Community icon

Cybersecurity

!cybersecurity@sh.itjust.works

Hot
New Old Active
Hot
New Old Active
Posts Comments
List Tile Wide tile

'GodDamn' Ransomware Uses BYOVD to Smite US Companies

by
1
7

‘GhostApproval’ technique leads AI coding tools to alter files outside of sandbox | news | SC Media

by
1
9

Extortion crew hijacks Microsoft 365 accounts via fake passkey setup - Help Net Security

by
0
9

Vibe-Coded Malware Caught in Active Directory Attack - Infosecurity Magazine

by
0
13
1

Government's cyber pledge lands 60 signatories, including M&S and, somehow, Capita

by
0
5

Second alert from ACSC in two months shows unpatched CMS bugs still exploited - iTnews

by
0
4

Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656)

by
0
10

GhostLock: 15-Year-Old Linux Kernel Flaw Gives Any Local User Root in 5 Seconds

by
1
23
4

Malicious websites trick AI agents into crypto payments, context poisoning | news | SC Media

by
7
55

WhatsApp Clone... But Decentralised

by

This is a technical demo of a fairly unique approach using a browser-based, local-first and webrtc approach.

0
1

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

by
0
7

'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows

by
0
7
1

Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots

by
0
7

Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities in Canada and the U.S.

by

China-aligned attackers broke into the networks of U.S. and Canadian universities to steal sensitive data and establish persistent access via webshells and backdoors, Proofpoint threat researchers said Tuesday.

10
5
2

ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families

by
0
7

Moody Bible Institute breach leaves 2.3M accounts needing salvation, says cyber expert

by
1
29

How to tell if an image is AI-generated | Malwarebytes

by
41
52

Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure

by
0
4

North Korean PolinRider supply chain attack targets 108 unique repos | news | SC Media

by
1
3

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework - Check Point Research

by
0
2

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

by
0
10

New ClamAV security patch closes seven scanner bugs dating back two decades - Help Net Security

by
1
23

New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

by
7
35

New PamStealer Malware Targets macOS Users via Fake Maccy Clipboard App

by
0
12

New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild | CSO Online

by
0
9

Indian Govt Bans Apps Being Misused to Stop E-Rickshaws Remotely

by
13
46

FBI Warns TeamPCP Hackers Compromise Developer Tools in Large-Scale Supply Chain Attacks

by
1
11

New CitrixBleed Vulnerability Exploited Immediately After Public Disclosure - SecurityWeek

by
0
8

1st ‘agentic ransomware’ JADEPUFFER invades database at machine speed | news | SC Media

by
2
19

WinRAR flaw could allow attackers to take control of your computer

by
0
22

Fake Google and Cloudflare verification pages spread multiple malware families | Malwarebytes

by
0
46

Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters

by
0
12

Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic

by
1
4

Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts

by
0
4

Companies keep bolting AI onto their products, and the security bill is coming due - Help Net Security

by
0
20

Microsoft Azure’s CLI target of automated password spray attacks | news | SC Media

by
0
6

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

by
1
10

Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique - Check Point Research

by
0
5

Why Are WordPress Sites Still Running EOL PHP? - Censys

by
4
13

Claude Code apparently uses code to detect Chinese users: Is this fine?

by
1
7

Apple Fixes WebKit Flaws in iOS and macOS, With Help From AI Tools - Security Affairs

by
0
8

JVN#69681784: RPG MAKER MV and MZ vulnerable to OS command injection

by
1
6

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

by
0
10

Exploitation of Recent Oracle E-Business Suite Vulnerability Begins - SecurityWeek

by
0
14

GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks

by
0
8

AirDrop and Quick Share security vulnerabilities unveiled​ | Cybernews

by
1
12

UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks - Infosecurity Magazine

by
0
8

Apple rushed to squash 29 bugs because AI is supercharging hackers - update ASAP | ZDNET

by
1
28

Over 300 UK Firms Hit by Ransomware in a Year - Infosecurity Magazine

by
0
16
1

Vulnerability reports are arriving faster than GitHub can review them - Help Net Security

by
0
14

Hackers claim breach of 1-800-Dentist, threaten to leak health data of millions | Cybernews

by
0
14

WhatsApp Launches New Username Feature to Communicate Without Exposing Phone Numbers

by
2
30

Nissan says Oracle PeopleSoft break-in may have spilled payroll records, SSNs

by
2
49

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558) - Help Net Security

by
0
5

ClickFix Now Cybercriminals' Favorite Malware Delivery Technique - Infosecurity Magazine

by
1
5

Old Signal backup keys abused to hijack new accounts​ | Cybernews

by
0
11

Djinn Stealer Targets Cloud and AI Credentials

by
0
4

PoC Released for NTLM Reflection Bypass Flaw that Enables SYSTEM Access on Windows Server

by
0
8

TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry | Trend Micro (US)

by
0
6

StegoAd: How 119 Fake Browser Extensions Stole Credentials and Ran Ad Fraud for Two Years

by
0
8

The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API | Wiz Blog

by
0
5

Once, cyber-attacks required great skill. AI is changing that | Bruce Schneier

by
9
41
1

2 Linux kernel flaw PoCs published, enabling local privilege escalation | news | SC Media

by
0
12

Amazon Q flaw let booby-trapped Git repos execute code, swipe cloud creds

by
0
28

How they hacked Johnson & Johnson​ | Cybernews

by
2
20

FCC passes new cybersecurity rules for emergency systems, undersea cables | CyberScoop

by
0
9

CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue

by
0
5

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

by
0
12

The Latest Addition to Turla’s Intelligence Gathering Apparatus | Google Cloud Blog

by
0
6

CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure

by
0
9

New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks

by
0
10

New Bucket Hijacking Attack Allows Hackers to Reroute Cloud Data Streams to External Storage

by
1
9

KDDI Data Breach Impacts up to 14.2 Million Email Accounts at Six ISPs

by
0
13

GitHub user Bikini has decided to drop a bunch of POCs for unreported exploits

by

Archive link as the repo has been 404’d https://archive.ph/G7y8t

19
29
1

A stealthy RAT that uses long-range radio signals for C&C operations

by

Source code and details: https://github.com/umutcamliyurt/LoRaT

0
19

Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign

by

A Chinese-speaking advanced persistent threat (APT) actor has been linked to a new custom backdoor called TinyRCT as part of cyber attacks aimed at government entities and critical infrastructure in Southeast Asia.

0
7
1

Polymarket says hackers stole users' funds | TechCrunch

by
8
53

Nation-state actors cracked critical Australian infrastructure to ‘cripple it at a time of their choosing’

by
4
24

Suspected Cyberattack Sends Fake Emergency Alert to Phones Across Brazil

by
3
23
1

AI fraud drives banks toward biometric identity defenses | Biometric Update

by
12
19

Bluekit phishing kit adopts browser-in-the-middle for login theft

by
0
6

New ‘Blacksite’ phishing kit bundles AiTM with scanner evasion | news | SC Media

by
0
5

AiTM Phishing Kits Steal Console Credentials and MFA Codes from AWS Environments

by
0
10

New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns

by
0
3

New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis

by
1
23

Europol Disrupts StealC and Amadey Malware Infrastructure in Operation Endgame

by
0
6

Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access

by
1
6
1

Fake npm Packages Impersonate PostCSS Tool to Steal Chrome Passwords

by
3
6

macOS Weaknesses Chained to Silently Disable Endpoint Security Agents - SecurityWeek

by
0
7

Companies are discarding the logs they need to catch a breach - Help Net Security

by
0
10

The hits keep on coming for Cisco vulnerabilities

by
0
12

More Malicious OpenClaw Skills Threaten AI Supply Chain

by
3
6

'Deepfake as a service' sees 39% spike in dark web conversations — and experts fear it will fuel the next wave of “fake boss” scams | TechRadar

by
1
33

Amateur Hacker Used Claude And OpenAI Agents To Hack 14 Companies

by
2
38

Linux Process Name Masquerading - SANS Internet Storm Center

by
0
13

Be on the lookout for Mistic, a new backdoor used by ransomware broker | CSO Online

by
0
9

Madison Square Garden Hack Exposes 26 Million Visitor Records

by
1
36

CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

by
0
2

Which degree is better for future MSc and jobs?

by

So. I have this ongoing BS program in CS at a european public university, brick and mortar. However the program is terrifyingly broad, for example barely any coverage of networking. The environment is killing me as students are terrible, teachers are worse. On the other hand, there is is IU hochschule’s online BS in Cyber Sec program. IU is private uni but fully accredited.

2
4

Meta pauses controversial employee-tracking program after security review | Malwarebytes

by
3
32
1