News · r/cybersecurity
-
r/cybersecurity
UBC researchers uncover new cyber threat to water and energy networks
r/cybersecurity · eurekalert.org
-
r/cybersecurity
Linux Security Hardening: Lynis Scores Across Different Distributions
Lynis Hardening Index scores from different Linux distributions, tested with their default configurations. This is only a basic comparison of the results and is not intended as a definitive measure of overall security. If you want to run your own test, read the installation instructions: https://github.com/cisofy/lynis Higher score: More security measures are in place. Lower score: More security…
-
r/cybersecurity
Web pentesting?
I work as an IT specialist at a company, but I can’t really say I do much in the way of IT—it’s mostly just simple troubleshooting... I have a good understanding of networks and Linux, and I want to steer my career toward web penetration testing because it seems enjoyable and fun to me... But I have some questions: Is there a risk that AI might take over roles like SOC Level 1 in this field, and…
-
r/cybersecurity
CTO at NCSC Summary: week ending October 18th
r/cybersecurity · ctoatncsc.substack.com
-
r/cybersecurity
Giant Website and App Remain Offline After Parent Company’s Cybersecurity Incident
r/cybersecurity · kylesinvestigation.com
-
r/cybersecurity
Drupal patches critical RCE flaws, warns exploits may emerge soon
r/cybersecurity · bleepingcomputer.com
-
r/cybersecurity
My experience working with Mythos 5.1 on a new attack vector
I've applied to Anthropic CVP and received access to Mythos 5.1, with reduced guardrails (defense access). We already know by now it is good at finding vulnerabilities, but I was really interested in seeing if it was any good at spotting completely new attack vectors as well. I've been sitting on an allocator vulnerability for a while and preparing it for publishing, from what I can tell one that…
-
r/cybersecurity
Hiring the BEST security engineers for one of the fastest growing AI Startup
Hey folks, I'm a recruiter at Emergent, one of the fastest-growing AI startups in India. We're scaling quickly and I'm looking for the best security engineers in the country. Not looking for résumé padding, just people who are genuinely good at this. What we need: - 5+ years of experience - Infra security, AppSec, or a mix of both (Staff level covers both) - Bangalore, in office 5 days a week Wha…
-
r/cybersecurity
(QubesOS) how to safely install in dom0
i want to install liteqube from github it needs to go in dom0 i read its not a good idea to move files from untrusted vms (browser) to trusted vms (dom0) how do i lower my chances for being hacked
-
r/cybersecurity
What Should We Upgrade?
We Recently Made A Port Scanner And Published It To Github Check It Out At https://github.com/5evenTeam/NetBreak !
-
r/cybersecurity
MacBook Pro for Cybersecurity Audits + AI - 32GB RAM or 24GB RAM?
Hey everyone! I’m in cybersecurity audits and want to explore AI as well, including AI/ML projects, LLMs, and potentially running local AI models. I’m choosing between two MacBook Pro configurations: 32GB RAM, 10-core CPU, 10-core GPU 24GB RAM, 15-core CPU, 16-core GPU I’d appreciate advice from anyone working in cybersecurity or AI. Thanks!
-
r/cybersecurity
Targeted ads installed Candiru spyware in zero-click attacks
r/cybersecurity · bleepingcomputer.com
-
r/cybersecurity
making ozentime antivirus
i made my own c++ antivirus from scratch for more you can check this link-https://ozentime-antivirus.vercel.app/
-
r/cybersecurity
BAE Systems cyberattack disrupts US federal court operations
r/cybersecurity · bleepingcomputer.com
-
r/cybersecurity
Threat modelling / Security Design round preparation
Hello everyone, I'm about to give an interview for an application security profile. The next round will be related to threat modelling and security design. I need help to prepare. Threat modelling is not something that I was doing in my previous experience. I was mostly involved in pen testing of web, mobile, and APIs, so I'm really looking for guidance on how to prepare for it. I only have 2 day…
-
r/cybersecurity
CVE-2026-110447 exploited to backdoor Nextcloud servers through Collabora CODE app
r/cybersecurity · cyberupdates365.com
CVE-2026-110447 -
r/cybersecurity
MSc Research Survey: Burnout and Alert Fatigue in Security Operations
Hi everyone, I'm an MSc Cyber Security student at Islington College, London Metropolitan University. My dissertation investigates burnout, cognitive workload and alert fatigue among people working in Security Operations Centres (SOCs) and related cybersecurity operations roles. I'm looking for participants who currently work, or have worked within the last 12 months, as a SOC analyst, incident re…
-
r/cybersecurity
LetsDefend vs TryHackMe SAL1 vs HTB CDSA — Which is best for getting a SOC job?
Hi everyone, I'm a cybersecurity engineering student with a foundation in networking and cybersecurity, looking to land my first SOC internship or junior analyst job. Which would you recommend for practical, job-ready skills: LetsDefend, TryHackMe SOC Level 1/SAL1, or HTB SOC Analyst/CDSA? Which offers the most realistic hands-on experience, and which is most valuable to employers? I'm looking fo…
-
r/cybersecurity
New OSSTMM 4 pre release at the ICIST Conference
Streamed lived today at the Lithuania ICIST conference. It goes public release on Dec 1 2026. https://www.youtube.com/watch?v=b8VhICUcB6k
-
r/cybersecurity
Opinion on Detection Failure in Telemetry Faults
Hey guys am planning to do a research paper on Evidence grounded diagnosis of security detection under Telemetry Faults . Wt r ur thoughts on this?? I wanted to research can a unified evidence grounded diagnostic method reliable used ro detect this..
-
r/cybersecurity
ConnectWise investigating potential Cloud Backup Breach
ConnectWise posted to their status page that they're investigating unauthorized access events in the Cloud Backup platform (which used to be SkyKick). So far they have NOT confirmed that anyone successfully got in, but third-party intelligence sources are saying that not only did someone get in, but also that the threat actor pivoted to the live O365 environments of customers of MSP's using Conne…
-
r/cybersecurity
Critical BlockStrap flaw lets hackers run code on Magento servers
r/cybersecurity · bleepingcomputer.com
-
r/cybersecurity
Libreboot – Libreboot 26.10 “Ominous Olive” released! With full UEFI support.
r/cybersecurity · libreboot.org
-
r/cybersecurity
My device was leaked by Suno
Some days ago I notice weird things on my cellphone, it was slow, bugs, etc.. I typed my email on haveibeenpwned and it told me that the leak was by Suno, if you have a Suno account, just be careful https://pitchfork.com/story/suno-has-been-hacked-youtube-deezer-genius/
-
r/cybersecurity
When will Zero Query Logging for Copilot release?
r/cybersecurity · learn.microsoft.com
-
r/cybersecurity
⚠️ Urgent threat notice
⚠️ We are actively investigating a security incident involving ConnectWise Cloud Backup (formerly SkyKick), following reports of unauthorized access to customer Microsoft 365 environments. On October 16, 2026, ConnectWise published a security advisory acknowledging suspicious authentication activity associated with its Cloud Backup environment. While ConnectWise has implemented containment measur…
-
r/cybersecurity
Xen vs KVM Hypervisor Security After CVE-2026-99999
r/cybersecurity · edera.dev
CVE-2026-99999 -
r/cybersecurity
Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
r/cybersecurity · theregister.com
-
r/cybersecurity
Germany issues guidance on switching to post-quantum cryptography
r/cybersecurity · heise.de
-
r/cybersecurity
⚠️ Threat notice Cisco NX-OS Nexus 3000 and 9000 Switches
Threat Notice: Cisco NX-OS Nexus 3000 and 9000 Series Switches. Cisco disclosed five critical vulnerabilities in NX-OS, the operating system powering Nexus 3000 and 9000 Series data center switches last week. Making sure this gets seen more broadly. Action: apply the NX-OS updates. References: Cisco Advisory: CVE-2026-76471 (NX-API): https://sec.cloudapps.cisco.com/security/center/content/CiscoSe…
CVE-2026-76471 -
r/cybersecurity
Gigabyte kernel driver bug LPE
hi this is my research, https://github.com/mein-0/KnockGiga
-
r/cybersecurity
How do I get into cybersecurity without spending a fortune?
Hey everyone, I'm from Chicago and really want to get into cybersecurity, but I'm struggling to figure out how to actually get started without going broke. I reached out to City Colleges of Chicago a while ago, and they told me there might be a fully funded program I could start in January. I was so excited about it, but after a few conversations and follow-ups, they just stopped responding. I st…
-
r/cybersecurity
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
r/cybersecurity · bleepingcomputer.com
-
r/cybersecurity
What AI instructions and context should I give for an AI assistance InfoSec GRC Manager?
I'm starting as a Security GRC Manager at a start up, which uses AI heavily, so I want to build an AI assistant to help me do my job. I am imagining it will be a claude project and I will need to give it certain instructions to ensure it gives me relevant advice, and maybe give it context such as the company security policies and SOC 2 reports, in order for it to give me useful advice. Can anyone…
-
r/cybersecurity
Justice Department Announces Coordinated Actions to Combat North Korean Remote IT Worker Schemes Affecting More than 70 U.S. Companies
r/cybersecurity · justice.gov
-
r/cybersecurity
Automating Security Questionnaires?
I'm fairly new in cyber, I'm looking to see what others do for their company in terms of security questionnaires, any automation techniques used, or any general advice. We are a small team in my company and receive many requests.
-
r/cybersecurity
How are companies supposed to verify employees when the attacker already knows everything about them?
I’ve been thinking about this after reading more stories about attackers getting access through help desks rather than actually hacking anything. If someone already knows an employee’s full name, job title, manager, phone number, company email maybe even internal terminology from LinkedIn or leaked data, what is the help desk realistically supposed to ask that proves they’re actually talking to t…
-
r/cybersecurity
BeyondTrust patches zero-day exploited in attacks since August
r/cybersecurity · bleepingcomputer.com
-
r/cybersecurity
Burger King Japan data breach exposes 11 million customer records
r/cybersecurity · bleepingcomputer.com
-
r/cybersecurity
How to draw label partial orders?
Does anyone know how to draw a label partial order for a bell la-padula model with two security levels like S=Secret, P=public and three compartments {A, B, C}. There is only two examples in my lecture and both are max 2 compartments which is straightforward. I understand Bell La-Padula but I don't know how to draw it, here is my probelm. ......................(S, {A, B, C})......................…
-
r/cybersecurity
Nadella Calls Your AI an Insider Risk. Lawmakers Already Put Your Name on the Liability Certification.
r/cybersecurity · galratner.substack.com
-
r/cybersecurity
GLM 5.3 for free, for all defenders
Do you remember the dangerous model Anthropic doesn't want you to use? No, not Mythos. GLM 5.3. We are giving it for free to the security community. (This is a special version of GLM 5.3 that is enabled for cybersecurity work. You can ask it to do any cybersecurity-related task, and it won’t say no!) Link: https://model.vidocsecurity.com/ Have fun!
-
r/cybersecurity
What 2MFA keys brands are good?
I just found “thetis”, They are less then yubikey Has anyone heard of them?
-
r/cybersecurity
CERT-In confirms AI agents breached Indian firms, operated undetected for days
r/cybersecurity · vectorwire.ai
