded App Vulnerability Checklist - 33 LLM-specific items with detection methods 81d ago Dead.Letter (CVE-2026-45185) How XBOW found an unauthenticated RCE on Exim 81d ago The Algorithm Goes to War: Inside the AI Cyberweapon Revolution That Governments Cannot Stop 81d ago Malicious Coding Agent Skills and the Risk of Dynamic Context | Datadog Security Labs 81d ago AI Vulnerability Research and the Fuzzer Era Déjà Vu 81d ago I spent a weekend trying to get OpenClaw to leak my own personal data and it caught me immediately... 82d ago Curl lead developer Daniel Stenberg provides insightful feedbacks from Mythos analysis results 82d ago New ipTIME Pre-Auth RCE in CWMP 82d ago Postmortem: TanStack npm supply-chain compromise 82d ago How do Fortune 10 SOCs handle incident response with 15 people instead of 150? Energy-Based Models. 82d ago OpenAI announces Daybreak, "frontier AI for defenders" 82d ago GhostLock: SMB Deny-Share Handles as a Zero-Privilege Availability Weapon 82d ago How I Defeat Passkeys Nearly Every Time in Phishing Assessments 82d ago MyAudi app:Security issues in Audi Connected Vehicle experience 83d ago Giving Claude Code Full Control of a Hardware Fault Injection Setup to Bypass Secure Boot 83d ago Mythos, MOAK, CTEM and the End of CVE Chasing 83d ago Autonomous Vulnerability Hunting with MCP 83d ago ShinyHunters / AT&T ransom payment traced on-chain — paper draft, seeking arXiv cs.CR endorsement 83d ago Data in Use Protection: How MPC Keeps Inputs Hidden from the Cloud - Stoffel - MPC Made Simple 84d ago The compression of the exploit timeline: Why n-day gaps and 90-day embargoes are failing in practice. 84d ago Outrunning SHA256 with Physics 84d ago Memory Poisoning AI Agents via ChromaDB 84d ago Defence in Depth: A Practical Secure Corporate Network Topology 84d ago Technical Analysis of EagleSpy V6.0 (CraxsRAT Rebrand) Distributed Through Odysee and Telegram 84d ago Getting LLMs Drunk to Find Remote Linux Kernel OOB Writes (and More) 84d ago Seclens: Role-specific Evaluation of LLM's for security vulnerablity detection 85d ago Securing CI/CD for an open source project: lessons from Cilium 85d ago ShinyHunters breached Canvas/Instructure — 275M student records stolen from 8,809 schools, ransom deadline May 12 86d ago Needle crypto-stealer C2 analysis: API key embedded in plain text inside the Rust malware unlocked 1,932 victims and the operator's withdrawal config 86d ago Copy Fail (CVE-2026-31431): A Technical Deep Dive 86d ago Kernel LPE Vulnerability Published Early Due To Third-Party Breaking Embargo 86d ago Dirty Frag - Linux LPE similiar to Copy Fail 86d ago Honey Tokens: Bait Credentials That Catch Breaches 86d ago CVE-2026-42511 Breakdown: RCE in FreeBSD 86d ago Bypassing Bitlocker under 5 min using downgrade attack on CVE-2025-48804 87d ago An AI security auditor that red-teams PRs to find exploits, not just patterns (open-source + Ollama support) 87d ago Approve Once, Exploit Forever: The Trust Persistence Problem in Claude Code, Codex and Gemini-CLI 87d ago Quacc++: Automated Open Source Vulnerability Discovery 87d ago Binance fixed the IP whitelist gap — but the disclosure process is still broken 87d ago Non-Determinism of Maps in Golang: Why, How, and the Consequences 88d ago pyghidra-mcp Meets Ghidra GUI: Drive Project-Wide RE with Local AI 88d ago Vulnerability Garden 88d ago Scan. Secure. Simplify. — Free Web Tools Platform 88d ago Bleeding Llama: Critical Unauthenticated Memory Leak in Ollama (CVE-2026–7482) 88d ago Salesforce pentesting novel techniques- how to be an apex predator 88d ago DigiCert: Misissued code signing certificates 88d ago Major AI Clients Shipping With Broken OAuth Implementations 88d ago HN Security - Extending Burp Suite for fun and profit – The Montoya way – Part 10 89d ago Ghosts of Encryption Past – How we Read All Your Emails in Salesforce Marketing Cloud 89d ago The Danger of Multi-SSO AWS Cognito User Pools 89d ago Popular DAEMON Tools software infected – supply chain attack ongoing since April 8, 2026 89d ago Proton Pass: Second-Password Bypass Through Emergency Access 89d ago We probed 6,000 web apps for Stripe webhook signature checks. 1,542 don't bother 89d ago Lateral Movement - Cross-Session Activation 90d ago "AccountDumpling": Hunting Down the Google-Sent Phishing Wave Compromising 30,000+ Facebook Accounts 90d ago Your vibe-coded app is probably violating GDPR right now 90d ago Acoustic Keystroke Recovery - Reconstructing Typed Text from a Laptop Microphone (Full Guide, 85% success rate) 91d ago How to exfiltrate data using only numeric outputs 92d ago For vulnerability research, smaller models run repeatedly can outperform larger frontier models on cost-to-recall. 92d ago Every incident public companies have disclosed to the SEC, in one searchable database 92d ago r/netsec monthly discussion & tool thread 93d ago Handled, Not Hosted: Administrative Activity Inside a Bulletproof Hoster 93d ago Seventeen vulnerabilities in Omi, fourteen days of silence 94d ago High Fidelity Check for the cPanel Authentication Bypass (CVE-2026-41940) 94d ago Copy Fail exploit lets 732 bytes hijack Linux systems and quietly grab root 94d ago The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940) - watchTowr Labs 94d ago The Thymeleaf Template Injection That Only Hurts If You Let It 94d ago Set up automated dependency scanning after the recent npm/PyPI supply chain attacks 95d ago A Route to Root in a 4G Industrial Router 95d ago [Research] Full-chain RCE in Microsoft Semantic Kernel & Agent Framework 1.0 (6 Bypasses) 96d ago The Bot Left a Fingerprint: Detecting and Attributing LLM-Generated Passwords 96d ago 89 vulnerabilities in XAPI / Citrix XenServer 96d ago [ Removed by Reddit ] 96d ago Kaspersky recently disclosed PhantomRPC, a privilege escalation technique affecting all Windows versions (tested on Server 2022/2025) 96d ago Why a Decade of Writing Detection Logic Makes the Mythos Exploit Numbers Less Scary 96d ago MCPwned: a Burp Suite extension for auditing MCP servers 97d ago

Any solutions we can use? 51d ago Possible targeted attack 51d ago RoguePlanet: Windows Zero-Day That Weaponizes Defender's Own Quarantine Pipeline 51d ago Facebook messenger to text 51d ago Managing Solution Agents 52d ago Nottingham University data breach affects over 450,000 students 52d ago SWGs that support 3rd party external DNS resolver 52d ago Sub:jugation - Hijacking Cloud Identities by Recycling Namespaces in Global OIDC Issuers 52d ago Chrome extensions with 10M+ installations are actively vulnerable to UXSS & UXSG 52d ago Cybersecurity researchers aren't happy about the guardrails on Anthropic's Fable | TechCrunch 52d ago Phishing awareness training resulting in ignoring company comms? 52d ago How are you analyzing Android malware nowadays? 52d ago Hackers Exploit Langflow Vulnerability for Remote Code Execution 52d ago Chaotic Eclipse Strikes Again: New Zero-Day Unlocks BitLocker in Four Hours of Research 52d ago NEED SOME GUIDANCE 52d ago Help setting up local encryption on my pc 52d ago Agentic AI on Cybersecurity 52d ago DoD 0-days Typically Come Down to Authorization Failures 52d ago HDD 52d ago Plzz Helpp - Say you're trying to build a toolkit that checks for LLM vulnerability do y'all know any trustable datasets 52d ago How can we test the firmware code/images security? 52d ago 20 years of Fancy Bear (APT28): How Russian military hackers evolved their tradecraft since 2004 52d ago GitHub announces npm security changes to tackle supply-chain attacks 52d ago The ‘Miasma’ worm source code briefly leaked on GitHub 52d ago CISA Rewrites Federal Patching Requirements for AI Threat Era 52d ago What is the difference between Regular TLS and Mutual TLS? 52d ago Every employee's password was stored in a single Excel file 52d ago npm v12 is changing how dependencies are installed to reduce supply-chain risk 52d ago Why is Gartner Magic Quadrant treated like a procurement benchmark in South Asia? 52d ago How good Microsoft Defender for storage? 52d ago GreatXML bitlocker bypass vulnerability 52d ago Struggle 52d ago Did the work, got the certs, now I'm drowning. Should I keep labbing or go all-in on applications? 52d ago Wiz launches Cloud Security Job Board 52d ago Physical Project Ideas 52d ago How can I get into cybersecurity while studying Information Systems Engineering? 52d ago Cloud Security job board 52d ago Continuous learning 52d ago Angry bug hunter with Microsoft beef drops new Windows 0-day 52d ago Mid-30s, stuck in web pentesting, and wondering what to do ? 52d ago Streamline your Nmap triage: Interactive, single-file HTML reports from raw XM 52d ago Is Microsoft Purview really secure when using Copilot? 52d ago Banking app intentionally block some operations when connected to wifi due to "security reason" is this good or stupid feature? 52d ago Nee academic references for Hashcat's 'Next Big Bang' log 52d ago CISA released BOD 26-04: A new federal government vulnerability management strategy? 52d ago Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days 52d ago added Mac support to my corporate hacking sim. Demo now available on Steam 52d ago Suche aktuelle IONOS Phishing .eml für eine technische Blog-Analyse (Header & Artefakte) 52d ago Students' data taken in major University of Nottingham cyber-attack 53d ago Has unmanaged external file sharing ever burned you? 53d ago Anthropic released Claude Fable 5 yesterday. Public version of Mythos with cyber classifiers 53d ago Need feedback on my presentation 53d ago Compensating controls besides admin credentials being needed to download software on employee endpoints 53d ago OpenSSL PKCS#7 CVE-2026-45447 53d ago Presentation Question 53d ago How to Stay Ahead of Deepfake Evolution in 2026 53d ago France’s Government Messaging App Tchap Got Breached 53d ago Where's the fix for MiniPlasma? 53d ago ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances 53d ago Internships 53d ago Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS 53d ago Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows 53d ago Looking for a Reliable Cybersecurity Provider for a School in North Sydney 53d ago Early Operational Visibility 53d ago how are you actually managing ai agents in production? 53d ago Al app builders: How are you handling security questionnaires when selling your product? 53d ago [ Removed by Reddit ] 53d ago How are all of doing with THE AI model thats big news currently?? 53d ago Skill to Scan your Codebase 53d ago Miasma-style supply chain attacks 53d ago FCaptcha v1.12: Catching AI Agents That Drive Real Browsers 53d ago Flooding invalid deauth frames still kicks PMF clients, tested on 3 Android phones 53d ago More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520) - watchTowr Labs 53d ago AI Malware Worm Adapts to New Targets in Real Time, Cybersecurity Experts Say 53d ago Huntress Stack (MS Defender or SentinelOne) 53d ago META DELETES FACE-RECOGNITION SYSTEM FROM ITS SMART GLASSES APP AFTER WIRED REPORT 53d ago FBI is announcing Operation Riptide 53d ago ServiceNow confirmed some customer instances were breached. 53d ago Which are some of the best Cybersecurity / OT Security events that happen in GCC? 53d ago DF/IR Community 53d ago Chaotic Eclipse's new RoguePlanet 53d ago Inside the DPRK-Linked Backdoor Loitering in the VS Code Marketplace 53d ago Thoughts on Automated Compliance? 53d ago A fix for the Windows BitLocker bypass vulnerability dubbed "YellowKey" is available 53d ago North Korean Hackers—Posing As Fake IT Workers—Behind Nearly Half Of All Tech Firm Attacks, Report Says 53d ago Microsoft has released a patch for the bitlocker bypass 53d ago Please advices 53d ago soc analyst l1 53d ago Google Chrome is killing all uBlock Origin bypasses, Microsoft Edge, Opera to follow 53d ago Looking to move off KnowBe4, what are people actually using these days? 53d ago Too Many Certs, Not Enough Experience — What’s the Best Next Step? 53d ago Authenticating ARP and NDP 53d ago Does anyone use rule feeds in 2026? 53d ago Building a tactical Pelican case for my Flipper Zero + AIO setup. Looking for advanced tool and script recommendations! 53d ago Need a vm for practice 53d ago Tips/Tricks to WFH as a SOC Analyst? 53d ago Cybersecurity statistics of the week (June 1st - June 7th) 53d ago Where can GRC folks learn practical AppSec / DevSecOps without going full engineer? 53d ago I almost got “onboarded” into a malware campaign disguised as a job opportunity. 53d ago University of Toronto proof-of-concept AI worm spread to 62% of a test network in 7 days using a free open-weight model 53d ago AI Blocklist - help 54d ago Protecting AI workloads on Linux servers 54d ago Exposing DoNex Ransomware Secrets with Malcore! 54d ago What are the different Disaster Recovery scenarios your teams have tested on? 54d ago someone actually leaked the Miasma supply chain attack toolkit source code on github 54d ago WinGet - Code Execution, Persistence and Detection Strategies 54d ago Ransomware attack shuts Illinois high school until Wednesday 54d ago Ideas for demo 54d ago Microsoft account hacked through infostealer. Trying to log in using authenticator, but not successful. Help please? 54d ago Harnessing Generative AI for Automated Reverse Engineering, Static and Dynamic Analysis, and Risk Scoring of Fraudulent Mobile Applications (APKs) and Malwares. 54d ago Physical attack device 54d ago Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer 54d ago IT GRC News? 54d ago Meta Says Israeli Spyware Firm Targeted WhatsApp Users Again 54d ago Shifting L7 validation to the edge to stop DB resource exhaustion? 54d ago Google Patches 5th Chrome Zero-Day Exploited in 2026 54d ago EC Council CEH exam advice 54d ago About NPower vs PerScholas 54d ago Looking for a vulnerability to learn 54d ago From Brute Force to Malware Execution: Investigating a Multi-Stage Cyberattack in Splunk 54d ago Bad USB through charger? 54d ago Recommendations for Discord community for latest AI security products 54d ago Vulnerability Summary for the Week of June 1, 2026 54d ago Windows Defender Tamper Protection stuck off - no active GPOs, SFC corruption, looking for ideas 54d ago I feel like ive lost my passion to tinker after 6 years in the industry, anyone else? 54d ago I wrote a free, no sign up, defender guide for suspicious USB devices and rogue hardware, with copy-paste detection examples 54d ago really need help with project ideas for MSc 54d ago Which Course for an almost-complete noob? (SANS.edu) 54d ago SoFi confirms third-party data breach at Hong Kong subsidiary 54d ago For the 2nd time in weeks, Microsoft packages laced with credential stealer 54d ago Iran Signed a Ceasefire — Its Hackers Didn't 54d ago New Shai-Hulud attack trojanizes 19 science-focused PyPI packages 54d ago DSPM étude marche 54d ago CMMC Phase 2 November 2026: two readings of SR.1 — C3PAOs are applying the one that requires a verifiable chain, not just a file 54d ago AppSec / Pentesting job market in Canada for experienced overseas applicants? 54d ago Stop Treating Low Severity CVEs as Noise. Start Treating Them as Ingredients. 54d ago Automation Playbooks - which ones would you not want to live without? 54d ago Is it necessary/important to Hash and salt API Keys for a strictly internal use tool? 54d ago Need review on the OMS Cybersecurity program from Georgia Tech? 54d ago If You Use Claude or Gemini, This Microsoft Breach Means Your Data Is at Risk 54d ago 2026 Verizon DBIR: vulnerability exploitation overtakes stolen credentials as #1 breach entry point for the first time in 19 years 54d ago How do you close an alert 54d ago What cybersecurity certifications are great value for money? 54d ago Boxes for CPENT 54d ago SIEM: is it "SIM" or "SEEM" 54d ago I’m looking for recommendations for an online Master’s program that is recognized in the Middle East. (Better if certifications are included) 54d ago How justdeleteme and justgetmydata work? 54d ago I need help - PCI DSS 4.0 requirement 11.6.1 54d ago How are you learning agent pen testing? 54d ago Cyber security intern 54d ago Meta to take legal action against Israeli spyware company NSO 54d ago Inside SStar Agent, a cross-platform RAT with an unfinished macOS toolkit 54d ago What's the best way to alert companies of a Glassworm copycat? 55d ago How To Verify If A Site Is Legit? 55d ago What is Flaresolverr 55d ago Research: defenders using generative AI to simulate malware variants before they exist in the wild 55d ago How are regulated orgs actually letting engineers use Claude Code / Copilot? 55d ago Cyber security expo Manchester 55d ago Remote Hiring Opened the Talent Pool — and the Fraud Surface 55d ago Hades Cluster PyPI Worm Abuses Python Startup Hooks 55d ago What certs should I do during summer of 11th grade? 55d ago CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318) 55d ago Nobody needs Mythos or 0-days to build a chaos-causing computer worm – free open source models work just fine 55d ago Oxford University discloses data breach after careers platform hack 55d ago Vendor ISO 27001 Assessment - Questions Around Control 8.29 Security Testing 55d ago Got this message from “SimBoss” 55d ago PKCS12 Golang fork 55d ago Malware Insights: Miasma Campaign 55d ago 73 Microsoft GitHub repositories impacted by Miasma malware 55d ago [Honeypot Research] Looking for volunteers to test telemetry/logs 55d ago What is the condition of Bug Bounty program in the era of AI. 55d ago Opening a cloned repo is no longer safe 55d ago Meta Says 20,000 Instagram Accounts Hacked via AI Tool Abuse 55d ago CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers 55d ago Google Colab CLI opens runtimes to Claude Code and Codex 55d ago VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks 55d ago The AI governance gap no one is talking about: deployment-stage accountability 55d ago Free Study Resources for Comptia Cysa+ 55d ago Mentorship Monday - Post All Career, Education and Job questions here! 55d ago Hi there 55d ago Final risk-based IT Audit interview round with Director and have no experience. Please help! 55d ago Needed help 55d ago [ Removed by Reddit ] 55d ago Career advice 55d ago PhD in cyber Security 55d ago Built a password guessing game. Almost everyone stuck in level 5. 55d ago OSINT (SOCIAL MEDIA) 55d ago Beginner KQL project 55d ago Question about WORM and encryption 55d ago Update:Certified cyber security 55d ago Has anyone have any idea what to expect from Information security engineer- Network interview at Glidewell Dental 55d ago Independent Post-Quantum KEM and Digital Signature Suite in C++ (NSLD Reduction) 55d ago Malware that survives reinstalling the BIOS and OS 56d ago Am I overthinking the x86 compatibility issues? how much friction am I actually facing? 56d ago Fedora Linux 43 exposes 20-year-old Microsoft Outlook security failure 56d ago Managing Microsoft Identity Is More Complicated Than It Looks 56d ago My work email got subscribed to a bunch of israel newsletters 56d ago Shadow AI 56d ago Rate limiting is not enough. What else can I use? 56d ago How To Avoid Potential Malware From Transferring To New Laptop 56d ago Sysmon RegistryEvent exclude not overriding include rule for Event ID 13 56d ago Can't decide. 56d ago looking for partners 56d ago My edge is changing into bing when I search something 56d ago Cybersecurity reality check 56d ago [ Removed by Reddit ] 56d ago Information Management 56d ago IronWorm Malware 56d ago Why do we use UNC for smbclient ? Why don't we use UNC for nc or ssh? 56d ago Why do we use UCL for smbclient ? Why don't we use UCL for nc or ssh? 56d ago Everyone's planning post-quantum migration for enterprises. Nobody's talking about your password manager 56d ago Is a separate “clean” S3 bucket actually a security boundary for uploaded files? 56d ago CVE-2026-46640: Developing payloads for Twig sandbox bypass 56d ago PenTest+ Exam 56d ago AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs 56d ago Looking for guidance 56d ago Before you attempt any OffSec certification, read what just happened to me 56d ago Reporting Metrics for Management 56d ago got hit with SOC 2, cyber insurance, and a prospect pentest request at the same time 56d ago Found an old Discord CDN ZIP in Opera downloads and I’m trying to figure out if I should be worried 56d ago Shai-Hulud: Miasma (Azure:Durabletask) Open Source - a normalized, deobfuscated copy of the Azure DurableTask JavaScript payload. 57d ago AI Security Certificates 57d ago Guys is bug bounty dead? 57d ago How are folks making it in bug bounty? 57d ago How useful is it to require at least one uppercase letter in a password? 57d ago Cyber security ! Is no more ? 57d ago CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers 57d ago Ghosts in the Cloud: Chinese Hackers Hid in Microsoft 365 Networks for 18 Months 57d ago Antimiasma Worm to discover/mitigate/vaccinate Miasma worm infected repositories 57d ago How to train employees to feel when something's off? 57d ago ALERT OVERLOAD 57d ago CTO at NCSC Summary: week ending June 7th 57d ago A new BitLocker bypass allows access to encrypted drive in the pre-boot environment with all Windows security features enabled 57d ago Microsoft Azure Repositories Compromised (Disabled) as Miasma Worm Targets AI Coding Agents Through GitHub 57d ago AppSec Engineer Interview Stories 57d ago [OpenSource] Multi-layer sandbox for native code execution on Linux with no external deps. 57d ago Is there a safe way to continue using (unsupported) Windows 10? 57d ago Is Splunk suitable for smaller Enterprises? 57d ago Has anyone else had MFA prompt fatigue issues with users? 57d ago Data Scrubbing from Databases 57d ago Best Certificates? 57d ago Rant 57d ago New York passes data center moratorium and consumer protections as environmental, and housing proposals stall 57d ago Cyber attackers have a new favorite, the browser 57d ago Looking to get into cybersecurity in web3 57d ago Microsoft discovered that Anthropic's Claude Code GitHub Action is vulnerable to prompt injection attacks via issues and Pull Requests 57d ago Should i use email 2fa or only auth and phone number? 57d ago Can I break into cybersecurity with a white collar felony? 57d ago Open Source Intelligence - Building AI Systems That Handle Contradiction at Scale 57d ago How are people supposed to defend against both supply chain attack and zero-day vulnerabilities at the same time? 57d ago What kind of topics do you think should be covered more (in conferences, youtube etc) but they arent? 57d ago How Hard is This 57d ago Installed Fake Codex hidden as a google site 57d ago Virustital scan result help 57d ago CrowdStrike Turned an AI Wave Into Its Best Quarter Ever 57d ago Cyber Resilience Act - Position? Pain points? Struggle? Possible solutions? 57d ago I fell for the cybersecurity degree trap and thought I could beat the job market, I could not. Not sure what to do now 57d ago Being a Security Engineer? Which AI-powered tools are you using on a daily basis? 57d ago Over 900 US gas station tank gauge systems exposed to attacks 57d ago Google and FBI warn of ransomware group that sends fake IT workers to hack victims in person 57d ago SIEM is broken in the AI agents era 57d ago Google Cloud hit by fresh layoffs, security and Mandiant teams among those affected 57d ago Phantom Gyp npm Worm Abuses node-gyp Build Hooks 58d ago Certified cybersecurity ISC2 58d ago Help studying for OSCP 58d ago The current state of Threat Intelligence Tooling 58d ago Malicious podcast, PDF apps spread FlutterShell macOS backdoor malware 58d ago We tested offensive AI agents against deception technology 58d ago A matter that I have been losing my sleep over 58d ago Any experience with Rootly or incident.io for cyber incident management? 58d ago CTIA Study Resources & Preparation Advice? 58d ago Black hat uk vs brucon 58d ago Cisco warns of unpatched SD-WAN zero-day exploited in attacks 58d ago NIS2 hits railway hard 58d ago I need help guys… :( 58d ago Question from the Seniors 58d ago China-Linked Cybercrime Group Expands Attacks Beyond Asia With AI-Assisted Malware 58d ago what certs have u seen in ai security related job posts ? 58d ago How is the Security Architecture / Strategic IT Security process structured in your organization? 58d ago What's happening in cybersecurity job market in US and Europe these days? 58d ago Has any of you pivoted from GRC to CTI? 58d ago Up-date-list of cybercrime types? 58d ago What else should I learn to build a strong cybersecurity foundation? 58d ago Hackerone interview 58d ago Ransomware in the AI Era | ft. Behnaz Karimi | Ep. 109 | ScaleToZero Podcast | Cloudanix 58d ago Testing URL Rewriting? 58d ago Got an internship in IAM with no qualifications and no soft skills 58d ago Work Hours of DFIR/Cloud Security vs Pentest 58d ago Narcissistic Tech Leader.... 58d ago Anyone else's firewall logs just explode after midnight? 58d ago I'm replacing myself.. at least the boring parts 58d ago Anyone else dealing with these phantom login attempts from China? 58d ago Best way to fully clear windows and set everything up securely (pc, accounts etc) 58d ago IBM, AT&T Accused by Whistleblower of Covering Up Foreign Hacks 58d ago Soc analyst 58d ago Do companies actually require cybersecurity insurance 58d ago Uncommon/Unusual CrowdStrike Alerts 58d ago Cyber analyst: law firm or bank 58d ago best free av and how do i properly setup passwords? 58d ago Five 9 Vulnerability 58d ago CVE Lite CLI closes dependency gap — but won't stop modern threats 58d ago Scope change 58d ago We just stopped a social engineering attack on our service desk. Here’s how it played out. 58d ago What is the most underestimated cybersecurity risk right now? 58d ago Update: Company is paying for any certification, which should I obtain? Except Sans 58d ago New paper: every AI model has a naturally occurring unforgeable fingerprint in how it ranks tokens, relevant to fake model detection and supply chain verification 58d ago Anyone else's firewall vendor docs a total nightmare? 58d ago Your opinions about a learning style 58d ago Why Real-Time Fraud Prevention Is the Only Way to Stop AI-Driven Attacks 58d ago New IronWorm malware hits 36 packages in npm supply-chain attack 58d ago Anyone else see their firewall logs just explode after a cloud update? 58d ago Are certifications necessary to get a job in cybersecurity? 58d ago Part 2: Bulk-Injection / Back-dating Signature Found in Public Tech-Governance Dataset (RDB Constraint Bypass) 58d ago Is retyping and translating textbooks too inefficient for CS/Cybersecurity? 58d ago Free Microsoft Enterprise Security Assessment: Worth It 59d ago How are organizations preparing for AI-generated phishing attacks? 59d ago Inside the race to adapt to an AI-powered security world 59d ago 127.0.0.1 in eight headers: what attackers hide in X-Forwarded-For 59d ago Microsoft blames unexpected Windows driver updates on caching issue 59d ago Critical Ledger State-Machine Violation Found in Public Tech-Governance Node Dashboard (Debit Card Transaction Injected on 0 Balance) 59d ago Your CPU model leaks through the browser via WASM timing differences 59d ago Chinese Cybercrime Group in Spotlight for Record Campaign Pace 59d ago Security Engineer 2 interview at Amazon coming up - What to expect? 59d ago A researcher spent $1,500 testing if LLMs could hack a vulnerable app 59d ago Help with university internship 59d ago Are MCP servers becoming the next API security nightmare? 59d ago What's the cybersecurity lesson you learned the hard way? 59d ago ISO 27001 Surveillance audit vs Full recertification 59d ago How important it is to get paid Cybersecurity certificates ? 59d ago Researcher Drops a New VS Code Zero-Day After Losing Trust in Microsoft’s Disclosure Process 59d ago Soc to Architecture 59d ago Does "example file vulnerability" exists? 59d ago VS code forces 2 hour cool down for most integrations. 59d ago Company laptop isolated after Brave/Tor alert - should I be worried? 59d ago Does anyone know how to send false positive to SOCradar ? virus total 59d ago Looking for people to team up for Bug Bounties & CTFs 59d ago Signal Without Smartphone 59d ago I found a trojan on my pc and now im scared my private calls got leaked 59d ago Meta, Microsoft & DOJ Smash Southeast Asia Scam Rings: 1.4 Million Accounts Removed, 63 Arrests 59d ago CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog 59d ago How do you change users behavior through awareness training? 59d ago AI-built ransomware toolkit automates EDR evasion, AD discovery 59d ago Safe Rust API for wolfSSL/wolfCOSE 59d ago Looking for feedback on my open-source OT detection ruleset (29 rules for Wazuh/Sigma) 59d ago AMD GPU Users might be compromised 59d ago [ Removed by Reddit ] 59d ago Five Eyes Warn: Chinese Spies Using LinkedIn Recruitment Tactics to Access Sensitive Information 59d ago CISA warns of cyberattacks targeting fuel tank monitoring systems 59d ago [CTF] Struggling to extract RTSP stream from generic Chinese IP Cams (Altobeam SoC) via ONVIF 59d ago how to get good at cyber security? 59d ago Anyone use CrunchAtlas? 59d ago Prompt monitoring laughs 59d ago Malicious Payload in ai-sdk-ollama npm Package 59d ago Can Someone Please ELI5 - "YellowKey" (CVE-2026-45585) to me? (an IT admin that survived the Great Global CrowdStrike Outage of 24) 59d ago what the HELL is dsztfso? 59d ago Yubikey Alternative....? 59d ago Hiring 59d ago CVE-2026-42897: Applying the Mitigation and Closing the Incident Are Not the Same Thing 59d ago Certification Advice 59d ago Question about Linux kernel TLS ULP disclosed June 2 to oss-security 59d ago An IT guy basically stole my entire gmail account and probably posted it somewhere...how do I search for this? 59d ago How to Rob a Data Center (new article on data center physical security) 59d ago US: California Back & Pain Specialists Exposes 133GB of Patient Medical Records on Public Server 59d ago Is it worth taking the EC councils masters program?? Are they legit /2026 59d ago Mid-level AppSec engineers: what do you actually study to prep for interviews? 59d ago Company is paying for any certification, which should I obtain? 59d ago Trusting Microsoft with your offensive security repos 59d ago Automated Fault Injection Attack Framework 59d ago Physical Biometric device as a security measure..?? 59d ago Cybersegurança 59d ago Started Learning Cybersecurity 59d ago InfraGard Application - Seeking Help | Student 59d ago Orientación en Ciberseguridad 59d ago Anthropic's coordinated vulnerability disclosure dashboard 59d ago Hands Free: What LLM Driven Vulnerability Research Looks Like 59d ago Real time Cybersecurity failures regarding Quantum computing/cryptography 59d ago 🕵️‍♂️ PCPJack Hijacked 230 Cloud Servers to Send Email. Here's How They Did It. 59d ago A two-year-old RCE bug in Redis was just made public. An AI tool found it. The full exploit chain is out. 59d ago CISA warns of active attacks exploiting Android, Linux bugs 59d ago Found some open ports on a govt site, should i report or stay quiet? 59d ago What is a good way to keep track of passwords for programs that don't support password managers? 59d ago Cybersecurity statistics of the week (May 25th - May 31st) 59d ago ASN Emissions Index. Networks ranked by how much noise they create on the internet. 59d ago Have you sold cve before? 60d ago i want to become a pentester, but i don't know how to 60d ago The OT Security Problem Nobody Wants to Own 60d ago Don't Take Wednesday Off When You Manage Vulnerabilities 60d ago I finally finished a production version after 4 yrds 60d ago Support role pivot to cloud security 60d ago How do you manage your passwords? 60d ago Mad rush to produce AI driven slop 60d ago O Tails é seguro para acessar links suspeitos? 60d ago Cyber Essentials plus + "legacy" network segments 60d ago Insight for OPSWAT deep CDR 60d ago Android vs iOS 60d ago ShinyHunters leaks Charter Communications data: 4.9M customer records exposed via a social-engineering attack on an employee's Microsoft account 60d ago Security Audits at an MSP 60d ago [ Removed by Reddit ] 60d ago Passkey registration breaks after moving off localhost.. 60d ago Does your team hire fresh AI engineer who doesn't know anything about Security operations? 60d ago UARs for Equation (banking system) 60d ago IoT pentesting cert 60d ago Anthropic Expands Project Glasswing, Bringing AI Cyber Defense Tools to 150 More Organizations 60d ago Experience with Tac Security 60d ago Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content 60d ago Found Security Vulnerabilities in my university website 60d ago Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign | Microsoft Threat Intelligence 60d ago AI - Threat to the CyberSec Industry? 60d ago Built a honeypot platform to catch lateral movement. How are you guys detecting this? 60d ago How should small SaaS teams safely answer customer security questionnaires? 60d ago Can AI Do Intelligence Analysis? Apparently Not. 60d ago PROMPTPurify - 14MB Tiny Prompt Injection Guardrail Open Weight Model 60d ago Regarding Certified Ethical Hacker (CEH Practical) exam 60d ago Asking for advices on pursuing first CERTIFICATE 60d ago I opened my own company and I can't find clients! 60d ago ShinyHunters vaza dados de clientes da Spectrum após recusa de resgate da Charter 60d ago Do you support the idea of creating a European commission that would issue special licenses for social media platforms, with standardized account creation rules and mandatory KYC (Know Your Customer) verification requirements across the EU? 60d ago Anyone knows Quad9 dns ? 60d ago I've a fullstack dev, I'm devleoping my own authentication for my application, Can anyone help me for it's security aspects ? 60d ago Greynoise swarm 60d ago SecOT+ certification for free 60d ago How is the state of the job market for mid-level security engineers? 60d ago Is anyone else still coding manually to learn? The market will continue to hire people that know what's going on even if you can now use AI to code many things 60d ago WaSteal Update: Infrastructure Pivoting Reveals 57 Additional Extensions, Campaign Now at 183 Total 60d ago Laid off from TPRM job - need help on the future of my career 60d ago Anyone compared RoboShadow vs ConnectSecure for vulnerability management? 60d ago Any one send vulnerability to MITRE? 60d ago Need advice for a 30 min Security Apprenticeship interview 60d ago UltraViolet: your own Shodan, in Docker, with CVE/KEV/EPSS 60d ago Microsoft insists Defender is enough for most PCs, but admits third‑party antivirus tools still offer extras it can’t match 60d ago Virustotal API as private data source 60d ago Account Number Security Flaw 60d ago Is Red Team Leaders Certification (RTL) actually useful for jobs or just for learning? 60d ago A PoC to demonstrate that without PMF, MAC filtering at the AP level is the only thing stopping selective WiFi deauth 60d ago [ Removed by Reddit ] 60d ago [ Removed by Reddit ] 60d ago Phishing simulation platform 60d ago Just task about OSI model 60d ago Need help improving DNS Spy from a security tool angle 61d ago Device Code Phishing Forensics: What We Learned Investigating BEC in the Wild 61d ago Oracle's first monthly patch update just dropped 77 CVEs. 61d ago Cleaning up after a legacy service account breach. How are you handling automated secrets discovery? 61d ago Airbus digital apprenticeship 61d ago Anthropic is expanding Project Glasswing — giving 150 more critical infrastructure orgs access to Claude Mythos to scan for vulnerabilities 61d ago Google fixes one actively exploited Android zero-day, 124 flaws 61d ago Can elections be hacked? Modern day computational propaganda techniques described by the EU's East Stratcom Task Force 61d ago Parsing Cisco IOS configs for CIS Auditing: Why regex fails on block contexts, and how are you handling offline static analysis? 61d ago Security Architects who who actively use modelling - What's your approach? 61d ago PAN-OS authentication bypass bug added to list of exploited vulnerabilities 61d ago I have extreme anxiety about being hacked 61d ago Fresher 61d ago Hackers Used Meta AI Bot to Hijack Instagram Accounts in Major Security Breach 61d ago Career advice needed! 61d ago GoDaddy found malware on 1,980 WordPress sites using Steam as C2 infrastructure 61d ago Google sr. security engineer interview 61d ago Is offensive AI actually changing cybersecurity, or are we overestimating the impact? 61d ago Multiple Red Hat NPM packages victim of Mini Shai-Hulud Miasma wave 61d ago is emerald chat safe? 61d ago Does anyone on this subreddit who has an VirusTotal premium account can help me with something important ? 61d ago ClickJack in the wild 61d ago Thoughts on A.I assisted Malware Analysis? 61d ago 19-Year-Old Linux Kernel Vulnerability Exposes Systems to Root Access 61d ago What articles do you use for cybersecurity news? (2026) 61d ago Is anyone using agents in regulated industries? How do you make sure sensitive data doesn't go back to the AI provider? 61d ago Roadmap and Training Recommodation 61d ago Les anti-triche de niveau noyau et leur risque de sécurité 61d ago Asked to Send Sensitive Documents via MMS 61d ago SC-200 compared to CC (isc2) 61d ago Every SaaS Company Is Accidentally Building Meta's Instagram Vulnerability Right Now 61d ago Looking to move off KB4, what are people actually using these days? 61d ago Got my Security+. What's next? 61d ago Vulnerability Summary for the Week of May 25, 2026 61d ago Malware 61d ago Alternative Search Engine to Utilize in 2026? 61d ago Hackers Simply Asked Meta AI to Give Them Access to High-Profile Instagram Accounts. It Worked 61d ago Windows Server vulnerability can grant system privileges with just a malformed packet — domain controllers are being exploited in the wild 61d ago Grand Theft Auto V cheat service gets hacked, exposing thousands of gamers 61d ago AI compliance 61d ago Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm 61d ago Is TeamPCP a Russian-affiliated APT? How can preventive security principles assist defending ecosystems against attacks on software supply chains? 61d ago MacBook or Windows Laptop for Cybersecurity 61d ago What's the most creative MFA bypass you've seen? 61d ago Research Notes from Building a Windows Event Log Hunting Workflow 61d ago How to fix securityheaders scan X-Frame-Options and Content-Security-Policy ?? 61d ago Free AI tools for TPRM? 61d ago incomplete phone number from togo, need help reporting to police 62d ago NPM packages from RedHat Compromised 62d ago Linux Copy Fail CVE-2026-31431: KEV Privilege Escalation on Shared Build Hosts 62d ago SOC Analyst working towards Threat Intelligence 62d ago Is XSS possible through PDFs? 62d ago The Next AI Governance Failure Won’t Be the Model 62d ago Microsoft MFA Is Down Again 62d ago Started my first writeup - Sherlock NeuroSync-D (CVE-2025-29927) 62d ago Computer logic or Science 62d ago I am a Full Stack Developer but I want to switch to a cybersecurity centered position. Which positions should I prepare for? 62d ago What C2s Are You Using 62d ago PNPT Exam 62d ago What do you do when a supplier refuses or lacks a reporting clause on vendor incident notification? 62d ago Any appsec engineer working in fortune 500? 62d ago I'm developing an IDS/EDR. I need suggestions which blind spots I have, whats missing and what should be added next 62d ago Anyone transition from AWS Data Center Operations to InfoSec? 62d ago I think my account got hacked but it's weird 62d ago current market for detecting deepfakes? 62d ago Worried about friend being doxxed on doxbin 62d ago how to shift from a service based company to a product based one in cybersecurity ? 62d ago Meta AI Password Reset Flaw Reportedly Bypassed Instagram 2FA 62d ago Claude AI user data directory exfiltration via malicious npm package 62d ago Bitdefender blocking amd stuff? False positive or? 62d ago Mentorship Monday - Post All Career, Education and Job questions here! 62d ago did they have my password?? what triggers this specific email??? instagram HELP. 62d ago ATTENTION: Dashlane may have been breached. (Password manager). 62d ago Norton blocked a “malicious script”? 62d ago Need Advice: Ex Claims He Still Has Access to My Mac/iCloud After Resets and New Accounts 62d ago Security researchers have uncovered a new attack technique that lets malicious websites spy on your browsing activity through hard drive. 62d ago I wrote about the 5 biggest threats in 2026, curious what this community thinks. 62d ago MSPs: What evidence do cyber insurance underwriters ask you for that is hardest to produce? 62d ago Im new to cybersecurity and have a iPhone 7 (iOS 15.8.5) I wanna pentest, any suggestions? 62d ago NetworkChuck 62d ago LLM for creating phishing tool 62d ago Why are we still treating IAM like a compliance checkbox? 62d ago Polyfill pop up? 62d ago SecAI+ difficulty question 63d ago Could you guys give an honest feedback to a completely automated ssrf attack tool? 63d ago tengo 61 y mi famila y amigos me espian I am 61 and my family and friends spy on me 63d ago Microsoft Joined the DMARC Club 63d ago Help. 63d ago Vibe Coding Security 63d ago Looking for a Company to Partner With 63d ago Best reporting tools? 63d ago What actually moved the needle on our alert fatigue (Wazuh + some automation, lessons after ~6 months) 63d ago How Can Polyfill.io Still Act Maliciously? 63d ago Need THM voucher code for cheap? Any known seller? 63d ago Ghost passwords? 63d ago Was a stipulation in my offer letter that I was required to obtain my CISM certification in 6 months... I did not. 63d ago LLMReaper - DOM Based AI Conversation Exfiltration via Browser Extensions 63d ago Anyone else having Chatgpt Strikes / Violations while learning cybersecurity? 63d ago Working at Cisco, worth it? 63d ago Want to Learn Cybersecurity in 2026 – Need Guidance, Roadmap, Tools, Resources & AI Advice 63d ago Are you pen testing AI Agents? 63d ago Question of android malware 63d ago External attack surface: how are you correlating DNS, SSL, and IP reputation today? 63d ago how do i properly setup 2fa and bitwarden? 63d ago Hacking India's Largest Exam Evaluation Portal: From Authentication Bypass to Full Account Takeover (Covered by BBC) 63d ago i need a partner to learn coding with me and have fun too,Hey, I'm 16 and just started learning cybersecurity and coding. I'm looking for a coding buddy around beginner level. We can learn Python, web development, and build small projects together. Anyone interested? 63d ago Question for teams running parallel agents: Would you actually pay for a deterministic control plane, or are we all just building custom wrappers forever? 63d ago Can Steam Cloud Files Transfer Malware 63d ago Questions for the cloud security engineers 63d ago Thoughts on this as a starter and doing bug bounty on the side 64d ago How are new SC-200 candidates practicing labs without an E5 Developer tenant? 64d ago Getting OTP spammed from every app and website I've ever used. Should I be worried? 64d ago A browser tool for checking contractor insurance certificates 64d ago Am I getting screwed? 64d ago SECODER | Security Coding Challenges for SOC Analysts & Detection Engineers 64d ago PAN-OS added to KEV, Langflow exploit activity, and a surprising Windows EPSS jump — today's most actionable vulnerability signals [Threat Intel 2026/5/29} 64d ago CTO at NCSC Summary: week ending May 31st 64d ago BountyLabs — Bug Bounty Training with Labs, Challenges, and AI Mentorship 64d ago Need suggestion 64d ago [INDIA] Need Advice: Shared mobile number risk on a joint minor account after a small P2P trade (P2P Fraud / Bank Freeze Anxiety) 64d ago Was Dave Bittner interviewing an AI? 64d ago CTF for complete beginner 64d ago Hitting a plateau after 2 years in Web Security: How do I transition from standard OWASP bugs to finding CVEs and novel techniques? 64d ago AI-Era Cyber Risk Standards 64d ago BEC Victim - Attacker replied inside a real email thread using a lookalike domain 64d ago Question for those who transitioned from remote to work from anywhere 64d ago Website Keeps Getting Falsely Flagged as Phishing/Malicious By Security Vendors 64d ago Do you enjoy what you do or do you wish you could go back in time and change it? 64d ago Is understanding how API keys, public/private keys, and secrets actually work necessary to work in cyber? 64d ago For those who made the jump to independent cybersecurity consulting, what was the hardest part of the first year? 64d ago Is a basic understanding of PKI and Public Key Cryptography necessary to work in cyber ? 64d ago Do you think AI will make cybersecurity products/services cheaper over the next 5-10 years? 64d ago Botnet of more than 17 million devices dismantled 64d ago Exposed credentials on logs 64d ago What do you think is the biggest cybersecurity risk for small businesses in 2026? 64d ago Wanted to shift to cloud security, but have some questions 64d ago Zero Trust is Overrated? Navigating the Complexity 64d ago Test API post with flair 64d ago Warning on MAD20 Subscriptions: $500 Blind Auto-Renewals and Hostage Certifications 64d ago How Do You Handle the Massive Amount of Information in the CPTS Path? 64d ago Help an upcoming cybersecurity engineer! 64d ago Repeated Microsoft MFA attempts even after password change 64d ago What Is Device Intelligence and How Does It Stop Fraud? 64d ago [FOSS Tool] WiFi-SpiderWeb V2.0: Active Cyber Defense for OpenWrt Routers with Live Radar Sweep (Python + SSE) 64d ago IBM commits $5 billion to secure open-source software 64d ago Structuring an AI-Assisted Pentesting Homelab for a Final Year Project 65d ago Are teams actually monitoring LLM traffic in production environments? 65d ago How to protect passwords from memory scraping/API hooking on a compromised target machine during a remote session? (No Admin access, No 2FA) 65d ago Raspberry pi 65d ago What is the biggest obstacle to using AI safely in a company? 65d ago Advice going forward 65d ago MCP Firewall help 65d ago I wanted to shift to security but people told me the market is extremely bad, is that true? 65d ago Best Personality Type/Traits for Working in Cyber Security 65d ago A fake freelance job interview almost installed malware on my PC 65d ago Is there a viable career path here or am I just being delusional? 65d ago What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks 65d ago How do enterprises actually prevent developers from exfiltrating source code? 65d ago I have a datastealer malware 65d ago Dúvida de carreira. 65d ago Someone hid a full RAT inside a fake npm package and exfiltrated victim data to HuggingFace 65d ago Need Cloud Security Engineer simulator to learn the Job. I need to be more hands on with running tools ,Please advise thank you. Your resources are appreciated 65d ago is SIEM really needed here ? 65d ago Decompiled an app, found a bunch of secrets, what now? 65d ago Can someone give me a correct method for learning reverse engineering? 65d ago Critical Gogs Zero-Day RCE Remains Unpatched After 2+ Months 65d ago GRC Advise 65d ago [ Removed by Reddit ] 65d ago Did something happen to haveibeenpwned? Any alternatives? 65d ago RAT SUSPECTED 65d ago How do people afford certificate s? 65d ago I’m curious — what’s one cybersecurity tip you wish more people knew before getting hacked or scammed? 65d ago Puck Scout: Autonomous, read-only endpoint investigation via MCP. Ask a question about your fleet, get a narrative answer with containment recommendations. 65d ago Phone Forwarding 65d ago Opinions on running Full Microsoft E5 Security Stack 65d ago Claiming "XDR" 65d ago Typosquatted npm packages used to steal cloud and CI/CD secrets 65d ago Microsoft security 65d ago Need help regarding building a home lab 65d ago Should I turn on passwordless accounts for all my Microsoft accounts? 65d ago Transitioning from AWS Data Center Operations to Security Engineering 65d ago Probably the wrong place. 65d ago What after IT helpdesk? 65d ago How are you security-testing API changes before production without slowing CI/CD? 65d ago Are we trusting update repos or are you all extra paranoid now as well? 65d ago Disgruntled 0-day hunter 'humiliated' by Microsoft pledges 'bone shattering drop' as Redmond calls cops 65d ago Prevent supply chain attacks 65d ago Cybersecurity Authorities Issue Joint Guidance on the Adoption of Agentic AI Systems 65d ago FBI warns of fake FIFA websites running World Cup fraud schemes 65d ago Hackers are trying to steal Signal users' backups in new wave of phishing attacks 65d ago Incident Response Testing Preparation 65d ago Kevin Mandia is speaking in NOVA on June 10 — probably the most candid you'll ever hear him outside of a major conference 65d ago [Open-Source] WiFi-SpiderWeb: Turn any OpenWrt Router into an Active Cyber Defense & Honeypot System via USB 🕷️🔥 65d ago 3rd Party NFC cards.. secure? 65d ago Vulnerability Management Tickets & SLA 65d ago Defending at Machine-Speed: Building AI Threat Readiness 65d ago AI agents running in our environment have broader access than our sysadmins and ownership of that is unresolved 65d ago HEAD request body processing leading 65d ago Malicious npm Package Stole Files From Claude AI User Directory via GitHub 65d ago Does anyone have an app like substack to keep being updated and engaging within the cyber domain? 65d ago What’s an attack vector people massively underestimate in 2026? 65d ago We security-reviewed our own free CVE tool and shipped the fixes - EPSS Lookup Tool v2.7 65d ago A Deeper Look at GLASSWORM's Solana Variant 65d ago Calling Cyber Security Beginners 66d ago Busco oportunidad laboral / consejos para iniciar en TI, ciberseguridad o análisis 66d ago built something for ai agents, ended up looking a lot like classic appsec 66d ago Is Gophish still usable in 2026? 66d ago Microsoft vs Chaotic Eclipse: three zero-days now actively exploited 66d ago what do you think 66d ago Why would be clicking a website, redirect me? 66d ago Zapier fixes bug chain that researchers say risked widespread account takeover 66d ago Writing cybersecurity policies is a waste of time 66d ago Raising the Cybersecurity Stakes: Ante up for the Agentic Era. 66d ago Public CAs are exiting client authentication. Most organisations haven't inventoried what depends on it. 66d ago [ Removed by Reddit ] 66d ago Released: Dataforge Honeypot 66d ago Google Unveils AI Threat Defense Platform to Fight AI-Powered Cyberattacks 66d ago CEH-free 66d ago Hottest cybersecurity open-source tools of the month: May 2026 66d ago Preparation tips for CPENT 66d ago How do you handle AI tools in your organization? 66d ago I think i got scammed anybody can help me with that 66d ago New phishing campaign targeting Japanese online banking users uses 'PayPoy' domain/branding typo 66d ago Is it safe to have passwords copied to clipboard on IOS temporarily? 66d ago Developers working on anti-fraud systems deserve more credit 66d ago My company is moving to security clearance requirements but I am a foreign national. Anyone know time lines / realistic outcomes for me? Currently working as a sec analyst 66d ago Security awareness training for AI heavy smb workflows? 66d ago Minimum Requirements for Helpdesk Role ? 66d ago Reddit spear phishing 66d ago GitHub - iss4cf0ng/OpenPetya: A Proof-of-Concept bootkit inspired by Petya ransomware, written in Assembly, C, and C++ 66d ago What to do 66d ago What resources would you recommend for studying cysa+ 66d ago Provenance of Data 66d ago Websites have a new way to spy on visitors: analyzing their SSD activity 66d ago 12 years in secops, military to vendor then internal. Internal feels like all loss and no win. Is this normal? 66d ago Russian Art Teacher - Hinder Security Clearance? 66d ago EDR/MDR Vendor Questions 66d ago Cybersecurity as a Highschooler? 66d ago New department created, would love your input 66d ago OWASP Vienna - anyone going? 66d ago Interview with Upstart 66d ago 18, immigrant in Portugal (no Portuguese), failing high school. Need a stable path to Hardware/Network Cyber. 66d ago Is cloud security engineer viable with my current position? 66d ago Cloudflare Access users: what would actually make JIT useful for you? 66d ago eBPF to Detect Unexpected Control-Plane Traffic Inside GTP-U Tunnels 66d ago Questions regarding Ubuntu 24 LTS hardening 66d ago Cómo puedo interferir señal de un dispositivo que está cerca de mí para que no le funcione la señal de wifi a la que él está conectado, cómo puedo protegerme? Se me tipos de cómo protegerme, soy nuevo en esto, me gusta mucho. 66d ago Honest question about OT Security Engineer work life in India 66d ago Who is using CVE Lite CLI? Share your use case (OWASP Incubator Project for JS/TS dependency scanning) 66d ago AI Security 66d ago Iranian threat group targets US aviation sector with AI-assisted ‘MiniFast’ backdoor 66d ago 🚨 Exposed Global Smishing Operation Hitting 19 Countries Across 3 Continents 66d ago Building Detection Engineering on AWS from scratch — roast my plan 66d ago Academic Survey - AI in Cybersecurity Governance and Regulatory Compliance 66d ago I went to prison for internet piracy and hacking; my FBI profiler sent me a message on LinkedIn when I got out, and now we’re presenting at SLEUTHCON. I'm Josh Brody and I ran HeheStreams: AMA. 67d ago Research: All three major eBPF security monitors (Falco, Tracee, Tetragon) can be silently disabled via BPF map poisoning 67d ago Final Year Project: Looking for non-generic IAM project ideas that solve real problems 67d ago GlassWorm takedown: year-long developer supply chain campaign using VS Code extensions and npm packages dismantled. 67d ago Breaking out of IT Helpdesk - how? 67d ago A year in Cybersecurity — Where Do I Go From Here? 67d ago MalShark: MCP-Powered Malware Traffic Analysis — Benchmarked Against Real Malware 67d ago 22, SOC Analyst experience + certs, still no interviews since January - looking for honest advice from people in cyber 67d ago FBI: Silent Ransom Group Turns to IT Support Ploy 67d ago How do machine builders track Siemens/Rockwell security advisories? 67d ago GlassWorm Developer Supply-Chain Botnet Takedown 67d ago The Word 'Toad' Gave Any Website Full Control of Chrome's Most Popular VPN 67d ago Active Exploitation - LiteSpeed cPanel Plugin CVE-2026-48172 CVSS 10.0: Root Privilege Escalation added to KEV 67d ago Got cybersec work what next ? 67d ago Hi everyone! I’m a doctoral student conducting research on how people’s cybersecurity concerns affect their use of technologies like Apple Pay, smart devices, wearables. I’m looking for adults (18+) who currently use or have recently used these types of technology; smart devices or smart wearables 67d ago Ekoparty Miami - Interface Anti-Patterns: Exploiting Insecure Navigation in 3rd Party Android App Lockers 67d ago Trying to understand the scope of NVIDIA's attestation (NRAS), what am I missing? 67d ago GitHub - facebook/mcpguard-dynamic: Kernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP) 67d ago nightmare eclipse is probably French here is why 67d ago Poor Risk Analysis Cost 4 Firms $1.7 Million in HIPAA Fines 67d ago Measuring performance of JA4/JA4H AI Model 67d ago What things are you really focused on this year? 67d ago Hypothetical EDR spoofer 67d ago ISO 27001 Audit Stage 1 67d ago Microsoft SharePoint Has a New RCE Flaw. If You Haven’t Patched Yet, Go Do That. 67d ago Looking for Hacker Friends to Learn☺️ 67d ago Comptes Instagram et Facebook piratés et désactivés 67d ago How to safely disinfect a USB stick from potential malware files? 67d ago Is anyone else concerned about how quickly AI is outpacing cloud security? 67d ago What's a CyberSecurity job like? 67d ago Microsoft Live credential stuffing 67d ago I am on placement and part of a lab where we use cyber security and do research what jobs are similar to this? 67d ago Security architects- summarize your responsibilities and role 67d ago Finding Work in OSINT 67d ago State of SDLC Security 2026 67d ago Reported to police for coding html 67d ago [Open Source] Desarrollé un mutador de huellas TLS en Rust para evadir sistemas Anti-Bot (JA3/JA4 scrambling) 67d ago I open-sourced KernelEye — an eBPF/XDP-based Linux server security monitoring project 67d ago Iranian hackers blamed for breach of Los Angeles transit system that took weeks to recover 67d ago Shai-Hulud Hackers TeamPCP: Lucky or Skilled Operators? 67d ago KnowledgeDeliver flaw exploited as a zero-day to install web shells 67d ago Breaking GROK'S DEFENSES to make it HACK Real Public Websites 67d ago GitHub Actions Cache Poisoning is eating open source 67d ago Nightmare-Eclipse has also been banned on GitLab :DD 67d ago Do we still have time before we are in the Age of the movie "Minority Report"? ↓ 67d ago SimHub (popular sim racing dashboard software) appears to silently disable Windows Defender via hidden Group Policy file 67d ago What Software Supply Chain, Water Filters, and Power Grids Have in Common 67d ago QA engineer trying to move into AppSec — does this plan hold up? 67d ago Is work from anywhere really impossible to find?? 67d ago Cybersecurity statistics of the week (May 18th - May 24th) 67d ago Engineering a Post Quantum Fortress Inside the Citadel Archite 67d ago Cyber Security Analyst 67d ago Environmental consulting firm pushing heavy AI adoption despite employee concerns over environmental impact and data governance 67d ago Two layer email security tool thesis 67d ago When OTP rate limiting fails: OLX account takeover with persistent sessions 68d ago Entra ID sessions revoke 68d ago Anyone who attended GPCSSI before? Need some clarification 68d ago Lost on my career path. 68d ago EU-based folks: external pentest vs mandatory data/security training? 68d ago help needed from experienced people 68d ago How do you evaluate whether a privacy service is actually privacy-respecting? 68d ago Which one Intellipaat or coursera which one to choose 68d ago CERT-In Recommends 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks 68d ago India's CERT-In just mandated patching critical vulnerabilities within 12 hours. That sounds good — but is it actually realistic? 68d ago Audited 20 production repos after the May supply chain attack. Every single one had at least 3 of the 8 misconfigs. 68d ago Did anyone pass the SC-200 certificate recently? 68d ago Honeypot 68d ago passkeys, MFA, biometrics, and you can still reset everything with access to one gmail account 68d ago Career in IAM as a fresher 68d ago CISA orders feds to patch actively exploited Drupal vulnerability 68d ago Telegram's Hidden Gatekeeper? OCCRP Probe Puts Spotlight on Shadowy Engineer Linked to App's Infrastructure 68d ago GitHub bans vindictive security researcher dropping Windows zero-days: “I will make sure your bones are shattered” 68d ago Cyber security tool 68d ago Saw this tool and it has potential 68d ago 🚨 14 npm/PyPI/AI Supply-Chain Threats Today (2026-05-26): Critical Worms, Parse Server DoS, and AI RCEs 68d ago 7-Zip CVE-2026-48095: NTFS Heap Overflow Can Trigger Through Renamed Files 68d ago Follow up : showing Claude install random pacakage in its vm instance without asking or prompting 68d ago ¿Is safe? 68d ago Need help 68d ago What is the best tool for masking in kali 68d ago What are the best tools other than ghostTracker? 68d ago TrapDoor Cross-Ecosystem Crypto Stealer Campaign 68d ago Follow up : Steal Your Files Claude AI installing package because internet say so 68d ago New to Cybersecurity: Looking for general advice & help with Nmap 68d ago Open sourcing our hardware red team RF toolkit: the Crimson Flipper Arsenal 68d ago Looking for tech role references 68d ago How do you balance Paw? 68d ago I'm a security professional who has dealt with ransomware. AMA about incident response and business continuity. 68d ago From Stuxnet to Handala: The reverse-engineering of a nation-state cyber weapon and its implications for ICS/SCADA security 68d ago Ghost CMS flaw being actively exploited to compromise 700+ sites and serve malware to visitors through fake CAPTCHAs. Patch has been out since February 68d ago What Companies are Legit? 68d ago start learning cybersecurity from scratch 68d ago Follow-up: measuring LLM-agent failures with replay evidence 68d ago Follow-up: measuring LLM-agent failures with replay evidence 68d ago WhatsApp users on alert after hacker drops massive dataset 68d ago 17 years old going into CS — what certs should I start going after now? 68d ago i want to hire an osint expert 68d ago Open University pros/cons 68d ago How important do you think browser/device fingerprinting has become for modern fraud detection compared to traditional bot detection? 68d ago Career in IAM as a fresher 68d ago Anyone Can Silently Steal Your Files from your Claude AI chat – Live Demo 68d ago Need Advice 68d ago Before going to college, what certifications should I get to prepare myself for cyber security as a person with no experience with cyber security at all? 68d ago Someone from Germany on iOS keeps trying to login to my MSFT account 68d ago AI cautionary tale... 68d ago AI powered red vs blue teaming 68d ago Starting a security analyst student apprenticeship next week, need advice 68d ago Why CVE Does Not Work for AI Agents, but AVE? 68d ago SC-200 or Security+ — which actually helps land a security title 68d ago How about AI having access to your hard drive. 68d ago How a Date Tag Hijacks macOS via ExifTool 68d ago Need ideas for final year cybersec project : “CodeSafe” MCP for AI coding tools 68d ago How credential brokering prevents AI agents from compromising credentials via prompt injection 69d ago Built a tiny daily cyber puzzle game during evenings/weekends 69d ago Crypto4A launches quantum-safe rival to AWS Secrets Manager 69d ago ZTE rated this router leak 3.5 Low. NVD rated it 6.5 Medium. The impact explains why. 69d ago Cyber Sec project 69d ago CySA+ 69d ago Anyone tried Morgancyberhelp ? 69d ago As AI speeds coding, CVE Lite CLI keeps security deliberately AI-free 69d ago Why are most of the dfir tools built to be used in windows 69d ago OnlyFans mega leak reveals 340M user records, hackers claim 69d ago Perplexity BumbleBee 69d ago Cisco patches critical 10.0 flaw in Secure Workload APIs 69d ago Stalker has my phonenumber 69d ago Need some guidance 69d ago Are you currently allocating budget to services that remove executive PII from B2B data brokers? 69d ago About CEHv13 book 69d ago We open-sourced the most dangerous part of our security startup on purpose. 69d ago Which conference(s) result in the most people finding jobs? 69d ago My discord account has been hacked second time even after enabling two factor authentication and resetting password 69d ago What's the most efficient way to learn cloud governance and compliance 69d ago Does anyone know C2 framwork and free hosting to host C2? 69d ago CIS-CAT Assessor for assessment Windows server 2022 and 2025 69d ago Auditor wants a specific access report format and our IAM tool can't produce it, how do you handle this 69d ago Installed BlueStacks, 3 hours later "new login on your google account" and its from the same city as me and a samsung s22 galaxy that i did not authorize, does this have any relation to bluestacks? 69d ago Recent adoption of AI taught me what is Cybersecurity. 69d ago The Pentagon Changed the Rules for Cybersecurity Compliance 69d ago Can someone explain to a noob like me what the implications of this exploit are? 69d ago SHub's "Reaper" Variant Seen Bypassing New macOS Terminal Protections 69d ago Window between zero-day CVE and a patch! 69d ago Is it risky when a website puts on technology components with versions they used in their website? 69d ago Anyone else losing their mind over this "AI Cybersecurity" hype? 69d ago URL parsing behavior in a canonical tag lab 69d ago Would an open source CLI tool that audits GitHub repos for supply chain attacks be useful to you? 69d ago Any tips for me pls 69d ago How do you minimize legal liability as a solo contractor? 69d ago How does your MSSP handle fine-tuning detection rules for false positives? (e.g. "Guest" policy hitting UDP/TCP scan alerts) — do you verify with the customer before suppressing? 69d ago Mentorship Monday - Post All Career, Education and Job questions here! 69d ago Provenance: A survival toolkit for an AI dominant information landscape 69d ago [ Removed by Reddit ] 69d ago Active Drupal SQLi exploitation is a real „patch now“ moment 69d ago machscope — macOS XPC, Mach services, launchd, and trust relationship explorer (zero-dependency, terminal-native) 69d ago Need suggestions and input; not a promotion 69d ago Need advice! 69d ago New Zealand is becoming a focal point for AI-driven superhacking threats. 69d ago nmap on Linux: Guide to Network Scanning and Discovery 69d ago TrapDoor supply-chain campaign hits npm, PyPI, and Crates.io with AI-assistant poisoning angle 69d ago How would Phishing look like in the future? (targeting agents, not humans) 69d ago Best beginner/intermediate book for system security (blue team / defense / audits)? 69d ago Why is on-prem and air-gapped asset inventory still such a mess? 69d ago keep getting MS authentication sign in attempts? 69d ago Silly issue 70d ago How to practice cybersecurity while studying prograaming ? 70d ago [AI Security] Exploring Behavioral AI for Runtime Threat Detection 70d ago Podman and krun: is it pointless to harden quadlets? 70d ago How to handle security researchers (and firms) without a bounty program? 70d ago Product analytics is becoming a third-party breach surface 70d ago How can i learn and get into red teaming? 70d ago Governments increasingly assume they’ll use offensive cyber tools as part of state power | Federal News Network 70d ago I got hacked 70d ago Soc analysts in big companies, how it looks like? 70d ago CTO at NCSC Summary: week ending May 24th 70d ago These special phone and app features can help protect you from spyware 70d ago Is there a tool that lets you automatically rotate all your ssh keys and k8s creds and whatever else with a click of a button? 70d ago Capcha Code Malware 70d ago getting lost when hunting 70d ago How to find information behind an account? 70d ago Theoretical Design Concept for Post-Exploitation Browser Defense 70d ago Google Certifications... 70d ago How to continue when finding a possible Vulnerability but local law prohibits me from investigating further 70d ago Netherlands seizes 800 servers of hosting firm enabling cyberattacks 70d ago Is the CISSP still a reputable cert for getting jobs? 70d ago Which of these gоv roles would fare better in the private sector? 70d ago Laravel Lang packages hijacked to deploy credential-stealing malware 70d ago Mapping binaries to EDR feature spaces 70d ago Lost my number + WhatsApp account — worried about old chats, photos, and videos 70d ago what is the most painful or time-consuming part of your work right now?" 70d ago Anthropic says Mythos has already found more than 10,000 vulnerabilities 70d ago What is the experience needed for “entry level” cybersecurity jobs? 70d ago Browser extension testing. 70d ago Interviewer ask me if you observe port scanning from internal ip , the scanning ip is not authorised for scanning. How will you investigate it and how will you find attackers ip? 70d ago Have you ever had your face or voice misused by AI? I’m building a free reporting tool and need feedback 70d ago Prompt Injection finally broke my brain a little. My first article as a cybersecurity student, cat approved edition 70d ago Can someone recommend me some good, large universities to study cybersecurity? 70d ago New guy khikhi 70d ago Examples of intentional backdoors being breached? 70d ago Non-Compliant Vocab 70d ago Drupal Core SQL injection flaw actively exploited less than 48 hours after patch. 15,000 attack attempts already recorded across 6,000 sites 71d ago infostealers just spawned a 5,000+ repo github supply chain attack 71d ago The latest Megalodon campaign against GitHub leveraged a spray of fake PRs targeting CI workflows. Here's the complete analysis 71d ago GRO frag 71d ago We audited 12K n8n templates: most have critical vulnerabilities 71d ago Zyxel super-admin credential leak expanded from one router image to CPE/ONT/LTE/5G devices + password gen algorithm. 71d ago Taking the PSAA - Practical SOC Analyst Associate by TCM Security next week 71d ago Mitigated Vulnerabilities by Vendor as Feed 71d ago Kash Patel-Linked Merchandise Site Goes Dark After Hack Allegedly Spread Malware to Visitors 71d ago A new GitHub attack dubbed Megalodon compromised more than 5.5K repositories 71d ago Where can I find the tools freely on internet to practice for soc analyst 71d ago residential proxies 71d ago Recommendations for getting started in cybersecurity 71d ago Linux mint or Ubuntu for complete beginner 71d ago Indirect prompt injection is jokingly trivial. AI is social engineering a toddler with the knowledge of the world. 71d ago Pentesting company recommendation 71d ago Have you ever failed a certification exam? 71d ago AI Chatbot Security Research – Prompt Injection Behavior in Financial Context (Seeking Responsible Disclosure Guidance 71d ago What do i need to learn to get into application security? Which Degrees/Certs 71d ago RSAC online membership? Is it worth it? 71d ago Can someone give me a detailed roadmap for becoming a SOC Analyst? 71d ago Puedo conseguir trabajo? 71d ago How do i learn networking for cyber security? 71d ago What's going to be Hacking and Cybersecurity's future is gonna be like? 71d ago Cyber security placement - Interview Help 71d ago Anonymous revendique le piratage de satellites chinois pour protester contre les lois sur la vérification de l'âge 71d ago Feedback needed 71d ago Handoff Transition 71d ago Just added an interactive security map showing exactly what the server sees (and doesn't) 71d ago Trend Micro warns of Apex One zero-day exploited in the wild 71d ago Lawmakers Demand Answers as CISA Tries to Contain Data Leak 71d ago https://www.reuters.com/business/finance/morgan-stanley-asks-bankers-carry-separate-phone-china-trips-source-says-2026-05-20/ 71d ago Harvard and 140 other legitimate websites compromised 71d ago Votre Satisfaction Dans Votre Travail 71d ago 5,561 GitHub repos got malicious CI/CD commits injected in 6 hours. The commits looked exactly like routine bot maintenance. Here is what happened and how to check if you were hit. 71d ago US states urge Congress to renew cybersecurity grants 71d ago The CISO's Guide to IDE Security in 2026 72d ago Help with evilginx 72d ago Watching AI Brain Drain on Attackers in Real Time 72d ago Zyxel super-admin credential leak expanded from one router image to CPE/ONT/LTE/5G devices + password gen algorithm. 72d ago api-rta cyberwarfare labs 72d ago Does Security Implement Fixes? 72d ago Ultimate Cybersecurity without needing AV ect? 72d ago User Onboarding with IAM 72d ago pnpm 11 Might Finally Be a Better Default Than npm 72d ago 14 npm/PyPI/AI Supply-Chain Threats Today (2026-05-22): Critical Worms, Credential Harvesting, and RCEs 72d ago Hunting a PhaaS Operator: From Phishing Email to Lagos, Nigeria 72d ago Millions of NGINX Servers Face Fresh Zero-Day Concerns After Recent Rift Patch dubbed "nginx-poolslip" 72d ago Looking for a cybersecurity professional to interview for a university project (interview in French) 72d ago Safe read-only check script for Copy Fail / CVE-2026-31431 72d ago New to GRC at an MSSP startup. Want to build a local AI on an RTX 3050 to automate documentation without leaking data. Possible? 72d ago [TOOL] CLR-Stomp – BOF-Based .NET CLR Stomping for Stealthy inlineExecuteAssembly 72d ago Cisco used AI to write security incident reports, with mixed results 72d ago [TOOL] QSLCL v2.1.4 - Universal Silicon Communication Layer (DFU/EDL/BROM) 72d ago Cyber Insurance Actuary Looking for Educational Resources 72d ago As a bank , how do i give protected access to claude to my team? 72d ago Can seasonal Apple Store employees apply for internal IT/cybersecurity roles? 72d ago Reliable IP reputation check tools besides IPQS?(for work) 72d ago Supply Chain Security Crisis: Too Many Vulnerabilities, Too Little Visibility (5/2026) 72d ago Time to Switch: How to Set Up Passkeys Before Microsoft Ditches SMS 2FA Logins 72d ago Hacked by Rat Tools for 2.5 years. 72d ago Google API Keys Remain Active After Deletion 72d ago how do cyber sec consultants and pentesters actually get new clients? 72d ago Post Incident Paranoia? 72d ago Verizon DBIR 2026: Vulnerability Exploitation Overtakes Credential Theft as Top Breach Vector 72d ago Upcoming CS Student: What OS approach is best to balance university coding and learning cybersecurity? 72d ago Sensing ‘renewed outbreak’ of war, Iran hackers vow ‘dozens’ of ‘devastating’ infrastructure attacks ready 72d ago You can counter MEMZ with Krotten in XP 72d ago What are the most effective ways to do Blackbox testing? 72d ago Npm registry sets stage for more secure package publishing 72d ago Need a Wi-Fi Adapter for Better Range + Wi-Fi Pentesting Support 72d ago Basira - open source AI code reviewer with OWASP audit, 0 CVEs, BYOK 72d ago Is the Cybercorps SFS still worth it? 72d ago Microsoft warns hackers are exploiting password resets to gain access to user accounts 72d ago Unpopular opinion: the GitHub breach is 100% predictable and the security industry deserves the blame 72d ago WORM USB drives 72d ago An OWASP-aligned launch gate for AI agents — Would you please share critique on the threat model? 72d ago CISOs - Holding the Line 72d ago A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale 72d ago Security Scroll Down? 72d ago mass github repo backdooring via CI workflows(Megalodon) 72d ago Threat Modeling Autonomous Dev Agents: How do we cryptographically prove a human actually reviewed a commit? 72d ago CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox 72d ago DNS blocked by Cisco Umbrella, but symantec EDR & Event Viewer are completely blind 72d ago FaceTec (ID verification) company appears to store user biometrics 72d ago CVE-2026-34474: ZTE H298A / H108N routers expose credentials before authentication 73d ago It seems that FaceTec (ID Verification company) allows for storage of user biometrics 73d ago Two Microsoft Defender vulnerabilities actively exploited. One grants full SYSTEM access. CISA has a June 3 federal deadline. Here is what to check. 73d ago Can I block outbound connections to Google cloud on my host firewall? What port? What IP range? Any advice. Trying to prevent Google spying and collecting data 73d ago What Questions Do You Ask During SSP Control Interviews? 73d ago Feed The Cat BackDoor 73d ago Flipper One - Asking for help from the community 73d ago Flipper One — tech specs 73d ago Architecture Zero Trust détaillée 73d ago Cybersecurity in Healthcare 73d ago Staged publishing for npm packages | npm Docs 73d ago 9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros (Yes there is another one, only a CVS 5.5 though this time, still looks pretty bad though) 73d ago Neither MFA, Passkey, nor trusted IP help here 73d ago cyber security remote 73d ago CSIRT incident response 73d ago Trying to find a graduate role 73d ago Microsoft warns of new Defender zero-days exploited in attacks 73d ago what is the best security app option for pixel8a? 73d ago How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102) 73d ago IoT Security 73d ago GitHub links repo breach to TanStack npm supply-chain attack 73d ago Another working Linux LPE exploit is out. How are teams treating local-only bugs now? 73d ago Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks 73d ago Google publishes exploit code threatening millions of Chromium users 73d ago landing a remote Vulnerability Management role 73d ago Three low-hanging vulns in a Rails SaaS: unauthenticated S3 uploads, rate-limit bypass via proxy pool, and OAuth route leaking internals. Full authorized case. 73d ago I feel like the past month has been more optimistic than in the past with AI taking jobs. Has the market been the same for those hunting? 73d ago Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit 73d ago What volume of TPRM do you handle per month? 73d ago safest virtual machine? 73d ago Second Time, Same Sandbox: Another Anthropic Claude Code Network Sandbox Bypass Enables Data Exfiltration 73d ago Cybercrime service disrupted for abusing Microsoft platform to sign malware 73d ago GitHub notifications 73d ago Is there no more privacy left in the world? 73d ago Microsoft Edge had a password blunder, and it raises a bigger browser trust problem 73d ago Huawei zero-day attack behind last year’s crash of Luxembourg's entire telecoms network 73d ago Aconselhamento / mini texto 73d ago CISA with an absolutely embarrassing data leak. 73d ago Microsoft is pulling the plug on SMS codes, wants you to switch to passkeys 73d ago Anyone else feeling like static AppSec workflows are starting to hit limits? 73d ago GitHub breach highlights developer tools as part of attack surface 73d ago Why do some malware use unique user-agent strings? 73d ago Encrypted emails bypassing email security tool 73d ago Ctf groups 74d ago Score by collisions, patch by panic: defensive architecture for the post-90-day-disclosure era 74d ago Opensource that automatically scans your git repos for breaches 74d ago CVE-2026-34472: According to ZTE, an unauthenticated auth bypass is just a 'customer-specific low-risk requirement.' MITRE disagreed. 74d ago Your developers are deploying agents in your production environment right now. You have no governance for it. 74d ago ¿Como me preparo para EC-Council CSA? 74d ago The IBM X-Force Index 2026 explains all three in one finding. 74d ago Securing iPad's question 74d ago Cybersecurity 101 74d ago What would this job role be? 74d ago MSPs & MSSPs suck 74d ago [ Removed by Reddit ] 74d ago Crossroads 74d ago Advice regarding "SOC" job that automates everything 74d ago Is this Medium article about "NetMirror" malware legit? 74d ago AI silently removed human-in-the-loop security checks during a large refactor. Is this a known phenomenon? 74d ago Developer tooling is part of the attack surface before a project is even run 74d ago How the hell do you manage developers, their code, their apps? 74d ago Hackers Spent Nearly 3 Months Inside the New York City Health System Before Anyone Noticed 74d ago Do people still rely on antivirus software in 2026, or is built-in security enough now? 74d ago GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories 74d ago Automatic CLI for spinning up vulnerable labs + objectives 74d ago ISO/IEC 27701 scenario question 74d ago Discord rolls out end-to-end encryption on voice, video calls 74d ago GitHub investigates internal repositories breach claimed by TeamPCP 74d ago Two AI-based science assistants succeed with drug-retargeting tasks 74d ago America's top cyber-defense agency left a GitHub repo open with with passwords, keys, tokens – and incredibly obvious filenames 74d ago An AI coding assistant installed malware into production environments. Nobody typed the command. AMA on what "supply chain attack" means now. 74d ago New to cybersecurity 74d ago Anyone interview or work with Moxfive? 74d ago A stealth Firefox version that passes all anti-bot and CAPTCHA 74d ago mkPIVM - a polymorphic position-independent shellcode virtualizer 74d ago Started in IT and need a Cybersecurity Roadmap with my Useless Degree! 74d ago GitHub announces internal data breached. 74d ago Roadmap to Cybersecurity roles 74d ago Malware installed without literally doing anything? 74d ago CTFs 74d ago Crossroads 74d ago Canara Bank SuRaksha Cyber Hackathon 2.0, 74d ago Anti BOT Tipps und Tricks gesucht. 74d ago GhostTree: Unveiling Path Manipulation Techniques to Bypass Windows Security 74d ago New to Cybersecurity 74d ago Is the ISC2 Certified in Cybersecurity worth it? 74d ago Average Days to Close by Source CNAPP Severity Tag 2026 74d ago I want free nmap resource 74d ago If I clear browser history regularly, does it reduce the chances of malware that target browser data? 74d ago What is next after 1.5 Year as Security Analyst? 74d ago Analysis advice 74d ago Stop me if you heard this one before... (YellowKey related) 74d ago Can you be protected from yellowkey by disabling WinRe? does it work from support os then WinRe? 74d ago Looking for advice: where should I post/publish CVE write-ups? 74d ago Cybersecurity statistics of the week (May 11th - May 17th) 74d ago How can I test my website locally for cybersecurity? 74d ago Use of coding in security operations 74d ago Iran demands Big Tech pay fees for undersea Internet cables in Strait of Hormuz 74d ago Microsoft disrupts cybercrime service that abused software verification systems en masse 75d ago I've built an open source honeypot probe database accessible via curl, http and mcp 75d ago 6,000+ Automatic Tank Gauges Exposed With No Authentication 75d ago Twice in two days I've had a MS Auth request from a random device, I changed my password after the first, what more can I do to protect my email? 75d ago If humans are the weakest link, why won't companies evolve? 75d ago Someone asks "How much does a VAPT cost?" or "Do we really need a penetration test?" 75d ago Cloudflare's CISO gives his hands on review of Anthropic's new Mythos LLM 75d ago Local transcription vs cloud transcription, which actually feels safer? 75d ago Why do governments and militaries still use what amounts to giant preshared electronic codebooks when we have really good encryption today? 75d ago Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise 75d ago Shai-Hulud source leak is turning npm malware into a copycat problem 75d ago Framework for Preventing Secret Ideas from Leakage 75d ago Local LLM for building AI Security platform 75d ago SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access 75d ago Emerging Cyber security niches 75d ago ISO/IEC 27701 75d ago Solo dev building a terminal-heavy hacking game inspired by corporate security 75d ago Symantec has published its analysis of Fast16: a pre-Stuxnet sabotage tool built to subvert nuclear weapons simulations 75d ago CS/IT Student Looking to Grow My LinkedIn Network 😃 75d ago CVE-2026-34473: Unauthenticated Denial of Service in ZTE Routers affecting 140K+ devices worldwide (17+ models) 75d ago Is Amazon Cognito a good choice long term? Alternatives? 75d ago Was hacking easier in the 80s and 90s and early 2000s? 75d ago Need some Advice in SOAR heavy environment 75d ago Trying to find serious builders in cybersecurity - not just “let’s build” conversations 75d ago AI Phishing 75d ago One Hacked Login Led to a Massive Cloud Breach, Microsoft Reveals 75d ago How easy is it to get into the cyber security field? 75d ago 314 npm packages just got compromised, 271 @antv, echarts-for-react, size-sensor, timeago.js 75d ago Frontend SWE (3-4 YOE) looking to pivot to AppSec. Where should I start? 75d ago ‘The Worst Leak That I’ve Witnessed’: U.S. Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub — Gizmodo 75d ago CEH/CPENT vs OSCP vs GPEN 75d ago ntroducing Yokai Linux — A Cyberpunk Security-Focused Linux Distro” 75d ago CISA Contractor Admin Leaked AWS GovCloud Keys on Github 75d ago Suspecious activity in my account 75d ago Is it safe to use my first name and middle name on platforms? 75d ago Stuck choosing a cybersecurity specialization — especially with a local market context (Senegal). Need honest advice. 75d ago Just received an email from shinyhunters about their amtrack hack 75d ago Optoma CinemaX Projectors: Critical Vulnerabilities Including Remote Root Access 75d ago Bywaf: an auditable Python commandlet framework for chained pentest workflows 75d ago For anyone currently working in a SOC: 75d ago Fellow Tier 1 SOC/Security Analysts - What does your day to day look like? 75d ago How do you threat hunt for RMM tools in environments where RMM is all over the place? 75d ago Microsoft - "your single use code" email when it was not requested by yourself 75d ago Directory of vendor security questionnaires 75d ago Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised 75d ago MCA student with 2 yrs SOC/VAPT experience struggling to land interviews — looking for guidance/referrals 75d ago Cybersecurity job market in Phoenix (East/West Valley?) – looking for local insight 75d ago How is AI affecting the cybersecurity market? 75d ago MCP security 75d ago YellowKey Mitigation 75d ago Anyone else on the receiving end of ShinyHunters extortion email? 76d ago Ultimate irony: Microsoft researchers say you shouldn’t trust AI with work docs 76d ago What’s the biggest mistake people still make about online security in 2026? 76d ago Anthropic shuts the EU out of its most advanced cyber AI model 76d ago Most AI agent governance playbooks still assume you can turn the agent off... Once its wired into production that stops being true [Rethinking AI security through a dimmer switch lens] 76d ago Best hotel for attending all three conferences in Vegas? 76d ago What's your company's actual PQC migration plan? Not the one on paper - the real one. 76d ago Does buying local cybersecurity (services/products/etc) matter to you? 76d ago LinkedIn user hides AI prompt injection in bio to force recruitment spam to be sent in Olde English prose 76d ago Detection Engineering AI Maturity Framework 76d ago Microsoft code 76d ago Microsoft confirms Windows 11 security update install issues 76d ago Linus Torvalds says AI-powered bug hunters have made Linux security mailing list ‘almost entirely unmanageable’ 76d ago Exploit available for new DirtyDecrypt Linux root escalation flaw 76d ago Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware 76d ago Suspicious with a company offer letter 76d ago Direct external access to CyberArk PVWA vs. enforcing a VDI/Jump Box first? 76d ago Why do some recovery workflows still require full wallet uploads? 76d ago Need help with interview for soc l1 76d ago Feeling stuck in SOC want to moving toward Detection Engineering & Cloud Security (need guidance & cert roadmap) 76d ago New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released 76d ago carrer path in cybersecurity for a btech stud 76d ago Agents usage in production 76d ago ‘Q-Day’ is almost here. It could unleash a cybersecurity crisis far worse than Y2K 76d ago Are teams still finding AI API keys in public repos? 76d ago Mentorship Monday - Post All Career, Education and Job questions here! 76d ago Mean time-to-exploit just hit 2.1 days. Critical vulnerabilities everywhere. Is the AI apocalypse here? 76d ago Does the CBP bug phones? 76d ago What We Learned Building Runtime Visibility for Modern Telco Networks 76d ago Ive got my Spotify account hacked! How do I solve this? 76d ago The Politics of AI Transparency 76d ago A million baby monitors and security cameras were easily viewable by hackers 76d ago NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE 76d ago Is cybersecurity becoming more behavioral than technical? 76d ago Questions About Promo Items for a Cybersecurity Conference 76d ago Dois-je m'inquiéter ? 76d ago I am dying to work abroad , rate my journey so far 76d ago Microsoft - "Your single use code" email when it was not requested 76d ago Security / Compliance work going Agentic? 76d ago Don't believe the media, specially in cybersec 76d ago Microsoft account keeps getting Authenticator requests? 76d ago [Tool] Grafana Final Scanner - Mass CVE Testing Script with All Public CVEs Aggregated. 76d ago Struggling to generate security bulletins — any ideas? 76d ago Certs to go into Security Engineer/architect 76d ago 18882745552 beware of email with this number 77d ago Transition from traditional penetration testing into AI security 77d ago Seeking advice on next career steps 77d ago Will the analyst role become obsolete? 77d ago Alert Fatigue 77d ago Best path into cybersecurity for a high schooler? 77d ago Keep getting hacked 77d ago How Do I implement sessions management in a vibe coded app ? Also suggest sessions management best practices 77d ago I’m interested in joining the Red Team Hackers Academy in Bangalore. 77d ago A clueless teenager 💔 77d ago Complete beginner looking to learn cybersecurity for personal/everyday use. Where to start? 77d ago Am I overthinking Claude Code security or is this actually a risk? 77d ago is someone know about shadow ai and can give me an explain about this im junior in cyber and i hear about this 77d ago ISO/IEC 27701 ( SoA ) Applicability 77d ago Security Executive Playbook 77d ago This article about AI allucinations written by thehackernews, is literally written with AI lol... We need to do something to stop this phenomenon 77d ago I feel crazy I hope someone has insight . 77d ago ΡHANTΟΜ Al-Powered Pentesting Command Center 77d ago Interview Assessments 77d ago We built a blue-team mode for AI security training — you write a defensive prompt, we throw 12 attack probes at it 77d ago Questions about data blockers 77d ago Post Implementation task 77d ago Mythos, MOAK, CTEM and the End of CVE Chasing 77d ago Cyber security jobs in Austria 77d ago Personal favorite deception layer. 77d ago Estudiar Ciberseguridad 77d ago Learning way 77d ago How do you report large volume detections to a CISO without making the BPA report a SOC story? 77d ago Can anyone share bugbase platform screenshot having professional usage on dashboard? 77d ago CTO at NCSC Summary: week ending May 17th 77d ago Security Executive Playbook 77d ago Tired of tab-switching between CTI tools - here's what we put together 77d ago I contributed to an open-source Bluetooth stress testing tool that just got a major algorithm refactor 77d ago In Cybersecurity 78d ago Anyone else feel like most MSP tooling is either overkill or painfully manual? 78d ago Thinkpad vs Macbook pro endpoint security 78d ago Any more affordable alternatives to “IntelligenceX”? 78d ago Experts Confirm the Fast16 Malware Was Sabotaging Nuclear Weapons Tests, Likely in Iran 78d ago tanstack checker github action 78d ago Drivers Alpha AWUS036AXML 78d ago Splunk download for free 78d ago Funnel Builder WordPress plugin bug exploited to steal credit cards 78d ago Anyone here using pager duty? 78d ago Scammer targeting posters 78d ago Seeking advice 78d ago Looking for Free Cybersecurity Conferences & Meetups in Europe (September 2026) 78d ago Just got an email about a single use code, maybe someone was trying to log in? 78d ago Can a background in DevOps enter the cybersecurity field? 78d ago Using ai in learning 78d ago Avanzamento area Blue Team/SOC 78d ago Please what could be helpful 78d ago CVE exploit chain 78d ago What are the widely accepted SaaS security accreditations/audits an app should seek in fintech 78d ago Preparing for The Quantum Era: AT&T Business Debuts Post-Quantum Cryptography Secure SD-WAN, Powered by Cisco 78d ago Major flaw in Indian Cyber and IT assurance landscape 78d ago Red Team Ops Ⅱ ( CRTL ) exam preparation 78d ago Recomendations 78d ago Recommended cybersecurity certification for a UX designer new to the domain? 78d ago insdubai.com: Motor insurance policies, data of insured persons was exposed on an unprotected server 78d ago Career path 78d ago Merit America offers a program that gets you into cyber security roles. 78d ago Brovan: Binary user-mode emulator for x86_64 78d ago AmEx Interview! 78d ago Developer credential-stealing pipeline also collected operator workstations 78d ago need help building a case. 78d ago Personal favorite SIEM platform? 78d ago Cardputer ADV 78d ago Alternative for Qualys 78d ago The 4th Linux kernel flaw this month can lead to stolen SSH host keys 78d ago Stack Buffer Overflow Explained (Using a Classic Doom Bug) 78d ago Confused about cybersecurity career 78d ago Transferring from pen test consulting to application security? 78d ago Curso de especializacion de Ciberseguridad 78d ago Does host MS Defender Network Protection intercept and alert on traffic generated inside Windows Sandbox? 78d ago Lost, tempted to throw in the towel 78d ago Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own 78d ago I open-sourced a Docker security scanner I use to audit all my websites 78d ago Testing Deception Technique 78d ago A malware got into my account and spread spam ad to my friends and relatives 78d ago North Korean Hackers Now Using AI? Kaspersky Warns of New Cyber Threat Targeting South Korean Govt Systems 78d ago Most pentest reports I review are padded with garbage findings 78d ago Cyber Essentials and use of third party websites - MFA 79d ago Rapid 7 and Cisa Kev 79d ago Anyone know much about MS Defender? 79d ago EN18031 for IoT: struggling to see the big picture — advice from experienced people? 79d ago Automating Code Security Reviews 79d ago New Linux privilege escalation flaw ‘Fragnesia’ disclosed; PoC available 79d ago AI coding tools on developer machines — looking for input on how you're handling it 79d ago Chrome 148 Update Patches Critical Vulnerabilities 79d ago Microsoft warns of Exchange zero-day flaw exploited in attacks 79d ago I need help. i am lost 79d ago Beyond Acceleration and Automation: How AI + Intelligence Changes Cyber Defence 79d ago Physical red teaming: 7 low‑tech paths we keep finding into ‘secure’ environments 79d ago SentinelOne. Backup delete attempt at 06:28, Kill process mitigation action at 06:31. Was the deletion blocked or not? 79d ago I'm going crazy. At the application level what I can actually do to prevent DDos? 79d ago Is anyone enrolled in Intellipaat's cybersecurity course? 79d ago Will AI Replace Cybersecurity Jobs? 79d ago What's best certification choice after OSWE 79d ago Facebook Page Call Slipping through Sleep mode 79d ago ssh-keysign-pwn: Linux LPE allows unprivileged users to read root-owned files. PoC with SSH server privkey 79d ago New Linux LPE allows local users to read any file, including privkeys 79d ago A fix for the previous Linux kernel critical exploit has seemingly introduced another critical local privilege escalation exploit, a third in two weeks. 79d ago Your experience as IT Admin on Alerts 79d ago Slow-drip responses as a bot defense: streaming fake credentials 3 bytes at a time 79d ago Maximum Severity Cisco SD-WAN Bug Exploited in the Wild 79d ago Discord VC lag Exploit 79d ago FrostyNeighbor: Fresh mischief and digital shenanigans 79d ago Bug FB - Inicio de sesion por password 79d ago Does anyone know how to configure EVILGINX for testing 79d ago How long does it take to get familiar with a tool 79d ago Scam website 79d ago ANTS Hack: 19 million records exposed in French ID agency breach 79d ago Is it really that easy to obtain SMS codes using an SS7 attack? 79d ago AI coding tools are shipping code faster than security can review it. What's your team doing about it 79d ago Interview for AI security engineer position at a fortune 500 company 79d ago How’s the job market for Senior AppSec Engineers? How are the interviews? 79d ago Has anyone read "The Art of Deception"? How does it hold up to now? 79d ago Is metadata protection becoming more important than traditional endpoint security for ordinary users? 79d ago Zero trust in hybrid environments - what's actually worked for you 79d ago Have you encountered issues with CSAF advisories in practice? 79d ago Zero trust in hybrid environments - what's actually working for you 79d ago OpenAI confirms security breach in TanStack supply chain attack 79d ago Bachelors Degree Options 79d ago I need help protecting my privacy 79d ago Free Threat Intellegence 79d ago What discovery in cybersecurity amazed you the most? 79d ago Scholarship for Service 79d ago For teams archiving logs outside the SIEM: how often do you actually query them, and for what reasons? 79d ago Another day, another supply chain 79d ago How often do you actually see SSRF exploited in real incidents vs just discussed in CTFs/blogs? 79d ago Teaching Linux+ & CEH..... 79d ago Russian Hacks of Polish Water Utilities Shows How Hybrid Warfare Uses Fear as Weapon 79d ago SIEM use case development 79d ago JFrog vs Mend as Scanners 79d ago KQLab - open-source query manager for SOC teams 79d ago Which Vendors Publish the Best (or Worst) Security Advisories? 79d ago Synthetic training data vs. real attack telemetry — does it actually matter? 79d ago Operative IT-Sicherheit | SIEM & Splunk 79d ago SOC not for junior level? 80d ago Cybersecurity at MSG 80d ago pii-tools.com reputable? 80d ago Hey all! sharing this week's issue I wrote on the TeamPCP supply chain compromise 80d ago Contract jobs worth the risk? 80d ago HackTheBoxAcademy vs LetsDefend vs CyberDefenders 80d ago Automating code security reviews with Claude: near Mythos-level capabilities at lower cost 80d ago Making Right Career Decision? 80d ago I tried using apparmor (linux security) but it doesn't seem to work very well 80d ago Level Effect AMA! Former NSA Operators turned EDR developers and trainers in 2020. We’ve seen a lot of trends over the years and want to start being active in r/cybersecurity giving back. Ask us anything! 80d ago Struggling to Stay Up to Date With Vulnerabilities 80d ago How to Transfer files Safely from a Compromised (work) Device 80d ago Two brothers deleted 96 federal databases after being fired – one googled how to hide the evidence afterward 80d ago Multiple data breaches in one week 80d ago How are small security teams handling vulnerability overload now? 80d ago Concerns mount that EU will demand age verification for VPNs 80d ago Automating code security reviews: Claude Mythos-level capabilities with lower cost 80d ago The Rare Patch: A Digital Sovereignty Challenge 80d ago Advise 80d ago GRC 80d ago Admins and Engineers 80d ago Microsoft's multi-agent AI system tops Anthropic's Mythos on cybersecurity benchmark 80d ago Prompt injection in browser coding agents is the threat model nobody is ready for 80d ago New Fragnesia Linux flaw lets attackers gain root privileges 80d ago Transition from MSP to Network Engineering? 80d ago So called “off grid” method 80d ago Convince me I’m not paranoid: a unique hacking situation. 80d ago Hunting the Behavior Behind npm Supply Chain Attacks 80d ago Question for AppSec Members 80d ago Beginners guide to Google Dorks by Heisenberg 80d ago Alguém sabe algo sobre raven eye technology 80d ago Gophish Porject - Requirement 80d ago Security Team Won’t Assess Risk 80d ago Trusted Unknown Apps Protocol (TUAP) – A Global Behavior‑Based Security Framework 80d ago Microsoft’s new multi-model agentic security system tops leading industry benchmark 80d ago Microsoft MDASH Deployment Identifies 16 Windows Flaws via 100+ AI Agents 80d ago Overwhelmed on how to enter the job market. 80d ago Social media scam bill targets tech giants as New Yorkers lose billions 80d ago What are the biggest technical & cultural hurdles you’re facing right now? 80d ago CISSP / CCSP training - Experienced engineer 80d ago Vulnerability in Canvas/Instructure Support Tickets had part in breach? 80d ago is malwarefox legit? 80d ago what lab to learn zero trust? 80d ago Anyone else got a bunch of emails leaked by Samsung? 80d ago This is what some the world's largest banks of malware look like stacked as hard drives 80d ago I need feedback on my project please 80d ago would like to understand the role of "Cyber Insurance UnderWriters" 80d ago Free on-device tool for monitoring AI traffic on macOS — visibility before policy 80d ago Is secure evidence handling and controlled derivative file sharing needed? 80d ago Will Adding Some Certifications Help Me in the Job Market? 80d ago Linux driver posted for Intel Silicon Security Engine Interface "ISSEI" 80d ago Hello guys I am hearing everywhere Cybersecurity is the most demanding Subject. If it is true then where can I learn and get certified? 80d ago Fragnesia made public as latest Linux local privilege escalation vulnerability 80d ago HP ZBook Fury G8 vs ThinkPad T Series for Cybersecurity? 80d ago NIST is surrendering to the amount of CVEs coming in 80d ago Military Veteran looking to get into the Cyber Field 80d ago Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor 80d ago Post-quantum audit substrate for critical national infrastructure. The NCSC 2031 high-priority deadline reframed as an operator-side playbook. 80d ago Cve apis for a database 80d ago Empresas de Cyberseguridad en Mexico (Reacciones) 80d ago Joined a new company: GRC landscape advice 81d ago Removing admin rights 81d ago a leak from "the gentleman" ransomware group confirms Infostealers were often used to establish initial access 81d ago FamousSparrow's evolved DLL sideloading - execution gated behind the host app's normal control flow 81d ago Golden years for cyber security about to start? 81d ago A stealth approach to Process Injection - EntryPoint Hijacking 81d ago Detecting CopyFail and DirtyFrag by thinking outside the box 81d ago Adaptive Behavioral Identity: A Human‑First Model for Symbiotic Security 81d ago Career advice 81d ago The exponential rise of economic damage caused by cyber-crime continues 81d ago Today's cybersecurity systems are not ready for AI 81d ago Are certifications worth it, or do practical skills matter more? 81d ago [Tool Release] IOCX – deterministic IOC extraction engine (static‑only, PE‑aware, plugin‑extensible) 81d ago Claude Mythos technical breakdown: CVE-2026-4747 ROP chain, OpenBSD SACK integer overflow, Linux 1-bit OOB-to-root, and what AISLE's reproductions actually showed 81d ago Apple Supplier Foxconn in Taiwan Confirms Cyberattack After Ransomware Gang Claims 8TB Data Theft 81d ago What to do after security+ 81d ago AI-Generated Fake Marketplaces Are Poisoning Search Results and Stealing Card Data 81d ago Malware crew TeamPCP open-sources its Shai-Hulud worm on GitHub 81d ago Is it realistic to move from Tech Risk/GRC into technical cybersecurity? 81d ago Are IPhone autofill passwords safe to use? 81d ago Access approvals happen over Slack dm and I don't know how to present that to an auditor 81d ago 🕷️ NetCrawler v1.0.0 — AI Pentesting Agent | Open Source | Fully Offline 81d ago China is going dark to develop its own Mythos, German cyber chief fears 81d ago Is prompt injection a real problem for you? 81d ago New Exim BDAT bug shows why “just patch the mail server” is still not simple 81d ago Microsoft France's legal affairs director told the French Senate, under oath, that he can't guarantee European "sovereign cloud" data stays out of US reach 81d ago Cybersecurity guide 81d ago [Conseil Orientation] LP ASUR (ANSSI) après une L3 Générale pour viser un Master Cyber ? 81d ago How you guys rate Google Cyber security course and certificate out of 10 !? 81d ago Cyebrsecurity Startup Advice 81d ago Can anyone give a real world based AI based attack? 81d ago How worried should we be about AI powered cyberattacks? 81d ago Built STIS-ICS — an open ICS/OT security learning project 81d ago OS scanner that checks repos for traces of the Shai Hulud worm 81d ago Foxconn Ransomware Attack Shows Nothing Is Safe Forever 81d ago Open-source CLI for testing LLM agents across prompt, tool, and replay boundaries 81d ago AI Vulnerability Research and the Fuzzer Era Déjà Vu 81d ago Explorer shows random letter/number filenames before copying my actual files — normal behavior? 81d ago Zscaler AI Security Capabilities ? 81d ago Cybersecurity degree 81d ago Disgruntled researcher who dropped BlueHammer and RedSun drops two new Windows 11 zero-days: A Bitlocker bypass, nicknamed YellowKey, and LPE, nicknamed GreenPlasma 81d ago Cyber security 81d ago New York Senate takes on junk fees, digital subscriptions, surveillance pricing 81d ago Cybersecurity statistics of the week (May 4th - May 10th) 81d ago Feels like AI changed the speed of attacks more than most companies want to admit 81d ago Anyone used Kasm or ReplicaCyber? 81d ago Škoda warns of customer data breach after online shop hack 81d ago Google launches new Android security feature to help uncover spyware attacks 81d ago Fancy Bear: Stealing Credentials Invisibly 81d ago Nightmare Eclipse has published Greenplasma and YellowKey 81d ago Copilot Agent 81d ago What SANS cert I should consider acquiring (from my job)? Most useful ones or one that goes across many roles? 81d ago Career Advice 81d ago Anyone else exhausted by the nonstop AI hype? 81d ago Reviewing the trends in ransomware attacks in 2026 81d ago Is It a Good Idea to Change Jobs Shortly After Getting Hired? 82d ago SSO makes life easier but MFA keeps it safe, do we actually need both? 82d ago Didn’t land a Cybersecurity internship—starting IT Support for POS systems. Tips on maximizing my off-hours? 82d ago How are SOC teams actually deciding what not to investigate anymore? 82d ago Spam calls on this number he was distrubing a girl idk about this guy but the girl placed an order on blinkit and he started acting that he's not able to find the location so she gave her number on ws and now he's spamming unecessarily 82d ago Chris Cochran at SANS Institute: AMA about the AI Security Maturity Model we just released. 82d ago Has anyone tryed this out yet? 82d ago The frontier model caught my prompt injection but the cheaper fallback didn't (and most devs have no idea which one they're on..) 82d ago Switching to Cyber 82d ago Nitrogen ransomware group claims Foxconn after Wisconsin plant outage 82d ago Shai Hulud attack ships signed malicious TanStack, Mistral npm packages 82d ago Using Cape Sandbox for Phishing Analysis 82d ago Canvas hack: company pays criminals to delete students' stolen data 82d ago i have 1 year of experience as product security intern. Please let me know if there are any job oppurtunities available for freshers. I have to start earning. 82d ago AI integrations are quietly creating a new OAuth supply-chain problem 82d ago Instructure reaches 'agreement' with ShinyHunters to stop data leak 82d ago UnMapper: a tool that crawls a target, finds its JavaScript, and reconstructs the original source tree from any sourcemaps it ships 82d ago Hardcoded secrets in Git 82d ago Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages 82d ago UK water company allowed hackers to lurk undetected for nearly two years, regulator finds 82d ago New ipTIME Pre-Auth RCE in CWMP 82d ago Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak 82d ago Is my phone hacked? 82d ago Switched to a grc role after a year in SOC L1 82d ago Forecasting Lazarus Crypto Heists 82d ago Infrastructure Security Incident Update & FAQs 82d ago Mini Shai-Hulud npm worm compromises 160+ packages, abuses GitHub Actions cache + Trusted Publishing. Full list of compromised packages 82d ago In Depth Guide To VM Based Obfuscation - What it is and how to handle it. 82d ago Lockbit Black Loader and Shellcode Analysis - Full Thought process, Technical Writeup and Blue Team perspective 82d ago Transitioned to GRC 82d ago Mass npm Supply Chain Attack Hits TanStack, Mistral AI, and 170+ Packages 82d ago German cybersecurity official warns China is close to developing AI superhacker 82d ago Google Detects First AI-Generated Zero-Day Exploit 82d ago “DCSA agent” calling IT Help Desk to be transferred to employees they are investigating for a clearance 82d ago Instructure/ canvas paid the ransom? 82d ago Troca emprego - big para consultoria ou fintech - Pentester/Red Team 82d ago Finally, texts between Android and iPhone users can be end-to-end encrypted 82d ago Official CheckMarx Jenkins package compromised with infostealer 82d ago IMF warns of the potential for AI attacks on global financial systems 82d ago 🕷️ NetCrawler v1.0.0 — AI Pentesting Agent | Open Source | Fully Offline 82d ago Cookie thieves caught stealing dev secrets via fake Claude Code installers 82d ago Pwn2Own 2026 Capacity Overflow, Hackers Drop 0-Days Solo 82d ago MS Defender on OT Network 82d ago A fateful question 82d ago SC-900 or SC-400 82d ago What are your security non-negotiables? 82d ago Losing my path 82d ago Axon-captcha 82d ago What makes companies trust small cybersecurity vendors? 82d ago Hathor Wallet Daemon (headless) Has Fail-Open Auth – Notified via Immunefi but Closed as “User Responsibility” 82d ago TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack 82d ago Foxconn Wisconsin breach reportedly linked to Nitrogen ransomware, 8TB data theft claim 82d ago These Extensions are Scraping Your AI Chats, are you affected? 82d ago Be careful with your Git: Investigating malware spreading through Git repositories 82d ago Training and Phishing 82d ago Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation 82d ago AI-powered hacking has exploded into industrial-scale threat, Google says 82d ago Apple closed my bug report 4 times. MITRE wouldn't let it die. 82d ago NASA Investigators Expose a Chinese National Phishing for Defense Software - NASA OIG 82d ago Google spotted an AI-developed zero-day before attackers could use it 83d ago beginner doubt 83d ago I got my CEH Certification. SO what now? 83d ago Construction to Cyber PM 83d ago [ Removed by Reddit ] 83d ago Something got downloaded on my phone and then dissappeared 83d ago Bleeding Llama 83d ago Do accountants even care about cybersecurityas much? 83d ago Where Have All the Complex Windows Malware and Their Analyses Gone? 83d ago Your Biggest Security Risk Isn’t Malware — It’s What You Already Trust 83d ago Was the reconnaissance in Bugbounty overrated? 83d ago Cybersecurity beginner building an experimental log analyzer — looking for advice 83d ago Anyone else worried about AI being a security nightmare? 83d ago Snyk not working 83d ago Malicious tenants paid us to abuse our RMM. We blocked them 83d ago Help reasuring parents with an email parsing tool (i will not promote) 83d ago DFIR practitioner thinking about starting my own LLC to subcontract IR services to MSPs. Is there actually demand for this? 83d ago cPanel & WHM Vulnerabilities Patched -DoS, Account Abuse & Security Risks Affect Hosting Servers 83d ago 5 years as a Level 1 Security Analyst and wanting to transition into consulting 83d ago GitHub - jesterfoidchopped/akamai-v3-sensor: akamai v3 sensor bypass 83d ago New into network pentesting. 83d ago Is it worth it to switching field to cybersecurity ? 83d ago Neeed help to get cybersecurity internship. 83d ago Mentorship Monday - Post All Career, Education and Job questions here! 83d ago Cybersecurity and ADHD 83d ago Anyone dealt with a VulDB submission rejection? Resubmit or reply? 83d ago ISO 27001 certification: what auditors actually focus on versus what most teams spend time preparing 83d ago I have a malware and need help removing it. someone please help me 🙏 83d ago I'm starting to see a growth of apps in my org. I'd love to know how you defend against this/ secure it, and if it's happening to you too? 83d ago EasySec - Update 83d ago What is the cybersecurity equivalent of leaving your spare key under the doormat? 83d ago Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak 83d ago VICE: Cyberwar | Full Season 2 | Blueprint 83d ago Linux Kernel Killswitch Proposed After Recent Vulnerability Disclosures 83d ago Email OTP as default (often ONLY) password isn’t the solution 83d ago Soc analyse 84d ago Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak 84d ago Price rising 84d ago AI Can Boost Cyber Defence But Poor Governance and Overreliance May Create New Risks, Warns WEF-KPMG Report 84d ago Possible security incident against Arup Group 84d ago Can honeypots be used this way? 84d ago I think AI just quietly killed the 90-day disclosure window. 84d ago TCM and Educate 360 are bugged 84d ago Got an alert from google what should I do? 84d ago UK jobs 84d ago Need help debugging a school ZIP password-cracking lab setup pleaseeeee🙏 84d ago Worst company 84d ago Built a platform that combines phishing detection, encrypted file sharing, and cloud security scanning 84d ago Msc Cybersecurity - dissertation ideas ( something that can be done in 3 or less months) 84d ago ARGUS: 15 Production-Realistic Vulnerable AI Agent Targets for Red Teaming (Docker + Canary Scoring) 84d ago App Store Question - Darato Sport / Dofu Sport / Kofu 84d ago Help! - My Parents Computer is Hacked 84d ago Ran lumma stealer from a recaptcha scam 84d ago Port 5986 question 84d ago CVE-2026-44843: One Chat Message Steals Your Credentials. Then It Gets Worse! 84d ago cyber security/ segurança da informação 84d ago College student hacks Taiwan high-speed rail line with software defined radios, stopping four trains 84d ago Help with an Escalating Cyber-Stalker 84d ago RRW - Rick Roll WiFi 84d ago Best resources to start learning python for cybersecurity and automation 84d ago Mythos AI is a cybersecurity threat, but it doesn’t rewrite the rules of the game. 84d ago JDownloader site hacked to replace installers with Python RAT malware 84d ago How can I fix my browser remembering what he had open last 84d ago MS 360 CoPilot issues 84d ago I run a malware and was wondering if its a rat or rootkit or dangerous stuff and how do i fix my pc (my dad gave ts to me can't lose it) i can give out any specific details 84d ago ShinyHunters claims 275M records from Canvas LMS breach. 9,000 schools hit. Ransom deadline May 12. 84d ago eBPF LSM runtime security agent for synchronous file/network denial — looking for technical feedback 84d ago I keep seeing "what E8 maturity level should we target?" — here's the practical answer no one tells you 85d ago OWASP TOP 10 LLM 2026 Community voting 85d ago Second security incident at Instructure (Canvas) 85d ago UK Advice Needed - VA+ Training? 85d ago Gateweb - Secure Web Gateway 85d ago Those who are in Detection engineering 85d ago Can someone tell me of a trustable hacker? 85d ago MSPs, how are you handling AI usage across your customer environments today? 85d ago Shadow SSDT Hijacking: Achieving Kernel Code Execution via Read-Write 85d ago How do i protect confidential data from unrestricted AI usage as a bank- what are good tools out there? 85d ago ecpptv3 Exam in 3–4 Days — 85d ago AI SECURITY: THE DEFINITIVE GUIDE — PART III | THE FINAL CHAPTER | COMMUNITY CISO SERIES 85d ago Did CISA helped you land a job ? 85d ago CTO at NCSC Summary: week ending May 10th 85d ago pre pre junior needs help(guidance pls) 85d ago Trojan malware 85d ago SANs Courses: How do people get their employers to pay? 85d ago NIS2 Article 21: turning compliance controls into technical security evidence 85d ago This GBA Rom is making is having a weird behavior in the Sandbox, why? 85d ago Why AI agent governance feels harder than traditional security models 85d ago Confused about what certs are important 85d ago Would getting Security+ be worthless for me? 85d ago Submit probe test — shadow DOM click 85d ago Threat intelligence in OT (Power equipments) 85d ago SOC Analyst 85d ago PAWs, PAM and PIM..what is best practice? 85d ago This is the most in-depth analysis I have found on the Instructure/Canvas breach so far. 85d ago Poland says hackers breached water treatment plants, and the U.S. is facing the same threat 85d ago Millions of students are locked out. Canvas is down. And the notorious hacker group ShinyHunters has given Instructure a terrifying ultimatum: Pay the ransom by May 12, 2026, or the private data of potentially millions of users will be leaked to the dark web. 85d ago Quacc++: Automated Open Source Vulnerability Discovery 85d ago 60% of MD5 password hashes are crackable in under an hour 85d ago Built a correlation engine that chains AD findings into attack paths automatically. 85d ago Dirty Frag in Kubernetes: unset seccomp behaved like Unconfined in our EKS/GKE tests 86d ago JDownloader's official website delivered Python RAT 86d ago Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854) 86d ago ShinyHunters Stole 275 Million Student Records. The Ransom Deadline Is May 12. 86d ago Note taking apps and advice 86d ago IMF Warns AI Could Trigger Global Financial Cyber Crisis 86d ago New Linux 'Dirty Frag' zero-day gives root on all major distros 86d ago Is the ISC2 Cybersecurity program still worth it? 86d ago Canvas getting hit during finals week shows how fragile “critical SaaS” has become 86d ago Are websites exposed to the internet under attack almost every hour, even if they're small? 86d ago Devastating 'Dirty Frag' exploit leaks out, gives immediate root access on most Linux machines since 2017, no patches available, no warning given — Copy Fail-like vulnerability had its embargo broken 86d ago What the **** is happening in cybersecurity space ? 86d ago Canvas is back up, but now what? 86d ago Instagram is getting rid of end to end encryption, what now? 86d ago New “Dirty Frag” Linux Kernel Vulnerability Could Lead to Root Escalation 86d ago Reported a Broken Access Control bug to Instructure via bugcrowd 11 months ago, and also sent directly to canvas and instructure since I didn’t really care about the bounty. It was deemed "not applicable". 86d ago Did I fu by opening an (archived) Onion .txt link posted by the cybercriminal group? 86d ago Cushman and Wakefield confirms cyberattack 86d ago Egnyte potential ransomware attack 86d ago So canvas is down, what'll happen if they can't come to an argreement? 86d ago Canvas (used by 275M students) was just hacked. Here's exactly what was stolen and what you need to do right now. 86d ago /Why/ is Shinyhunters targeting Canvas? 86d ago Canvas Hack - Any Guesses How? 86d ago Should I build a virtual or physical lab? 86d ago Instructure (Canvas) Breached by Shiny Hunters — 275M Records from ~9,000 Schools/Universities, Ransom Deadline May 12 86d ago Engineering a Zero-Trust Kubernetes SIEM: Bypassing NAT Blindness with eBPF, TC, and Suricata 86d ago Audit/Cybersecurity 86d ago Issues removing Trellix (and specifically solidifier) 86d ago Pentagon eyes 3-year cyber training requirement, overriding new Army policy 86d ago How much personal info will be leaked by the recent Canvas hack?? 86d ago Dirty Frag and canvas 86d ago Hackers deface school login pages after claiming another Instructure hack 86d ago Did I destroy my career by being loyal to an arguably good company? 86d ago V4bel/dirtyfrag - Universal Linux Local Privilege Escalation 86d ago What is CYBERRANT? 86d ago Canvas is down as ShinyHunters hack forces outage 86d ago New Dirty Frag Linux Bug Emerges in Wake of Copy Fail 86d ago Heads up: AWS Educate Canvas login page may be compromised. Saw what looks like a ShinyHunters defacement page today. 86d ago How is GRC work in a MSSP? 86d ago SH and BF phishing console 86d ago Finally switching over from Authy 2FA. What is the better alternative, 2FAS or Ente Auth? 86d ago Socure authenticating AI identity as real. 86d ago Automated SSL Certificate Renewals - What is your setup? 86d ago Shinyhunters and Canvas 86d ago What Cli execution do you use for a script file? 86d ago Fiserv security incident - data breach notice 86d ago Linux attacks seem to be shifting from “servers” to DevOps and supply chain environments 86d ago I graduate next year with a Cybersecurity degree. 86d ago Asking about Cortex 86d ago Apache Caldera 86d ago What’s the “unsexy” problem in cyber that’s actually a total disaster? 86d ago Critical vm2 Sandbox Escape Vulnerabilities Expose Node.js Apps to Full Host RCE 86d ago As a developer, should I use AI to improve security? 86d ago My company has an MSP that manages our employee endpoints but we cant access the software they use to manage 87d ago Americans sentenced for running 'laptop farms' for North Korea 87d ago Is my laptop hijacked ? 87d ago claude ai gave security beta to Enterprise plans only what can we do as pentesters? 87d ago Massive .de DNSSEC Failure Took Large Parts of Germany’s Web Offline 87d ago Advice for path to land job SOC in France 87d ago Possible Major Vulnerability: Chromium used by current version of PRTG 87d ago Mythos AI may be a cybersecurity threat, but it follows the rules of the game 87d ago Control Checks using AI. 87d ago How do native password managers clear the clipboard? 87d ago Graduating CS Student but Wanna Start my Career in Cybersecurity 87d ago Claude-Themed Malware Campaigns 87d ago DeepFake it till you make it. 87d ago The 12 ways AI agents fail in production. A taxonomy for security teams reviewing agent deployments 87d ago What niche in cybersecurity should I go for, with my background in Angular & .NET ? 87d ago Successor for Kaspersky Endpoint Security 87d ago Romanian Man Extradited to US for Role in Hacking Scheme 17 Years Ago 87d ago SOC Analyst tier 1 (Entry Level) ?? 87d ago Cyber insurance renewal questionnaire had 14 identity-specific questions this year. Three years ago it had two. I was not ready for this. 87d ago Made cybersecurity merch as an infosec practitioner — honest feedback welcome 87d ago As AI agents become users of company data - what is needed to keep data secure? 87d ago Wrote an extremely detailed 11-article series on attacking and defending APIs - top 10 vulnerabilities. 87d ago AI inference is quietly becoming a security problem 87d ago is winrar 7.13 vulnerable to extraction exploits? 87d ago Tried explaining internet encryption in a beginner-friendly but accurate way, feedback? 87d ago Is the EC-Council CTIA Certification Worth It for Career Growth? 87d ago POC Android vuln 2026 87d ago Credential caching is an unsolved architectural tradeoff, and we should stop pretending otherwise 87d ago Opinions on Mimecast 87d ago What's going on in the field of Cybersecurity 🫣. 87d ago How do teams preserve institutional pentest knowledge when senior testers leave? 87d ago CVE-2026-32710 MariaDB JSON_SCHEMA_VALID heap buffer overflow leading to RCE 87d ago Sophos NDR on Proxmox 87d ago On today's earnings call, IONQ just said they expect to meet Q-Day requirements by 2028-2029. 87d ago DOJ says ransomware gang tapped into Russian government databases 87d ago DAEMON Tools devs confirm breach, release malware-free version 87d ago Have there been instances where your SOC has suffered a cybersecurity attack? 87d ago OpenCTI founder, Samuel Hassine, arrested and charged with CSAM 87d ago Deepfake Platform 87d ago Trellix Licence Query 87d ago Instructure hacker claims data theft from 8,800 schools, universities 87d ago Is AI generated code creating a non-linear security problem for AppSec teams? 87d ago D.H.S. Intelligence Office Did Not Properly Secure Smartphones, Watchdog Says 87d ago Evaluating Microsoft 365 vs Third‑Party Tools for Email and Endpoint Security 87d ago Norton Antivirus and Other Norton Software 87d ago Would you take a promotion to work 100% in office that you’ve been working towards or same pay but work from home? 87d ago We scanned 200 high-star MCP servers. 205 critical findings. Here are 4 novel attack classes. 87d ago Download a malware a while ago, someone trying to log into my ios account 88d ago Org Restructure 88d ago Does SOC 2 actually reduce questionnaires, or just change them? 88d ago Google VRP dismissed a systemic Play Store bypass as "Intended Behavior" after 24 internal views 88d ago How do investigators or cybersecurity researchers correlate online accounts (like Instagram profiles) with IP/network information legally and ethically? 88d ago Ran phishing awareness training for 200+ non-tech employees 88d ago Proprietary Software, Hardware and Protocols Face AI-Driven Security Risk 88d ago Vulnerability Garden 88d ago Palo Alto Firewall Zero-Day Under Active Exploitation 88d ago Cyber Security Militias 88d ago Hidden domain dependencies in AI stacks: expired domains, dangling DNS, and takeover risk 88d ago CyberSecurity Nightmares 88d ago Can I use NanoKVM if it's just to turn on pc? 88d ago got listbombed on my waitlist with 1000 fake adresses, i tried to make some security changes maybe i missed something? 88d ago How to learn tools for cybersecurity? 88d ago 'CopyFail' attackers start cashing in on Linux flaw 88d ago Anybodybodybdown for a team/studygroup? 88d ago I was hacked due to sim card spoofing 88d ago Chrome is quietly installing a 4GB AI model on your device 88d ago Dev vs Security role 88d ago Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft 88d ago Oracle Debuts Monthly Critical Security Patch Updates 88d ago Sec engineer / developer? 88d ago When doing bug bounty, do you usually immerse yourself in 2 or 3 specific domains (ones where vulnerabilities are likely to exist) and focus all your testing efforts on them? 88d ago Are we actually seeing more vulnerabilities or just more noise? 88d ago Cybersecurity jobs in red team 88d ago Question 88d ago What’s the biggest mistake people make even after installing antivirus? 88d ago New dashboard tracks ransomware groups by their reliance on Infostealer credentials 88d ago What would you say if your security lead said this... 88d ago What would be the goto setup in AWS for security purposes? 88d ago CREST CRT Exam 2025/2026 Experiences 88d ago Microsoft Edge stores your passwords in plaintext RAM... on purpose 88d ago Como começar? 88d ago Possible Password Leak? Curious if Anyone Has Seen This Before 88d ago Not a Hack. A Handout. Inside the GTFOice.org Data Exposure 88d ago Besoin de conseils sur une DMZ automatisée 88d ago Microsoft, Google and xAI will let the government test their AI models before launch 88d ago Android ADB Auth Bypass Proof-of-Concept: CVE-2026-0073 88d ago SMB Header Signature for Tagging in Firewall 88d ago Question regarding VDP 88d ago Working on what i should do for the next 3 years 88d ago Question for Security Professionals 88d ago Do tech companies lifecycle-manage public DNS records to prevent dangling DNS? 88d ago Vulnerability Summary for the Week of April 27, 2026 88d ago Cisco releases open-source ‘DNA test for AI models’ 88d ago Cybersecurity is becoming too AI dependent is that a problem 88d ago Foxconn Wisconsin outage raises cyber questions 88d ago How stressful is GRC? 88d ago Anyone remember areyoufearless.com / “Free Gobo”? Early 2000s hacker forum nostalgia 88d ago Have CEH certification – looking for free cybersecurity bootcamps or resources to land a job in India 88d ago Archer for a non-regulated medium sized company? 88d ago Cybersecurity statistics of the week (April 27th - May 3rd) 88d ago Well, I'm wondering about working on a RAG pentesting bot. Comment down the best data source to feed LLM. 88d ago Where to find reliable vendors? 88d ago Just got into cybersecurity with no prior experience and feeling intimidated. Thoughts? 88d ago We wrote a guide on securing Claude across the enterprise — here's the core framework (with download) 88d ago Over 5 months: Payment bypass marked OOS, moved to VDP, and downgraded to Medium. 88d ago Hardware reverse enginnering first project. Love some advice 88d ago Microsoft Edge Stores Passwords in Process Memory, Posing Risk 88d ago Currently working on cybersecurity, looking for advice 88d ago Open-source scanner for MCP servers and skill files : attack chain detection and server-card scanning 88d ago CISO course valuation 88d ago GRC Path to CISO (Certifications) 89d ago CISOs and pentest buyers, what's the worst thing you've seen in a pentest report? 89d ago How to enforce M365 Sign-in frequency on corporate laptops? 89d ago CloudZ malware abuses Microsoft Phone Link to steal SMS and OTPs 89d ago Built an independent directory of AI Act / AI governance tools, feedback? 89d ago ScarCruft APT group compromises gaming platform in a supply-chain attack 89d ago Just curious 89d ago 'Copy Fail' is a real Linux security crisis wrapped in AI slop 89d ago Analysis malicious DLL 89d ago Cyber security free course 89d ago Does certification expires? 89d ago We get paid to break into buildings for a living. Ask us anything! 89d ago Pay2Key ransomware — any recovery path that’s actually worked? 89d ago Karakurt extortion gang ‘cold case’ negotiator gets 8.5 years in prison 89d ago Microsoft just documented an AiTM phishing campaign that hit 35,000 users across 13,000 orgs in 3 days, the lure was a fake "code of conduct review" PDF 89d ago How have you kept growing your knowledge in security when the job stops pushing you? 89d ago The UK’s Age Verification Law Is Producing Compliance Theater 89d ago Microsoft Edge: Passwords end up in memory as plaintext 89d ago Do people still get viruses in 2026, or is that mostly a myth now? 89d ago Mitigation script for Copy Fail vulnerability CVE-2026-31431 89d ago Popular DAEMON Tools software infected – supply chain attack ongoing since April 8, 2026 89d ago Critical Apache HTTP Server RCE (CVE-2026-23918) - Millions of Servers Potentially Exposed. Patches released 89d ago DigiCert breached via malicious screensaver file 89d ago Caido Payloads and Scanner of Endpoints 89d ago CISO Security Mind Map 2026 89d ago Interview with Chris Kubecka, Cybersecurity Expert, Journalist and Volunteer Rescue Worker 89d ago Amazon SES increasingly abused in phishing to evade detection 89d ago AI Security Trainings 89d ago Ai help 89d ago ByDesign: observed behavior where file URLs remain accessible after unshare/delete 89d ago Can Kali Linux still compete in cyber security or is it outdated? 89d ago Who are your favorite cybersecurity YouTubers? 89d ago CISOs, how are you balancing AI adoption with security risks these days? 89d ago San Diego Community College District fighting major cyberattack 89d ago After 5 months of mental hell and ghosting, today I finally landed a role. To those struggling: Don't give up 89d ago Free resource: searchable archive of every BSides conference talk 89d ago Lightning PyPI Compromise: Bun-Based Stealer 89d ago Too much mother instinct? 89d ago L1 SOC Analyst for ~2 years - Should I still get the Security + Certification? 89d ago Do CTFs help real world security skills, or just teach patterns? 89d ago Compré una cuenta rusa en g2a pensando que era una ley, se hizo administradora de mi ordenador, he cambiado todas las contraseñas y estoy haciendo un reset del ordenador pero sigo estando inseguro, muchísimo miedo me atraviesa ahora mismo 89d ago Should I do Security + or Network + or A+? For CompTia 89d ago Bug bounty is ruining how people learn exploitation 89d ago ‏ISO/IEC 27701:2025 Scope and Location 89d ago Cybersecurity's 2026 Wild Ride 89d ago We built a free multiplayer game that scores prompts on AI code security. 89d ago Production Usecases 89d ago How does vCISO work? 89d ago Trellix discloses data breach after source code repository hack 89d ago CyberDefenders SOC L1 Track vs HackTheBox SOC Analyst Path 89d ago Trellix confirms source code repo access incident 89d ago Employer Offering to Pay for my Certification test - Which one do I choose? 89d ago John Strand Pay What You Can Information Security Core Skills live starting May 11th 89d ago Canvas Breach May Put 275M Users, 9,000 Schools at Risk 89d ago Is this not such a big deal 89d ago Do email link checkers need to be 100%? 89d ago Cybersecurity M&A Roundup: 33 Deals Announced in April 2026 89d ago Recs for pen testing and vulnerability solutions 89d ago Identify telegram account holders 89d ago AI Code Security Study: 6 LLMs vs OWASP Top 10 89d ago BAT: VPS-based C2 with .ko/.sys rootkits compilation against target kernel headers 89d ago We are insider risk researchers focused on agentic AI, endpoint activity, and emerging threats. AMA 89d ago Cortex XDR Cloud Compromise Alerting 89d ago Norton.com Verification Email out of the blue 89d ago Atomic Red Team is now aligned with MITRE ATT&CK v19! 89d ago Claude Security is in beta for Enterprise users — is this a real AppSec shift or just AI wrapper + UX? 89d ago Who are you guys using for your PCI ASV Scanning? 90d ago Just passed my Security+ exam. Now what? 90d ago I am so sick of being hired to do Info Sec work just to do basic IT and Engineering work. 90d ago Cyber insurance renewal questionnaire had 14 identity-specific questions this year. Three years ago it had two. I was not ready for this. 90d ago [PoC] Defeating Behavioral Biometric WAFs using "Entropy Cloning" (Local LLMs + OS-Level Injection) 90d ago Analysis of CVE-2026-1995: Linking a Privilege Escalation Vulnerability to IP Theft (RCMP #CT-2026-335350) 90d ago An another open door to IoT devices 90d ago Ideas on how to have personal google-like account synchronization system 90d ago Lateral Movement - Cross-Session Activation 90d ago What MCP servers have actually made it into your day-to-day toolkit? 90d ago Cyber Security Education as Self-Defence classes 90d ago OSS2Falco: Falco rules converted from LinPEAS, Sigma and Splunk 90d ago Use.ai 90d ago Educational tech giant Instructure confirms data breach, ShinyHunters claims attack 90d ago CISA says ‘Copy Fail’ flaw now exploited to root Linux systems 90d ago Browsers making connection on port 3389 from loopback 90d ago Defender Flagged DigiCert Root Certs as Malware 90d ago Another breach just hit Canvas (Instructure), and this one is worth a closer look. 90d ago Over 40% of UK firms suffered cyber attack last year, survey finds 90d ago EU should seek access to Anthropic's Mythos, Bundesbank says 90d ago Microsoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dha 90d ago IBM subsidiary managing Italy's PA infrastructure breached and attackers were inside for 2 weeks 90d ago People in cybersecurity, tell us what was the most epic moment in your career? 90d ago Prerequisites for CARTP 90d ago Claude Mythos Cyber Wake Up 90d ago [ Removed by Reddit ] 90d ago is trellix from mcafee good to use in 2026? 90d ago Linux has had a silent root exploit hiding in it since 2017 and it just hit CISA's must-patch list 90d ago Paypal Accesed by malware me being Stupid 90d ago How was someone in another country able to read all my private messages without my password or clicking a link? 90d ago Career Transition Help 90d ago Alguien para hablar de cyberseguridad 90d ago What is this 90d ago Feeling lost and disappointed about finding a job just venting 90d ago Slow at Learning/Cyber Security? 90d ago Suspicious traffic from web server 90d ago Cyber security internship 90d ago Mentorship Monday - Post All Career, Education and Job questions here! 90d ago Isn't Windows Defender a crap anymore? 90d ago Learning Cyber 90d ago Vishing simulator 90d ago Copy Fail Linux Kernel Vulnerability Now Patched in Debian, Ubuntu, and Others 90d ago Worried about being tracked/banned for using an educational app on MuMu Player - Need advice 90d ago Critrical cPanel flaw mass-exploited in "Sorry" ransomware attacks 90d ago Banking-Style Model Risk Management Is Becoming a Practical Template for AI Governance 90d ago Prompt Injection in 2026: The Five Attack Patterns That Actually Matter 90d ago I did a scan on windows bc I accidentally downloaded something weird then removed it and now I keep getting Trojan:Win32/Cerdigent.Alpha even after I quarantine 90d ago Random trojan detected? 90d ago CRTA second attempt 90d ago What’s the hardest thing to learn in cybersecurity? 90d ago What MCP servers are you integrating into your workflow (not exclusive to security)? 90d ago WhatsApp malware campaign delivers VBScript and MSI backdoors | Microsoft Security Blog 90d ago What are like the top but unknown Cybersecurity firms? 90d ago Need professionals or expert on cybersecurity related to dark web for interview 90d ago A new and super fast CVE Lite CLI Vulnerability Scanner (OWASP) 90d ago North Korea calls US cyber threat claims a fabrication, warns of countermeasures Worldcategory 90d ago Acoustic Keystroke Recovery: Reconstructing Typed Text from a Laptop Microphone (85% success rate) 91d ago Credential Dumping: Local Security Authority (LSA|LSASS.EXE) 91d ago Trojan:Win32/Cerdigent.A!dha 91d ago MDE flagging digi cert certificate as malicious everywhere ? 91d ago