News · r/cybersecurity
-
r/cybersecurity
INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown
r/cybersecurity · thehackernews.com
-
r/cybersecurity
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
r/cybersecurity · thehackernews.com
-
r/cybersecurity
Do all correct programs handle malformed input without bugs?
A speculation about "correct" teaching, and the causes of security CVEs as unexpected input. The old GIGO, as an old concept, and a newer GISO (garbage in security out) model. Any thoughts?
-
r/cybersecurity
Penetration Testing Quality
Is the quality of penetration testers getting worse? I had to direct a penetration tester to the directory where cmd.exe was located…
-
r/cybersecurity
So what does AI being able to crack through any software and bust down a lot of security doors mean?
Those in tech. Seems like AI can be used to essentially crack into at software and make an open source duplicate of it pretty damn fast. Also seeing what I feel like is more systems getting broken into. Any idea what this all means as someone not in tech?
-
r/cybersecurity
DarkCore RAT: New Research Into Credential Theft and Stolen Browser Sessions
DarkCore is a newly uncovered RAT being marketed with credential theft, hidden desktop access, and a dedicated browser designed to reuse stolen sessions while routing traffic through victims’ IP addresses. The latest research takes a closer look at the malware, including a deceptive PDF-themed shortcut, its C2 configuration, and indicators of compromise. Full analysis and IOCs here: https://www.b…
-
r/cybersecurity
Operation IXIM: Preventing a botnet of millions of Popcorn Time users
r/cybersecurity · labs.eye.security
-
r/cybersecurity
PHP2Shell was probed 4 days before disclosure. Is anyone doing a look-back hunt, not just patching?
Quick recap for anyone catching up. AWS says its honeypots saw a PHP2Shell (CVE-2026-109618/109619) exploit attempt on 17 Oct, four days before the embargo lifted, from anonymised infrastructure (AWS write-up). SecurityWeek reports the details leaked on 20 Oct and a PoC video went out early (SecurityWeek). Fixed versions are 8.5.12, 8.4.27, 8.3.36 and 8.2.35, with source backports for 7.4 to 8.1.…
CVE-2026-109618 -
r/cybersecurity
PHP2Shell in the wild: the first 48 hours on a honeypot fleet
r/cybersecurity · offseq.com
-
r/cybersecurity
ITGlue and the PHP hacks?
Has anyone had any confirmation from IT Glue regarding the recent PHP exploits? I've been trying to establish whether they're potentially exposed, or whether PHP is even relevant to their stack, but haven't had a response from them yet. Anyone else concerned or managed to get an answer?
-
r/cybersecurity
Why are French public institutions getting hacked? AI, weak security, state actors or a mix of all three? What’s you’re theory
Hi everyone, I’m bored and I’m here fishing for theories. Something has been on my mind. What explains this accumulation of cyberattacks and data breaches in France? Really weak cybersecurity? State-sponsored attacks? I’m particularly talking about the public sector, including ministries, public hospitals, local authorities, universities and government agencies. France Travail, AP-HP, Paris-Sacla…
-
r/cybersecurity
What is your opinion?
Enterprise network security is very expensive, locking crucial protection behind massive paywalls. I really wish premium SIEM platforms and advanced software were completely free today. Small teams and independent researchers struggle to afford enterprise grade tools like Splunk or specialized vulnerability scanners. Budget constraints should never leave smaller networks exposed. What paid cybers…
-
r/cybersecurity
Looking for an opportunity…
Hey all, I am an IT Employee with a cyber security domain having experience of 7 years 9 months in cyber threat intelligence & security operations center L2. I have taken a personal break from career in FEB 2026 and now looking for a comeback. Have cleared multiple rounds for few companies few ghosted, few reverted me as hiring freezed, few ghosted me just before scheduling interview and FEW are…
-
r/cybersecurity
Several Critical Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
r/cybersecurity · phoronix.com
-
r/cybersecurity
NYT: PHP
Hey! I'm a New York Times reporter writing about the PHP issue. This sounds complicated. If it's affected you -- and if you'd be up for an interview -- I’d love to hear about it. Please email me: [[email protected]](mailto:[email protected])! Thanks.
-
r/cybersecurity
Networking
In your opinion how can i make a good network To get job offer and how you get your frist job
-
r/cybersecurity
How save is it to sign up with my google account?
Let's say the site appears very suspicious. Could they potentially harm my account or compromise my data?
-
r/cybersecurity
PHP2Shell (CVE-2026-109618 and CVE-2026-109619): What to Know
r/cybersecurity · oneleet.com
CVE-2026-109618, CVE-2026-109619 -
r/cybersecurity
PHP2Shell: patching priorities, exposure checks, and the limits of virtual patching
CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell, can allow unauthenticated remote code execution through memory corruption and request lifecycle issues in PHP. For defenders, a key challenge is identifying the runtime actually serving each application. Checking php -v on a host may only identify the CLI binary. Web workers, containers, and deployment images can use different…
CVE-2026-109618, CVE-2026-109619 -
r/cybersecurity
Post-quantum migration sounds simple until you have to find every place you're using RSA
There's a lot of talk about when quantum computers will actually be able to break RSA. For companies running older financial systems, we're not sure that's even the first problem to solve. RSA and ECC can be buried in application code, HSMs, payment terminals, vendor software and integrations nobody's touched in years. And finding them is only half the problem. Some older protocols have fixed-siz…
-
r/cybersecurity
Nvidia Introduces OpenShell Reference Architecture for AI Agent Safety
r/cybersecurity · vectorwire.ai
-
r/cybersecurity
Custom Extensions for SmartScreen and Email Filtering Evasion
r/cybersecurity · ipurple.team
-
r/cybersecurity
Capcom confirms major data breach affecting more than 11.7 million Capcom ID accounts worldwide
r/cybersecurity · notebookcheck.net
-
r/cybersecurity
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
r/cybersecurity · thehackernews.com
-
r/cybersecurity
Hi all, looking for teammates for a capture the flag competition tomorrow pls dm
As the title says I need someone to join me, the 2 people I had have ditched me, should be a fairly easy competition I think, it's in South Africa completely online.
-
r/cybersecurity
how to find vulnerabilities in non-lab / real-world targets?
so i've gained access to a real pentest project and genuinely have no idea where to go from here. here's what i've checked so far: waf is active censys/shodan don't reveal the origin ip no favicon to fingerprint dig gives nothing useful no hardcoded api keys/tokens in any files no xss injection points all sql queries are filtered/parameterized no sensitive data leaking anywhere no public github r…
-
r/cybersecurity
Checking in
The internet is a dumpster fire right now, how is everyone holding up? The past 48 hours have just been insane, getting hit with absolutely everything all at once. I work with vulns and all I can say is…yikes. Good luck these next few days/weeks, hang in there. Edit for clarification: I mean emotional/stress wise.
-
r/cybersecurity
PHP2Shell was being probed 4 days before disclosure. Where are you starting your hunt?
Amazon says its honeypots caught a PHP2Shell exploit attempt on Oct 17, four days before the patches dropped. The details also leaked a day early, so the “patch day” window everyone plans around didn’t really exist for this one. Hunting and IR scoping usually anchor on the disclosure or patch date, which would miss that whole stretch. If you’re dealing with this, are you going back to the 17th (o…
-
r/cybersecurity
Storm-0940 weaponized ARTEX AI framework to hit ConnectWise supply chain at machine speed
r/cybersecurity · vectorwire.ai
-
r/cybersecurity
PHP2Shell: you patched, but were you hit? A read-only triage script for your server 🚨
r/cybersecurity · laracraft.tech
-
r/cybersecurity
networking opprtunity
can anyone recommend any nerworking opprtunity like discord server or something?
-
r/cybersecurity
How close are we to “catastrophic disclosure”?
Over the past year or so, I’ve seen a lot of tweets talking about how AI will lead to “catastrophic disclosure” aka a full data leak on every single person. Every single thing you’ve done online, everything you’ve looked at, every conversation you’ve had near a device with a microphone, etc. It seems like most tech people on Twitter aren’t concerned if this will happen, but when it will happen, w…
-
r/cybersecurity
Cyber YouTube chan
Is there any good and reliable YouTube channels to stay up on anything related to cybernews ? I'm not specifically searching for well explain things with perfect animation but more about what happen recently. I just want to improve my cyber monitoring.
-
r/cybersecurity
What's should I do to stop being worried
So im trying to sit back and avoid the internet but I've been playing some games and wanted to know something, I updated some apps on my phone and when I learned about them I was able to stop some but most still got updated should I be worried? I don't really know what to do and all this internet stuff has been freaking me out, am I compromised? im trying to make sure not to open and like and jus…
-
r/cybersecurity
Very odd Question, not political.
Okay I have an odd question. I have worked in IT for many years, and many more in cyber. I know reddit is very left, so I’m sure this question will get downvoted and all kinds of political rhetoric (which this question has nothing to do with), but I’m curious about cyber and gun manufactures. Is there anybody out there that works cyber for a gun manufacture? I'm very curious about regulating bodi…
-
r/cybersecurity
Hi! I’m a regular person, Japan Twitter is making this a big deal…is it?
Hey y’all! Don’t have anything to do with this but have received an overwhelming amount of information in the past 5 hours about the PHP cybersecurity worldwide vulnerability issue. What do I as a regular person need to watch out for or do to mitigate any issues? Thanks !! Also not sure if I used the right flair! Sorry to bother !
-
r/cybersecurity
Very simple explanation of this PHP security risk thing?
I cant really understand the talk of this big php security thing, because i have a mental disability, but it sounds really scary. I only really use samsung internet for fun like looking on twitter, so do i need to worry or do anything? Does it affect emails and stuff? Sorry, i dont understand what php or anything is
-
r/cybersecurity
PHP has had over 800 CVEs - why Chicken Little now?
PHP has had over 800 CVEs, 14 of them (excluding php2shell) in the last 90 days. It averages 15-30 vulnerability announcements for PER YEAR. Coupled with WordPress the two make for a smorgasbord of exploitability and have since the first day they were released. The current exploit of php2shell is just another in very long line of open holes in a language where security has always been a total aft…
-
r/cybersecurity
Use the new PHP RCEs to mass-patch vulnerable servers?
My thoughts are with everyone dealing with the recent critical CVEs in PHP and Node.js. Heres a half-serious idea - What if the security community stood up something that scanned for vulnerable PHP servers and used the same remote code execution path (the php2shell style of exploits) to push patches instead of payloads? Attackers are almost certainly already using these bugs to grow botnets and c…
-
r/cybersecurity
Think Php2Shell Was Bad? PHP Is About to Face an Absolute Bloodbath
r/cybersecurity · programmers.fyi
-
r/cybersecurity
PHP risk for end user
Hey all. I just recently learned about the whole PHP security risk and though another post in this sub already put my mind a bit on ease I wanted to ask a couple of things I'm not sure I got right. Basically, as a user with no servers running or anything, what should/shouldn't I be doing? Plus, are apps and games on my phone and pc in any way interested? I'm mainly thinking about those that conne…
-
r/cybersecurity
SAST for EDW?
My org is requesting for a SAST on the Enterprise data warehouse repo? Mostly .sql, .sln files in there. we have checkmarx and it supports TSQL but not sure if traditional SAST is optimum for this? Anyone faced this kind of situation and any pointers would be helpful.
-
r/cybersecurity
First Cybersecurity Interview at Orange France — Web Pentesting & NIS2. What Should I Expect?
Hey everyone! I have an upcoming interview at Orange France for a cybersecurity internship focused on web penetration testing and NIS2. It’s my first cybersecurity interview, and I’m not sure what to expect. For anyone who has had a similar interview: - Is it usually more technical or focused on motivation and projects? - What should I prioritize for web pentesting and NIS2? - Should I expect pra…
-
r/cybersecurity
PHP in Adobe Commerce!!
I was doing some Adobe learning on YT. Is it true Adobe Commerce use PHP? And do the people using this product know ?
-
r/cybersecurity
PHP2Shell - quick mitigation pre-patch
I did not validate, and info is scarce, but if it works it should be simple to apply with simple admin skills: > Apply the stopgap (best-intel, low-risk, reversible) > > In php.ini / .user.ini / .htaccess: >session.upload_progress.enabled = Off > Reload PHP-FPM or your web server. This closes both paths (session.c:3239). Needless to say, update ASAP or aimply.take the server down umtil it's avail…
-
r/cybersecurity
What is the use of the certificate Entrust Root Certification Authority - EC1 that is now stopped trusting by chrome
Tell me is it root or intermediate certificate?
-
r/cybersecurity
Php?
I’ve seen a lot of talk about php vulnerability and I’m very much uneducated about this. Does this affect apps and websites like logging into Microsoft accounts? I’m not tech savvy so I have no clue if we need to change passwords or be worried about this at all..
-
r/cybersecurity
CVE-2026-110264 GitLab Unauthenticated RCE (CVSS 10)
r/cybersecurity · docs.gitlab.com
CVE-2026-110264 -
r/cybersecurity
Looking for more opportunities other than CTFs
I am looking to get more opportunities for my cybersecurity career. I have always done CTFs and I am extremely good at them (my team is top 50 worldwide). I know that there is much more than CTFs such as bug bounties and etc. I was wondering what recommendations people have for like jobs for offensive hacking. I am very good with binary exploitation, reverse engineering, and web exploitation.
