News · r/cybersecurity

Looking for software related to Command and Control bot infrastructure

Hey, I’m a journalist with an independent firm based in DC. In the aftermath of Ukraine blowing up Russian data centers, our team believes that the IRA’s troll-bot command-and-control servers used for information warfare campaigns were lost in the attack. We’re trying to explain to the American public the software the government used to manage these servers and run their activities. Does anyone h…

Is deception technology actually useful for detecting attackers, or is it just another layer of alerts?

We talk a lot about EDR, SIEM, firewalls, and threat intelligence, but I'm interested in where deception technology fits into a real security environment. Decoy servers, honeytokens, and fake credentials can generate high-confidence alerts when someone interacts with them. But detecting an interaction is only one part of the problem. What matters to me is what happens next: Can we collect enough…

Cybersecurity statistics of the week (October 5th - October 11th)

Hi guys, I send out a weekly newsletter with the latest cybersecurity vendor reports and research, and thought you might find it useful, so sharing it here. All the reports and research below were published between October 5th - October 11th. You can get the below into your inbox every week if you want: https://www.cybersecstats.com/cybersecstatsnewsletter/ Ransomware GRIT Q3 2026 Ransomware & Cy…

Is this a viable career field

AI will eventually literally be able to do anything on a computer and robotics could replace actual humans. All I can think of is small groups of people monitoring the robots to make sure they don’t suddenly lash out and break stuff. Is that the future of this field? Robot calmer?

Random opinion

Seeing how coding LLMs are so comprehensive in their unit/test cases makes me realize how many vulnerabilities could have been prevented by dev teams who also implement as such unit tests and case testing for every single endpoint backend logic before we can even start talking about security focused static/dynamic appsec reviews.

Might be a cliché question

I’m been working as a UI/UX designer for 3 years in a terrible startup. I was hired as a designer but instead got pulled into image resizing and editing I lost the skills I joined with The current scenario is that I’ve been put under PIP and this month could be my last. I’ve realized I don’t enjoy designing much and I’m planning to explore the field of cybersecurity I do have a bachelor’s degree…

Need Security Advice for Organisation.

Hi everyone, I am working in an organisation whose security was being taken care of by their parent company and External Vendors as of now. But now we need our own security posture. What we own : AWS cloud 50 EC2 Instances, 2 Web applications, 2 Mobile application, 20 Linux Servers( Linux servers , Gateways) , approx 30-40 API’s. This is just an example of resources What we have thought of as of…

Does your company actually have governance requirements for coding agents? What do they look like?

I keep reading that security teams want controls on coding agents: approval for risky actions, a tool-call log for auditors, limits on what the agent can reach. I want to know if that is real or just vendor talk? If your company has a requirement like this, what is it, who set it, and what did you put in place to meet it? If there is no requirement, is that because nobody asked yet or because the…

The nightmare of securing RAG pipelines in production... thoughts?

Honestly it feels like every dev team is rushing to spin up internal LLMs and RAG pipelines, but the security side is just a complete wild west right now. Traditional WAFs and DLP solutions definetly aren't cutting it when it comes to prompt injection or potential data leaks thru vector DBs. How are you guys actually handling security for this? Relying on semantic firewalls, building custom middl…

How did cybersecurity professionals from service based companies land at Microsoft,Palo Alto, Cisco.

These days I'm seeing many cyber security people who started their careers at some service based companies mostly as a SOC Analyst currently working at product based companies like microsoft, Palo Alto, Cisco. Much appreciated if someone who landed there could explain how they did it. I am a SOC analyst trying to get into engineering first and then into product based companies.

Is switching from Veracode to Checkmarx worth it?

We’ve been on Veracode for about three years across Java, .NET and a growing pile of Node services. Renewal is in Jan and I gotta decide by the end of November. Most of the push to look elsewhere comes from the devs. The .NET services still need a debug build zipped up before every scan and they hate waiting. Half of them uninstalled the IDE plugin as it rarely flagged anything useful. And on top…

article on ThriveDX/IronCircle

I'm a reporter with the Hechinger Report and have spent the last several months investigating ThriveDX/IronCircle. (In that time, I've heard from many of you and appreciate all those who reached out and shared their experiences!) My article on the company ran today: https://hechingerreport.org/a-university-branded-boot-camp-promised-tech-jobs-it-delivered-only-debt/ Would love to hear your though…

EC-Council Disaster Recovery Professional (EDRP) Question

I’m am studying for the EDRP and I am going through the book and the videos, but I am wondering about the labs. Does anyone know if there are even any lab type questions on the exam? This cert seems heavily focus on understanding the concepts over practical steps for let’s say… initiating a backup on a Windows server. Or d/ling and using a risk assessment solution. Am I right to think this?

Opinion about my Final year project ideas: XDR implementation and scam detection

Hi everyone, I’m a final year computing student trying to decide on my final year project. I’m interested in two areas: XDR (Extended Detection and Response) implementation and scam detection. My interest in scam detection comes from personal experience. Several of my older family members have lost money to phishing scams on WhatsApp, and it made me want to build something that could help protect…

Looking for a RECENT public email dataset with full headers (phishing and legitimate)

Hey, so I do not know if this is the correct place to ask this; if not, can someone point me to the correct subreddit to ask this 🙏🏻 I'm researching phishing detection that combines email header evidence with URL evidence. The public datasets I've found are either old (Enron, SpamAssassin, Nazario), synthetic (LLM-generated), malicious-only, or text-only with no headers Does anyone know of a re…

AI agents connecting to networking infrastructure

I'm seeing some prominent channels on YT showcasing AI agents (ie Hermes) managing networking infrastructure. Is it just me​, or are we being gaslit into thinking its practical and productive to provide Hermes agents API keys to an OPNSense router so it can fully manage it? Even if its doesn't do anything nefarious, if using a cloud LLM to back Hermes, your networking info is being sent to the cl…

Do/How do tech companies (such as meta, x, openai, etc) prevent people from deleting their account to stop a ban that has not yet arrived from coming?

(Admin please remove if not allowed) Hi all, new here. Not a tech expert but came here finally to get an answer to a question I’ve been curious about for a while. Say hypothetically, a user committed a bannable offence on one of these platforms, thought they were going to be banned, then deleted their accounts to preserve their access (as in so the email address and other stuff linked to the acco…

Does meta security engineer interviews include coding round?

Basically the title. I work in product security and penetration testing, interviewing for meta. Since I rarely do coding I was wondering if they have heavy coding round and how people tackle this.

Head all over the place

Okay, so about five months ago, I started my journey in IT. However, I started without a clear goal or a proper roadmap. I was just learning random things without any real direction, to be honest. So far, I’ve learned Python, SQL, and a little bit of C. Looking back, I realise that one of my biggest mistakes was not having a structured learning plan. Having a clear roadmap makes a huge difference…

CCNA or PenTest?

Ideally my goal is to get both certifications. But what I am not sure on is which to go for first. Reading over the PenTest exam objectives and some other information it appears you need to have some networking and scripting knowledge in order to be prepared for it but other things I have seen it doesn’t appear that way. Should I go for CCNA before going for PenTest+ or does it not matter?

Hey guys, I need some help understanding botnets more specifically "web shells" for a mock case I have. Anyone mind chatting for a bit, thx!

SEC542/GWAPT worth it? Also, any AI-focused SANS courses for blue team?

My employer offered to pay for SEC542 and I’m leaning toward it since I’ve always liked web app security. For anyone who’s taken it: how hard was it, and did you actually get something out of it afterward? Was it worth the time? Also, are there any SANS courses on AI that are aimed at blue teamers? I’d like to know what my options are before I commit.

Monitoring

Solid maturity org. with good EDR and AV dashboards, but also has some grey areas where external entities could access networks (no strict NAC) - how to effectively monitor these shadow networks?

[Encuesta] ¿Me ayudan con mi proyecto de Ingeniería en Informática? (5 minutos)

¡Hola a todos!Estoy terminando Ingeniería en Informática y estoy desarrollando un proyecto académico llamado SecureCode.Es una herramienta que busca automatizar la evaluación de controles de seguridad en repositorios de GitHub, identificando cumplimientos e incumplimientos y generando evidencia para facilitar las revisiones.Para complementar el proyecto, necesito conocer la opinión de estudiantes…

How do I get out of pentesting ?

I was super ecstatic landing this job out of schoo1, but reality just hit me and I realized I can never make the big bucks here. My passion for pentesting also has been fading away after countless engagements and doing the same things over and over. I need new challenges and more pay. Has anyone successfully gotten out of pentesting, If so, what do you do now ? please drop your knowledge. backgro…

French supermarket fridges were pushed to 50°C overnight through Danfoss controllers that no longer get security updates

On the night of October 11, someone got into the refrigeration controllers at French supermarkets and put them into forced defrost with the target set to 50°C. A store manager in Gradignan, quoted by [ITPro](https://www.itpro.com/security/cyber-attacks/french-fridges-hacked-in-country-wide-supermarket-attack), said it started around 11pm and staff found out at 4am, after the cold room hit 50°C an…

SSPM Recommendations

We have been told to choose an SSPM tool. Does anyone have any recommendations?

Interesting Read

For those of you in the critical infrastructure side of cybersecurity, I’d love your take on this for learning purposes. How did they access the control system, what could have been done to prevent it? https://www.infosecurity-magazine.com/news/french-supermarket-chains/

CVE hunting

Hello there , I hope to find you well. I'm a penetration tester searching for any open source web application projects . I'm searching for those to find new CVEs to train myself on code review. Do you have any suggestions ? Feel free to dm me

Measured Google Safe Browsing coverage of live credential-phishing pages: 55% at first sighting, 71% after a week

Small measurement of Google Safe Browsing coverage I ran over the summer and wrote up. Method: 550 branded credential-phishing pages from the OpenPhish Premium feed, first seen June 18 to 24, checked against Google’s Web Risk Lookup API at ingestion and again at 1, 3 and 7 days. Results: Safe Browsing covered 55% of them at first sight, 70% after a day, 71% after a week. Margin about plus or minu…

Grocer cyber attacks this week?

First the France refrigeration vendor… now Dutch retailer Ahold Delhaize (parent company to Stop&Shop and other grocery stores) has been hit with a cyber incident. Do we think these are linked in some way? Don’t see that any groups have come forward and claimed responsibility… just curious.

I need some advice to get my bearings 🙏

Hello. I am researching online what topics I should learn to become a specialist in cloud security and cloud red teaming. Although I am currently in my first year of the Bachelor's degree in Cybersecurity at the Universidad de Palermo (an institution in Buenos Aires, Argentina), I get the impression that the knowledge they provide will be insufficient by the time I graduate. Looking online, I don…

Anyone taken the newly revamped SANS course?: SEC573: AI-Powered Security Automation: Building Tools with Python, LLMs, and MCP

Hi all, I asked this on the r/GIAC subreddit but no one answered. This course was just revamped with more AI modules in Feburary. Has anyone taken it and it worth taking if your company pays for it? I use Python with XSOAR so I know the fundamentals. If you have taken it. Do you have any recommendations for how best to prepare?

Endorsement needed for cs.CR

Hey folks, my first research paper on hardware and supply chain security. The only thing left is getting an endorsement on arXiv. If anyone here can help me with this or guide me through the process, I’d really appreciate the support! Endorsement Code: VBHNH4

How's the cybersecurity market?

I've been in cybersecurity for a while now, changed role from an analyst to CrowdStrike SME. But I've been at this company for 12 years and I want to try something new. Should I go back to being an Analyst? Cloud Engineering which I did for 2 years? Stay with CrowdStrike?