News · r/cybersecurity
-
r/cybersecurity
🚀 Introducing ANAT — AI Network Anomaly Tracker
ANAT is an open-source network intrusion detection tool built with Python, featuring real-time traffic monitoring, suspicious activity detection, security alerts, and an interactive dashboard. 🔗 GitHub: https://github.com/securitygeek15/ANAT Feedback and contributions are welcome!
-
r/cybersecurity
How can a GRC analyst become technically strong enough to conduct effective audits?
One challenge I’m trying to overcome as a GRC professional is building enough technical understanding to go beyond reviewing policies and checking compliance documents. I want to be able to assess technical controls properly, validate evidence, ask the right questions, and have meaningful discussions with infrastructure, network, cloud, and security teams during audits. For experienced GRC profes…
-
r/cybersecurity
What does a productive day look like for a GRC analyst?
I’m currently working in cybersecurity GRC and want to be more intentional about my professional growth. Apart from handling day-to-day responsibilities, I want to build practical skills, stay updated, and work on things that will help me become a stronger GRC professional over time. For those already working in GRC, how do you structure your day or week to balance your job with learning and deve…
-
r/cybersecurity
The biggest-ever internet security threat has been known for 22 years. AI made it a crisis in 2 days
r/cybersecurity · cnn.com
-
r/cybersecurity
How is university of east anglia for masters in cybersecurity
I’m considering pursuing an MSc in Cyber Security at the University of East Anglia (UEA) and would really appreciate honest opinions from current students, alumni, or anyone familiar with the university and its cybersecurity programme.
-
r/cybersecurity
How can I improve legitimate DNS query success in an eBPF/XDP flood rate limiter without sacrificing performance?
I'm currently building an eBPF/XDP-based DNS flood mitigation system, and I'm trying to figure out how to improve the rate-limiting algorithm. My main goal isn't just to drop malicious traffic, but to maximize legitimate DNS query success during a flood attack while keeping packet processing overhead as low as possible. My current architecture is: - Packet parsing: Minimal Ethernet, IPv4, UDP and…
-
r/cybersecurity
Cybersecurity in one line?
Give me your best one lines of cybersecurity! Based on humour, knowledge, experience!
-
r/cybersecurity
Had anybody pranked colleagues using AI to automatically reply to their emails?
I am receiving a lot of replies to my emails that are AI generated, from colleagues who shared they developed a sophisticated Claude powered system to triage and reply to their emails. The thing is, some of these emails don't make sense, and I am tired of not having real discussions when it comes to topics where human input is needed: project planning, cross functional initiatives, etc... it seem…
-
r/cybersecurity
What are your thoughts on my theory of AI and Cybersecurity roles?
Okay so you know how people keep saying that AI will be replacing damn near all IT jobs or this, that and the other, so I have a theory right so I do believe some jobs are just genuinely cooked right like no way around take for instance Web development especially Frontend, I don't see the need of people writing the code themselves but that is my opinion but now to the matter at hand. I don't beli…
-
r/cybersecurity
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
r/cybersecurity · thehackernews.com
-
r/cybersecurity
Max-severity GitLab bug allows remote code execution over 12 years of releases
r/cybersecurity · theregister.com
-
r/cybersecurity
Startup Cracks Google's Classified Quantum Cryptography
r/cybersecurity · spectrum.ieee.org
-
r/cybersecurity
There's a third PHP2Shell bug, but it won't get an emergency fix
r/cybersecurity · theregister.com
-
r/cybersecurity
Can I go with cybersecurity role?
Hello everyone! I'm currently working in a Network operations L1 role in India, I'm still confused whether to move to the cybersecurity side or like whether it's the best time as few people saying Ai can replace many people's jobs even in cybersecurity. Can anyone help with your experience and suggestions, feel free to DM if it's not possible to explain in comments. Upvote if you think it's a goo…
-
r/cybersecurity
Knicks reportedly duped employees with championship ring email that was actually a phishing test
r/cybersecurity · cbssports.com
-
r/cybersecurity
[MEGATHREAD] October 2026 Cybersecurity Incidents: PHP2Shell, LiteLLM, eMudhra, GitLab, and more
[MEGATHREAD] PHP2Shell (CVE-2026-109618/109619), LiteLLM, eMudhra, GitLab & Other October Security Incidents AKA Black October We've been getting hammered with posts and questions about the wave of vulnerabilities, compromises, and other security incidents over the past week. A lot are duplicative, and there is a wave of vibe coded crap getting shared that doesn't really do much in this situation…
CVE-2026-109618 -
r/cybersecurity
Is it true that cyber security work is repetitive and boring work
I’ve read online that cybersecurity can be pretty boring and repetitive, so I wanted to hear from people who actually work in the field. The two roles I’m most interested in are cybersecurity analyst and, cybersecurity engineer. Cybersecurity engineering is the main role however that I plan on working towards and want to work in long term. I wanted to ask for those of you working in either role,…
-
r/cybersecurity
PYTHON Packages NOW Vulnerable to Node2Shell
r/cybersecurity · opensourcemalware.com
-
r/cybersecurity
Suggestions for Having Lower vs Prod in DAST tools
We are a HITRUST regulated environment. I m mostly cleaning up the licenses that our DAST tool has , The previous engineer onboarded both Prod and Dev version of the App (which is internally accessible) into DAST tool. While i dont see the need for that considering its only an internal app we could either have a one time pentest on lower environment and continuous scanning on Prod rather having a…
-
r/cybersecurity
Remediation blockers?
Everyone working to remediate PHP2Shell. What’s been the biggest hurdle for you?
-
r/cybersecurity
More CVEs in Q3 2026 than in any full year before 2024
r/cybersecurity · cyber-hire.com
-
r/cybersecurity
AI will replace SOC tier 1?
Will AI replace SOC tier 1 analysts, and which parts of the role are most and least likely to be automated?
-
r/cybersecurity
Arrakis report: 76% of enterprise agents sit dormant with live credentials. I build agent governors — here's the finding that worries me most
Arrakis Security published their 2026 Autonomous Agents Threat Report yesterday, from telemetry on thousands of production agents. The numbers: - 76% of active agents haven't run in 60 days — credentials still work, triggers still fire - 44% haven't run in 180 days - 24% of dormant agents can be started by an unsigned webhook from outside the organization - 20% can pass a task to another agent wi…
-
r/cybersecurity
Malphas - Windows Endpoint security fully local
We are making malphas , AI powered endpoint security software which protects your system without sending your data to the cloud or any cloud dependency , if this interests you I would request you to join the waitlist at malphas.dev and be a part of the journey
-
r/cybersecurity
SOC 1/ cybersecurity analyst / Blue Team
I need to vent a little. I’ve been applying to more than 200 jobs a month for SOC 1 , tailoring my resume to each position, and focusing on roles that closely match my skills and experience. Yet I’m still not getting calls. I have Sec+ and CC and some hand on experience on Blue team. It’s exhausting to put so much effort into applications and hear nothing back. I’m willing to work, learn, and con…
-
r/cybersecurity
Hot take: Is cybersecurity often overcomplicated?
My take; Cybersecurity itself often isn’t as complicated or as threatening as the industry makes it sound. I think most everyday incidents come down to human error or basic mistakes. Yet the industry makes ordinary businesses feel like they’re facing sophisticated hackers constantly, then overcomplicates straightforward tasks to sell products and justify services. I think the fundamentals handle…
-
r/cybersecurity
Patch Me Up (Before I Shell) | CVE-2026-109618 PHP2Shell
r/cybersecurity · youtube.com
CVE-2026-109618 -
r/cybersecurity
Visual explanation, PHP2Shell Why Governments Pulled Sites Offline | Patch Notes
r/cybersecurity · youtube.com
-
r/cybersecurity
twenty.io
I'm interviewing for a software engineering position at twenty.io. I haven't been able to find much on them (not surprising). Anyone got any insight on what its like to work there? They seem to have a solid exec team and backing so the market looks good for them. I'm not looking for anything classified or salacious - just wanna know if I'll be slaving away for pennies because of mission OR if I'm…
-
r/cybersecurity
Claude Mythos 5 broke test boundaries to attack real developers in UK safety eval
r/cybersecurity · vectorwire.ai
-
r/cybersecurity
Scanning SPA applications via DAST tools?
We currently have Edgescan as our DAST vendor and trying to scan our applications which are SPA. I have recently joined the company and have no history of how the scans happened. But per our engineering team, the apps are single page apps and the flow has never been dynamically submitted because they never saw any test data/payloads/fuzzing data even been submitted int the application. has anyone…
-
r/cybersecurity
CIS SecureSuite
does anyone here have experience with the CIS SecureSuite membership? i am looking into it for my organization because we're working to establish secure baselines, but it seems like the most useful thing it does is provide the build kits for automated compliance with their controls. i'm interested in hearing folks' insights about what this membership really does for you. don't get me wrong, imple…
-
r/cybersecurity
Thoughts on Torq SOAR
Hey everyone So it's quite evident that everyone wants to make AI powered everything. And I do believe that AI is going to genuinely transform cybersecurity, as it already is. But like many others I also think that we just didn't allow the technology to mature enough. As in, some use cases are really cool, like claude code/codex and AI for detection engineering etc, but I've also been seeing so m…
-
r/cybersecurity
LLM/Agentic AI supported cybersecurity. Has anyone build any skills or agent that help them in their daily cybersecurity work, be it GRC, pentesting, security engineering, SOC analysis, reverse engineering?
As the title stated, I am trying to see what areas you guys use agentic AI for your daily work. Are there prompts, agents, skills, workflows that you use? Are there public (reputable) repos that can be used? And in pentesting or redteaming, which LLM and agent did you use?
-
r/cybersecurity
[OSINT / Fraud Analysis] Attempted fraud involving an eCheq/ATM deposit: What public vector data can be analyzed?
Hi everyone, I recently experienced an attempted fraud where someone tried to simulate a high-value ATM deposit/eCheq into my bank account in exchange for a product. Fortunately, I did not hand over the item, as the alleged deposit was never cleared and was canceled a few hours later. As an exercise in cybersecurity analysis and OSINT, I would like to know what legitimate investigation methodolog…
-
r/cybersecurity
Using OpenEngine to continuously discover security vulnerabilities
r/cybersecurity · openengine.cc
-
r/cybersecurity
University Hospital Shuts IT systems down
University Hospitals takes systems offline after detecting server breach - cleveland.com Looks like another hospital from Ohio has been hit.
-
r/cybersecurity
PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
r/cybersecurity · thehackernews.com
-
r/cybersecurity
Quest Diagnostics reports cyber breach affecting ‘certain patient records’
r/cybersecurity · nbcnews.com
-
r/cybersecurity
Is AI codeing agent following OWASP rules?
Coding** Like the php breeching, patches news, I am worried if I should signup/login or even use any website or app. If developer coded websites are such prone to attacks, then is AI efficient in security? I am new to cyber security like just beginning. I am really in a panic state. What does experts have to say on this? Basically what's the solution?
-
r/cybersecurity
An alignment assessment of the UK AISI cybertesting incident
r/cybersecurity · anthropic.com
-
r/cybersecurity
Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot | Amazon Web Services
r/cybersecurity · aws.amazon.com
CVE-2026-109618, CVE-2026-109619 -
r/cybersecurity
Optics Problem
I'm the primary/only cybersecurity person at my org and despite my concerted efforts to be transparent about my work, educational about the field, and enthusiastic with my engagement, I still have an optics issue where if I pop by someone's desk, it means something bad has happened. It sucks to have the reputation of being the harbinger of bad news - I want people to have a positive view of my in…
-
r/cybersecurity
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
r/cybersecurity · thehackernews.com
