News · r/cybersecurity
-
r/cybersecurity
Update from Krebs: Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
r/cybersecurity · krebsonsecurity.com
-
r/cybersecurity
Updraft (WordPress Backup) compromised
In addition to ConnectWise Cloud Backup, Updraft Cloud Backup was also compromised on the 17th/18th. Much like with CW, the vendor's advice to customers would indicate that the platform itself wasn't the primary target, but rather the attacker is utilizing the dataset stored in the backup systems to get into customer environments instead. No evidence that the two attacks are related, but it would…
-
r/cybersecurity
Should i go to WGU for the Certs
I am currently unemployed unfortunately, but am looking into getting into cybersecurity field. As i am unable to afford the cybersecurity certs do you guys think its worth it to do the WGU cybersecurity bachelor degree as it comes with the certs, or just focus on doing homelabs to get the experience
-
r/cybersecurity
Asking which niche is better
Given my current ECE background, which path makes more sense right now: cybersecurity or hardware?
-
r/cybersecurity
Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking
r/cybersecurity · theregister.com
-
r/cybersecurity
With open-weight AI, more of the security burden falls on enterprises
r/cybersecurity · helpnetsecurity.com
-
r/cybersecurity
Testing the security of a device?
I don't know if this is the right place to start, so please redirect me if I am out of line here... I have created a hardware device, basically a raspberry pi pico with a fingerprint sensor: when placing a finger on the sensor, it writes out a password as an HID device. The passwords are stored encrypted on the pico, the firmware is signed, it uses secureboot, so only my firmware can run due to a…
-
r/cybersecurity
Should companies just ban work conversations from personal apps completely?
One thing I keep seeing in security discussions is don’t use personal apps for work but in reality people do it constantly. Someone sends a quick WhatsApp because Slack is down or a manager texts an employee, an executive forwards something to their personal email because it’s easier on their phone. Teams create unofficial group chats because the company tool is annoying. Then security teams are…
-
r/cybersecurity
Exploiting Broadcom WiFi Across eCos and Linux - the case(again) for full disclosure.
r/cybersecurity · quentinkaiser.be
-
r/cybersecurity
DHS Officials Asked a Federal Cybersecurity Agency to Secretly Acquire a Voting Machine — and Hack It
r/cybersecurity · propublica.org
-
r/cybersecurity
Russians locked out of bank accounts and apartments as Ukraine hits data centers
r/cybersecurity · nbcnews.com
-
r/cybersecurity
Where Should PII Protection Happen in a Local LLM + RAG Pipeline?
I've been thinking about a privacy question that comes up when building applications with local LLMs. Running the model locally keeps inference on your own machine, but what happens to sensitive data across the rest of the pipeline? For example, a RAG application might use embedding models, vector databases, external tools, logging, and conversation history. Depending on the architecture, custome…
-
r/cybersecurity
Has anybody participated in the newly launched “Dark Money” Cyber Range hosted by CMD CTRL?
I need some help regarding this. Thanks!
-
r/cybersecurity
When do you know it’s time to leave a cybersecurity company?
Just wanted to hear from others working in cybersecurity, especially MSSP environments. Lately, quite a few people from our team have been resigning, and I’ve also noticed people leaving from other departments. We’re not a huge company, so when several people start leaving around the same time, you definitely notice it. What’s frustrating is that management already knows there are problems, but i…
-
r/cybersecurity
Russian Military Satellite Stalks Ukraine-Linked Spy Satellite in Orbit, Closing In to Just 5 Km
r/cybersecurity · united24media.com
-
r/cybersecurity
Desktop Support Engineer to Cybersecurity Analyst
I am a senior desktop support L2 engineer and i want to become a cybersecurity analyst. I dont know the roadmap and where to find jobs. Please help. Thanks in advance.
-
r/cybersecurity
Hacker Claims Password '123456' Enabled Access to Denmark's National Registry, Affecting 8.8M People
r/cybersecurity · ibtimes.co.uk
-
r/cybersecurity
Seeking advice on digital security after leaving a long-term relationship - shared networks, cameras, account access, and forensic help.
TLDR; I am currently enrolled in some cybersecurity courses & have completed a few as well. I’ve learned much about networking and defense but I’d like to know more. I’m separating from my partner of approximately seven years, who is also in the field, and we’re temporarily still living in the same home. He’s admitted to cyberstalking and voyuerism and has threatened to always have tabs on me. Pa…
-
r/cybersecurity
Bullhorn Cyber Incident developing now.
Anyone use Bullhorn? They are currently trying to recover from an attack. Story still developing. https://status.bullhorn.com/
-
r/cybersecurity
Mentorship Monday - Post All Career, Education and Job questions here!
This is the weekly thread for career and education questions and advice. There are no stupid questions; so, what do you want to know about certs/degrees, job requirements, and any other general cybersecurity career questions? Ask away! Interested in what other people are asking, or think your question has been asked before? Have a look through prior weeks of content - though we're working on maki…
-
r/cybersecurity
NCL Web app challenge
Any of y’all know how do a web app exploitation challenge for ncl.. been doing one for hours and can’t figure it out and it ends in like 2hrs and 26 minutes.
-
r/cybersecurity
What should I do in this situation? Feeling lost my first semester trying to get my bachelors
Hi everyone, for some context I’ve graduated with an associates in cybersecurity and this is my first year at a new university trying to get my bachelors. I don’t have any work experience in the field unfortunately. All my cybersecurity experience has come from what I learned and did in my classes to get my associates. One class that I’m currently taking is focused on database and web application…
-
r/cybersecurity
Getting back scammers?
So long story short - an account from a game I play was compromised due to my own fault for falling for the scam - I'll own up to it and learn from my mistakes, it happens unfortunately. I did manage to get a couple IP addresses, albeit I'm aware it's very likely they're using a VPN, but if can that be traced back to an actual location. Not sure if I can do anything with them, or at least try? Tr…
-
r/cybersecurity
Microsoft fixes exploited Mark of the Web bypass vulnerability
r/cybersecurity · helpnetsecurity.com
-
r/cybersecurity
SANS SEC450
Hello everyone I study SANS SEC450 rn, what I do is I read the books and do THM labs and search if I didn't understand something, but that takes too much time Have anyone the videos of explaining SANS sec450 which recorded by sans ? I had the videos for sec 401 but I didn't find 450 so if anyone can help I will be glad 😊😊
-
r/cybersecurity
A coworker may have been spying on my iPhone for months. But I don't know anything about it, it makes me terribly anxious.
Hello, A coworker I didn’t get along with at all—and who hated me—asked to borrow my phone for a reason I found really strange, though it was work-related. I had my back to him, but my desk is right behind him, so I didn’t feel threatened. I lent it to him, and he had it for 30–45 minutes. Since then, this coworker has been making all sorts of comments that match up with private, personal message…
-
r/cybersecurity
GhostShares: Meta's Muse Exposed Prep for a Confidential Call With a Frontier AI Lab Leader
r/cybersecurity · blog.claroc.io
-
r/cybersecurity
Two hardening tools (AD+Windows) in ps1 + optional ai review
r/cybersecurity · github.com
-
r/cybersecurity
Is there any way to recover if you’ve been fired for cause in this field?
I work in incident response if that matters.
-
r/cybersecurity
The EY/Goldman Sachs Breach Breakdown: Support tickets and IT attachments are among enterprise security's biggest blind spots
r/cybersecurity · ponderwall.com
-
r/cybersecurity
Built an open-source phishing forensics engine with 98.32% accuracy and zero egress architecture
Hey r/cybersecurity, wanted to share phish-zero. Unlike traditional tools that query external APIs (leaking corporate clicks), this operates with a strictly zero-egress architecture. It uses local neural phishing detection, character n-gram TF-IDF vectorizers, and actively surfaces TLD abuse flags. Check out the clean tactical monochrome UI. https://github.com/securitygeek15/phish-zero
-
r/cybersecurity
been working on a phishing link detector, the false positives were way harder than i thought
I've been building a phishing URL detector to learn more about detection, using about 15k verified PhishTank URLs. A few things surprised me. The most common phishing host in the whole dataset was docs.google.com. Firebase, 000webhost and other free hosting sites were near the top too. Kind of obvious in hindsight, but domain reputation doesn't help much when the domain is Google. A lot of it is…
-
r/cybersecurity
Is this just me or did this cert really expire?
When I go to ic3[.]gov using chrome on two different networks I see an expired cert. Can anyone else confirm this independently? Thank you. I hope this is not off topic.
-
r/cybersecurity
People who work in AppSec or ProdSec, Which tools do you use?
People who work in AppSec or ProdSec which tools do you use and if you were to look for feature improvement in that tool what would it be?
-
r/cybersecurity
.vbs uzantılı bir solucan yazılım yapmak istiyorum
Kendi antivirüs programımı yapıyorum ve kendi laboratuvarımda antivirüsümü test etmek için bir solucan yazılım yazmak istiyorum not defterine kodu yazacağım ve farklı kaydederek sonuna .vbs uzantısı koyacağım projemi okul verdiği içinde acil bir şekilde yetişmesi lazım lüften yardım edin
-
r/cybersecurity
Cyberark sentry PAM
Hi Everyone, I’m planning to take the CyberArk PAM Sentry certification exam at a test center and would appreciate your guidance. If anyone has recently taken this exam, could you please share your experience, preparation strategy, important topics, and any reliable practice questions or study resources? I would also appreciate guidance on the exam pattern, difficulty level, and the types of ques…
-
r/cybersecurity
What was the most useful certificate for your career?
As mentioned in the title, I'm actually curious on what the most useful was in terms of: Learning new concepts and apply them to your job Advance in your career by opening more doors to better paying positions In the past 5 years, I've worked as a Software Engineer, SOC Analyst, Incident Responder and now as a Security Auditor. In total, I've only done the GCFA (GIAC Certified Forensic Analyst) c…
-
r/cybersecurity
Have Certs Yet Still Know Nothing ,What should i do
Hey, To start off ive done a few free cisco certs ,finished Pre-Sec and CybSec-101 from TryHackMe an im learning from youtube aswell , i feel like i dont know actual cybersecurity as in how to detedct inrusions how to mitigate ,identify or perform attacks how to use the tools in kali or the ones that i do know i dont actually know what it does im planning to take a a different approach like seein…
-
r/cybersecurity
Routing Azure access through PAM
Are any organisations routing their azure access through PAM ? We are in a process of getting a PAM solution and would like to now the thoughts.
-
r/cybersecurity
Looking for separation approach advice
Hello, well I guess many people here are familiar with KLAC and how they work and what challeges those bring for a user to consider etc. The thing is many users use their PC as gaming/general purpose workstation without separation on one side or dedicated second device for different purpose on other side as a clean separation method. I wonder how reliable is dual-booting (Win/Win or Win/Linux) fo…
-
r/cybersecurity
Looking for Advice on Growing an Open-Source Cybersecurity Project
Hey everyone, I've been working in cybersecurity for the last 5 years, and over the past year I've been building a project called Vader-Pro-VDR, an AI-assisted Vulnerability Detection & Remediation platform. So far, I've built: A Go-based endpoint agent that collects system and software inventory information. A backend API that receives and processes agent data. AWS-hosted infrastructure for comm…
-
r/cybersecurity
Help tracking malware network
Hi, Does anyone know where I get help confirming a malware network before I contact authorities? Hundreds of domains, from what I have found, there is something… I just don’t know what, or how big… Thank you for your time!
-
r/cybersecurity
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
r/cybersecurity · thehackernews.com
-
r/cybersecurity
Open-source CVE triage in one place: KEV, EPSS, NVD and OSV combined into a single risk score
A open-source tool called CVE Intel. In simple terms, it pulls a bunch of security information sources into one place, and it doubles as an MCP server, so you can plug it into any of your AI agents.It's MIT licensed and written in Rust. Paste in a CVE and it pulls from NVD, CISA KEV, EPSS, OSV, public exploit sources and others in parallel. You get a 0–100 risk score and a short "act now or later…
-
r/cybersecurity
How does your organization leverage open-weight models to perform redteam/pentests ?
Given the recent talks online about how frequently users experience refusals despite using frontier models from Cyber-approved programs like Anthropic CVP or OpenAI Daybreak, to what extent are organizations utilizing open-weight models to perform internal red-team/pen-tests, and what does the setup look like? Are you running the open-weights fully local on a self-hosted setup? If yes - What does…
-
r/cybersecurity
PhantomBuffer: Effective EDR Evasion Through Stealth Injection
r/cybersecurity · zerosalarium.com
-
r/cybersecurity
Robust Mahalanobis Applications : Surveillance anomaly detection
Online Robust Mahalanobis scores each sample by how far it is from the centre of the healthy joint residual, measured in units of the residual's own spread. What it is The healthy residuals of a robot joint form a cloud around zero. Its shape is not a sphere: the joints are correlated, and a fault along one direction costs more than a fault along another. The classical way to measure distance in…
-
r/cybersecurity
Career Transition: From Warehouse Work to the Blue Team.
From Warehouse to Blue Team – My Journey Towards SOC L1 and Eventually DFIR Hey everyone! Back in 2010, I was doing some amateur web design, which I continued until around 2014. After that, my PC was pretty much just for gaming. I've always been a gamer, and I've always wanted a job that involved computers, but you know how life goes. I never had the experience, and probably not enough motivation…
