News · r/cybersecurity
-
r/cybersecurity
Why are so many mid-level cyber jobs getting 100+ applicants?
I've been looking around at the job market again and this has been pretty discouraging. I've been working in a SOC for over 5 years and have moved up a few times since starting as an Analyst I, so I'm definitely not looking at entry-level roles. I'm looking at jobs asking for 3–5+ years of experience where I match most, if not all, of what they're looking for. Yet so many of them have 100+ applic…
-
r/cybersecurity
Curious about how analysts compare malware-analysis results
Hi everyone, I’m trying to learn more about how malware analysts work with results from different sandbox runs or analysis tools, and I’d appreciate hearing about your experiences. For those who regularly analyse samples, I was curious about a few things: How do you usually compare results when the same sample is analysed in different environments or tools? Are there any parts of the process that…
-
r/cybersecurity
FortiBleed 2.0: 975 New Domains & 40,573 Exposed Secrets
r/cybersecurity · infostealers.com
-
r/cybersecurity
How do you decide what’s worth reading when new threats and CVEs show up every day?
I’m a student in Sweden researching how people in security keep up with the flow of news, advisories and research. I’ve read a lot of older threads here, and the common answer seems to be “you can’t, so you pick a few sources”. What does your setup look like right now (feeds, newsletters, podcasts, work briefings)? And what’s the most annoying part: too much noise, duplicates, or missing things t…
-
r/cybersecurity
GRC Firm Recommendations in KCMO
Hey all, looking for solid GRC firms in Kansas City. Would love recommendations -- especially firms that are able to navigate AI governance. Thanks!
-
r/cybersecurity
Onamae.com Desktop Cloud breach: GMO virtual desktop service hacked, FX trading accounts compromised, $50M extortion demand
Oct 21: First unauthorized FX trades reported by customers Oct 25: CEO admits internal white-hat staff had flagged issues beforehand Oct 27: Attacker publishes data claimed to be GMO and customer information Tldr; everyone’s getting pwned
-
r/cybersecurity
Evaluating new AppSec Tooling for the AI era
Hello everyone, We are currently looking for new AppSec tooling, especially the prevention part that some companies offer sounds interesting. We are an SME with around 40 devs and we massively use and benefit from AI Coding. We are looking into Prime Security, Clover Security, Sonar, Corridor, Dam Secure, Harness IO (here not only the security agent, but the delivery agent also sounds nice), Sona…
-
r/cybersecurity
Virus
Ask, if you have a program that you downloaded on your PC but You don’t open it, can it still infect you? And also, why the hell is it that to encrypt the complete user folder you don’t need admin? Or to put a keylogger in the startup folder
-
r/cybersecurity
3 more apparent security fixes sitting unreleased in Brotli
r/cybersecurity · bugsink.com
-
r/cybersecurity
Cybercx Academy (Aus )- oct invitation round.
Hey all, Can anyone here shed some light on what to expect for the cybercx academy written test? I got an invite for psychometric test and a written test. Wanted to understand what to expect in the written test. Please help 🥹
-
r/cybersecurity
Cyber security vs ai
Hey everyone, I’ve been thinking a lot lately about where the cybersec job market is heading and wanted to get some perspective from people actually working in the industry. How are things looking right now, and do you expect opportunities to keep growing down the road? Also, I'm curious about the whole AI factor—with AI getting better at both offensive and defensive stuff, do you feel like it's…
-
r/cybersecurity
AI red teaming
I recently completed my undergraduate in cybersecurity. While in this journey I got eJPT, eWPTX, RH124,134,294, AWS AI Practitioner and Solutions Architect. I want to transition into AI red teaming, Possibly developing Offensive ai powered security tools. I am building my portfolio as I have been working in an offensive security harness. I am considering to get OSCP and OSAI. Are they worth it an…
-
r/cybersecurity
como es posible que alguien te rastre usamdo solo tu numero de telefono?
cuento mi historia, resulta que a una amiga le habia escrito un numeor de telefono, recibio un hola y esta persona queria quitarle fotos intimas, ella simplemnete lo bloqueo por que era un numero desconocido con un mensaje horrible, sin enbargo 4 dias despues le escribieron amenazando que tenian su direccion, al principio no se lo creyo, pero la persona de este numero paso su direccion exacta y e…
-
r/cybersecurity
Australians should prepare for online services to go down unexpectedly as threats rise, cyber agency warns
r/cybersecurity · theguardian.com
-
r/cybersecurity
Alibaba's Qwen AI caught trying to contact server in China
r/cybersecurity · theregister.com
-
r/cybersecurity
Data Security in the AI age
Curious to hear some perspectives on how other people are handling least privilege to database access. My company runs a monolith and gives pretty much everyone access to the database. There isn’t really any concept of least privilege outside of you have access to a database or you don’t. The situation is actually worse for our data warehouses as there is 1 role that has historically had access t…
-
r/cybersecurity
Cyberattack forces University of New Mexico Health to divert ambulances, cancel appointments
r/cybersecurity · dysruptionhub.com
-
r/cybersecurity
PHP2Shell Sentinel — PHP CVE-2026-109618 & CVE-2026-109619 Mitigation Tool & WAF
r/cybersecurity · suleman-elahi.github.io
CVE-2026-109618, CVE-2026-109619 -
r/cybersecurity
API Discovery
Has anybody used a reliable API Discovery tool ? I am searching for one with minimum agent dependency. Also could it detect shadow APIs which are available in programs which are never called ? (No access to source)
-
r/cybersecurity
Is Critical Vulnerability a Confirmed Data Breach? The Legal Threshold for Cyber Incident Reporting (PHP2Shell)
r/cybersecurity · technologylaw.ai
-
r/cybersecurity
CISA Career Advice
There are a couple career advice type videos posted by CISA this past week. https://youtu.be/TwKmY8wu7cQ?si=cNEu1xWLAmd-oR3N
-
r/cybersecurity
What's the most useless security metric your company still tracks?
Someone puts 2 million threats blocked this month on a dashboard and management thinks security is doing amazing. Half of that could be random scanners and bot traffic hitting the firewall Same thing with vulnerability tickets. Closing 500 tickets looks great on paper. Meanwhile the same critical systems have exceptions that keep getting renewed and nobody wants to touch them. You can have an ent…
-
r/cybersecurity
Plex2Shell is a good lesson in why four "medium" CVEs can add up to one critical — plus a log-hunting exercise you can run in a homelab
With CISA adding the four Plex Media Server CVEs to KEV on Oct 20, a lot of people have one of these running at home or on a lab box. I worked through the chain from a defender's side. Below are my notes, in case they help anyone (especially people newer to blue team work) practice reading an exploit chain and turning it into hunt logic. The chain (per Censys's Oct 20 advisory and BleepingCompute…
-
r/cybersecurity
LiteLLM supply chain attack started with an exposed master key
r/cybersecurity · theregister.com
-
r/cybersecurity
Exploitation Analyst vs DNEA/Malware Analysis
If you had a choice to do EA or go more the DCO route why? Which one is more marketable across the industry? Thank you.
-
r/cybersecurity
Where do you enable 2FA, and where do you draw the line?
I’ve recently started improving my online security. I now use Bitwarden with strong, unique passwords for all my accounts, and I’ve enabled 2FA for my primary email account. I’m wondering how far I should go with 2FA. Do you enable it for literally every service that supports it, including Instagram, Facebook, Amazon, Booking.com, secondary email accounts, etc.? Or do you focus on your most impor…
-
r/cybersecurity
What next!! (Must read)
Hey everyone, Its going to be a long read but im hope it will make you wonder… I’m 22, currently working in a corporate role in cybersecurity for the past six months, specifically in R&D. Lately, I’ve been thinking a lot about cybersecurity, how AI is being integrated into it, and whether I should start building something of my own. I feel like we’re at a point where AI gives us an insane amount…
-
r/cybersecurity
Fortinet adds inline AI guardrails to FortiGate firewalls
Fortinet announced the FortiGuard Inline AI Security Service for FortiGate customers. The company says it inspects prompts, model responses, MCP tool calls and agent actions, and can block or redact sensitive data. Its FortiAIGate product page says the gateway can also set model permissions, budgets and rate limits. There are two deployment paths. The new service is cloud-delivered through existi…
-
r/cybersecurity
Next step after Security+
Just passed my security+ exam, what is the next thing to do to try and get into a SOC role? I was planning on doing HackTheBox SAL 1 course but just wanted a second opinion on whether that’s the best next step. Also for context, I have 9 months experience working in IT support and 2 years working as a 1st line NOC engineer.
-
r/cybersecurity
How to Intercept HTTP/3 Traffic (QUIC and QPACK Explained)
r/cybersecurity · interceptsuite.com
-
r/cybersecurity
Heap overflow in EDK2’s Brotli decompressor: the CVE-2021-28211 fix was applied to LZMA and never to Brotli
I found a heap buffer overflow in the Brotli glue code in EDK2 (BrotliDecompress.c). It has been there since 2017 and it’s still unfixed at HEAD. Some background. CVE-2021-28211 was a heap overflow in EDK2’s LZMA decompressor. GetInfo took a UINT64 decoded size and truncated it to UINT32 with no check, so the decoder could write past the buffer that had been allocated. The fix added a MAX_UINT32…
CVE-2021-28211 -
r/cybersecurity
The Gentlemen: A closer look at a not-so-gentle ransomware-as-a-service operation
Our Threat Research Unit published a breakdown of “The Gentlemen” - a Russian-speaking ransomware-as-a-service group that emerged in mid-2025, reportedly after affiliates split off from established groups like LockBit and Qilin. A few things that stood out from the research: They’re offering affiliates up to 90% of ransom revenue - aggressive even by RaaS standards Claimed 800+ victims across the…
-
r/cybersecurity
Debate: The Next Step in Cybersecurity and "Conflict Economics"?
English Version: (Русская версия этого поста ниже. Извините, товарищи!): Hello everyone: I also work in the realm of “cybersecurity” in the U.S. as an unnaturalized citizen. As someone who is a “mud blood” (i.e., Russian-Belarusian-Ukrainian old USSR DNA mixture), it feels like I have cousins on all sides of the terrible conflict in the region. I hope that they can find a resolution soon. On the…
-
r/cybersecurity
SleeperWidget: How Ad-Driven Installs Activate Hidden Browser Extension Behavior
r/cybersecurity · microsoftedge.github.io
-
r/cybersecurity
Anybody here have experience with Rapid7s nexpose?
we're looking for a network vulnerability scanner and of course all i hear about are qualys and tenable but im curious about nexpose but can't find much hands on experience talk
-
r/cybersecurity
Aren't people concerned about the security of AI-debloated Android TVs?
I've been seeing people connect their Android TVs to Claude Code via ADB to debloat them and build custom UIs. It's cool, but most of this is vibe-coded, and nobody seems to discuss potential security vulnerabilities in the generated scripts. Also, honestly, a lot of these custom UIs look like generic AI slop rather than something properly designed. Many people also seem to leave wireless ADB ena…
-
r/cybersecurity
Microsoft announces a massive 25% voluntary buyout layoffs program. This is an absolute bombshell in the tech sector
This is not another 10k layoffs at Amazon which is like not even 3% of its employee This is not 5% of Netflix This is 25% of all employees at Microsoft. Absolute bombshell. While I support the H-1B program’s purpose of filling genuine skills gaps, my experience in the tech industry has left me concerned about how it is sometimes used. It is difficult to see U.S. workers laid off while companies c…
-
r/cybersecurity
Security+ or CySA+?
Hey everyone, I have an AAS in Cybersecurity and Assurance and I’m currently pursuing my bachelor’s in Cybersecurity and Intelligence Management. Honestly, I’m still unsure what career path I want to take after graduation. Sometimes I even think about switching to cloud engineering because of the better salary potential and career opportunities. I’ve been struggling to land an internship despite…
-
r/cybersecurity
SBI (one of the big banks in india) had a free pass to their database (CVE-2014-0398)
I Found a vulnerability on an SBI subdomain today , here's what could've gone wrong: Discovered Oracle Discoverer 12.1.12 - an end of life reporting tool - publicly exposed on SBI's data warehouse infrastructure. No authentication. Anyone could access it Oracle Discoverer connects directly to databases . On a bank's data warehouse this means potential unauthenticated access to - customer acc data…
CVE-2014-0398 -
r/cybersecurity
PHP2Shell security flaws now sucessfully exploited in the wild
r/cybersecurity · bleepingcomputer.com
-
r/cybersecurity
VigilOSS - Harness for finding, verifying, and reporting on bugs focused on coverage
r/cybersecurity · github.com
-
r/cybersecurity
Defensive hacking AI agent?
I basically want to setup a 100% local agent with hacking knowledge to help me against possible AI agent invaders (because of the latest rogue agent hacking incidents). Not just to test vulnerabilities, but an agent that actively fights invasion as it's happening I'm looking for LLM recommendations for: Computer Use and Agency Cyber security I also want to "train" this AI in a offline server agai…
-
r/cybersecurity
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
r/cybersecurity · thehackernews.com
-
r/cybersecurity
Claude for Microservices
We have a very large microservice footprint that makes up our main product, and the vulns of last week have proven that our security teams need deeper understanding of the services. Without Claude (our AI of choice but substitute in any agent), it's hard to be experts or even knowledgeable about internals of 250+ microservices, we typically rely on engineering teams and service owners directly. H…
-
r/cybersecurity
cannot keep up with every new vulnerability and frontier model
Hi all, looking for some support based on your own personal experiences. I'm a mid-level threat intelligence analyst at a global enterprise in the technology space. I have about 7 years in cyber, 3 in IR and 4 in intel. Prior to that I have several years of experience in help desk and troubleshooting. Our intel team is comprised of myself and one junior analyst. I am facing unprecedented levels o…
-
r/cybersecurity
Node2Shell: Brotli Decoder RCE in Node.js (CVE-2026-111497)
r/cybersecurity · hacktron.ai
CVE-2026-111497 -
r/cybersecurity
Should I accept this offer or wait for a better opportunity?(india/Soc)
I have around 3.5 years of experience in cybersecurity and was laid off in September. I’ve received an offer through a third-party payroll company with only a 8% hike and limited benefits. The contract may be renewed later. My last two job changes were due to a layoff and a project nearing its end, not because I wanted to switch and till now wherever i was i was on direct payroll. If I join this…
-
r/cybersecurity
Can cryptographic execution timing add useful information to latency diagnosis?
I'm developing V-DAP, an experimental Rust engine that measures cryptographic execution timing. I'm trying to determine whether those measurements provide useful diagnostic information beyond conventional observability tools. The practical problem I'm investigating is this: when a service experiences latency spikes, can measurements of cryptographic execution help distinguish between possible sou…
