News
-
r/ReverseEngineering
I've updated my Linux System Call website after a long time (originally released in 2020). Includes more platforms now, kernel diffs and other things. The API was also updated
r/ReverseEngineering · syscall.sh
-
r/AskNetsec
What are you actually doing to contain prompt injection from content your AI agents read (email, documents, web pages)?
Scenario: an agent that reads inbound email or retrieved documents and can take actions, such as sending a message, calling an API or writing to a ticket. The instruction doesn’t come from the user, it comes from the content. OWASP’s LLM01 page says it is unclear whether fool-proof prevention exists, so we’re curious how teams handle it in practice, not in theory. The options we know of: limiting…
-
r/cybersecurity
Safe to say 😝 AI isn’t replacing us anytime soon
This month has been crazy at work with all the new incidents and zero-day vulnerabilities. Working so much overtime every day was definitely a new experience. Now that I reflect on it, it gives me a little glimmer of hope that AI can’t fully replace us. Major stakeholders just told our managers that they like what our team is doing and have increased our budget. Life is good!
-
r/ReverseEngineering
/r/ReverseEngineering's Weekly Questions Thread
To reduce the amount of noise from questions, we have disabled self-posts in favor of a unified questions thread every week. Feel free to ask any question about reverse engineering here. If your question is about how to use a specific tool, or is specific to some particular target, you will have better luck on the Reverse Engineering StackExchange. See also /r/AskReverseEngineering.
-
SecurityWeek
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks. The post Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain appeared first on SecurityWeek.
CVE-2026-111357, CVE-2026-118527 -
r/cybersecurity
Can anyone pls give me good cybersec project ideas
Like something related to CTI or soc investigation automation
-
r/cybersecurity
Cybersecurity platform focused on exploited CVEs, patch priorization and Attack paths analysis.
Hey everyone! I've been working on a new application/platform focused on helping security teams make better decisions when it comes to vulnerability management. One thing I've noticed in vulnerability management is that organizations often have thousands of vulnerabilities, but figuring out what actually needs to be fixed first is still a major challenge. CVSS scores alone don't tell the whole st…
-
r/cybersecurity
Wasted 5 years in education.
I actually feel like I’ve wasted my 18 to 23 trying to get stupid tech credentials in a market that only hires candidates for 3 years or more of experience. I’ve lost my health, drive and youth just for shitty tech credentials. If it weren’t up to me I would have quit and upgraded my classes to get into a different school, yet 5 years and lots of crying here we are. Edit: I forgot to mention that…
-
The Hacker News
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data by their monetization value. Like other typical stealer families, VOLTA is equipped to harvest passwords and cookies from Chromium-based web browsers; data from Outlook profiles and Slack workspaces;
-
r/blueteamsec
Exposed Opendir Reveals APT DONOT Cyber Espionage Toolkit Targeting Pakistan's Nuclear and Energy Sectors
r/blueteamsec · infrahunter.com
-
r/blueteamsec
DomainTools Investigations | MrHex: A New Hack and Leak Campaign Attributing Themselves to Handala
r/blueteamsec · dti.domaintools.com
-
r/cybersecurity
Could this have been prevented with a firewall? Like opnsense?
r/cybersecurity · x.com
-
r/cybersecurity
Labs vs Certs skill comparison
In pure technical skill (not hiring or resume)... How does someone who only does serious lab practice compare to someone who has multiple cybersecurity certifications? who actually comes out stronger in real technical ability?
-
r/AskNetsec
Is seer.to (formerly infobreach.net) legit? Mixed signals from security scanners
I used seer.to to run a free breach/stealer-log search on my own email after a past security incident. The results seemed accurate and matched data I'd already independently confirmed through other sources. However, when I checked the URL on VirusTotal, a few vendors (Webroot, ADMINUSLabs) flagged it as "Malicious," and a couple others (Fortinet, Forcepoint ThreatSeeker) flagged it as "Phishing."…
-
Hacker News (security terms)
Trigger.dev customer environment variables exposed
-
r/cybersecurity
Critical Linux kernel flaw allows remote root attacks on MPTCP servers
r/cybersecurity · bleepingcomputer.com
-
r/cybersecurity
Finally Taking on the CISSP After Years of Putting It Off.. Really Need Some Study Advice!
Hey everyone! I'm finally starting my CISSP journey and could really use some advice from those who have already passed. A little about me: I have 4 years of experience as a Security Engineer across two organizations, where I was essentially the sole security engineer handling most security responsibilities. I also have a Master's in Cybersecurity and Information Assurance and hold the CEH certif…
-
r/ReverseEngineering
I built an IDM-style download manager in Rust (egui): split downloads, queues, scheduler, browser add-on
r/ReverseEngineering · github.com
-
r/cybersecurity
Mentorship Monday - Post All Career, Education and Job questions here!
This is the weekly thread for career and education questions and advice. There are no stupid questions; so, what do you want to know about certs/degrees, job requirements, and any other general cybersecurity career questions? Ask away! Interested in what other people are asking, or think your question has been asked before? Have a look through prior weeks of content - though we're working on maki…
-
The Record
FBI blames N. Korea’s TraderTraitor for Binance theft, urges crypto industry to block transactions
The FBI and U.S. Secret Service alleged this weekend that North Korean hackers were responsible for stealing more than $6.3 billion from cryptocurrency platform Binance last week.
-
r/blueteamsec
Blue Team
Hey there everyone, My name is DigitalEnigma you could call me D3. Awt3AQp0AmN3ZmAuZzLlMwL0ZmZ2Zmp5AwV2AGplAzV2BGMyAwplMGLmAzL2MN== Ever spend a ton of time and wonder if you were growing?? I have spent countless hours on a box curious if the commands were right and if I was growing in my field so I decided to gamify the field. This leads to a website that I built in hopes to help everyone grow i…
-
r/ReverseEngineering
HX3302B / "X9S children's camera": reverse engineering, SDK and Doom
r/ReverseEngineering · spodesabode.com
-
r/Malware
Adding onto the post "Archived malware I found over the years pt1" BY: "u/Fickle_Plan_208" Effort post!!!!! read description.
LINK TO THEIR POST: link. LINK TO MY OTHER POST ON THIS: Link All malware I found on the GitHub user LEMZzip and links to archived malware they made if found plus info and updated file! This post also includes a screenshot of their GitHub page at the bottom! SCAN LINKS IN ANYRUN: (:SCAN 1: SCAN 2:) VIRUS TOTAL SCAN LINKS I FOUND: (:Love.exe, Browser setup 1.2.exe:) MALWARE NAMES THAT WERE ARCHIVE…
-
r/blueteamsec
Synology urges users to update DSM following ransomware attacks on outdated DSM versions| Synology Inc.
r/blueteamsec · synology.com
-
BleepingComputer
FBI links $6.3 billion Binance crypto heist to North Korean hackers
The FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6.3 billion crypto-theft attack on Binance, making it the largest cryptocurrency heist on record. [...]
-
r/Malware
How I Concurrently Bypassed LLM Guardrails to Build Shitblaster via Modular Abstraction
This post details a live, empirical case study demonstrating how standard Large Language Model (LLM) safety frameworks exhibit a critical architectural flaw: Contextual Blindness. By utilizing a prompt engineering methodology termed Modular Abstraction, I systematically forced an advanced AI assistant to generate a multi-stage, triple-extortion network cryptoworm—codename Blaster 2.0 (ShitBlaster…
-
r/cybersecurity
Should I focus on Malware Development next
Hey everyone, I'm a final-year university student with around a year of experience working as a pentester. I've earned both the CPTS and CRTO certifications. Most of my day-to-day work involves web, API, and mobile pentesting. Unfortunately, I haven't had many opportunities to work on internal pentests or actual red team engagements, especially ones involving Active Directory. After finishing CRT…
-
r/ReverseEngineering
ph4ntom-ida-bridge: Localhost REST API & MCP control layer for IDA Pro 9.x (54 tools, AST ctree, Microcode IR, live debugger)
r/ReverseEngineering · github.com
-
r/cybersecurity
Every Mac builds and maintains a knowledge graph about you and your family
About the Knowledge graph: https://8rank.ai/game/apple-intelligence-personal-knowledge-graph and how it can be weaponized: https://8rank.ai/game/apple-intelligence-knowledge-graph-in-the-wrong-hands and a tool to look at your Knowledge graph: https://github.com/8rank/iKnow
-
Security Affairs
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter uCreator: virtualization-based Android spyware platform targeting WeChat, Telegram and other messaging apps deepveindrilling.com: Magento CMS block loader hits 953 stores CLAUDE CODE FOUND SPYWARE ON MY FAMILY’S PHONES AND A BACKDOOR ON MY MAC Operation FlashHole: Lazarus breaks security, defies control Security notice — malicious version of Anthropic.claude-code (2.1.313) identified in the Cursor Extension Marketplace Tricks from the Past de…
-
r/cybersecurity
Struggling with my major
So I’ve started university a month ago and in theory I get everything but when it comes to hands on I struggle. I study cybersecurity. It’s only the first month of the semester and I’m already struggling. Should I worry or is this normal?
-
r/netsec
/r/netsec's Q4 2026 Information Security Hiring Thread
Overview If you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company. We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education. Please reserve top level c…
-
r/cybersecurity
A website to practice CTF
I made this website for people who want to practice CTF challenges. https://turnitout.xyz/ Have fun. And please don't use ai. Note: this isn't a promotion. I'm not using ads & not selling/collecting anything.
-
r/cybersecurity
Using AI to help with GRC tasks - do prompt structures matter?
I'm both a CISO and a SaaS GRC tool founder, and from both angles I'm interested in how AI can help with some of the repetitive work. Like it or not, there's a strong push to find ways to use it, so I'd like to know how to do that effectively. NIST's draft SP 1353 (using AI for CSF 2.0 analysis and reporting), which includes structured example prompts for governance reviews and profiles, is one s…
-
r/cybersecurity
SASE vendors ?
Just want to know which ones you're using, from the likes of Cato, Netskope, etc. Share your experiences.
-
r/cybersecurity
NIST Now Scores Only A Fraction Of New CVEs, And Your Risk Tools May Not Know
Since April 2026, NIST has scored only CVEs under active exploitation and those affecting software the US government depends on. Every other record arrives in the NVD with no NIST score, and the API marks many of them Deferred. The NVD website now labels the same records “Not Scheduled”, so an integration built around the website label will miss every one of them. A missing score is the larger ri…
-
r/cybersecurity
My experience with Varonis: Offer rescinded three business days before my start date following the Proofpoint merger announcement
Hello, I wanted to share my experience with Varonis, which has been ongoing since July 2026. I received an employment offer on October 14 and signed it on October 15. My scheduled start date was November 2. EDIT - recruiter extended the offer on Oct 14 around 5:30Pm. HR sent me the Docusign to sign on Oct 15 On October 27, just three business days before my expected start date, Varonis rescinded…
-
BleepingComputer
Alpine Linux rebuilds GitLab after attempted RCE attack
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. [...]
-
r/AskNetsec
Specialist
🚨 HIRING: Cybersecurity Specialist – Geo-Restriction & Circumvention Detection We are looking for an experienced cybersecurity professional with hands-on expertise in: Geo-restriction bypass techniques VPN, Proxy and Tor detection Detection evasion techniques Security control bypass and vulnerability analysis Internet censorship circumvention GPS and location spoofing Network filtering and firew…
-
r/netsec
r/netsec monthly discussion & tool thread
Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links. Rules & Guidelines Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary. Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely. If linking to classifi…
-
r/blueteamsec
Protective DNS for Synology NAS
I’ve been getting questions from friends after the recent Synology security issues and PHPshell discussions: “How do I actually protect my NAS?” Some people go straight to network isolation, but setting up firewall rules isn’t simple, and it’s easy to accidentally cut off essential services. For non-technical users, that’s a rough tradeoff. So we built a whitelist DNS approach: only allow legitim…
-
r/AskNetsec
Found DEVELOPERS ONLY banner repeated 7 times in one file, config.php, cpanel. Normal or Red Flag?
```php // TIP ------------>: To display the current Visitor Count (within PHP code brackets): echo($VisitorCount); // ============================================================================================================================= // DEVELOPERS ONLY!!! DEVELOPERS ONLY!!! DEVELOPERS ONLY!!! DEVELOPERS ONLY!!! DEVELOPERS ONLY!!! DEVELOPERS ONLY!!! DEVELOPERS ONLY!!! // ================…
-
BleepingComputer
OpenAI says it's doubling Pro usage limits and bringing Work features to Chat
OpenAI has just confirmed that it's rolling out ChatGPT Work capabilities directly into regular Chat, while also combining usage allowances across ChatGPT and Codex. [...]
